This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/P8LunT7NWyGTGPbLtH4shJpoGP0.roa File: P8LunT7NWyGTGPbLtH4shJpoGP0.roa (raw, json) Hash identifier: TbFuXtQTiW0SZnaPUm+pr7Lb/RImoBN9F9vrbRZOLrA= Subject key identifier: 3F:C2:EE:9D:3E:CD:5B:21:93:18:F6:CB:B4:7E:2C:84:9A:68:18:FD Certificate issuer: /CN=80d72537cc54ac10b4abfacc72c1b754c171af8f Certificate serial: 019B7BA51B28CF1ABA6036D39ED808A1D6AF Authority key identifier: 80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/P8LunT7NWyGTGPbLtH4shJpoGP0.roa Signing time: Thu 01 Jan 2026 22:19:36 +0000 ROA not before: Thu 01 Jan 2026 22:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13332 IP address blocks: 171.22.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:1b:28:cf:1a:ba:60:36:d3:9e:d8:08:a1:d6:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80d72537cc54ac10b4abfacc72c1b754c171af8f Validity Not Before: Jan 1 22:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fc2ee9d3ecd5b219318f6cbb47e2c849a6818fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:11:89:83:27:7c:80:26:89:37:87:4b:22:a3: 75:99:58:af:c4:ae:a3:eb:4d:4c:9e:e6:41:fc:98: b8:14:e6:0a:b8:ad:a0:80:bd:00:11:c8:28:21:e9: bc:97:75:41:94:bc:31:9d:9d:c5:66:f0:2e:68:ab: 6d:16:18:fa:10:87:6d:16:06:8e:88:2f:6e:28:3a: ad:8d:29:75:6c:2e:ea:36:eb:d6:1f:d6:97:a3:77: 24:88:e5:93:e8:ec:c0:13:4c:9a:f7:6c:71:ca:cd: 72:a6:99:e4:7a:8a:6c:2c:72:e7:ac:35:0a:2b:47: ad:dd:e9:24:af:ba:ed:ae:69:1d:84:9f:2e:94:ce: 2c:b9:74:23:e5:22:59:a0:07:05:9e:3f:80:19:3a: ff:36:3e:9d:21:05:0d:09:b5:83:44:53:1e:cb:c9: 63:e5:1d:8f:7c:47:e2:a1:10:95:fb:f6:4e:d3:0f: 3e:04:ed:a1:e7:d6:c7:9d:27:f5:02:8e:37:6b:87: 5c:ab:5d:e3:3b:fe:a3:28:6b:e9:92:54:e8:52:b3: 56:4a:62:97:ef:b2:0e:17:41:7f:e6:80:b1:c0:c4: 38:46:ee:87:7c:93:9c:ff:17:45:18:7a:30:0c:c1: 7a:58:1f:e3:50:a9:aa:71:fe:7e:a2:a8:d0:33:04: 08:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C2:EE:9D:3E:CD:5B:21:93:18:F6:CB:B4:7E:2C:84:9A:68:18:FD X509v3 Authority Key Identifier: keyid:80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/P8LunT7NWyGTGPbLtH4shJpoGP0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.22.216.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:a5:6b:24:76:96:61:60:87:4b:9f:c6:e5:71:17:35:6e:a7: 83:da:7a:8a:86:1f:8f:6c:cb:fd:cf:43:e5:69:ac:c1:91:50: 79:5c:10:5d:5d:aa:54:77:3c:2b:26:2b:7e:3f:f0:06:9c:2e: 82:c5:3c:1f:4c:77:7e:1d:92:62:e7:6a:bc:c8:3b:4c:32:7e: 74:71:97:db:33:ed:69:d3:ef:f1:33:40:62:22:40:42:84:8b: 10:44:28:f7:72:3a:07:43:89:66:5e:f7:24:35:22:ab:6e:e8: 4a:85:a5:91:75:6c:48:53:b1:7e:4b:c2:d9:1f:99:2c:3c:32: 48:8d:72:d2:00:b5:c2:94:57:17:36:e1:cb:f5:9e:1d:98:f3: af:bc:4a:d2:6f:75:08:97:10:a9:d1:1c:24:a7:f9:1b:66:d8: a9:2f:36:7c:43:7c:bf:25:66:0a:cc:ed:a7:a1:20:98:c1:9c: c1:53:b6:b9:dc:91:37:39:7e:bb:c0:ee:6d:09:fb:e5:a9:01: 1e:8f:9d:5f:71:50:c9:17:46:98:b3:ea:f3:4f:45:26:da:3a: 9e:96:e1:aa:09:7b:39:6d:d9:cc:2d:6f:44:81:87:e0:6d:58: cc:50:2b:bf:94:ab:48:fa:97:14:3f:fb:65:d4:98:47:dd:f0: 1c:93:93:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pRsozxq6YDbTntgIodavMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZDcyNTM3Y2M1NGFjMTBiNGFiZmFjYzcyYzFiNzU0YzE3 MWFmOGYwHhcNMjYwMTAxMjIxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmMyZWU5ZDNlY2Q1YjIxOTMxOGY2Y2JiNDdlMmM4NDlhNjgxOGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRGJgyd8gCaJN4dLIqN1mVivxK6j 601MnuZB/Ji4FOYKuK2ggL0AEcgoIem8l3VBlLwxnZ3FZvAuaKttFhj6EIdtFgaO iC9uKDqtjSl1bC7qNuvWH9aXo3ckiOWT6OzAE0ya92xxys1yppnkeopsLHLnrDUK K0et3ekkr7rtrmkdhJ8ulM4suXQj5SJZoAcFnj+AGTr/Nj6dIQUNCbWDRFMey8lj 5R2PfEfioRCV+/ZO0w8+BO2h59bHnSf1Ao43a4dcq13jO/6jKGvpklToUrNWSmKX 77IOF0F/5oCxwMQ4Ru6HfJOc/xdFGHowDMF6WB/jUKmqcf5+oqjQMwQIfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD/C7p0+zVshkxj2y7R+LISaaBj9MB8GA1UdIwQY MBaAFIDXJTfMVKwQtKv6zHLBt1TBca+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ05jbE44eFVyQkMwcV9yTWNzRzNWTUZ4cjQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8yMDBmYTQtNDU3OC00YWU4LTlmZmIt MmVkMjY5Mzg0YTc0LzEvUDhMdW5UN05XeUdUR1BiTHRINHNoSnBvR1AwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8yMDBmYTQtNDU3OC00YWU4LTlmZmItMmVkMjY5Mzg0YTc0 LzEvZ05jbE44eFVyQkMwcV9yTWNzRzNWTUZ4cjQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqxbYMA0G CSqGSIb3DQEBCwUAA4IBAQAupWskdpZhYIdLn8blcRc1bqeD2nqKhh+PbMv9z0Pl aazBkVB5XBBdXapUdzwrJit+P/AGnC6CxTwfTHd+HZJi52q8yDtMMn50cZfbM+1p 0+/xM0BiIkBChIsQRCj3cjoHQ4lmXvckNSKrbuhKhaWRdWxIU7F+S8LZH5ksPDJI jXLSALXClFcXNuHL9Z4dmPOvvErSb3UIlxCp0Rwkp/kbZtipLzZ8Q3y/JWYKzO2n oSCYwZzBU7a53JE3OX67wO5tCfvlqQEej51fcVDJF0aYs+rzT0Um2jqeluGqCXs5 bdnMLW9EgYfgbVjMUCu/lKtI+pcUP/tl1JhH3fAck5ON -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:22 2026 by rpki-client