This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/pE8M2TbspfgGizKPo-eHgEwMXpo.roa File: pE8M2TbspfgGizKPo-eHgEwMXpo.roa (raw, json) Hash identifier: FBu5TKtrrPKwi3n1Wm4wF0JEluk4YeXT4bYDomJA4O4= Subject key identifier: A4:4F:0C:D9:36:EC:A5:F8:06:8B:32:8F:A3:E7:87:80:4C:0C:5E:9A Certificate issuer: /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922 Certificate serial: 019B79ECD8B78479FBF09DCB7C4962D6013B Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/pE8M2TbspfgGizKPo-eHgEwMXpo.roa Signing time: Thu 01 Jan 2026 14:18:43 +0000 ROA not before: Thu 01 Jan 2026 14:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 666 IP address blocks: 84.205.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d8:b7:84:79:fb:f0:9d:cb:7c:49:62:d6:01:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922 Validity Not Before: Jan 1 14:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a44f0cd936eca5f8068b328fa3e787804c0c5e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:19:8c:ca:3b:3f:41:70:9c:17:d0:86:23:d9: 36:0b:14:e5:e2:73:0e:a7:b7:bb:d3:ae:6a:d1:f5: 19:c9:c2:48:11:57:de:2e:40:3b:08:1e:3e:4d:41: c5:9b:f9:44:e9:3e:a5:1f:20:a2:95:5e:b5:c0:ac: 6d:2a:8c:81:47:19:49:69:f7:71:1f:f0:5a:4c:b1: 84:69:f1:9d:67:35:10:eb:c0:72:eb:07:98:f2:98: 83:5c:a1:7b:d1:3c:f9:19:44:19:73:7b:34:f3:23: 3d:a7:f9:51:b9:51:cb:3c:35:3d:77:16:d0:78:6b: f4:ab:f5:98:6c:62:fe:7f:b6:8c:7b:aa:6b:7a:b7: ff:1e:85:79:68:9e:92:58:46:68:c9:53:77:a0:5c: dd:4a:36:27:b6:30:cf:2a:fb:43:b5:1d:27:9c:f8: ca:ad:db:fa:ea:dd:58:0b:f0:f8:08:22:71:59:92: 3b:bf:9e:ae:f2:3f:30:3a:38:4a:60:27:19:a1:92: 12:0a:25:24:89:e3:5f:f3:d0:b3:49:70:89:47:bb: f0:8b:12:ee:36:af:34:e0:7f:38:bd:2d:1e:9d:6f: 87:b6:90:4d:28:92:f1:57:0f:4f:eb:0b:82:48:79: 6e:e6:4a:ea:82:4f:91:64:eb:a0:3f:10:32:29:9f: 17:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:4F:0C:D9:36:EC:A5:F8:06:8B:32:8F:A3:E7:87:80:4C:0C:5E:9A X509v3 Authority Key Identifier: keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/pE8M2TbspfgGizKPo-eHgEwMXpo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.205.81.0/24 Signature Algorithm: sha256WithRSAEncryption 28:14:ee:5f:5a:28:77:da:6e:5b:80:29:72:b6:41:00:84:68: 07:32:ae:df:42:70:7d:a9:28:7e:f2:66:6f:5a:39:7b:69:c8: bb:f4:7a:cc:26:f3:38:a5:35:58:c7:33:2e:94:ea:cd:70:1a: 27:64:6d:2c:17:a7:36:e4:f0:87:ea:fa:01:eb:3a:63:1a:7e: df:7f:43:48:a8:25:d6:ed:1e:0d:fd:87:f0:5d:a6:cb:a1:3f: 57:e6:3a:40:cf:69:b9:57:27:ab:13:2e:55:c2:12:23:a2:dc: d4:5a:b1:70:c9:ef:2a:f6:71:81:56:95:28:72:e8:48:2e:43: 49:dd:e9:35:c7:74:7b:b6:57:20:31:fe:26:79:07:68:8d:cf: 5b:f4:83:80:76:82:2c:e7:58:9a:5b:b7:30:8f:c9:ed:ea:46: ea:16:b8:58:54:af:3e:8f:1d:a0:4d:4a:ec:32:b0:07:80:21: aa:0c:2b:c0:ee:25:12:bd:8c:9a:47:dd:30:5c:b6:0f:25:91: a9:fa:dc:12:8e:0b:b5:f5:fb:53:08:7e:07:ec:41:eb:51:d3: 7d:c4:18:a4:e8:07:21:1a:62:49:57:99:8c:1c:85:5d:2c:6b: 7f:b0:5a:3a:78:71:aa:64:0d:58:52:bc:8b:18:79:c2:9f:76: 16:ba:6b:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Ni3hHn78J3LfEli1gE7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MTdhYWZlYzYxYzNhNmIwMjRiNmE5ZjU0ZmZiNzY0Y2Ez ZGY5MjIwHhcNMjYwMTAxMTQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDRmMGNkOTM2ZWNhNWY4MDY4YjMyOGZhM2U3ODc4MDRjMGM1ZTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BmMyjs/QXCcF9CGI9k2CxTl4nMO p7e7065q0fUZycJIEVfeLkA7CB4+TUHFm/lE6T6lHyCilV61wKxtKoyBRxlJafdx H/BaTLGEafGdZzUQ68By6weY8piDXKF70Tz5GUQZc3s08yM9p/lRuVHLPDU9dxbQ eGv0q/WYbGL+f7aMe6prerf/HoV5aJ6SWEZoyVN3oFzdSjYntjDPKvtDtR0nnPjK rdv66t1YC/D4CCJxWZI7v56u8j8wOjhKYCcZoZISCiUkieNf89CzSXCJR7vwixLu Nq804H84vS0enW+HtpBNKJLxVw9P6wuCSHlu5krqgk+RZOugPxAyKZ8X5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKRPDNk27KX4Bosyj6Pnh4BMDF6aMB8GA1UdIwQY MBaAFIgXqv7GHDprAktqn1T/t2TKPfkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0Mjkt ZTY2MzY5NjQ5NDExLzEvcEU4TTJUYnNwZmdHaXpLUG8tZUhnRXdNWHBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0MjktZTY2MzY5NjQ5NDEx LzEvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVM1RMA0G CSqGSIb3DQEBCwUAA4IBAQAoFO5fWih32m5bgClytkEAhGgHMq7fQnB9qSh+8mZv Wjl7aci79HrMJvM4pTVYxzMulOrNcBonZG0sF6c25PCH6voB6zpjGn7ff0NIqCXW 7R4N/YfwXabLoT9X5jpAz2m5VyerEy5VwhIjotzUWrFwye8q9nGBVpUocuhILkNJ 3ek1x3R7tlcgMf4meQdojc9b9IOAdoIs51iaW7cwj8nt6kbqFrhYVK8+jx2gTUrs MrAHgCGqDCvA7iUSvYyaR90wXLYPJZGp+twSjgu19ftTCH4H7EHrUdN9xBik6Ach GmJJV5mMHIVdLGt/sFo6eHGqZA1YUryLGHnCn3YWumvl -----END CERTIFICATE-----Generated at Sun Jan 25 10:27:31 2026 by rpki-client