This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/r8_-tV7Ps-g2u70jfHclQnvoEf4.roa File: r8_-tV7Ps-g2u70jfHclQnvoEf4.roa (raw, json) Hash identifier: aq49nLbAL3NpREIkaDZ5YZko/p5YLSFu8OdWv3BLfCU= Subject key identifier: AF:CF:FE:B5:5E:CF:B3:E8:36:BB:BD:23:7C:77:25:42:7B:E8:11:FE Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Certificate serial: 019B7DC985ED6C4A9ACF7E75C22CDDB48DE1 Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/r8_-tV7Ps-g2u70jfHclQnvoEf4.roa Signing time: Fri 02 Jan 2026 08:18:37 +0000 ROA not before: Fri 02 Jan 2026 08:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397423 IP address blocks: 158.46.176.0/22 maxlen: 22 178.171.48.0/23 maxlen: 23 178.171.50.0/23 maxlen: 23 178.171.60.0/23 maxlen: 23 178.171.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:85:ed:6c:4a:9a:cf:7e:75:c2:2c:dd:b4:8d:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Validity Not Before: Jan 2 08:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afcffeb55ecfb3e836bbbd237c7725427be811fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:3e:e8:6c:65:7d:44:de:a3:f0:ec:70:00:ef: c1:63:db:7b:8c:24:1f:f6:24:db:4c:0a:50:89:d8: d2:ad:15:65:4c:b7:12:c4:04:d1:6a:50:19:b4:53: 7a:d5:29:84:43:be:c7:f3:18:1f:b9:f0:c6:02:c3: c7:95:fd:bc:05:30:f7:23:7f:08:6d:51:6f:db:e1: c2:be:7d:b1:ac:e6:de:84:f7:98:ab:39:0b:70:7f: ef:1f:44:e5:5f:ac:eb:e2:1c:ad:78:18:d3:93:b4: a6:7b:94:bd:f2:b5:3a:e6:1b:1e:0d:06:5e:57:fb: bc:ed:75:5d:4b:21:04:17:ab:8d:33:1e:68:fb:4c: 9a:82:15:7a:a0:0b:ab:0f:c7:3d:56:ab:43:eb:c1: 64:25:3c:fa:e6:cf:f4:70:d4:31:96:7d:21:af:6d: 20:98:ca:f4:10:44:91:e1:a8:e8:ee:82:06:9d:2e: 2c:7b:8b:f3:75:bd:9c:6b:74:40:9a:98:2b:ec:e4: 0b:b2:16:75:97:e0:43:11:f1:a6:ef:15:7b:36:cb: 6b:33:82:7f:19:dd:2f:fb:d0:fb:9f:70:2c:b0:7a: b5:b1:4f:43:a6:e0:bc:24:65:ff:19:d2:7b:31:b3: 4a:f5:c8:84:67:a3:cd:fb:f5:3a:c2:65:c1:63:7c: 9b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:CF:FE:B5:5E:CF:B3:E8:36:BB:BD:23:7C:77:25:42:7B:E8:11:FE X509v3 Authority Key Identifier: keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/r8_-tV7Ps-g2u70jfHclQnvoEf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.46.176.0/22 178.171.48.0/22 178.171.60.0/22 Signature Algorithm: sha256WithRSAEncryption 43:fe:d1:e9:96:36:d7:29:28:5b:f0:10:8a:9a:78:b9:74:d0: 5b:f4:4e:4b:fa:91:02:09:2c:5c:c4:fe:0e:ab:08:1f:ce:d3: 0b:47:1a:83:72:84:4a:78:ea:63:e0:1a:3c:cc:2a:d7:6e:ba: b2:1f:53:de:2d:f7:3d:2c:ae:ce:f4:f5:78:42:64:ff:a6:73: 42:c4:e6:47:7c:bd:08:9d:59:e5:60:68:58:cf:9d:a9:53:cb: fd:eb:d5:35:bd:61:8c:84:97:98:51:02:1b:53:34:e8:7b:e8: 9a:4f:e9:46:c6:8b:51:c8:f4:79:18:e1:55:a3:e3:34:bc:3b: 42:da:47:4b:74:a1:38:e6:c7:7e:58:b3:ff:37:03:71:01:7b: 17:04:8f:8e:39:5e:40:b7:b2:74:f1:bf:e0:27:ea:10:82:ae: ce:19:ae:7f:e6:97:02:4c:c2:37:53:7f:20:e3:3a:e2:45:1c: 9b:e4:74:81:74:20:2a:64:41:e7:66:54:b6:7f:f0:66:60:70: 3d:82:65:61:31:fd:76:e6:a3:ba:77:e3:1f:e0:b7:31:bb:65: 69:88:c5:4f:f3:13:04:a4:b7:8f:7d:d2:15:70:6f:18:63:f1: 49:42:ec:de:63:68:b1:a4:7d:11:26:c2:1d:ac:93:bd:f9:11: 46:d7:90:d8 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9yYXtbEqaz351wizdtI3hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl NjNjMTMwHhcNMjYwMTAyMDgxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmNmZmViNTVlY2ZiM2U4MzZiYmJkMjM3Yzc3MjU0MjdiZTgxMWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5z7obGV9RN6j8OxwAO/BY9t7jCQf 9iTbTApQidjSrRVlTLcSxATRalAZtFN61SmEQ77H8xgfufDGAsPHlf28BTD3I38I bVFv2+HCvn2xrObehPeYqzkLcH/vH0TlX6zr4hyteBjTk7Sme5S98rU65hseDQZe V/u87XVdSyEEF6uNMx5o+0yaghV6oAurD8c9VqtD68FkJTz65s/0cNQxln0hr20g mMr0EESR4ajo7oIGnS4se4vzdb2ca3RAmpgr7OQLshZ1l+BDEfGm7xV7NstrM4J/ Gd0v+9D7n3AssHq1sU9DpuC8JGX/GdJ7MbNK9ciEZ6PN+/U6wmXBY3ybvwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFK/P/rVez7PoNru9I3x3JUJ76BH+MB8GA1UdIwQY MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt YmE3NzFmZmQyNjljLzEvcjhfLXRWN1BzLWcydTcwamZIY2xRbnZvRWY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCni6wAwQC sqswAwQCsqs8MA0GCSqGSIb3DQEBCwUAA4IBAQBD/tHpljbXKShb8BCKmni5dNBb 9E5L+pECCSxcxP4OqwgfztMLRxqDcoRKeOpj4Bo8zCrXbrqyH1PeLfc9LK7O9PV4 QmT/pnNCxOZHfL0InVnlYGhYz52pU8v969U1vWGMhJeYUQIbUzToe+iaT+lGxotR yPR5GOFVo+M0vDtC2kdLdKE45sd+WLP/NwNxAXsXBI+OOV5At7J08b/gJ+oQgq7O Ga5/5pcCTMI3U38g4zriRRyb5HSBdCAqZEHnZlS2f/BmYHA9gmVhMf125qO6d+Mf 4Lcxu2VpiMVP8xMEpLePfdIVcG8YY/FJQuzeY2ixpH0RJsIdrJO9+RFG15DY -----END CERTIFICATE-----Generated at Sun Jan 25 21:04:50 2026 by rpki-client