This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8L2iwFdsd4Mfhfcbbm2A-M_O7w8.roa File: 8L2iwFdsd4Mfhfcbbm2A-M_O7w8.roa (raw, json) Hash identifier: e06mqyIMm0QUU+yACHdsrhxPTaqIXIoYawAnB+MOl8s= Subject key identifier: F0:BD:A2:C0:57:6C:77:83:1F:85:F7:1B:6E:6D:80:F8:CF:CE:EF:0F Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84B6FE639C02FFBF9E737DE071D56A Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8L2iwFdsd4Mfhfcbbm2A-M_O7w8.roa Signing time: Fri 02 Jan 2026 16:22:42 +0000 ROA not before: Fri 02 Jan 2026 16:22:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49376 IP address blocks: 146.120.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b6:fe:63:9c:02:ff:bf:9e:73:7d:e0:71:d5:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0bda2c0576c77831f85f71b6e6d80f8cfceef0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:16:28:c7:b0:36:31:da:c1:1f:7d:51:87:1a: 6c:e0:84:e6:4d:84:f2:81:0f:f6:f0:03:b4:e5:f2: f0:7b:50:b0:4d:cf:df:b7:e4:0c:1b:2c:c9:99:ec: 1c:b7:c5:a4:f0:a3:e7:b4:39:fb:a2:b1:f8:f7:4c: ba:c3:87:06:ab:a5:f1:cb:9b:46:d0:04:de:7f:80: 94:a0:27:96:1d:51:de:bc:9a:e6:94:21:e5:f0:31: 64:ed:50:56:a4:4f:b5:90:71:16:a8:10:6c:06:5f: b9:98:17:79:f0:f1:49:ac:a1:f1:7b:af:72:3e:55: 5f:8a:ca:b6:82:e9:04:ff:bd:b4:c6:3e:7a:75:a6: 70:aa:d7:67:09:d3:d6:eb:dc:07:30:68:11:47:e2: ad:9a:4c:54:d3:e8:f8:bc:fa:2d:aa:5c:d4:a4:32: c0:c8:92:ca:9f:8f:88:6c:43:21:da:93:fe:45:22: 49:cb:1e:dd:7f:6b:b8:27:71:d6:6c:92:ae:d8:ab: ed:e5:54:cc:d4:9e:37:8f:87:31:04:a4:36:d5:38: 33:5f:67:56:10:0d:18:de:4b:b7:ee:0b:9f:d6:62: 23:a5:40:93:2a:6c:1b:1f:9b:cd:b0:6c:6a:f9:9f: 45:fa:62:57:52:58:4c:fb:58:dc:08:98:32:6e:8a: cf:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:BD:A2:C0:57:6C:77:83:1F:85:F7:1B:6E:6D:80:F8:CF:CE:EF:0F X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8L2iwFdsd4Mfhfcbbm2A-M_O7w8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.120.207.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:96:9a:fe:c4:00:8b:ee:d1:59:b3:85:2b:41:e3:ab:e0:aa: b0:16:6b:7b:b5:a3:a0:21:5a:83:10:55:25:51:5f:52:e3:5a: 7a:86:b3:3d:fb:88:14:b9:25:78:a4:b1:ae:7c:da:0f:12:da: a9:79:08:d5:ad:d7:0a:8f:5e:07:87:44:5f:d9:8a:ac:59:d8: 8f:bc:9b:e9:62:66:46:1e:c9:ce:3b:d2:2a:9e:be:cf:25:38: 6f:dc:25:32:27:96:b0:b4:46:ad:fa:da:cf:6e:88:07:b3:c5: 4f:ad:01:3e:37:82:fa:58:36:fe:8e:51:32:42:58:0e:ee:25: a5:12:d1:70:75:93:1f:bc:84:f8:c1:42:65:50:68:7d:f4:f1: fa:f2:07:80:d2:0c:9d:56:0c:d1:22:72:1e:76:06:d5:ad:08: dc:fa:f9:9b:ef:82:4c:7a:47:cd:54:b2:fd:46:e1:49:d5:87: 69:14:6f:8c:41:10:a5:87:53:a0:ce:fc:16:a8:9e:1f:b4:b5: 37:42:4d:78:99:ff:05:0d:29:b5:93:c1:83:0f:5d:1c:d4:9a: 26:d8:9f:a5:7d:cd:de:f2:7a:fe:20:58:2b:57:3b:41:a1:13: 5b:ba:f9:d4:dc:1d:d2:a6:db:fe:f8:8a:51:ac:cc:8d:cd:69: ad:6d:37:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hLb+Y5wC/7+ec33gcdVqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGJkYTJjMDU3NmM3NzgzMWY4NWY3MWI2ZTZkODBmOGNmY2VlZjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9xYox7A2MdrBH31Rhxps4ITmTYTy gQ/28AO05fLwe1CwTc/ft+QMGyzJmewct8Wk8KPntDn7orH490y6w4cGq6Xxy5tG 0ATef4CUoCeWHVHevJrmlCHl8DFk7VBWpE+1kHEWqBBsBl+5mBd58PFJrKHxe69y PlVfisq2gukE/720xj56daZwqtdnCdPW69wHMGgRR+KtmkxU0+j4vPotqlzUpDLA yJLKn4+IbEMh2pP+RSJJyx7df2u4J3HWbJKu2Kvt5VTM1J43j4cxBKQ21TgzX2dW EA0Y3ku37guf1mIjpUCTKmwbH5vNsGxq+Z9F+mJXUlhM+1jcCJgyborPmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPC9osBXbHeDH4X3G25tgPjPzu8PMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvOEwyaXdGZHNkNE1maGZjYmJtMkEtTV9PN3c4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAknjPMA0G CSqGSIb3DQEBCwUAA4IBAQAslpr+xACL7tFZs4UrQeOr4KqwFmt7taOgIVqDEFUl UV9S41p6hrM9+4gUuSV4pLGufNoPEtqpeQjVrdcKj14Hh0Rf2YqsWdiPvJvpYmZG HsnOO9Iqnr7PJThv3CUyJ5awtEat+trPbogHs8VPrQE+N4L6WDb+jlEyQlgO7iWl EtFwdZMfvIT4wUJlUGh99PH68geA0gydVgzRInIedgbVrQjc+vmb74JMekfNVLL9 RuFJ1YdpFG+MQRClh1OgzvwWqJ4ftLU3Qk14mf8FDSm1k8GDD10c1Jom2J+lfc3e 8nr+IFgrVztBoRNbuvnU3B3Sptv++IpRrMyNzWmtbTc3 -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:21 2026 by rpki-client