This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/8rQFycP0wCkWTOuHRSr62IO8dgE.roa File: 8rQFycP0wCkWTOuHRSr62IO8dgE.roa (raw, json) Hash identifier: MFuuptNilDQ2/pqjlNHx2pqwg9aDYbH9lFzucSAdE5E= Subject key identifier: F2:B4:05:C9:C3:F4:C0:29:16:4C:EB:87:45:2A:FA:D8:83:BC:76:01 Certificate issuer: /CN=849ace066a44ed2f95fe6bc2d0a7da412763bf2a Certificate serial: 019B7D5C752ABA357A406CAEB6771AA2C6C1 Authority key identifier: 84:9A:CE:06:6A:44:ED:2F:95:FE:6B:C2:D0:A7:DA:41:27:63:BF:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/8rQFycP0wCkWTOuHRSr62IO8dgE.roa Signing time: Fri 02 Jan 2026 06:19:29 +0000 ROA not before: Fri 02 Jan 2026 06:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43852 IP address blocks: 78.159.160.0/19 maxlen: 19 78.159.160.0/24 maxlen: 24 78.159.161.0/24 maxlen: 24 78.159.162.0/24 maxlen: 24 78.159.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:75:2a:ba:35:7a:40:6c:ae:b6:77:1a:a2:c6:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849ace066a44ed2f95fe6bc2d0a7da412763bf2a Validity Not Before: Jan 2 06:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2b405c9c3f4c029164ceb87452afad883bc7601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8d:09:2c:52:e6:1f:fb:08:4c:5c:7b:8d:3d: c9:05:2f:b3:1b:85:14:24:f9:6f:a6:e6:1e:fe:59: 73:1e:78:aa:bb:3e:b8:f9:b0:4e:ed:9a:9c:6d:74: ed:bc:cf:5f:fd:91:3f:fb:cb:5a:eb:2e:b2:db:9b: 49:4f:ef:c7:f2:c9:32:ca:ca:75:b6:27:48:74:89: 43:f7:a5:04:0f:67:32:e9:e1:fb:b3:32:04:21:c7: a1:28:a2:82:a0:20:68:76:a2:70:4f:72:a5:28:1a: 56:ea:75:06:8e:4a:a1:21:d0:31:cc:c7:09:d4:df: d2:83:ed:87:60:dc:af:ee:68:ae:cd:dc:ac:b6:81: e8:01:a5:ac:42:06:dc:19:5e:5e:94:c4:81:b8:be: 27:9f:1c:36:f5:2c:a6:b8:cb:90:65:1b:81:2c:14: 22:e9:86:91:9b:7c:97:d8:21:c9:f4:f7:a7:a4:83: b3:7b:91:be:2e:60:cb:b0:d3:56:8f:69:98:e3:9a: d8:11:ef:99:f2:a3:bb:e9:dc:ee:9e:85:a0:55:23: 2e:07:1d:f5:fd:5d:59:12:4e:cf:b3:a8:83:79:db: 83:05:6b:0f:3e:11:dd:5b:c2:15:2c:a3:c1:f8:d9: 98:d6:7c:20:3e:6e:dd:cd:22:3c:3a:cc:a2:1e:e7: 45:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B4:05:C9:C3:F4:C0:29:16:4C:EB:87:45:2A:FA:D8:83:BC:76:01 X509v3 Authority Key Identifier: keyid:84:9A:CE:06:6A:44:ED:2F:95:FE:6B:C2:D0:A7:DA:41:27:63:BF:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/8rQFycP0wCkWTOuHRSr62IO8dgE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.159.160.0/19 Signature Algorithm: sha256WithRSAEncryption 9b:ee:30:89:12:64:d9:69:f9:19:d8:6d:0d:74:3d:29:6f:9f: 9f:ba:c0:4d:77:dc:3e:e9:3e:90:a9:09:eb:31:87:30:96:1d: 3c:4c:ac:1d:29:04:c9:45:86:aa:32:e6:cc:49:b2:c4:ca:bd: 3e:e0:d5:e4:84:de:88:2d:03:58:05:92:30:c7:b4:24:27:40: a8:e1:f3:25:87:4e:e3:e5:25:d3:07:c6:60:f5:95:d6:07:00: a9:07:c7:20:6c:bc:a8:63:73:64:2f:3f:50:69:30:52:87:c4: 99:d6:3b:3c:a1:5a:5f:b4:74:d0:cf:f3:7e:e6:1d:14:45:ec: 4f:c5:5a:54:8a:fd:d3:9f:00:68:80:22:eb:42:0c:8f:d6:e2: b9:f2:ef:8f:fa:fb:dc:cc:06:3a:7e:21:7a:6b:b5:33:52:c4: 03:ac:70:ac:b5:b8:62:25:db:29:97:9a:88:a2:89:69:37:73: 9f:ee:06:28:3d:ab:da:c4:9b:cf:5f:77:c7:9c:d2:7e:28:96: 7f:fa:31:9c:a9:78:73:ba:81:37:01:dd:2d:63:b8:0e:6c:50: c1:3a:3b:49:59:33:32:a9:9c:2e:95:88:14:84:59:e0:a4:0d: cd:5c:51:44:d1:86:86:f3:0c:e7:75:b6:77:48:6b:bd:f1:7b: 4a:46:d3:90 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XHUqujV6QGyutncaosbBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0OWFjZTA2NmE0NGVkMmY5NWZlNmJjMmQwYTdkYTQxMjc2 M2JmMmEwHhcNMjYwMTAyMDYxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmI0MDVjOWMzZjRjMDI5MTY0Y2ViODc0NTJhZmFkODgzYmM3NjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj40JLFLmH/sITFx7jT3JBS+zG4UU JPlvpuYe/llzHniquz64+bBO7ZqcbXTtvM9f/ZE/+8ta6y6y25tJT+/H8skyysp1 tidIdIlD96UED2cy6eH7szIEIcehKKKCoCBodqJwT3KlKBpW6nUGjkqhIdAxzMcJ 1N/Sg+2HYNyv7miuzdystoHoAaWsQgbcGV5elMSBuL4nnxw29SymuMuQZRuBLBQi 6YaRm3yX2CHJ9PenpIOze5G+LmDLsNNWj2mY45rYEe+Z8qO76dzunoWgVSMuBx31 /V1ZEk7Ps6iDeduDBWsPPhHdW8IVLKPB+NmY1nwgPm7dzSI8OsyiHudFHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPK0BcnD9MApFkzrh0Uq+tiDvHYBMB8GA1UdIwQY MBaAFISazgZqRO0vlf5rwtCn2kEnY78qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEpyT0JtcEU3Uy1WX212QzBLZmFRU2RqdnlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8wYTU4MTctYmE4NS00MjQ0LWEwNTIt ZjdjNDY1N2I3YjhkLzEvOHJRRnljUDB3Q2tXVE91SFJTcjYySU84ZGdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8wYTU4MTctYmE4NS00MjQ0LWEwNTItZjdjNDY1N2I3Yjhk LzEvaEpyT0JtcEU3Uy1WX212QzBLZmFRU2RqdnlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFTp+gMA0G CSqGSIb3DQEBCwUAA4IBAQCb7jCJEmTZafkZ2G0NdD0pb5+fusBNd9w+6T6QqQnr MYcwlh08TKwdKQTJRYaqMubMSbLEyr0+4NXkhN6ILQNYBZIwx7QkJ0Co4fMlh07j 5SXTB8Zg9ZXWBwCpB8cgbLyoY3NkLz9QaTBSh8SZ1js8oVpftHTQz/N+5h0URexP xVpUiv3TnwBogCLrQgyP1uK58u+P+vvczAY6fiF6a7UzUsQDrHCstbhiJdspl5qI oolpN3Of7gYoPavaxJvPX3fHnNJ+KJZ/+jGcqXhzuoE3Ad0tY7gObFDBOjtJWTMy qZwulYgUhFngpA3NXFFE0YaG8wzndbZ3SGu98XtKRtOQ -----END CERTIFICATE-----Generated at Mon Jan 26 13:45:48 2026 by rpki-client