This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/pR8icRPbtmxZyLYy7ClhNlyoP3I.roa File: pR8icRPbtmxZyLYy7ClhNlyoP3I.roa (raw, json) Hash identifier: hJET2JInI9K0Hd2BzAqq/nSPxKB057Gd1PzyTDZKZpU= Subject key identifier: A5:1F:22:71:13:DB:B6:6C:59:C8:B6:32:EC:29:61:36:5C:A8:3F:72 Certificate issuer: /CN=2eeec5231d212b310579d78fc41479ca6ec2aa07 Certificate serial: 019B7A5AB60D326FEB7A0B439EC8A9F7BD08 Authority key identifier: 2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/pR8icRPbtmxZyLYy7ClhNlyoP3I.roa Signing time: Thu 01 Jan 2026 16:18:43 +0000 ROA not before: Thu 01 Jan 2026 16:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61237 IP address blocks: 77.247.239.0/24 maxlen: 24 92.241.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b6:0d:32:6f:eb:7a:0b:43:9e:c8:a9:f7:bd:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2eeec5231d212b310579d78fc41479ca6ec2aa07 Validity Not Before: Jan 1 16:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a51f227113dbb66c59c8b632ec2961365ca83f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4c:e0:3c:cf:23:5f:29:dd:1f:ce:e7:62:8d: 91:ac:e3:df:86:77:42:50:5e:26:cf:78:d3:1f:3b: 28:77:f9:71:fa:15:24:f5:24:68:c1:fb:db:be:75: d0:b5:1f:2c:45:96:64:40:ba:1c:da:c2:9f:1e:f2: 54:52:23:4d:c0:9a:a2:d4:56:f4:d1:c0:9c:a1:ba: b2:f3:36:e8:f7:90:62:bc:be:b6:0a:01:d3:51:8f: db:8c:05:5c:38:87:89:86:f0:77:cd:63:2a:d3:3c: ba:98:6e:c3:06:1a:57:03:5c:a9:80:01:45:ec:a8: 18:95:93:43:fb:05:58:10:91:6d:4f:cc:a8:e2:a1: 79:2b:5a:d4:78:70:8f:e4:57:52:79:66:c7:0b:37: 37:32:ed:7a:19:12:eb:d6:c4:0d:8b:10:4c:a4:7e: 1d:87:1d:b5:4c:11:63:8f:e1:43:56:54:8d:af:b7: e1:2b:9a:4a:24:8f:97:28:06:88:08:8d:e7:3e:18: 4d:95:57:c2:d2:f2:bf:88:22:6d:94:bc:2c:c3:5b: 90:51:83:6d:22:62:4b:70:2c:47:06:cb:89:a5:e0: c2:ac:81:3c:13:c3:2f:dc:48:21:f6:67:7c:e5:f8: 3a:93:b8:fe:e3:10:17:58:6d:62:bc:34:4b:4b:eb: 5e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:1F:22:71:13:DB:B6:6C:59:C8:B6:32:EC:29:61:36:5C:A8:3F:72 X509v3 Authority Key Identifier: keyid:2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/pR8icRPbtmxZyLYy7ClhNlyoP3I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.247.239.0/24 92.241.21.0/24 Signature Algorithm: sha256WithRSAEncryption 63:e2:11:db:2d:2d:ac:76:67:04:61:ab:ee:49:8b:16:a8:98: 6b:f8:c7:5b:f5:bc:38:6c:61:63:33:40:2f:8f:f5:9d:ff:9e: 55:a4:25:90:fa:a4:a1:f4:52:b6:9f:c8:7b:63:35:a9:80:c0: e0:a4:64:42:45:ea:f3:2c:86:df:70:d7:d2:c8:07:fd:84:e2: 76:c7:af:6f:f6:c5:4a:19:21:79:b6:29:3a:c8:9c:cc:59:4b: ec:73:4c:d0:ed:d0:cd:d7:2d:33:4a:e8:d4:13:f0:e8:e4:ab: 63:4c:cf:48:32:1c:4e:4f:92:7e:f6:6e:14:7a:c1:9f:2f:7d: 89:41:9f:e9:07:60:c8:9e:46:63:f1:d9:4a:7c:26:e9:df:74: 75:e3:3c:16:26:9e:31:c4:02:66:1f:1d:6d:52:47:c7:e5:dc: b5:0e:e2:05:8a:2f:7d:36:08:4b:90:e6:be:5b:3f:c9:76:b2: c6:02:e4:ce:fb:a1:d5:22:6e:b7:1d:49:d3:ad:89:f3:0d:66: df:5b:31:0c:46:c0:c4:02:5f:3c:83:2d:47:36:38:e5:18:30: c7:2e:f5:4c:90:3e:30:1a:df:db:6d:74:fa:7e:eb:c0:9a:74: 1c:b7:6d:c2:e9:ae:78:d4:3f:8e:6e:97:ab:77:f5:23:39:bd: 61:e9:cf:f0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WrYNMm/regtDnsip970IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZWVjNTIzMWQyMTJiMzEwNTc5ZDc4ZmM0MTQ3OWNhNmVj MmFhMDcwHhcNMjYwMTAxMTYxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTFmMjI3MTEzZGJiNjZjNTljOGI2MzJlYzI5NjEzNjVjYTgzZjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0zgPM8jXyndH87nYo2RrOPfhndC UF4mz3jTHzsod/lx+hUk9SRowfvbvnXQtR8sRZZkQLoc2sKfHvJUUiNNwJqi1Fb0 0cCcobqy8zbo95BivL62CgHTUY/bjAVcOIeJhvB3zWMq0zy6mG7DBhpXA1ypgAFF 7KgYlZND+wVYEJFtT8yo4qF5K1rUeHCP5FdSeWbHCzc3Mu16GRLr1sQNixBMpH4d hx21TBFjj+FDVlSNr7fhK5pKJI+XKAaICI3nPhhNlVfC0vK/iCJtlLwsw1uQUYNt ImJLcCxHBsuJpeDCrIE8E8Mv3Egh9md85fg6k7j+4xAXWG1ivDRLS+teZwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKUfInET27ZsWci2MuwpYTZcqD9yMB8GA1UdIwQY MBaAFC7uxSMdISsxBXnXj8QUecpuwqoHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHU3Rkl4MGhLekVGZWRlUHhCUjV5bTdDcWdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84Yjg1NmEtMzhhZS00Y2ZiLTgxZDIt MjcxYTk1NzZlYWU3LzEvcFI4aWNSUGJ0bXhaeUxZeTdDbGhObHlvUDNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84Yjg1NmEtMzhhZS00Y2ZiLTgxZDItMjcxYTk1NzZlYWU3 LzEvTHU3Rkl4MGhLekVGZWRlUHhCUjV5bTdDcWdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATffvAwQA XPEVMA0GCSqGSIb3DQEBCwUAA4IBAQBj4hHbLS2sdmcEYavuSYsWqJhr+Mdb9bw4 bGFjM0Avj/Wd/55VpCWQ+qSh9FK2n8h7YzWpgMDgpGRCRerzLIbfcNfSyAf9hOJ2 x69v9sVKGSF5tik6yJzMWUvsc0zQ7dDN1y0zSujUE/Do5KtjTM9IMhxOT5J+9m4U esGfL32JQZ/pB2DInkZj8dlKfCbp33R14zwWJp4xxAJmHx1tUkfH5dy1DuIFii99 NghLkOa+Wz/JdrLGAuTO+6HVIm63HUnTrYnzDWbfWzEMRsDEAl88gy1HNjjlGDDH LvVMkD4wGt/bbXT6fuvAmnQct23C6a541D+Obperd/UjOb1h6c/w -----END CERTIFICATE-----Generated at Sun Jan 25 21:25:59 2026 by rpki-client