This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/8HkdlRIsSGuo1I-drFwJKzYJsLc.roa File: 8HkdlRIsSGuo1I-drFwJKzYJsLc.roa (raw, json) Hash identifier: C8ZP2jpxrKvVL9+836kgNK24TF2yaO/bf4nIX98Lufg= Subject key identifier: F0:79:1D:95:12:2C:48:6B:A8:D4:8F:9D:AC:5C:09:2B:36:09:B0:B7 Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Certificate serial: 019B7758F4B8B2BB12CBFBD3F504EAB7B403 Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/8HkdlRIsSGuo1I-drFwJKzYJsLc.roa Signing time: Thu 01 Jan 2026 02:17:57 +0000 ROA not before: Thu 01 Jan 2026 02:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212898 IP address blocks: 91.205.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f4:b8:b2:bb:12:cb:fb:d3:f5:04:ea:b7:b4:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674 Validity Not Before: Jan 1 02:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0791d95122c486ba8d48f9dac5c092b3609b0b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e1:4f:26:2b:ec:81:2a:5a:08:d3:67:07:33: 69:fc:28:d5:c1:50:cf:cc:84:40:9e:60:b0:2a:17: fe:21:d4:b5:91:81:4b:f2:24:dc:06:72:c9:54:a8: 17:f8:05:5b:a9:e5:43:96:64:7d:b4:4f:7f:4d:b8: 08:a8:70:d9:72:d4:fb:b0:cc:b9:08:e1:da:50:0c: 8d:b6:b1:e0:61:c8:9a:7c:1d:86:28:b1:40:3b:fb: 7d:bf:f2:8b:8f:19:4b:0c:61:1b:60:9d:58:34:f2: cc:7b:6d:64:6d:bf:7b:25:f8:52:96:fb:fd:44:c5: 81:8d:bc:b6:dd:de:b0:79:19:11:d3:26:94:d2:84: 72:e6:16:51:9c:8c:65:e9:f6:94:db:a7:a4:db:2d: ba:96:8b:d6:03:a2:ca:82:75:e5:31:8f:e2:0f:0c: 24:5f:51:9a:8c:47:64:8f:cd:7b:5c:31:35:a0:e3: c1:65:2b:23:7b:10:f7:22:b9:f4:c4:59:fd:6b:f1: cc:48:e4:71:62:d6:83:8f:0c:40:dc:6b:46:db:ae: 8c:ff:75:b4:b2:6b:bc:19:c5:63:bc:2a:76:44:65: 52:f6:05:54:5d:7c:57:7f:71:04:48:52:b0:fa:9c: ec:6e:2c:b5:92:71:b9:55:26:a4:ad:73:cd:8a:55: 60:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:79:1D:95:12:2C:48:6B:A8:D4:8F:9D:AC:5C:09:2B:36:09:B0:B7 X509v3 Authority Key Identifier: keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/8HkdlRIsSGuo1I-drFwJKzYJsLc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.205.199.0/24 Signature Algorithm: sha256WithRSAEncryption b5:1c:76:50:66:fa:19:f7:15:c1:d1:95:70:ed:0f:c0:09:7b: 62:7a:18:f1:09:ce:a1:d3:a3:f6:08:fc:7b:01:e0:11:50:87: 8a:2e:02:a2:b2:42:a0:14:b1:1b:c7:ef:38:f6:a9:3e:04:00: d1:b4:00:eb:52:ca:b5:ec:6b:89:79:f9:a2:f3:d6:d7:df:e1: 3a:36:05:23:2b:aa:73:f9:ea:85:62:b8:db:95:72:52:ac:2d: 85:15:43:0f:48:c3:06:f3:78:d2:ac:98:df:92:c9:3b:48:40: a5:85:a6:dc:ac:55:bf:13:d7:1b:5f:a9:cb:1f:44:ff:a5:38: bc:33:f7:63:c9:fe:d8:64:5b:d2:63:6d:f0:37:6e:b5:41:cc: 4f:6a:fd:01:be:cb:f0:09:a9:6d:83:8c:53:c6:e8:0c:6a:77: d3:f2:af:b0:5a:53:41:00:9c:2e:4c:f0:df:1b:90:ec:fe:83: f5:a6:4d:44:0a:0d:a7:ae:b2:58:96:89:9f:08:cf:81:0a:47: 91:63:b1:c5:08:fa:0c:ea:0d:a7:1e:4a:69:00:b4:1f:cc:91: 26:60:cd:84:aa:ae:4a:b4:79:2c:23:e0:60:05:9c:29:93:21: 4d:f8:f8:dd:6a:fd:e9:3f:b6:22:d0:c0:7f:e4:85:4d:9f:14: dc:05:38:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WPS4srsSy/vT9QTqt7QDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1 ZjU2NzQwHhcNMjYwMTAxMDIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDc5MWQ5NTEyMmM0ODZiYThkNDhmOWRhYzVjMDkyYjM2MDliMGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOFPJivsgSpaCNNnBzNp/CjVwVDP zIRAnmCwKhf+IdS1kYFL8iTcBnLJVKgX+AVbqeVDlmR9tE9/TbgIqHDZctT7sMy5 COHaUAyNtrHgYciafB2GKLFAO/t9v/KLjxlLDGEbYJ1YNPLMe21kbb97JfhSlvv9 RMWBjby23d6weRkR0yaU0oRy5hZRnIxl6faU26ek2y26lovWA6LKgnXlMY/iDwwk X1GajEdkj817XDE1oOPBZSsjexD3Irn0xFn9a/HMSORxYtaDjwxA3GtG266M/3W0 smu8GcVjvCp2RGVS9gVUXXxXf3EESFKw+pzsbiy1knG5VSakrXPNilVgmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPB5HZUSLEhrqNSPnaxcCSs2CbC3MB8GA1UdIwQY MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt MWZjMTllYTczYTJhLzEvOEhrZGxSSXNTR3VvMUktZHJGd0pLellKc0xjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW83HMA0G CSqGSIb3DQEBCwUAA4IBAQC1HHZQZvoZ9xXB0ZVw7Q/ACXtiehjxCc6h06P2CPx7 AeARUIeKLgKiskKgFLEbx+849qk+BADRtADrUsq17GuJefmi89bX3+E6NgUjK6pz +eqFYrjblXJSrC2FFUMPSMMG83jSrJjfksk7SEClhabcrFW/E9cbX6nLH0T/pTi8 M/djyf7YZFvSY23wN261QcxPav0BvsvwCaltg4xTxugManfT8q+wWlNBAJwuTPDf G5Ds/oP1pk1ECg2nrrJYlomfCM+BCkeRY7HFCPoM6g2nHkppALQfzJEmYM2Eqq5K tHksI+BgBZwpkyFN+Pjdav3pP7Yi0MB/5IVNnxTcBTjN -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:05 2026 by rpki-client