This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8MT0-FvjucBAJ5_4zNawUwPIbio.roa File: 8MT0-FvjucBAJ5_4zNawUwPIbio.roa (raw, json) Hash identifier: j8ctkVwf35gx11i815V7djergO6Xkd5DqwORKQjPYn4= Subject key identifier: F0:C4:F4:F8:5B:E3:B9:C0:40:27:9F:F8:CC:D6:B0:53:03:C8:6E:2A Certificate issuer: /CN=f219383a3e3f116a9bcc4769c8517cdce40765c7 Certificate serial: 019B7F853A568A6B70F81A826E9948D85998 Authority key identifier: F2:19:38:3A:3E:3F:11:6A:9B:CC:47:69:C8:51:7C:DC:E4:07:65:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8MT0-FvjucBAJ5_4zNawUwPIbio.roa Signing time: Fri 02 Jan 2026 16:23:16 +0000 ROA not before: Fri 02 Jan 2026 16:23:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202920 IP address blocks: 84.38.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:3a:56:8a:6b:70:f8:1a:82:6e:99:48:d8:59:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f219383a3e3f116a9bcc4769c8517cdce40765c7 Validity Not Before: Jan 2 16:23:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0c4f4f85be3b9c040279ff8ccd6b05303c86e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:11:c6:c5:60:60:cb:53:e8:0f:e4:04:30:07: cf:df:0a:98:45:c4:42:f7:86:78:6c:c6:2f:9b:f7: 57:c0:96:aa:34:9e:01:99:8c:ff:5a:72:87:70:5a: 80:6c:c8:f2:21:be:f3:4c:46:a4:a1:96:a1:d6:4c: c8:0f:0a:15:24:ed:0a:26:f2:4b:6b:ff:d5:44:d3: ee:cd:02:a8:a1:28:c6:a2:0f:23:e9:74:b3:6b:5a: 1a:b6:af:86:95:b5:b7:6d:f4:62:23:e9:31:08:4f: b2:91:9c:71:d8:ef:bc:95:32:4a:b9:c3:f5:76:68: 54:44:10:58:72:8d:29:d7:a3:99:c4:33:ff:e0:9c: a7:f8:be:52:3a:8b:f6:e6:a7:20:70:a3:0d:73:32: 48:14:7d:dc:8f:6c:12:4d:49:f6:15:b0:a5:90:11: 57:3e:64:63:80:d6:81:1d:de:37:25:06:6d:65:ba: 98:68:44:30:e8:59:10:a5:c3:3b:b4:5f:f9:63:10: 01:6b:54:9d:c0:d7:3a:e3:db:e3:4e:62:a5:c6:2a: 1c:50:c8:8b:d9:c2:aa:10:e0:69:43:83:84:00:1c: af:6f:ae:95:91:2d:65:08:c5:66:ad:e0:79:d8:d7: 22:2d:20:ae:e4:bb:eb:a8:60:28:14:f5:f0:59:7a: e2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C4:F4:F8:5B:E3:B9:C0:40:27:9F:F8:CC:D6:B0:53:03:C8:6E:2A X509v3 Authority Key Identifier: keyid:F2:19:38:3A:3E:3F:11:6A:9B:CC:47:69:C8:51:7C:DC:E4:07:65:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8MT0-FvjucBAJ5_4zNawUwPIbio.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.38.131.0/24 Signature Algorithm: sha256WithRSAEncryption a3:d7:3b:d4:4b:01:62:4b:17:43:53:54:5f:cb:53:e1:36:5e: 35:41:d5:f8:7c:f9:c5:a5:60:20:38:29:d7:87:b7:8e:f0:40: aa:5a:e7:11:97:4c:3f:4b:1d:04:b2:bc:07:c9:39:d8:22:65: 51:7c:34:b3:97:61:40:fd:50:2c:23:89:c9:01:70:73:74:aa: 6c:64:ee:70:5e:e0:e3:a6:b6:e6:9d:ea:cb:09:02:2f:54:6c: 5a:b0:3b:b1:0c:3e:49:ae:0c:d3:62:26:bf:59:2d:1d:20:0c: e4:03:c8:ff:20:37:09:99:7b:5a:c8:fd:d3:6e:05:33:a4:f0: eb:cc:ec:f4:61:9a:a4:db:fe:e9:d6:07:2a:56:24:50:5b:50: 7e:d1:af:10:ac:42:16:f4:e2:72:44:1b:4b:c6:ce:4f:9b:e6: ae:42:d7:e3:67:39:fd:54:d2:62:89:9e:af:5f:91:aa:67:e9: f5:4e:22:a9:2c:ca:37:0d:ff:d8:78:73:5c:43:58:1f:35:79: e5:ae:52:ea:43:68:72:86:b6:a1:96:6f:ab:96:5b:25:4e:16: 9f:30:8b:32:01:1b:d6:3f:c0:58:57:99:90:ab:c0:67:0a:60: 8e:47:f7:8c:d6:a0:96:51:4e:70:65:71:cd:8a:54:16:e7:82: b9:8e:dd:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hTpWimtw+BqCbplI2FmYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMTkzODNhM2UzZjExNmE5YmNjNDc2OWM4NTE3Y2RjZTQw NzY1YzcwHhcNMjYwMTAyMTYyMzE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGM0ZjRmODViZTNiOWMwNDAyNzlmZjhjY2Q2YjA1MzAzYzg2ZTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhHGxWBgy1PoD+QEMAfP3wqYRcRC 94Z4bMYvm/dXwJaqNJ4BmYz/WnKHcFqAbMjyIb7zTEakoZah1kzIDwoVJO0KJvJL a//VRNPuzQKooSjGog8j6XSza1oatq+GlbW3bfRiI+kxCE+ykZxx2O+8lTJKucP1 dmhURBBYco0p16OZxDP/4Jyn+L5SOov25qcgcKMNczJIFH3cj2wSTUn2FbClkBFX PmRjgNaBHd43JQZtZbqYaEQw6FkQpcM7tF/5YxABa1SdwNc649vjTmKlxiocUMiL 2cKqEOBpQ4OEAByvb66VkS1lCMVmreB52NciLSCu5LvrqGAoFPXwWXricwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPDE9Phb47nAQCef+MzWsFMDyG4qMB8GA1UdIwQY MBaAFPIZODo+PxFqm8xHachRfNzkB2XHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGhrNE9qNF9FV3FiekVkcHlGRjgzT1FIWmNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS83Y2YwYjEtMjI5OC00NDg0LWJkODAt NmNjOWY2Y2JhYWM0LzEvOE1UMC1Gdmp1Y0JBSjVfNHpOYXdVd1BJYmlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS83Y2YwYjEtMjI5OC00NDg0LWJkODAtNmNjOWY2Y2JhYWM0 LzEvOGhrNE9qNF9FV3FiekVkcHlGRjgzT1FIWmNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCaDMA0G CSqGSIb3DQEBCwUAA4IBAQCj1zvUSwFiSxdDU1Rfy1PhNl41QdX4fPnFpWAgOCnX h7eO8ECqWucRl0w/Sx0EsrwHyTnYImVRfDSzl2FA/VAsI4nJAXBzdKpsZO5wXuDj prbmnerLCQIvVGxasDuxDD5JrgzTYia/WS0dIAzkA8j/IDcJmXtayP3TbgUzpPDr zOz0YZqk2/7p1gcqViRQW1B+0a8QrEIW9OJyRBtLxs5Pm+auQtfjZzn9VNJiiZ6v X5GqZ+n1TiKpLMo3Df/YeHNcQ1gfNXnlrlLqQ2hyhrahlm+rllslThafMIsyARvW P8BYV5mQq8BnCmCOR/eM1qCWUU5wZXHNilQW54K5jt3Z -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:43 2026 by rpki-client