This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/8SQmgdkK0KsfXA0AaqFVFyW45As.roa File: 8SQmgdkK0KsfXA0AaqFVFyW45As.roa (raw, json) Hash identifier: fxN83lzpsUSm7eGjIimHE3kwgJziubYYBHi6/BB/u4I= Subject key identifier: F1:24:26:81:D9:0A:D0:AB:1F:5C:0D:00:6A:A1:55:17:25:B8:E4:0B Certificate issuer: /CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9 Certificate serial: 019B7C8027341429D5538E62DF41A71AAFA4 Authority key identifier: 81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/8SQmgdkK0KsfXA0AaqFVFyW45As.roa Signing time: Fri 02 Jan 2026 02:18:52 +0000 ROA not before: Fri 02 Jan 2026 02:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8560 IP address blocks: 217.73.68.0/24 maxlen: 24 217.73.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.crl rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:27:34:14:29:d5:53:8e:62:df:41:a7:1a:af:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9 Validity Not Before: Jan 2 02:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1242681d90ad0ab1f5c0d006aa1551725b8e40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2a:af:b7:26:dd:7e:b5:58:f9:bf:dd:92:ab: 9f:33:b5:33:b1:2e:7d:5f:12:f6:f6:a6:74:bf:8c: 0e:0a:5b:19:dd:97:f3:79:cf:35:67:d9:87:3c:d9: aa:0e:52:d3:5e:c5:7d:83:3b:1a:f4:3d:89:6b:b7: a9:a3:4b:e0:dc:98:71:18:8b:ee:f9:36:af:dc:1e: ea:22:72:b8:0c:08:25:54:be:b7:4b:85:52:9b:fd: e0:a1:3e:fb:92:f2:52:5f:c4:d8:29:8f:c8:e0:e0: 15:bd:be:cc:05:5b:f3:96:25:13:7a:13:1c:9c:39: ec:06:ce:c8:66:ab:f5:fa:a0:a5:a1:d6:49:f7:d9: 8a:6a:38:94:aa:ee:e7:ef:a2:ee:19:57:45:a7:7b: 77:78:48:0b:c0:7b:b7:b6:18:41:89:26:79:a7:9a: 8a:a7:3a:6a:14:3f:1d:10:9f:16:f2:f1:d9:24:9b: 12:cc:da:b6:c8:d5:3d:42:fe:80:c0:b4:5b:82:be: 37:9c:2f:d8:e4:8f:64:31:f3:2e:63:70:08:9b:6d: 66:de:7e:cc:a4:cf:9e:78:ac:89:72:21:02:b6:1e: 03:ee:09:11:6e:85:44:76:70:9f:89:8a:29:38:77: 88:ba:dd:2e:03:a6:34:3f:90:39:15:4f:13:64:74: 6e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:24:26:81:D9:0A:D0:AB:1F:5C:0D:00:6A:A1:55:17:25:B8:E4:0B X509v3 Authority Key Identifier: keyid:81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/8SQmgdkK0KsfXA0AaqFVFyW45As.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.73.68.0/23 Signature Algorithm: sha256WithRSAEncryption 55:11:5e:e3:bf:7e:ee:18:de:7c:76:34:44:34:d4:6f:ae:b5: f2:12:48:79:fb:fd:fd:7a:e1:c4:64:4c:c8:42:4e:3a:cc:5c: 64:8e:51:da:f8:13:ec:86:1d:b9:bf:cb:11:c3:19:da:91:49: f5:3b:fd:97:c6:79:16:2b:e2:09:3d:d7:49:4b:64:13:c1:97: c2:3c:a0:d4:20:26:4b:06:be:e1:88:18:90:28:bd:1f:71:50: 56:65:c5:9c:4c:75:0b:f2:42:55:53:a7:88:29:16:31:50:cf: 88:fc:9a:80:4f:8f:10:e0:fc:95:59:29:b0:dc:1d:31:48:3f: 42:0f:bf:5e:07:03:cd:4a:2c:3b:f4:8f:0f:86:d8:72:68:59: 9b:b0:0e:84:7e:a4:8f:45:7b:bb:d9:fe:bb:02:13:40:a9:22: 8a:fb:97:73:59:89:5d:17:5c:ed:ba:bf:c7:a7:c8:ae:ad:0a: 33:ee:f5:51:7c:9e:1f:4c:c5:2b:0b:7e:bd:7a:fa:6d:6f:8d: 5f:5a:5c:8c:c6:97:54:7d:56:a8:eb:cb:3b:89:b3:d3:6f:ee: cc:02:4e:01:92:b8:3e:a6:2b:09:9a:08:74:ee:e7:6a:92:2d: d3:d8:e2:1e:86:f5:fe:8a:7e:0d:c8:c3:88:7d:e7:14:96:96: 20:f5:27:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gCc0FCnVU45i30GnGq+kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMTAxNDlmZDEyMTMwYjNjZGNmMzU4NjJiMGRjZGI5OGE5 NDcxYzkwHhcNMjYwMTAyMDIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTI0MjY4MWQ5MGFkMGFiMWY1YzBkMDA2YWExNTUxNzI1YjhlNDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiqvtybdfrVY+b/dkqufM7UzsS59 XxL29qZ0v4wOClsZ3Zfzec81Z9mHPNmqDlLTXsV9gzsa9D2Ja7epo0vg3JhxGIvu +Tav3B7qInK4DAglVL63S4VSm/3goT77kvJSX8TYKY/I4OAVvb7MBVvzliUTehMc nDnsBs7IZqv1+qClodZJ99mKajiUqu7n76LuGVdFp3t3eEgLwHu3thhBiSZ5p5qK pzpqFD8dEJ8W8vHZJJsSzNq2yNU9Qv6AwLRbgr43nC/Y5I9kMfMuY3AIm21m3n7M pM+eeKyJciECth4D7gkRboVEdnCfiYopOHeIut0uA6Y0P5A5FU8TZHRueQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPEkJoHZCtCrH1wNAGqhVRcluOQLMB8GA1UdIwQY MBaAFIEQFJ/RITCzzc81hisNzbmKlHHJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1JBVW45RWhNTFBOenpXR0t3M051WXFVY2NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80OGRiMTAtM2JhOC00ZTgwLWIzZGMt YWIzMWVhY2JmZmNhLzEvOFNRbWdka0swS3NmWEEwQWFxRlZGeVc0NUFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80OGRiMTAtM2JhOC00ZTgwLWIzZGMtYWIzMWVhY2JmZmNh LzEvZ1JBVW45RWhNTFBOenpXR0t3M051WXFVY2NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2UlEMA0G CSqGSIb3DQEBCwUAA4IBAQBVEV7jv37uGN58djRENNRvrrXyEkh5+/39euHEZEzI Qk46zFxkjlHa+BPshh25v8sRwxnakUn1O/2XxnkWK+IJPddJS2QTwZfCPKDUICZL Br7hiBiQKL0fcVBWZcWcTHUL8kJVU6eIKRYxUM+I/JqAT48Q4PyVWSmw3B0xSD9C D79eBwPNSiw79I8PhthyaFmbsA6EfqSPRXu72f67AhNAqSKK+5dzWYldF1ztur/H p8iurQoz7vVRfJ4fTMUrC369evptb41fWlyMxpdUfVao68s7ibPTb+7MAk4Bkrg+ pisJmgh07udqki3T2OIehvX+in4NyMOIfecUlpYg9Scn -----END CERTIFICATE-----Generated at Sun Jan 25 10:31:16 2026 by rpki-client