This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/h8m3UyCHdJZvavzOM3kO78iBzSs.roa File: h8m3UyCHdJZvavzOM3kO78iBzSs.roa (raw, json) Hash identifier: 7o6/q7pQ3291TBvgsO2xLF2/udPbMNgFs9of9Kxrm4o= Subject key identifier: 87:C9:B7:53:20:87:74:96:6F:6A:FC:CE:33:79:0E:EF:C8:81:CD:2B Certificate issuer: /CN=8edf6c2ad7acecad066e1f77fe05922f01691536 Certificate serial: 019B7C80448CDC876651AFB4E9DE0235FF7C Authority key identifier: 8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/h8m3UyCHdJZvavzOM3kO78iBzSs.roa Signing time: Fri 02 Jan 2026 02:18:59 +0000 ROA not before: Fri 02 Jan 2026 02:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50261 IP address blocks: 91.223.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:44:8c:dc:87:66:51:af:b4:e9:de:02:35:ff:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8edf6c2ad7acecad066e1f77fe05922f01691536 Validity Not Before: Jan 2 02:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87c9b753208774966f6afcce33790eefc881cd2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f0:7b:23:8b:96:66:c4:4a:c8:5e:1a:84:4a: c7:95:8f:5d:7a:84:25:95:ce:6e:67:09:9a:40:4a: 17:4b:d2:8f:5d:a4:2b:49:8d:c7:ba:27:fe:27:55: 20:02:74:0a:f5:28:82:ea:16:bd:69:b5:93:e5:c9: 60:62:62:7a:02:fe:1f:2d:4c:c8:85:4e:8f:24:25: 3c:8e:be:f7:88:ae:6b:35:d3:54:48:0f:b1:d4:ce: 9b:9c:ae:fd:ff:b5:cc:24:d8:3f:54:29:fe:52:1f: 48:fd:73:ad:90:c1:4b:ab:6c:6b:c6:75:e4:4b:bd: a2:b5:7d:f6:14:48:4e:a4:52:88:3b:a4:ca:a2:4d: 4c:de:ed:9e:a8:05:f5:bf:0a:c8:55:e4:9f:c6:fe: 98:75:db:49:6e:d0:7b:cc:4d:ea:7c:e7:5e:31:fa: b6:c7:96:86:16:84:08:2a:4c:11:29:51:0c:a9:7d: 6f:f6:66:d5:90:26:7b:98:a8:7d:3e:31:eb:f9:87: 18:22:26:05:8f:37:7f:79:f2:a0:62:a7:b7:21:71: 18:c4:a5:3a:64:df:8b:ab:f4:34:c5:41:a0:cd:2b: c4:dc:02:4b:25:e7:67:9b:e3:ba:00:fc:32:87:0d: 91:b2:b0:c1:2d:da:1d:df:95:2f:da:8f:20:2a:d0: 5d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C9:B7:53:20:87:74:96:6F:6A:FC:CE:33:79:0E:EF:C8:81:CD:2B X509v3 Authority Key Identifier: keyid:8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/h8m3UyCHdJZvavzOM3kO78iBzSs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.222.0/24 Signature Algorithm: sha256WithRSAEncryption 23:be:59:13:16:92:4b:91:24:60:49:2e:c2:9c:a1:0b:01:31: 0b:b8:9a:f5:aa:a5:65:2f:b7:91:51:a9:a8:a3:0a:6a:da:ed: 22:34:f3:07:a7:64:5f:1f:33:95:36:6e:03:73:1a:95:44:2f: 85:5b:82:e1:5a:56:99:87:9b:a9:38:88:38:0b:f6:7e:51:02: b2:2e:09:5d:e5:e8:86:56:c8:65:77:dc:5f:5d:dd:7d:15:ba: e1:d5:a2:25:09:3e:e0:5b:00:45:62:28:e2:a4:e6:c4:6a:7a: ad:99:2c:29:5d:68:35:e2:19:d2:8e:9c:fe:24:63:62:1c:1a: 0a:82:db:92:55:cd:df:b5:4e:a1:e0:97:82:cf:29:31:fc:ff: ae:62:42:6c:70:43:46:9b:29:f2:fe:52:7e:e7:5e:2e:9c:ea: 49:4d:a6:3c:ba:d5:e9:f9:27:09:30:8f:95:a8:7e:fe:f1:10: a9:b6:df:14:9e:e0:22:cd:d1:03:a2:28:ee:4f:6b:b4:92:36: 41:7c:a5:2a:72:a5:80:f5:71:cc:cc:7a:6c:8f:1a:94:44:79: 34:c5:19:58:82:a4:07:65:48:26:f2:0b:57:fe:ce:b6:6b:dc: 20:96:dd:e7:74:c8:04:f5:3c:ae:5f:d3:b7:16:c8:ef:f0:b6: 87:2e:cb:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gESM3IdmUa+06d4CNf98MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlZGY2YzJhZDdhY2VjYWQwNjZlMWY3N2ZlMDU5MjJmMDE2 OTE1MzYwHhcNMjYwMTAyMDIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2M5Yjc1MzIwODc3NDk2NmY2YWZjY2UzMzc5MGVlZmM4ODFjZDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvB7I4uWZsRKyF4ahErHlY9deoQl lc5uZwmaQEoXS9KPXaQrSY3Huif+J1UgAnQK9SiC6ha9abWT5clgYmJ6Av4fLUzI hU6PJCU8jr73iK5rNdNUSA+x1M6bnK79/7XMJNg/VCn+Uh9I/XOtkMFLq2xrxnXk S72itX32FEhOpFKIO6TKok1M3u2eqAX1vwrIVeSfxv6YddtJbtB7zE3qfOdeMfq2 x5aGFoQIKkwRKVEMqX1v9mbVkCZ7mKh9PjHr+YcYIiYFjzd/efKgYqe3IXEYxKU6 ZN+Lq/Q0xUGgzSvE3AJLJednm+O6APwyhw2RsrDBLdod35Uv2o8gKtBdNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIfJt1Mgh3SWb2r8zjN5Du/Igc0rMB8GA1UdIwQY MBaAFI7fbCrXrOytBm4fd/4Fki8BaRU2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanQ5c0t0ZXM3SzBHYmg5M19nV1NMd0ZwRlRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wZTdlZjctMTgzMS00MmY2LWEyY2Mt YWUyOTBkNTViZGI3LzEvaDhtM1V5Q0hkSlp2YXZ6T00za083OGlCelNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8wZTdlZjctMTgzMS00MmY2LWEyY2MtYWUyOTBkNTViZGI3 LzEvanQ5c0t0ZXM3SzBHYmg5M19nV1NMd0ZwRlRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9/eMA0G CSqGSIb3DQEBCwUAA4IBAQAjvlkTFpJLkSRgSS7CnKELATELuJr1qqVlL7eRUamo owpq2u0iNPMHp2RfHzOVNm4DcxqVRC+FW4LhWlaZh5upOIg4C/Z+UQKyLgld5eiG Vshld9xfXd19Fbrh1aIlCT7gWwBFYijipObEanqtmSwpXWg14hnSjpz+JGNiHBoK gtuSVc3ftU6h4JeCzykx/P+uYkJscENGmyny/lJ+514unOpJTaY8utXp+ScJMI+V qH7+8RCptt8UnuAizdEDoijuT2u0kjZBfKUqcqWA9XHMzHpsjxqURHk0xRlYgqQH ZUgm8gtX/s62a9wglt3ndMgE9TyuX9O3Fsjv8LaHLsvn -----END CERTIFICATE-----Generated at Sun Jan 25 16:11:55 2026 by rpki-client