This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8cITtdn4IyEgBgfeaUzePyy1QdE.roa File: 8cITtdn4IyEgBgfeaUzePyy1QdE.roa (raw, json) Hash identifier: +MlhnURVVujjnaspYARai7xe1wlQvtTtHrzdWNl6CWU= Subject key identifier: F1:C2:13:B5:D9:F8:23:21:20:06:07:DE:69:4C:DE:3F:2C:B5:41:D1 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F8490E0F94BA91394A563FEE03C8CF4 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8cITtdn4IyEgBgfeaUzePyy1QdE.roa Signing time: Fri 02 Jan 2026 16:22:32 +0000 ROA not before: Fri 02 Jan 2026 16:22:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20688 IP address blocks: 92.38.2.0/24 maxlen: 24 146.120.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:90:e0:f9:4b:a9:13:94:a5:63:fe:e0:3c:8c:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1c213b5d9f82321200607de694cde3f2cb541d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e5:cd:59:d2:bb:88:04:fc:96:0b:3a:4a:46: 30:96:fa:4b:cb:a5:d9:94:4b:c4:bc:ef:f7:25:e1: 5d:9a:8d:a1:33:a8:c4:2d:3a:d6:29:b1:07:5d:6f: 93:29:91:5a:70:cf:92:07:a6:b5:94:2f:33:e5:fd: 90:2b:09:d6:7b:cf:44:df:41:05:0c:b9:c6:12:08: 99:05:7c:38:57:f8:5f:06:fc:dc:fb:78:02:6f:88: 4c:79:89:a9:56:e1:21:4f:d4:1e:ec:64:18:60:6a: f5:c5:f6:78:97:42:55:e7:3c:4b:7e:c9:9c:85:b0: d3:51:9c:03:a4:6e:b3:b6:6c:d4:1b:36:42:22:6d: fe:eb:a0:b7:93:39:ee:e7:ef:32:e6:34:55:4e:bf: 7d:63:76:49:31:4d:20:19:bf:0f:87:2d:7d:8b:05: c8:52:7f:9a:b4:58:6e:6a:b7:59:53:73:00:5e:99: 7f:f8:2f:dc:eb:ca:85:ad:a6:56:ec:53:3a:c4:4b: b9:c2:2b:b3:b6:34:bb:f7:38:dd:28:4a:e2:5b:10: dc:8e:3c:30:58:a3:06:9b:d8:66:44:60:30:eb:c6: 40:b2:e8:70:70:e7:bb:03:52:ca:67:74:36:4f:4f: 5b:59:52:b7:60:26:85:6c:17:56:5d:39:a0:72:5f: d4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C2:13:B5:D9:F8:23:21:20:06:07:DE:69:4C:DE:3F:2C:B5:41:D1 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8cITtdn4IyEgBgfeaUzePyy1QdE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.38.2.0/24 146.120.0.0/21 Signature Algorithm: sha256WithRSAEncryption 9e:33:ea:b1:a1:06:fe:d4:d8:3e:1f:d1:b8:1b:ce:09:b7:84: c9:a6:63:51:f7:93:41:ea:c5:74:b8:5d:7e:67:56:f9:32:63: bb:74:16:1f:a2:b6:09:9d:f5:7a:e0:99:f5:66:f6:15:d6:f4: 50:b6:48:3a:8b:03:48:ba:8f:ed:56:47:7c:9f:82:0b:64:5e: fb:79:75:b7:43:a4:83:ea:75:be:73:cb:d1:64:e9:74:56:a5: c2:34:0d:5a:2f:a9:25:2e:1d:eb:83:e2:94:8c:1a:dc:3e:25: 37:7f:4f:9d:db:e4:82:89:30:57:27:62:43:8c:bc:13:74:2e: 87:63:ab:29:40:86:c7:04:00:34:82:55:a9:0f:a4:5b:0a:29: 2b:cc:55:79:4e:28:02:9c:3c:11:86:8a:6c:e2:d1:60:36:39: 17:19:6c:e3:2b:f8:13:4e:56:28:82:5e:41:86:47:f3:46:31: c5:74:9d:5b:d6:88:3c:90:42:5b:a1:f5:25:67:d4:02:22:54: 04:54:40:44:5f:de:40:36:0b:37:c4:19:41:01:d5:99:fb:0a: 31:4a:14:b7:62:45:57:52:42:2e:56:14:b0:fb:20:38:1a:73: 86:ae:cc:9a:97:c2:d0:4c:2f:83:56:07:14:54:21:57:2b:41: 37:ff:90:48 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hJDg+UupE5SlY/7gPIz0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWMyMTNiNWQ5ZjgyMzIxMjAwNjA3ZGU2OTRjZGUzZjJjYjU0MWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteXNWdK7iAT8lgs6SkYwlvpLy6XZ lEvEvO/3JeFdmo2hM6jELTrWKbEHXW+TKZFacM+SB6a1lC8z5f2QKwnWe89E30EF DLnGEgiZBXw4V/hfBvzc+3gCb4hMeYmpVuEhT9Qe7GQYYGr1xfZ4l0JV5zxLfsmc hbDTUZwDpG6ztmzUGzZCIm3+66C3kznu5+8y5jRVTr99Y3ZJMU0gGb8Phy19iwXI Un+atFhuardZU3MAXpl/+C/c68qFraZW7FM6xEu5wiuztjS79zjdKEriWxDcjjww WKMGm9hmRGAw68ZAsuhwcOe7A1LKZ3Q2T09bWVK3YCaFbBdWXTmgcl/UJQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPHCE7XZ+CMhIAYH3mlM3j8stUHRMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvOGNJVHRkbjRJeUVnQmdmZWFVemVQeXkxUWRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXCYCAwQD kngAMA0GCSqGSIb3DQEBCwUAA4IBAQCeM+qxoQb+1Ng+H9G4G84Jt4TJpmNR95NB 6sV0uF1+Z1b5MmO7dBYforYJnfV64Jn1ZvYV1vRQtkg6iwNIuo/tVkd8n4ILZF77 eXW3Q6SD6nW+c8vRZOl0VqXCNA1aL6klLh3rg+KUjBrcPiU3f0+d2+SCiTBXJ2JD jLwTdC6HY6spQIbHBAA0glWpD6RbCikrzFV5TigCnDwRhops4tFgNjkXGWzjK/gT TlYogl5BhkfzRjHFdJ1b1og8kEJbofUlZ9QCIlQEVEBEX95ANgs3xBlBAdWZ+wox ShS3YkVXUkIuVhSw+yA4GnOGrsyal8LQTC+DVgcUVCFXK0E3/5BI -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:37 2026 by rpki-client