This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/8R-xDyOZCqzkZOmjhye0P0XKn1Y.roa File: 8R-xDyOZCqzkZOmjhye0P0XKn1Y.roa (raw, json) Hash identifier: F1vlUDsZyHn4eYl8OdR67IG0vKLcKMBkSRba2+ifgaA= Subject key identifier: F1:1F:B1:0F:23:99:0A:AC:E4:64:E9:A3:87:27:B4:3F:45:CA:9F:56 Certificate issuer: /CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf Certificate serial: 019B7A5B794242CAE3990CD5FF921B2EECEA Authority key identifier: 81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/8R-xDyOZCqzkZOmjhye0P0XKn1Y.roa Signing time: Thu 01 Jan 2026 16:19:33 +0000 ROA not before: Thu 01 Jan 2026 16:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41678 IP address blocks: 92.43.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:79:42:42:ca:e3:99:0c:d5:ff:92:1b:2e:ec:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf Validity Not Before: Jan 1 16:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f11fb10f23990aace464e9a38727b43f45ca9f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d2:62:4a:9a:74:a5:94:b4:2c:43:d2:db:ef: 71:67:f8:59:26:da:94:25:81:93:60:36:6b:56:82: 32:a8:f9:32:67:31:04:a0:a3:ea:d4:da:d4:fd:71: c7:bc:6a:d0:2f:f4:12:61:e1:e8:00:c0:aa:46:b1: 81:21:f2:dd:3f:1a:7c:6e:06:fb:14:09:21:d4:a4: eb:28:b8:05:c1:b4:36:7c:20:6a:22:d2:78:32:e6: f6:b1:84:6c:04:32:ad:bd:ec:39:fa:db:8a:aa:94: f0:ae:bb:e9:4e:bb:ea:69:cb:15:23:b1:0b:6f:f4: c4:2a:d9:15:ef:d3:51:c9:dc:3b:7f:32:b3:9a:2c: 14:4d:93:7b:8a:d3:45:e1:2d:c4:56:d4:75:7f:43: 93:12:2d:b6:f3:e2:81:45:e3:31:35:00:6f:ec:96: 05:1d:9b:6d:1a:21:b7:1f:28:ac:ad:d2:0d:be:84: 85:8a:99:ad:00:59:f3:0c:98:aa:b2:23:73:b1:7b: 95:9f:e4:fe:01:1e:04:78:5b:b1:3c:bd:cd:49:03: 2b:6a:38:6d:a6:8e:d6:ee:43:a1:83:12:bd:81:ea: 94:2d:87:85:92:ec:e5:20:4f:d6:35:67:35:2b:39: ed:c4:68:02:75:fb:b9:80:d5:51:1c:c5:43:92:e7: 9c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:1F:B1:0F:23:99:0A:AC:E4:64:E9:A3:87:27:B4:3F:45:CA:9F:56 X509v3 Authority Key Identifier: keyid:81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/8R-xDyOZCqzkZOmjhye0P0XKn1Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.43.224.0/21 Signature Algorithm: sha256WithRSAEncryption 55:3f:c4:20:ca:5e:48:9c:28:ff:16:02:bf:1c:b2:e8:3a:8a: 4e:e2:c4:a4:00:d1:ea:0a:54:15:1f:30:6e:0e:72:98:93:4a: de:47:e1:e7:3a:61:b2:40:45:15:76:13:90:09:f3:fd:64:30: 3c:49:de:d2:6c:90:0f:cc:cc:0f:78:f3:4f:ad:e3:55:a3:c6: 2e:8f:ea:42:78:a9:e6:c3:f9:7f:aa:15:c4:f7:e1:6e:46:c4: 9c:85:75:93:00:9a:83:16:34:25:a9:5e:a7:24:44:0b:58:48: b6:59:4e:66:fe:55:1f:f1:1c:63:d8:eb:01:aa:24:6b:91:61: f2:f3:22:2d:9d:c2:f2:d2:79:18:5a:32:36:5b:78:95:a1:06: 4e:5a:e1:8c:3c:9d:ec:00:db:45:25:98:60:7a:92:73:eb:a2: 07:7e:da:80:c5:71:f7:b3:72:5f:49:22:11:ba:2f:0b:ec:71: 2c:46:48:6f:89:89:7f:08:61:1f:af:18:aa:33:a6:47:50:6f: a7:69:d5:de:f8:1c:91:8d:46:5f:03:09:6a:5b:f9:0c:25:2b: 5f:bd:7e:06:af:b6:57:ec:45:4d:6c:c5:20:59:83:27:18:16: e6:52:1e:77:16:8f:0e:59:a6:39:9e:c5:f9:88:2f:ed:e3:40: 83:39:1b:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W3lCQsrjmQzV/5IbLuzqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYmI3OGJlNDFlNDgzMzc5OTdjOGZlOTFkOGUyZjI0Zjdi NDllYWYwHhcNMjYwMTAxMTYxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTFmYjEwZjIzOTkwYWFjZTQ2NGU5YTM4NzI3YjQzZjQ1Y2E5ZjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNJiSpp0pZS0LEPS2+9xZ/hZJtqU JYGTYDZrVoIyqPkyZzEEoKPq1NrU/XHHvGrQL/QSYeHoAMCqRrGBIfLdPxp8bgb7 FAkh1KTrKLgFwbQ2fCBqItJ4Mub2sYRsBDKtvew5+tuKqpTwrrvpTrvqacsVI7EL b/TEKtkV79NRydw7fzKzmiwUTZN7itNF4S3EVtR1f0OTEi228+KBReMxNQBv7JYF HZttGiG3HyisrdINvoSFipmtAFnzDJiqsiNzsXuVn+T+AR4EeFuxPL3NSQMrajht po7W7kOhgxK9geqULYeFkuzlIE/WNWc1KzntxGgCdfu5gNVRHMVDkueckwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPEfsQ8jmQqs5GTpo4cntD9Fyp9WMB8GA1UdIwQY MBaAFIG7eL5B5IM3mXyP6R2OLyT3tJ6vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2J0NHZrSGtnemVaZklfcEhZNHZKUGUwbnE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC85ZGI0ZDMtZjc4ZC00NDMwLTg3YzAt NmNiZDU4MWQzMTdjLzEvOFIteER5T1pDcXprWk9tamh5ZTBQMFhLbjFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC85ZGI0ZDMtZjc4ZC00NDMwLTg3YzAtNmNiZDU4MWQzMTdj LzEvZ2J0NHZrSGtnemVaZklfcEhZNHZKUGUwbnE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXCvgMA0G CSqGSIb3DQEBCwUAA4IBAQBVP8Qgyl5InCj/FgK/HLLoOopO4sSkANHqClQVHzBu DnKYk0reR+HnOmGyQEUVdhOQCfP9ZDA8Sd7SbJAPzMwPePNPreNVo8Yuj+pCeKnm w/l/qhXE9+FuRsSchXWTAJqDFjQlqV6nJEQLWEi2WU5m/lUf8Rxj2OsBqiRrkWHy 8yItncLy0nkYWjI2W3iVoQZOWuGMPJ3sANtFJZhgepJz66IHftqAxXH3s3JfSSIR ui8L7HEsRkhviYl/CGEfrxiqM6ZHUG+nadXe+ByRjUZfAwlqW/kMJStfvX4Gr7ZX 7EVNbMUgWYMnGBbmUh53Fo8OWaY5nsX5iC/t40CDORvT -----END CERTIFICATE-----Generated at Mon Jan 26 06:03:08 2026 by rpki-client