This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/R8jSHJ0RvQZas12_o_Ps91TArZ8.roa File: R8jSHJ0RvQZas12_o_Ps91TArZ8.roa (raw, json) Hash identifier: 0fh/B8TN9sEd5MXdklpnp2ieFTklN6jeNTgs0tjEkic= Subject key identifier: 47:C8:D2:1C:9D:11:BD:06:5A:B3:5D:BF:A3:F3:EC:F7:54:C0:AD:9F Certificate issuer: /CN=611bb6e31eee3b72ade7b1a590e2e62aaf5c3eb0 Certificate serial: 019B78A2F98E82FC2459E5263A90F59D4F8C Authority key identifier: 61:1B:B6:E3:1E:EE:3B:72:AD:E7:B1:A5:90:E2:E6:2A:AF:5C:3E:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/R8jSHJ0RvQZas12_o_Ps91TArZ8.roa Signing time: Thu 01 Jan 2026 08:18:25 +0000 ROA not before: Thu 01 Jan 2026 08:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49555 IP address blocks: 91.212.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.crl rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.mft rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f9:8e:82:fc:24:59:e5:26:3a:90:f5:9d:4f:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=611bb6e31eee3b72ade7b1a590e2e62aaf5c3eb0 Validity Not Before: Jan 1 08:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47c8d21c9d11bd065ab35dbfa3f3ecf754c0ad9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:88:67:7a:6e:7f:30:6e:e9:e9:68:d0:11:80: 7d:b2:6d:c6:40:70:e9:1e:e0:77:a8:69:27:92:d5: ee:c3:74:4b:08:0b:6b:f4:f2:fc:fb:dc:e8:3b:99: e8:08:83:28:a2:7f:2e:20:18:18:1e:73:03:4f:fa: 93:d7:dc:59:92:f2:e7:c3:37:d8:55:6d:f8:58:6e: ca:9f:ee:96:aa:6f:b5:e6:89:b7:9e:69:05:b9:71: 5f:4c:47:ff:0c:3c:20:5d:69:e4:28:d0:f3:66:8b: 4a:80:77:02:c7:0a:9f:52:7b:0a:29:bc:5b:4b:70: 89:21:9f:8d:66:24:44:02:f2:93:cc:15:0e:2f:63: 0f:4e:d6:fd:df:36:5a:77:e0:50:1c:4b:99:30:97: 08:6c:44:09:9c:ae:54:a9:03:c8:d9:ce:a1:d6:98: a2:c9:da:f1:c1:07:ee:24:0c:d3:2d:22:8a:d5:bf: ec:f1:16:29:15:59:33:27:73:52:f9:97:64:bb:8d: 10:75:3b:c7:ed:5d:23:6d:b7:25:bd:76:8f:43:46: b6:b8:3e:ee:5a:7b:69:aa:69:ef:4f:96:8a:4b:a4: 7a:f6:41:00:37:6c:06:b6:2c:6b:cb:69:f6:ea:14: fe:17:88:84:c3:99:88:c4:dd:f3:55:f7:de:77:73: d7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C8:D2:1C:9D:11:BD:06:5A:B3:5D:BF:A3:F3:EC:F7:54:C0:AD:9F X509v3 Authority Key Identifier: keyid:61:1B:B6:E3:1E:EE:3B:72:AD:E7:B1:A5:90:E2:E6:2A:AF:5C:3E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRu24x7uO3Kt57GlkOLmKq9cPrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/R8jSHJ0RvQZas12_o_Ps91TArZ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d64b83-bb87-4954-8943-63eeb981a3bd/1/YRu24x7uO3Kt57GlkOLmKq9cPrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.238.0/24 Signature Algorithm: sha256WithRSAEncryption 09:e6:43:8c:9d:82:69:54:3e:61:fd:3b:dc:de:93:53:73:24: e3:22:07:7d:90:8d:9b:1e:40:01:e5:ba:d6:8f:96:a1:43:36: c7:49:54:17:78:42:be:37:f0:c8:a2:50:b1:6c:93:91:df:bf: 38:70:21:f4:6f:40:12:b6:f3:4e:2d:19:63:99:c0:bb:87:7d: 15:86:dd:fa:d1:89:46:f8:14:7f:a8:93:f0:d8:c4:c1:72:52: 02:cb:55:f5:a6:f6:46:28:8a:4a:c1:ce:38:1d:7a:ce:13:2b: 09:76:0d:14:49:fd:22:b4:7b:98:42:91:e3:b9:31:53:f9:fb: 3a:ce:e3:d2:d7:cd:d6:92:62:24:97:74:40:32:9d:85:dd:f8: e7:47:4e:c9:10:fe:2f:17:5d:4c:77:22:c4:75:9e:72:2a:80: ab:07:54:06:87:6b:5a:31:4b:95:4e:19:e2:ad:23:a0:47:a6: ca:54:f7:79:9b:c6:12:d9:88:b8:52:da:fa:58:9e:0c:c7:bb: 74:e6:e2:ee:b2:d9:dc:d6:88:1d:f3:7b:ac:7e:aa:06:c0:0f: 9d:a7:46:43:30:eb:91:05:80:7d:7a:fe:46:1e:b8:a0:b9:ca: 2d:b8:e2:f1:bf:0e:11:d8:32:a9:00:7e:23:98:a8:1c:99:5b: 8d:61:f3:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ovmOgvwkWeUmOpD1nU+MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMWJiNmUzMWVlZTNiNzJhZGU3YjFhNTkwZTJlNjJhYWY1 YzNlYjAwHhcNMjYwMTAxMDgxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2M4ZDIxYzlkMTFiZDA2NWFiMzVkYmZhM2YzZWNmNzU0YzBhZDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIhnem5/MG7p6WjQEYB9sm3GQHDp HuB3qGknktXuw3RLCAtr9PL8+9zoO5noCIMoon8uIBgYHnMDT/qT19xZkvLnwzfY VW34WG7Kn+6Wqm+15om3nmkFuXFfTEf/DDwgXWnkKNDzZotKgHcCxwqfUnsKKbxb S3CJIZ+NZiREAvKTzBUOL2MPTtb93zZad+BQHEuZMJcIbEQJnK5UqQPI2c6h1pii ydrxwQfuJAzTLSKK1b/s8RYpFVkzJ3NS+Zdku40QdTvH7V0jbbclvXaPQ0a2uD7u WntpqmnvT5aKS6R69kEAN2wGtixry2n26hT+F4iEw5mIxN3zVffed3PXhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEfI0hydEb0GWrNdv6Pz7PdUwK2fMB8GA1UdIwQY MBaAFGEbtuMe7jtyreexpZDi5iqvXD6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVJ1MjR4N3VPM0t0NTdHbGtPTG1LcTljUHJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9kNjRiODMtYmI4Ny00OTU0LTg5NDMt NjNlZWI5ODFhM2JkLzEvUjhqU0hKMFJ2UVphczEyX29fUHM5MVRBclo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9kNjRiODMtYmI4Ny00OTU0LTg5NDMtNjNlZWI5ODFhM2Jk LzEvWVJ1MjR4N3VPM0t0NTdHbGtPTG1LcTljUHJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9TuMA0G CSqGSIb3DQEBCwUAA4IBAQAJ5kOMnYJpVD5h/Tvc3pNTcyTjIgd9kI2bHkAB5brW j5ahQzbHSVQXeEK+N/DIolCxbJOR3784cCH0b0AStvNOLRljmcC7h30Vht360YlG +BR/qJPw2MTBclICy1X1pvZGKIpKwc44HXrOEysJdg0USf0itHuYQpHjuTFT+fs6 zuPS183WkmIkl3RAMp2F3fjnR07JEP4vF11MdyLEdZ5yKoCrB1QGh2taMUuVThni rSOgR6bKVPd5m8YS2Yi4Utr6WJ4Mx7t05uLustnc1ogd83usfqoGwA+dp0ZDMOuR BYB9ev5GHrigucotuOLxvw4R2DKpAH4jmKgcmVuNYfNk -----END CERTIFICATE-----Generated at Sun Jan 25 21:05:02 2026 by rpki-client