This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/8p-xzHN8JAfETL-eHdKs1LrBttU.roa File: 8p-xzHN8JAfETL-eHdKs1LrBttU.roa (raw, json) Hash identifier: ZS9tFLaAf2uUJA0HUuxCsxMlG+fGwN15fW3OEhTI1U4= Subject key identifier: F2:9F:B1:CC:73:7C:24:07:C4:4C:BF:9E:1D:D2:AC:D4:BA:C1:B6:D5 Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Certificate serial: 019B78A368A594EEC14F13E4AD1DBF639D58 Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/8p-xzHN8JAfETL-eHdKs1LrBttU.roa Signing time: Thu 01 Jan 2026 08:18:53 +0000 ROA not before: Thu 01 Jan 2026 08:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20978 IP address blocks: 213.161.151.0/24 maxlen: 24 213.161.153.0/24 maxlen: 24 213.161.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:68:a5:94:ee:c1:4f:13:e4:ad:1d:bf:63:9d:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Validity Not Before: Jan 1 08:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f29fb1cc737c2407c44cbf9e1dd2acd4bac1b6d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f8:5b:82:69:ec:03:d9:08:85:a4:d8:74:7e: 25:75:5f:97:b7:33:9e:70:64:64:4c:37:4d:7f:49: cf:70:17:cb:85:b3:36:bf:de:c8:3c:02:0a:06:fe: 7b:c1:e9:29:15:54:58:d4:90:ae:07:ad:57:59:6d: 4a:64:87:9c:ed:13:73:43:68:5a:1e:3b:56:f6:08: 01:2d:5e:6c:5b:4e:13:1a:5b:89:e0:70:cd:df:d2: b0:cb:30:44:44:61:31:e3:7b:45:74:a6:10:44:e9: d1:df:89:66:5a:29:12:25:4f:21:18:d5:1b:29:fa: a3:37:2c:31:ce:ab:80:32:54:87:fc:62:ce:cd:72: c1:fd:3f:84:40:2b:c2:7d:5d:9f:db:f6:4b:17:a2: db:57:0f:70:a8:3d:3c:43:8c:77:1e:e4:d7:af:0c: 1f:3b:0d:1d:0c:5b:05:2c:d2:45:0f:ea:10:c4:db: f8:c5:8c:a9:1b:99:fd:fd:95:53:30:6f:3b:d5:00: 24:9a:9b:bc:de:22:b8:cc:b1:c5:f7:61:2d:7d:d7: af:b2:fb:39:f4:52:98:7d:d9:c6:fd:b2:b8:84:d5: f2:ec:14:89:f0:07:47:01:f0:50:99:54:e4:ba:3e: 9f:fc:ae:43:cf:c2:92:08:a5:0e:9a:7f:0c:8a:71: cb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:9F:B1:CC:73:7C:24:07:C4:4C:BF:9E:1D:D2:AC:D4:BA:C1:B6:D5 X509v3 Authority Key Identifier: keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/8p-xzHN8JAfETL-eHdKs1LrBttU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.161.151.0/24 213.161.153.0/24 213.161.157.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:e9:ef:cf:51:2b:4a:38:13:da:4f:ad:ee:a7:c7:6f:30:06: 9e:f6:3e:37:4d:b1:f3:f0:23:ad:90:c7:be:28:ad:e5:cd:5c: 4e:fe:38:ff:b0:0d:5a:77:b3:02:30:ae:a1:af:55:95:fe:96: 83:d6:07:27:cd:47:f8:ef:fc:f4:70:06:c0:a8:df:04:08:af: 3c:25:b1:89:e1:ea:79:54:f1:e2:e8:aa:44:8f:78:90:f4:c2: b0:3f:4a:5b:c8:25:db:e5:31:f6:aa:e1:9b:4d:cf:37:60:54: bc:53:8a:92:ba:c8:63:e9:5a:d1:50:8d:31:40:67:c8:d1:56: 17:8a:d7:ea:e3:3a:62:4f:b0:55:f6:1b:6c:1a:d8:1e:54:7c: 13:1a:ad:58:78:75:94:ff:48:be:18:29:37:3d:46:60:41:91: 67:3f:f0:23:ed:8e:c9:1a:c1:a1:59:7b:d2:98:ad:d0:85:96: 12:7a:97:cb:82:ac:03:1f:3d:5e:b8:05:ea:ab:78:78:c9:5c: bc:32:c1:87:38:e0:42:5e:bc:15:fa:07:e2:05:95:f7:32:7f: 5b:91:9d:11:ec:bd:86:76:64:ac:92:46:65:61:d7:e8:7c:f2: 06:0d:ba:c6:f9:8d:a6:07:3c:30:ca:81:c8:a0:23:5d:e4:2c: 31:ac:c8:4c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4o2illO7BTxPkrR2/Y51YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MTlmMmFkOTE1ODRiYWZmMDQ2NzQ0N2JhYzhmYjk3OGQx ZjlkZDMwHhcNMjYwMTAxMDgxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjlmYjFjYzczN2MyNDA3YzQ0Y2JmOWUxZGQyYWNkNGJhYzFiNmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfhbgmnsA9kIhaTYdH4ldV+XtzOe cGRkTDdNf0nPcBfLhbM2v97IPAIKBv57wekpFVRY1JCuB61XWW1KZIec7RNzQ2ha HjtW9ggBLV5sW04TGluJ4HDN39KwyzBERGEx43tFdKYQROnR34lmWikSJU8hGNUb KfqjNywxzquAMlSH/GLOzXLB/T+EQCvCfV2f2/ZLF6LbVw9wqD08Q4x3HuTXrwwf Ow0dDFsFLNJFD+oQxNv4xYypG5n9/ZVTMG871QAkmpu83iK4zLHF92Etfdevsvs5 9FKYfdnG/bK4hNXy7BSJ8AdHAfBQmVTkuj6f/K5Dz8KSCKUOmn8MinHLJwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPKfscxzfCQHxEy/nh3SrNS6wbbVMB8GA1UdIwQY MBaAFDkZ8q2RWEuv8EZ0R7rI+5eNH53TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUt MzJhYTY3MzFjMjkxLzEvOHAteHpITjhKQWZFVEwtZUhkS3MxTHJCdHRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUtMzJhYTY3MzFjMjkx LzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA1aGXAwQA 1aGZAwQA1aGdMA0GCSqGSIb3DQEBCwUAA4IBAQBf6e/PUStKOBPaT63up8dvMAae 9j43TbHz8COtkMe+KK3lzVxO/jj/sA1ad7MCMK6hr1WV/paD1gcnzUf47/z0cAbA qN8ECK88JbGJ4ep5VPHi6KpEj3iQ9MKwP0pbyCXb5TH2quGbTc83YFS8U4qSushj 6VrRUI0xQGfI0VYXitfq4zpiT7BV9htsGtgeVHwTGq1YeHWU/0i+GCk3PUZgQZFn P/Aj7Y7JGsGhWXvSmK3QhZYSepfLgqwDHz1euAXqq3h4yVy8MsGHOOBCXrwV+gfi BZX3Mn9bkZ0R7L2GdmSskkZlYdfofPIGDbrG+Y2mBzwwyoHIoCNd5CwxrMhM -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:36 2026 by rpki-client