This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/fs8coMQW-wdjxvCj9ZMHuDg86fI.roa File: fs8coMQW-wdjxvCj9ZMHuDg86fI.roa (raw, json) Hash identifier: 9FrwB/m2Bh+Pc1afpUHCCGmxJk3UX+3t1k97wVkOTzk= Subject key identifier: 7E:CF:1C:A0:C4:16:FB:07:63:C6:F0:A3:F5:93:07:B8:38:3C:E9:F2 Certificate issuer: /CN=36af041d12c4adb66f8c16113c9a6147d02388d9 Certificate serial: 019B79EC5FB2234F12B029A1E52B133B786D Authority key identifier: 36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/fs8coMQW-wdjxvCj9ZMHuDg86fI.roa Signing time: Thu 01 Jan 2026 14:18:12 +0000 ROA not before: Thu 01 Jan 2026 14:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198203 IP address blocks: 81.4.100.0/22 maxlen: 24 81.4.104.0/22 maxlen: 24 81.4.108.0/22 maxlen: 24 81.4.120.0/22 maxlen: 24 81.4.124.0/22 maxlen: 24 91.229.232.0/24 maxlen: 24 176.56.224.0/20 maxlen: 24 176.56.232.0/24 maxlen: 24 176.56.236.0/24 maxlen: 24 176.56.237.0/24 maxlen: 24 176.56.238.0/24 maxlen: 24 185.34.216.0/24 maxlen: 24 185.34.218.0/24 maxlen: 24 185.34.219.0/24 maxlen: 24 185.56.60.0/22 maxlen: 24 185.56.61.0/24 maxlen: 24 2a00:d880::/32 maxlen: 48 2a00:d880:4::/48 maxlen: 48 2a02:50e0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:5f:b2:23:4f:12:b0:29:a1:e5:2b:13:3b:78:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36af041d12c4adb66f8c16113c9a6147d02388d9 Validity Not Before: Jan 1 14:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ecf1ca0c416fb0763c6f0a3f59307b8383ce9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:12:0a:d0:0b:4e:af:26:28:43:ee:f4:fc:24: 4f:2d:30:0d:2b:ac:87:6d:a4:15:1c:e5:ae:c4:1f: cb:db:ac:7f:07:18:df:7c:c4:24:78:42:48:35:0b: 00:ea:79:e1:96:fe:b1:4c:81:d5:ed:79:85:a0:27: ef:e5:1b:17:fc:1f:4c:51:64:e9:2b:12:e4:3d:6b: c4:1a:d9:72:01:2c:17:a3:a4:87:a1:9b:b5:76:84: de:7e:6f:20:cb:d6:ce:d5:02:26:49:f8:b3:42:df: 18:24:2b:a8:77:46:7a:2e:a3:09:65:c1:63:f8:a4: e2:7c:10:2d:91:eb:31:17:d2:55:19:c2:9c:69:fb: e4:5f:40:89:fb:fa:13:a4:c7:6f:98:bc:e2:c7:95: 27:6e:9d:75:f1:0e:56:68:cc:30:72:22:7a:91:9d: 3d:cf:50:a9:0a:55:2f:5b:4f:06:55:ef:ce:d2:4a: 57:8f:60:cf:fb:cf:6e:9e:ee:24:dd:e3:52:62:df: de:cd:14:02:b2:1d:35:68:43:ff:54:80:1a:ff:1c: d9:11:a0:c9:82:24:db:68:6f:8c:96:f2:e9:56:08: 58:e7:ad:33:43:0b:10:f1:a3:37:28:14:01:a7:6c: cd:74:ab:ab:8c:46:cb:c1:04:3e:9b:07:31:5b:9d: 17:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CF:1C:A0:C4:16:FB:07:63:C6:F0:A3:F5:93:07:B8:38:3C:E9:F2 X509v3 Authority Key Identifier: keyid:36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/fs8coMQW-wdjxvCj9ZMHuDg86fI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.4.100.0-81.4.111.255 81.4.120.0/21 91.229.232.0/24 176.56.224.0/20 185.34.216.0/24 185.34.218.0/23 185.56.60.0/22 IPv6: 2a00:d880::/32 2a02:50e0::/32 Signature Algorithm: sha256WithRSAEncryption 37:65:ec:82:6f:88:7f:92:49:f6:3b:5e:36:70:fb:81:6c:c3: 58:ad:af:35:d0:30:99:3c:29:14:ab:7b:63:60:da:a8:6e:29: 23:c1:4a:ca:08:b6:15:c3:c0:10:5e:da:76:bf:21:a0:6c:f7: 50:94:df:a7:ae:85:2a:3c:46:d8:6e:2e:ff:8c:f4:1d:06:cc: 22:4a:cd:90:7a:a5:8b:cc:01:b2:6c:a9:35:c2:63:5f:d0:47: aa:42:24:7d:58:c3:37:c5:66:fe:a7:e6:12:a8:b6:7a:c2:0e: 5f:82:21:19:21:82:6a:42:5c:00:1f:4e:d7:18:48:9a:bb:b2: fe:e9:74:16:e4:56:ba:36:e8:0e:ab:4b:60:4c:2a:b7:65:d1: ad:8d:0a:61:f1:45:9c:09:c5:36:1c:a9:b1:06:a8:9e:dd:8f: 1c:cc:80:43:55:79:68:b3:c4:3e:a4:32:bb:10:b1:f3:78:77: a9:4b:46:15:b2:ae:30:0d:fc:e6:ad:1c:b3:85:8f:cf:c1:ae: 8e:26:01:5b:c1:47:11:4b:81:ae:47:11:6c:7c:87:ee:01:25: 5f:ff:5a:c1:23:b6:4d:07:b3:8d:71:69:e3:54:25:a4:75:0f: c4:2b:1d:d5:4a:68:da:f4:11:df:69:e6:d3:e4:f1:a3:21:b9: 3f:0b:cb:4d -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt57F+yI08SsCmh5SsTO3htMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YWYwNDFkMTJjNGFkYjY2ZjhjMTYxMTNjOWE2MTQ3ZDAy Mzg4ZDkwHhcNMjYwMTAxMTQxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWNmMWNhMGM0MTZmYjA3NjNjNmYwYTNmNTkzMDdiODM4M2NlOWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRIK0AtOryYoQ+70/CRPLTANK6yH baQVHOWuxB/L26x/BxjffMQkeEJINQsA6nnhlv6xTIHV7XmFoCfv5RsX/B9MUWTp KxLkPWvEGtlyASwXo6SHoZu1doTefm8gy9bO1QImSfizQt8YJCuod0Z6LqMJZcFj +KTifBAtkesxF9JVGcKcafvkX0CJ+/oTpMdvmLzix5Unbp118Q5WaMwwciJ6kZ09 z1CpClUvW08GVe/O0kpXj2DP+89unu4k3eNSYt/ezRQCsh01aEP/VIAa/xzZEaDJ giTbaG+MlvLpVghY560zQwsQ8aM3KBQBp2zNdKurjEbLwQQ+mwcxW50XRQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFH7PHKDEFvsHY8bwo/WTB7g4POnyMB8GA1UdIwQY MBaAFDavBB0SxK22b4wWETyaYUfQI4jZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnE4RUhSTEVyYlp2akJZUlBKcGhSOUFqaU5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YTU0MmQtNzE5ZS00NmQwLWE1Y2Mt MDYxZGQ2ODEzMzJjLzEvZnM4Y29NUVctd2RqeHZDajlaTUh1RGc4NmZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YTU0MmQtNzE5ZS00NmQwLWE1Y2MtMDYxZGQ2ODEzMzJj LzEvTnE4RUhSTEVyYlp2akJZUlBKcGhSOUFqaU5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDA4BAIAATAyMAwDBAJRBGQD BARRBGADBANRBHgDBABb5egDBASwOOADBAC5ItgDBAG5ItoDBAK5ODwwFAQCAAIw DgMFACoA2IADBQAqAlDgMA0GCSqGSIb3DQEBCwUAA4IBAQA3ZeyCb4h/kkn2O142 cPuBbMNYra810DCZPCkUq3tjYNqobikjwUrKCLYVw8AQXtp2vyGgbPdQlN+nroUq PEbYbi7/jPQdBswiSs2QeqWLzAGybKk1wmNf0EeqQiR9WMM3xWb+p+YSqLZ6wg5f giEZIYJqQlwAH07XGEiau7L+6XQW5Fa6NugOq0tgTCq3ZdGtjQph8UWcCcU2HKmx Bqie3Y8czIBDVXlos8Q+pDK7ELHzeHepS0YVsq4wDfzmrRyzhY/Pwa6OJgFbwUcR S4GuRxFsfIfuASVf/1rBI7ZNB7ONcWnjVCWkdQ/EKx3VSmja9BHfaebT5PGjIbk/ C8tN -----END CERTIFICATE-----Generated at Mon Jan 26 14:17:47 2026 by rpki-client