This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/8O3AGuQIhrlb2IfzM6V4tcLRdYw.roa File: 8O3AGuQIhrlb2IfzM6V4tcLRdYw.roa (raw, json) Hash identifier: WlnM/QzatMyerGm0OoWe7csktSam0ZWSgVvAv1lTVgg= Subject key identifier: F0:ED:C0:1A:E4:08:86:B9:5B:D8:87:F3:33:A5:78:B5:C2:D1:75:8C Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d Certificate serial: 019B77592A8014E2A8FFC458F1F40F1AB845 Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/8O3AGuQIhrlb2IfzM6V4tcLRdYw.roa Signing time: Thu 01 Jan 2026 02:18:10 +0000 ROA not before: Thu 01 Jan 2026 02:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16340 IP address blocks: 82.115.64.0/19 maxlen: 19 95.174.32.0/19 maxlen: 19 217.144.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:2a:80:14:e2:a8:ff:c4:58:f1:f4:0f:1a:b8:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d Validity Not Before: Jan 1 02:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0edc01ae40886b95bd887f333a578b5c2d1758c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ce:46:cc:d9:a6:3e:bb:0d:7d:b6:c4:d0:c2: f6:a0:f9:57:7e:59:94:d7:44:a4:0a:1d:4c:dd:02: 10:eb:15:be:d1:c8:ae:d0:e9:85:ba:c7:b3:55:2c: 5a:db:ad:08:48:01:d6:29:dd:4f:eb:86:95:cf:29: aa:cc:96:72:10:27:98:3e:49:58:92:40:0a:07:62: 1e:e4:9b:93:08:a4:3f:eb:9d:1a:56:83:eb:af:94: 13:da:f3:92:80:55:be:0d:ae:32:6e:1f:ef:df:09: aa:00:46:43:53:77:55:4e:4d:9f:2a:09:b6:67:d9: 03:4e:48:4d:74:42:bf:4e:dc:fe:ce:77:67:79:03: b6:da:92:d9:62:75:4a:63:96:4b:e6:7a:ec:83:5f: fc:df:30:40:a7:4a:74:df:64:a3:3f:c6:e9:8a:52: 6e:06:d1:05:b0:ec:f6:98:bd:40:27:ac:5b:6e:7c: e7:bb:78:25:38:93:d9:f2:7f:e5:27:18:54:6e:bf: b8:c0:74:b8:73:62:d9:5e:df:7b:27:d6:19:7a:5d: 93:40:6d:4d:49:cb:96:c4:e1:6c:24:b8:03:72:83: ae:bf:85:cc:1b:12:19:b5:35:37:c9:e9:6a:22:6d: 45:3e:2b:48:f2:27:58:39:43:1f:54:d7:50:d7:ae: cf:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:ED:C0:1A:E4:08:86:B9:5B:D8:87:F3:33:A5:78:B5:C2:D1:75:8C X509v3 Authority Key Identifier: keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/8O3AGuQIhrlb2IfzM6V4tcLRdYw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.115.64.0/19 95.174.32.0/19 217.144.192.0/19 Signature Algorithm: sha256WithRSAEncryption 26:8a:8b:cc:a7:f5:a6:71:cd:ba:dc:c6:13:b3:e2:3a:83:23: 85:a6:e9:39:a6:8c:19:94:1e:0b:19:c3:fd:ec:fc:52:d0:e4: 16:09:14:49:2d:ab:36:62:89:ab:c5:1c:42:6f:d6:9e:8d:f8: fd:3e:ab:bf:e4:6b:ed:ef:d8:16:55:01:fd:7f:25:bf:7e:4c: a2:3b:e9:a4:54:98:8e:75:8e:f7:1a:f6:29:16:c9:2a:21:19: 4b:4f:99:60:70:2f:06:42:0d:21:6b:78:a2:79:2a:e8:0f:42: 2f:b8:ba:e6:c0:89:fd:fa:72:d5:27:1b:26:cd:7a:c8:2f:c9: 13:ce:b8:23:a8:86:40:97:25:63:81:62:98:f9:9e:9d:d2:10: d1:39:43:0a:12:0d:57:8f:db:1f:0b:56:06:25:63:6d:65:70: aa:cc:23:72:8a:25:a4:73:f7:ee:58:15:d0:59:83:c4:04:77: 27:e0:90:b1:65:61:d3:4e:37:1a:cb:ea:90:10:46:0f:44:3a: 4e:00:a6:e3:94:78:46:a1:fa:4d:af:87:84:e5:84:d7:06:10: 94:5b:85:05:7e:95:4a:1b:be:fb:00:c0:6a:26:bd:4e:05:2c: af:7f:d6:ed:91:65:8d:39:a4:d1:f1:a8:67:a1:6e:46:45:0f: 31:2c:48:72 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3WSqAFOKo/8RY8fQPGrhFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMTVkZjY4OGMzYWVhZTNmNjg1ZWQ0NGIzOTZjMjE5ODM5 NTg2MWQwHhcNMjYwMTAxMDIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGVkYzAxYWU0MDg4NmI5NWJkODg3ZjMzM2E1NzhiNWMyZDE3NThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs85GzNmmPrsNfbbE0ML2oPlXflmU 10SkCh1M3QIQ6xW+0ciu0OmFusezVSxa260ISAHWKd1P64aVzymqzJZyECeYPklY kkAKB2Ie5JuTCKQ/650aVoPrr5QT2vOSgFW+Da4ybh/v3wmqAEZDU3dVTk2fKgm2 Z9kDTkhNdEK/Ttz+zndneQO22pLZYnVKY5ZL5nrsg1/83zBAp0p032SjP8bpilJu BtEFsOz2mL1AJ6xbbnznu3glOJPZ8n/lJxhUbr+4wHS4c2LZXt97J9YZel2TQG1N ScuWxOFsJLgDcoOuv4XMGxIZtTU3yelqIm1FPitI8idYOUMfVNdQ167PnwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPDtwBrkCIa5W9iH8zOleLXC0XWMMB8GA1UdIwQY MBaAFE4V32iMOurj9oXtRLOWwhmDlYYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGhYZmFJdzY2dVAyaGUxRXM1YkNHWU9WaGgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wYmY3YWItNWFhYi00MzM3LWEwMmEt OGE2ZTU1NDE5NmJiLzEvOE8zQUd1UUlocmxiMklmek02VjR0Y0xSZFl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8wYmY3YWItNWFhYi00MzM3LWEwMmEtOGE2ZTU1NDE5NmJi LzEvVGhYZmFJdzY2dVAyaGUxRXM1YkNHWU9WaGgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFUnNAAwQF X64gAwQF2ZDAMA0GCSqGSIb3DQEBCwUAA4IBAQAmiovMp/Wmcc263MYTs+I6gyOF puk5powZlB4LGcP97PxS0OQWCRRJLas2YomrxRxCb9aejfj9Pqu/5Gvt79gWVQH9 fyW/fkyiO+mkVJiOdY73GvYpFskqIRlLT5lgcC8GQg0ha3iieSroD0IvuLrmwIn9 +nLVJxsmzXrIL8kTzrgjqIZAlyVjgWKY+Z6d0hDROUMKEg1Xj9sfC1YGJWNtZXCq zCNyiiWkc/fuWBXQWYPEBHcn4JCxZWHTTjcay+qQEEYPRDpOAKbjlHhGofpNr4eE 5YTXBhCUW4UFfpVKG777AMBqJr1OBSyvf9btkWWNOaTR8ahnoW5GRQ8xLEhy -----END CERTIFICATE-----Generated at Mon Jan 26 15:17:42 2026 by rpki-client