This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/8cX-M49pBWOJbiMLfnFMmFRCTT4.roa File: 8cX-M49pBWOJbiMLfnFMmFRCTT4.roa (raw, json) Hash identifier: 04NbRh+Kh+3drJ883led5NTH9ePl4PXIGH9IxvgjHI4= Subject key identifier: F1:C5:FE:33:8F:69:05:63:89:6E:23:0B:7E:71:4C:98:54:42:4D:3E Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7 Certificate serial: 019B797EBD308CDF4BB4D1044509F736B025 Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/8cX-M49pBWOJbiMLfnFMmFRCTT4.roa Signing time: Thu 01 Jan 2026 12:18:27 +0000 ROA not before: Thu 01 Jan 2026 12:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29165 IP address blocks: 62.56.252.0/22 maxlen: 24 81.199.116.0/23 maxlen: 24 81.199.120.0/22 maxlen: 24 81.199.250.0/23 maxlen: 24 81.199.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:bd:30:8c:df:4b:b4:d1:04:45:09:f7:36:b0:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7 Validity Not Before: Jan 1 12:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1c5fe338f690563896e230b7e714c9854424d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6e:c4:6b:16:46:00:17:ce:21:19:98:7f:69: 20:32:56:22:01:4d:11:53:f0:fe:a8:00:83:db:bd: cc:c2:db:d5:f1:df:82:71:aa:85:0e:25:dd:35:13: f1:02:43:09:b3:aa:db:4c:ff:d7:39:b6:cc:a7:c7: dd:be:32:83:b6:6d:7c:02:da:25:18:c3:8f:78:06: 21:53:6c:c4:1c:3d:e0:26:45:47:39:ab:01:33:dc: 39:9f:e8:47:44:6e:24:00:11:21:60:62:31:4d:69: c7:af:b2:d9:69:73:2d:06:01:b9:f5:38:e1:9a:24: ce:a1:37:e2:8a:cd:f9:26:ba:27:29:c3:5c:e3:e4: 24:df:5d:61:6c:90:1b:13:d4:83:66:ce:8e:df:0a: ec:e9:ec:a9:c2:9e:8d:4b:1a:5b:d6:9c:98:29:b8: 48:d2:7f:d2:2f:4c:e2:ac:80:74:55:00:f9:c1:ed: 52:ed:65:35:1f:34:d3:ae:2f:c3:60:55:a3:ce:c5: 86:17:3b:90:f7:46:f7:43:19:04:39:86:8c:5a:7e: 06:b1:90:ab:64:fe:b9:bd:15:d5:bf:0b:9f:b1:de: f6:d6:f2:a3:3c:2e:8d:19:b2:87:aa:24:58:ea:b7: 2a:b6:cd:11:af:a3:42:9e:ed:c9:f0:0a:19:ce:0e: e7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C5:FE:33:8F:69:05:63:89:6E:23:0B:7E:71:4C:98:54:42:4D:3E X509v3 Authority Key Identifier: keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/8cX-M49pBWOJbiMLfnFMmFRCTT4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.56.252.0/22 81.199.116.0/23 81.199.120.0/22 81.199.250.0-81.199.255.255 Signature Algorithm: sha256WithRSAEncryption 31:0f:ce:cd:69:a8:43:28:81:a8:f0:8b:bf:2f:59:05:a8:55: 57:d7:9f:b0:b1:21:52:77:79:03:da:70:94:7a:d9:05:4f:95: 43:23:87:40:57:e5:e0:b9:86:02:f1:1b:ea:08:f9:a6:11:e1: 4a:4c:ca:8a:c8:52:51:f6:25:a5:26:4d:f1:58:2d:50:5d:37: 7d:0d:47:62:bb:35:2e:34:7f:42:6c:c8:e7:9a:34:1b:32:6a: c3:47:80:d2:f7:5f:f6:8b:25:0a:4a:9f:eb:a6:62:50:29:4c: f5:aa:60:52:64:04:bb:3b:c0:15:5d:7b:bc:df:be:7c:96:a4: eb:70:4e:e4:fd:31:b0:d4:32:3e:10:31:70:2d:d2:e2:51:c9: 85:5d:81:e8:c2:54:95:9f:9e:dc:8b:f6:99:4a:f3:2b:2d:21: 14:97:81:df:d7:b5:d5:27:c2:1f:7f:66:fb:19:35:d5:92:50: 6b:06:dd:58:ff:38:2a:8b:bd:44:28:a7:df:0f:1b:1b:e4:d6: 61:4f:f6:06:b2:3c:e9:60:29:5f:ef:ee:ba:ad:2d:c7:17:c5: 27:b2:5b:c9:82:15:0c:43:a5:93:af:d6:4a:9d:d9:b9:2c:29: 1b:9b:b1:78:a8:ad:96:b8:74:36:0b:40:7f:f0:a3:4e:c2:d2: 3e:cc:74:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5fr0wjN9LtNEERQn3NrAlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMTgyYmVlOWFhMDEwYzFmZmQyZDgwNGY2YWE3YjE0YmRk YjkxZjcwHhcNMjYwMTAxMTIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWM1ZmUzMzhmNjkwNTYzODk2ZTIzMGI3ZTcxNGM5ODU0NDI0ZDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt27EaxZGABfOIRmYf2kgMlYiAU0R U/D+qACD273MwtvV8d+CcaqFDiXdNRPxAkMJs6rbTP/XObbMp8fdvjKDtm18Atol GMOPeAYhU2zEHD3gJkVHOasBM9w5n+hHRG4kABEhYGIxTWnHr7LZaXMtBgG59Tjh miTOoTfiis35JronKcNc4+Qk311hbJAbE9SDZs6O3wrs6eypwp6NSxpb1pyYKbhI 0n/SL0zirIB0VQD5we1S7WU1HzTTri/DYFWjzsWGFzuQ90b3QxkEOYaMWn4GsZCr ZP65vRXVvwufsd721vKjPC6NGbKHqiRY6rcqts0Rr6NCnu3J8AoZzg7nqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHF/jOPaQVjiW4jC35xTJhUQk0+MB8GA1UdIwQY MBaAFFAYK+6aoBDB/9LYBPaqexS925H3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0Zjkt MTlkMWJiNjFkOWE3LzEvOGNYLU00OXBCV09KYmlNTGZuRk1tRlJDVFQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0ZjktMTlkMWJiNjFkOWE3 LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAlBAIAATAfAwQCPjj8AwQB Ucd0AwQCUcd4MAsDBAFRx/oDAwNRwDANBgkqhkiG9w0BAQsFAAOCAQEAMQ/OzWmo QyiBqPCLvy9ZBahVV9efsLEhUnd5A9pwlHrZBU+VQyOHQFfl4LmGAvEb6gj5phHh SkzKishSUfYlpSZN8VgtUF03fQ1HYrs1LjR/QmzI55o0GzJqw0eA0vdf9oslCkqf 66ZiUClM9apgUmQEuzvAFV17vN++fJak63BO5P0xsNQyPhAxcC3S4lHJhV2B6MJU lZ+e3Iv2mUrzKy0hFJeB39e11SfCH39m+xk11ZJQawbdWP84Kou9RCin3w8bG+TW YU/2BrI86WApX+/uuq0txxfFJ7JbyYIVDEOlk6/WSp3ZuSwpG5uxeKitlrh0NgtA f/CjTsLSPsx0ww== -----END CERTIFICATE-----Generated at Sun Jan 25 16:55:19 2026 by rpki-client