This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/8NpquuKtmcdUrFKy47Sj9fT29Os.roa File: 8NpquuKtmcdUrFKy47Sj9fT29Os.roa (raw, json) Hash identifier: JUFOjZ1XBHrYKPUOA3cAyXpp/9fbGuZHL5PKFslhQ7k= Subject key identifier: F0:DA:6A:BA:E2:AD:99:C7:54:AC:52:B2:E3:B4:A3:F5:F4:F6:F4:EB Certificate issuer: /CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed Certificate serial: 019B7C11182D65702D91A4D0A667A4F306DF Authority key identifier: 4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/8NpquuKtmcdUrFKy47Sj9fT29Os.roa Signing time: Fri 02 Jan 2026 00:17:33 +0000 ROA not before: Fri 02 Jan 2026 00:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57976 IP address blocks: 5.42.160.0/19 maxlen: 24 37.244.0.0/18 maxlen: 24 137.221.64.0/18 maxlen: 24 185.60.112.0/22 maxlen: 24 2a04:e800::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:18:2d:65:70:2d:91:a4:d0:a6:67:a4:f3:06:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed Validity Not Before: Jan 2 00:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0da6abae2ad99c754ac52b2e3b4a3f5f4f6f4eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d7:e4:17:50:d2:30:65:27:ee:85:3a:c5:8c: 8e:dd:02:06:4b:2a:13:2e:5c:3a:e1:53:99:c7:3c: 07:7d:57:d4:77:43:cc:1f:34:3a:f6:a7:f0:83:6b: ad:d1:06:d7:86:cb:33:7c:ce:ef:5b:82:8f:b2:59: e9:4d:d0:ed:c4:ad:10:c0:02:dc:1b:7f:74:1f:18: b1:d4:05:eb:67:a7:da:a4:c9:87:17:bd:9c:93:a3: 50:42:56:2b:4f:99:82:5b:70:b8:7e:34:ef:fe:28: 16:f9:ec:de:3b:3d:ff:db:c1:60:aa:97:61:ed:6e: 24:90:1a:81:a7:3f:6a:44:8f:59:8f:fc:97:4b:31: 87:4c:49:c4:0c:d5:68:43:c9:fc:9c:d4:3c:e9:0e: 76:46:57:29:71:61:84:b2:8f:b5:81:59:5b:2e:ce: 3a:22:77:0f:63:8f:af:c9:43:c5:53:99:66:cc:a3: d8:ca:91:35:5a:1b:4a:28:cb:08:b8:4a:21:f0:7f: 58:a8:c9:4b:d6:f4:5f:f5:50:1a:f7:98:c8:19:b1: 9a:99:61:5f:24:25:3c:29:4c:d5:97:36:84:c2:0a: 3a:30:d6:87:f7:f8:6f:71:05:01:4d:23:bd:28:87: 57:bf:33:84:4d:51:d2:8a:7b:be:c1:31:05:16:59: 9f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DA:6A:BA:E2:AD:99:C7:54:AC:52:B2:E3:B4:A3:F5:F4:F6:F4:EB X509v3 Authority Key Identifier: keyid:4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/8NpquuKtmcdUrFKy47Sj9fT29Os.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.42.160.0/19 37.244.0.0/18 137.221.64.0/18 185.60.112.0/22 IPv6: 2a04:e800::/29 Signature Algorithm: sha256WithRSAEncryption 9a:de:ed:ce:0b:f0:ae:04:21:eb:80:91:91:31:9a:61:cb:ea: da:87:fd:ad:ab:36:e9:2d:cb:81:a1:9a:74:1b:5b:8d:96:b7: 6a:50:25:f4:74:b6:41:4b:b0:e8:46:0b:97:9f:f3:66:33:5d: 0d:32:f7:fc:0b:83:f4:51:2c:1e:28:63:64:e2:03:a6:26:b1: 5b:62:08:ec:60:50:aa:b0:06:a6:ea:d0:b4:50:9b:86:bf:bc: 55:09:76:32:d0:5c:54:4d:12:d6:b6:12:75:58:2b:70:64:34: 3b:4d:f9:53:0d:fd:4a:7d:94:08:8c:bb:e8:03:40:06:64:8c: 93:e1:dd:cd:f9:88:af:37:a7:b0:5d:66:a5:c2:80:84:84:36: ac:47:ab:2c:fc:37:d0:5d:91:ae:9b:19:d6:be:91:62:df:fb: 6a:89:51:f7:06:da:b8:c1:0a:5b:8b:42:e5:7c:4d:9f:86:0e: 67:83:e0:72:12:df:6d:aa:a2:ff:0a:96:0d:9a:a2:94:49:a8: f3:a1:00:6f:f2:63:7b:12:d7:0f:d1:1f:41:54:79:db:66:b5: ac:c9:bb:1c:b5:0e:b7:57:c7:75:d4:a6:a8:6a:f0:c1:fc:b3: a0:a2:f9:4c:e6:57:3f:15:6c:bc:e5:0a:57:0e:8b:1b:16:1b: c8:e8:82:a7 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt8ERgtZXAtkaTQpmek8wbfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZjNmYjhmZjhkZGFmZGE4OWRiMzk3MDVmNzhmNjQxOGVm ZDFmZWQwHhcNMjYwMTAyMDAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGRhNmFiYWUyYWQ5OWM3NTRhYzUyYjJlM2I0YTNmNWY0ZjZmNGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNfkF1DSMGUn7oU6xYyO3QIGSyoT Llw64VOZxzwHfVfUd0PMHzQ69qfwg2ut0QbXhsszfM7vW4KPslnpTdDtxK0QwALc G390Hxix1AXrZ6fapMmHF72ck6NQQlYrT5mCW3C4fjTv/igW+ezeOz3/28Fgqpdh 7W4kkBqBpz9qRI9Zj/yXSzGHTEnEDNVoQ8n8nNQ86Q52RlcpcWGEso+1gVlbLs46 IncPY4+vyUPFU5lmzKPYypE1WhtKKMsIuEoh8H9YqMlL1vRf9VAa95jIGbGamWFf JCU8KUzVlzaEwgo6MNaH9/hvcQUBTSO9KIdXvzOETVHSinu+wTEFFlmfGQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFPDaarrirZnHVKxSsuO0o/X09vTrMB8GA1UdIwQY MBaAFEvz+4/43a/aids5cF949kGO/R/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU19QN2pfamRyOXFKMnpsd1gzajJRWTc5SC0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83Yjg1MTMtZjE4OS00MzMwLWI2ZjAt ZDBkMjU4ZTRiNDM1LzEvOE5wcXV1S3RtY2RVckZLeTQ3U2o5ZlQyOU9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS83Yjg1MTMtZjE4OS00MzMwLWI2ZjAtZDBkMjU4ZTRiNDM1 LzEvU19QN2pfamRyOXFKMnpsd1gzajJRWTc5SC0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQFBSqgAwQG JfQAAwQGid1AAwQCuTxwMA0EAgACMAcDBQMqBOgAMA0GCSqGSIb3DQEBCwUAA4IB AQCa3u3OC/CuBCHrgJGRMZphy+rah/2tqzbpLcuBoZp0G1uNlrdqUCX0dLZBS7Do RguXn/NmM10NMvf8C4P0USweKGNk4gOmJrFbYgjsYFCqsAam6tC0UJuGv7xVCXYy 0FxUTRLWthJ1WCtwZDQ7TflTDf1KfZQIjLvoA0AGZIyT4d3N+YivN6ewXWalwoCE hDasR6ss/DfQXZGumxnWvpFi3/tqiVH3Btq4wQpbi0LlfE2fhg5ng+ByEt9tqqL/ CpYNmqKUSajzoQBv8mN7EtcP0R9BVHnbZrWsybsctQ63V8d11KaoavDB/LOgovlM 5lc/FWy85QpXDosbFhvI6IKn -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:47 2026 by rpki-client