This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/8xUINwR_MZF2v4_Uc8NHq55tEu4.roa File: 8xUINwR_MZF2v4_Uc8NHq55tEu4.roa (raw, json) Hash identifier: BeND2ovC8Tb4Nwoyh9HxRMDQdbkz3PoJwktwooDxVhk= Subject key identifier: F3:15:08:37:04:7F:31:91:76:BF:8F:D4:73:C3:47:AB:9E:6D:12:EE Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41 Certificate serial: 019B7E38892A58C19650FBD6ED0E17FEC7A1 Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/8xUINwR_MZF2v4_Uc8NHq55tEu4.roa Signing time: Fri 02 Jan 2026 10:19:52 +0000 ROA not before: Fri 02 Jan 2026 10:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59851 IP address blocks: 87.118.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:89:2a:58:c1:96:50:fb:d6:ed:0e:17:fe:c7:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41 Validity Not Before: Jan 2 10:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3150837047f319176bf8fd473c347ab9e6d12ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b1:ed:0b:48:98:02:b5:8c:a1:20:d4:f3:ba: 27:1e:3a:14:c5:81:b0:30:1a:07:96:a9:0a:be:b4: 43:5d:a7:ce:4c:7d:78:29:5f:e8:c1:fb:d0:08:8b: 5c:dd:a1:cb:47:5c:3a:42:47:78:fe:9f:5d:c2:d9: 48:ba:28:f0:2c:22:9b:9b:d1:26:8e:32:eb:66:bb: b3:01:9d:ad:60:99:8e:78:7f:ed:26:1c:64:24:e9: e5:b7:e3:3f:3e:96:82:fd:4b:e1:66:e3:a0:70:2e: 22:3e:6e:a1:12:55:a8:0d:5c:c4:e3:32:23:9e:53: a3:cf:58:d4:38:55:8c:9c:b4:0d:ec:05:4b:82:f9: 6a:01:5a:1f:f3:96:51:7b:8d:52:8c:f2:24:b8:34: d9:ea:db:d3:16:2a:7b:9c:a4:d1:13:88:e8:36:58: dd:a6:bd:15:8c:3b:8f:ff:ef:4c:bf:87:17:24:07: b8:20:45:15:ab:57:ab:c3:a0:d9:26:55:0c:d7:2c: aa:0e:d9:96:a4:3b:5b:ad:5d:72:ea:7a:6c:b5:09: 49:4f:b7:1d:32:bd:5c:ad:f2:73:11:c5:86:1f:cc: dc:9e:42:fc:90:37:e4:1a:08:96:ef:24:b7:b2:9a: d6:6a:70:37:f2:55:94:27:93:12:42:71:74:15:61: f9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:15:08:37:04:7F:31:91:76:BF:8F:D4:73:C3:47:AB:9E:6D:12:EE X509v3 Authority Key Identifier: keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/8xUINwR_MZF2v4_Uc8NHq55tEu4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.118.135.0/24 Signature Algorithm: sha256WithRSAEncryption b8:25:68:a8:1d:ed:4d:02:cf:6a:9b:37:89:d4:8e:ea:87:da: 06:18:14:52:1b:f8:4f:ca:44:f8:12:e1:18:6c:1a:c4:31:bd: 79:fb:a2:b1:2a:49:7a:b7:a0:b5:f8:3f:4b:7e:d5:1b:d3:54: b4:38:06:12:03:0a:e0:fb:a7:58:70:ef:07:c8:59:21:bb:65: 77:b5:96:8e:be:f4:c7:77:15:f3:0d:90:3e:06:e1:9b:6b:37: de:86:6a:5f:49:e0:f4:b1:e2:9e:3b:e7:23:7d:b9:50:0b:b5: ec:04:6f:6f:76:6e:6e:34:62:30:f0:0a:6b:b6:38:ac:09:fd: 2d:11:47:e5:ba:9f:e4:f9:1c:05:51:87:ea:58:2e:41:4f:09: a7:75:c6:e0:10:bf:43:f5:9b:83:52:b8:36:64:57:59:5e:f1: 7f:eb:57:ca:f0:93:8f:ec:66:d4:45:7f:22:2f:aa:4b:90:4a: 16:f0:b0:e0:07:2c:9a:7e:17:54:ee:9d:ae:df:76:54:97:23: 13:59:4a:d6:c5:7e:b7:ba:46:86:f8:a6:8b:5b:2f:52:cf:0f: 62:7d:12:6d:c8:ca:92:1f:c3:d7:64:e6:33:50:d9:28:3e:aa: 1f:c9:95:31:9d:87:34:31:34:45:0d:08:f5:f6:41:6b:42:e2: 3f:a5:ec:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OIkqWMGWUPvW7Q4X/sehMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwN2Q3NTczYWFjYWU4MjFjODdkNmQzNjQzMWNmZTRiMjgw MWFiNDEwHhcNMjYwMTAyMTAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzE1MDgzNzA0N2YzMTkxNzZiZjhmZDQ3M2MzNDdhYjllNmQxMmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLHtC0iYArWMoSDU87onHjoUxYGw MBoHlqkKvrRDXafOTH14KV/owfvQCItc3aHLR1w6Qkd4/p9dwtlIuijwLCKbm9Em jjLrZruzAZ2tYJmOeH/tJhxkJOnlt+M/PpaC/UvhZuOgcC4iPm6hElWoDVzE4zIj nlOjz1jUOFWMnLQN7AVLgvlqAVof85ZRe41SjPIkuDTZ6tvTFip7nKTRE4joNljd pr0VjDuP/+9Mv4cXJAe4IEUVq1erw6DZJlUM1yyqDtmWpDtbrV1y6npstQlJT7cd Mr1crfJzEcWGH8zcnkL8kDfkGgiW7yS3sprWanA38lWUJ5MSQnF0FWH5JwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPMVCDcEfzGRdr+P1HPDR6uebRLuMB8GA1UdIwQY MBaAFNB9dXOqyughyH1tNkMc/ksoAatBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjIt Y2Y5ZGM1YmFhYTc5LzEvOHhVSU53Ul9NWkYydjRfVWM4TkhxNTV0RXU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjItY2Y5ZGM1YmFhYTc5 LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3aHMA0G CSqGSIb3DQEBCwUAA4IBAQC4JWioHe1NAs9qmzeJ1I7qh9oGGBRSG/hPykT4EuEY bBrEMb15+6KxKkl6t6C1+D9LftUb01S0OAYSAwrg+6dYcO8HyFkhu2V3tZaOvvTH dxXzDZA+BuGbazfehmpfSeD0seKeO+cjfblQC7XsBG9vdm5uNGIw8AprtjisCf0t EUflup/k+RwFUYfqWC5BTwmndcbgEL9D9ZuDUrg2ZFdZXvF/61fK8JOP7GbURX8i L6pLkEoW8LDgByyafhdU7p2u33ZUlyMTWUrWxX63ukaG+KaLWy9Szw9ifRJtyMqS H8PXZOYzUNkoPqofyZUxnYc0MTRFDQj19kFrQuI/pexz -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:16 2026 by rpki-client