This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/8SEsdKMq767CnaRYG-1hJ5v6Hic.roa File: 8SEsdKMq767CnaRYG-1hJ5v6Hic.roa (raw, json) Hash identifier: h/RdezdmLSdHmsoFs8q7JJ7Hnulds2LoEiNuAXGhUZg= Subject key identifier: F1:21:2C:74:A3:2A:EF:AE:C2:9D:A4:58:1B:ED:61:27:9B:FA:1E:27 Certificate issuer: /CN=0f9a2d2374aa6ac714b5f8a6eddb80dc69679cc6 Certificate serial: 019B7A5A8F0067A6D6486B9D21D5883FDDC2 Authority key identifier: 0F:9A:2D:23:74:AA:6A:C7:14:B5:F8:A6:ED:DB:80:DC:69:67:9C:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5otI3SqascUtfim7duA3GlnnMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/8SEsdKMq767CnaRYG-1hJ5v6Hic.roa Signing time: Thu 01 Jan 2026 16:18:33 +0000 ROA not before: Thu 01 Jan 2026 16:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57117 IP address blocks: 91.201.197.0/24 maxlen: 24 185.202.105.0/24 maxlen: 24 188.95.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.mft rsync://rpki.ripe.net/repository/DEFAULT/D5otI3SqascUtfim7duA3GlnnMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:8f:00:67:a6:d6:48:6b:9d:21:d5:88:3f:dd:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9a2d2374aa6ac714b5f8a6eddb80dc69679cc6 Validity Not Before: Jan 1 16:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1212c74a32aefaec29da4581bed61279bfa1e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:77:be:25:03:68:72:9f:c5:f3:c4:56:80:be: 76:d7:ae:f4:c7:dd:e8:27:f5:97:c4:6c:88:23:32: a4:f0:dc:e8:71:87:47:97:ec:f6:d1:79:44:35:d7: 28:0d:0d:ac:b6:22:52:67:58:4b:cc:fa:3a:d1:60: 92:1d:2b:9b:e5:a5:36:10:58:c6:07:e1:e6:8e:b6: 23:46:e9:1b:50:c2:29:4c:23:fb:e8:43:c7:69:2d: 68:83:2c:25:b5:0c:85:8d:72:b3:11:ff:e1:e7:5b: d0:ef:cd:1f:4c:35:d4:bd:7c:10:5f:75:1e:89:0a: 1e:56:ec:dc:0c:cb:8b:74:44:e8:4e:14:3e:86:53: dc:3c:89:f4:66:ec:1b:ee:27:59:be:8c:0c:d0:0b: e4:c4:58:36:4e:18:e8:b1:42:57:85:a3:9d:d1:31: 6e:74:5a:b5:ea:6f:73:27:d9:4a:d1:13:37:a9:98: 57:7b:1a:de:38:d0:3d:55:aa:07:84:f0:33:ce:dd: 5a:2c:29:30:aa:9a:0a:d6:70:36:f1:1a:45:e4:21: 34:7c:53:82:a8:74:c5:e5:f9:9e:9c:cb:11:f5:c7: b6:2b:9a:11:cf:d6:cf:28:0d:dd:b3:0e:7f:ea:e0: 1a:37:f3:15:7c:e8:54:2c:48:fc:49:bb:41:45:35: 37:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:21:2C:74:A3:2A:EF:AE:C2:9D:A4:58:1B:ED:61:27:9B:FA:1E:27 X509v3 Authority Key Identifier: keyid:0F:9A:2D:23:74:AA:6A:C7:14:B5:F8:A6:ED:DB:80:DC:69:67:9C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5otI3SqascUtfim7duA3GlnnMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/8SEsdKMq767CnaRYG-1hJ5v6Hic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.201.197.0/24 185.202.105.0/24 188.95.64.0/24 Signature Algorithm: sha256WithRSAEncryption 86:22:4b:c3:b5:98:cb:80:a0:fd:24:2b:a8:de:b2:58:85:0e: 92:a8:85:1a:a1:c1:2f:1d:38:80:18:7b:52:09:6c:79:6d:31: 9f:8d:1f:0c:ac:e7:38:e3:0b:dc:04:5e:62:fc:82:9d:17:5d: ee:32:32:db:9c:9d:72:0e:b9:3a:14:aa:6f:1e:e8:48:c4:ab: ac:f4:fe:d3:da:9a:43:53:f1:50:eb:02:85:9d:b7:52:81:48: 2e:e7:86:bc:75:37:d0:55:5d:74:1d:79:00:85:54:20:70:a8: 8b:b5:73:f1:91:05:d6:2b:56:81:4e:91:8f:59:ba:d4:2f:19: d8:15:f5:01:4e:f9:31:64:69:b5:d0:a3:ae:81:a0:27:5d:b6: d8:39:90:e7:d6:7d:06:7e:ac:ec:7f:dd:56:d9:00:af:b6:6b: e0:4b:e2:b4:12:c3:26:58:68:54:89:65:8b:c4:96:b3:06:05: 56:dc:1a:b5:bc:6f:d0:f1:e3:07:04:82:22:29:70:61:bc:ae: 17:53:79:e2:d0:83:23:76:17:c2:37:8f:50:39:65:64:c3:36: 2c:0f:bc:43:a1:7b:e5:fb:6b:67:5c:6f:5d:0b:0c:7d:10:d1: 0a:83:ce:9d:ee:00:d7:44:64:5a:39:ca:72:a2:42:b1:02:11: 97:43:09:c5 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6Wo8AZ6bWSGudIdWIP93CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOWEyZDIzNzRhYTZhYzcxNGI1ZjhhNmVkZGI4MGRjNjk2 NzljYzYwHhcNMjYwMTAxMTYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTIxMmM3NGEzMmFlZmFlYzI5ZGE0NTgxYmVkNjEyNzliZmExZTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApne+JQNocp/F88RWgL521670x93o J/WXxGyIIzKk8NzocYdHl+z20XlENdcoDQ2stiJSZ1hLzPo60WCSHSub5aU2EFjG B+HmjrYjRukbUMIpTCP76EPHaS1ogywltQyFjXKzEf/h51vQ780fTDXUvXwQX3Ue iQoeVuzcDMuLdEToThQ+hlPcPIn0Zuwb7idZvowM0AvkxFg2ThjosUJXhaOd0TFu dFq16m9zJ9lK0RM3qZhXexreONA9VaoHhPAzzt1aLCkwqpoK1nA28RpF5CE0fFOC qHTF5fmenMsR9ce2K5oRz9bPKA3dsw5/6uAaN/MVfOhULEj8SbtBRTU37QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPEhLHSjKu+uwp2kWBvtYSeb+h4nMB8GA1UdIwQY MBaAFA+aLSN0qmrHFLX4pu3bgNxpZ5zGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDVvdEkzU3Fhc2NVdGZpbTdkdUEzR2xubk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wMDI0OGMtMzc5MS00NjI5LWE2YzYt NmQ5NzE5OTJjMzQ5LzEvOFNFc2RLTXE3NjdDbmFSWUctMWhKNXY2SGljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8wMDI0OGMtMzc5MS00NjI5LWE2YzYtNmQ5NzE5OTJjMzQ5 LzEvRDVvdEkzU3Fhc2NVdGZpbTdkdUEzR2xubk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW8nFAwQA ucppAwQAvF9AMA0GCSqGSIb3DQEBCwUAA4IBAQCGIkvDtZjLgKD9JCuo3rJYhQ6S qIUaocEvHTiAGHtSCWx5bTGfjR8MrOc44wvcBF5i/IKdF13uMjLbnJ1yDrk6FKpv HuhIxKus9P7T2ppDU/FQ6wKFnbdSgUgu54a8dTfQVV10HXkAhVQgcKiLtXPxkQXW K1aBTpGPWbrULxnYFfUBTvkxZGm10KOugaAnXbbYOZDn1n0Gfqzsf91W2QCvtmvg S+K0EsMmWGhUiWWLxJazBgVW3Bq1vG/Q8eMHBIIiKXBhvK4XU3ni0IMjdhfCN49Q OWVkwzYsD7xDoXvl+2tnXG9dCwx9ENEKg86d7gDXRGRaOcpyokKxAhGXQwnF -----END CERTIFICATE-----Generated at Mon Jan 26 00:15:32 2026 by rpki-client