This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/8sTa5_Tg9IW9SkjWiRJngRgxj88.roa File: 8sTa5_Tg9IW9SkjWiRJngRgxj88.roa (raw, json) Hash identifier: 4WxANZr+fEiTPHwBBRkIvB/zY6w54CwTs2/eAYzOZR8= Subject key identifier: F2:C4:DA:E7:F4:E0:F4:85:BD:4A:48:D6:89:12:67:81:18:31:8F:CF Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019B77C77918F5C4E49DDB871481FEE1C4D5 Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/8sTa5_Tg9IW9SkjWiRJngRgxj88.roa Signing time: Thu 01 Jan 2026 04:18:39 +0000 ROA not before: Thu 01 Jan 2026 04:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205370 IP address blocks: 84.38.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:79:18:f5:c4:e4:9d:db:87:14:81:fe:e1:c4:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Jan 1 04:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2c4dae7f4e0f485bd4a48d68912678118318fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:19:e0:7d:6a:81:dc:88:2c:aa:23:67:37:b8: 63:a8:49:58:7c:29:2a:f6:8a:2d:8f:ac:c4:8d:13: 37:3d:ae:c2:90:09:61:1b:f9:48:a8:2a:58:c1:ef: 7c:a7:c7:0e:79:b2:04:aa:f2:54:36:78:51:00:6f: a0:48:fe:10:78:c9:55:b1:58:83:3a:89:6c:ae:b1: 0f:0d:6a:73:9b:03:c1:ae:a2:6b:03:a2:b2:27:82: 8f:33:58:c3:20:cc:aa:1d:c1:b3:9a:5a:ca:1c:77: 39:9f:c9:e7:e1:df:70:d5:4e:19:66:71:6b:20:04: 3d:b8:b2:8d:17:7c:7d:7c:fd:16:f1:54:f2:82:7b: 60:75:ea:cd:30:6c:f1:2c:6d:ef:31:92:8f:cf:5c: d9:6f:9f:91:0a:5f:6e:34:91:89:91:cf:7b:32:58: 37:d8:ce:0f:36:fc:6e:28:5a:e0:7c:ba:9f:6b:d7: 17:42:ce:d5:ce:5d:5f:d1:6b:b8:de:e1:97:0e:66: 88:78:a1:69:10:69:a8:94:5a:2c:15:4b:4a:e8:6d: 65:5d:43:9b:10:d2:a8:c4:24:fc:92:bf:ec:da:c8: 97:b8:6b:66:c8:99:02:94:16:39:82:14:b7:12:7f: a2:3e:6f:e5:32:fe:69:67:45:30:74:b0:3d:f8:dc: 0d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C4:DA:E7:F4:E0:F4:85:BD:4A:48:D6:89:12:67:81:18:31:8F:CF X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/8sTa5_Tg9IW9SkjWiRJngRgxj88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.38.141.0/24 Signature Algorithm: sha256WithRSAEncryption 19:7c:cb:51:52:d7:99:16:59:4d:3b:fe:47:f1:17:4b:a8:34: 77:82:da:6b:aa:a0:61:18:fb:99:13:a4:1c:0f:1e:86:63:4d: de:d3:d1:4b:fb:dc:02:7e:94:09:26:19:aa:65:6b:66:54:81: 1a:5b:72:d4:91:0a:49:1b:a8:f0:30:e7:2e:87:e9:47:aa:2e: 53:8a:f6:ce:38:fc:3b:f7:e0:84:d8:63:0e:8f:ac:40:7d:78: 71:d8:7c:07:38:56:bd:9c:05:e5:77:72:e3:f6:b8:36:29:ba: f4:09:1d:89:7e:01:8b:50:20:9d:d3:d8:45:b2:56:4a:98:07: ae:bb:2d:73:38:73:8e:f5:3e:ef:c0:88:96:f0:de:7c:f9:c2: 45:1e:bc:79:bf:f3:5a:97:a9:20:9c:76:c8:4c:b6:14:02:59: 14:90:11:77:ea:de:c4:7b:4e:2a:7e:5d:94:18:a6:f7:20:76: 44:2a:e4:90:01:15:2a:b8:5d:ea:e7:18:51:9f:92:e5:bd:56: db:03:aa:6a:9b:fd:fb:3d:2f:3f:f0:1e:cc:e8:84:82:ff:2e: 66:95:9c:ee:93:2e:93:a3:23:0e:76:e6:f5:ee:c8:ff:64:73: da:ee:67:ae:76:f1:79:89:25:d5:7e:a1:aa:2e:2d:4b:0c:64: 83:7c:1c:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3kY9cTknduHFIH+4cTVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYwMTAxMDQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmM0ZGFlN2Y0ZTBmNDg1YmQ0YTQ4ZDY4OTEyNjc4MTE4MzE4ZmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixngfWqB3IgsqiNnN7hjqElYfCkq 9ootj6zEjRM3Pa7CkAlhG/lIqCpYwe98p8cOebIEqvJUNnhRAG+gSP4QeMlVsViD OolsrrEPDWpzmwPBrqJrA6KyJ4KPM1jDIMyqHcGzmlrKHHc5n8nn4d9w1U4ZZnFr IAQ9uLKNF3x9fP0W8VTygntgderNMGzxLG3vMZKPz1zZb5+RCl9uNJGJkc97Mlg3 2M4PNvxuKFrgfLqfa9cXQs7Vzl1f0Wu43uGXDmaIeKFpEGmolFosFUtK6G1lXUOb ENKoxCT8kr/s2siXuGtmyJkClBY5ghS3En+iPm/lMv5pZ0UwdLA9+NwNAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPLE2uf04PSFvUpI1okSZ4EYMY/PMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvOHNUYTVfVGc5SVc5U2tqV2lSSm5nUmd4ajg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCaNMA0G CSqGSIb3DQEBCwUAA4IBAQAZfMtRUteZFllNO/5H8RdLqDR3gtprqqBhGPuZE6Qc Dx6GY03e09FL+9wCfpQJJhmqZWtmVIEaW3LUkQpJG6jwMOcuh+lHqi5TivbOOPw7 9+CE2GMOj6xAfXhx2HwHOFa9nAXld3Lj9rg2Kbr0CR2JfgGLUCCd09hFslZKmAeu uy1zOHOO9T7vwIiW8N58+cJFHrx5v/Nal6kgnHbITLYUAlkUkBF36t7Ee04qfl2U GKb3IHZEKuSQARUquF3q5xhRn5LlvVbbA6pqm/37PS8/8B7M6ISC/y5mlZzuky6T oyMOdub17sj/ZHPa7meudvF5iSXVfqGqLi1LDGSDfBwI -----END CERTIFICATE-----Generated at Sun Jan 25 15:07:18 2026 by rpki-client