This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/8PB8h-ISSr84nGZyoSJpxK03xZI.roa File: 8PB8h-ISSr84nGZyoSJpxK03xZI.roa (raw, json) Hash identifier: Cew3GhEYpI4Z/2ax+94ohovUkb4oKZoSCX7ODBgVNmM= Subject key identifier: F0:F0:7C:87:E2:12:4A:BF:38:9C:66:72:A1:22:69:C4:AD:37:C5:92 Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b Certificate serial: 019B791052B4FA4859434B5934E5D76A6A63 Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/8PB8h-ISSr84nGZyoSJpxK03xZI.roa Signing time: Thu 01 Jan 2026 10:17:51 +0000 ROA not before: Thu 01 Jan 2026 10:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203206 IP address blocks: 213.169.150.0/24 maxlen: 24 213.169.152.0/24 maxlen: 24 213.169.153.0/24 maxlen: 24 213.169.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:52:b4:fa:48:59:43:4b:59:34:e5:d7:6a:6a:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b Validity Not Before: Jan 1 10:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0f07c87e2124abf389c6672a12269c4ad37c592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:24:18:c0:d9:c7:a8:9a:8b:ff:7f:df:47:a0: 31:bd:9a:d3:5a:92:64:59:6a:8d:a5:02:bb:f7:35: fd:a2:4f:b8:35:60:79:70:ae:3f:ad:c7:65:74:d9: 15:03:34:9d:41:de:b6:a7:e1:93:19:40:4e:6f:3a: 68:a1:59:ab:95:51:c7:cb:fb:5c:83:e8:17:47:e4: 9e:ae:e8:d0:3d:19:b9:40:e8:30:54:62:24:1b:54: 27:14:59:8a:32:36:d2:05:de:9b:c4:ba:26:11:5a: 47:27:84:5f:bf:f3:ca:0f:74:f5:20:75:84:d4:7c: b4:ad:32:f3:83:6c:38:c3:0a:30:1f:4e:98:8e:c4: fb:1d:5b:6a:15:73:cc:dc:8e:89:db:25:10:74:8d: fc:b7:cc:07:a6:48:57:da:2d:bb:37:bc:ea:6b:f3: 68:c7:24:9f:d7:89:a3:00:56:e9:2f:f4:5f:fc:b9: 3c:4a:4b:ab:42:0a:c0:ec:7a:83:a3:bd:2e:b1:24: b9:83:86:77:4f:7c:8f:1f:cf:d6:d8:20:7b:a9:1f: bc:42:19:8f:e3:82:41:b1:ec:18:02:5e:cc:7f:b5: 2e:3e:4c:77:3f:23:a7:67:b8:5b:9b:57:fd:73:ca: e0:e7:3c:82:17:31:c8:f8:5f:6b:ae:65:1f:3e:99: 11:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F0:7C:87:E2:12:4A:BF:38:9C:66:72:A1:22:69:C4:AD:37:C5:92 X509v3 Authority Key Identifier: keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/8PB8h-ISSr84nGZyoSJpxK03xZI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.169.150.0/24 213.169.152.0/23 213.169.155.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:3b:f1:46:29:4f:ac:c3:8f:aa:db:8f:41:b1:d3:b4:8c:d0: 7b:de:dd:19:93:59:fa:37:86:a0:a5:e3:d6:9d:0b:4c:c2:ba: 0c:2e:8e:2b:f1:10:36:51:fb:1e:76:d8:17:1b:ae:a6:2b:27: c3:63:58:b3:b5:a1:4a:f0:3f:c1:7d:d5:46:e9:bc:3a:31:a5: 45:d8:03:bc:7d:9c:9a:88:5b:03:1b:5f:e2:2d:e7:8b:61:86: a1:6b:fc:52:99:5e:b0:48:4f:aa:4b:bd:5c:ce:69:e4:f1:4c: e6:68:b0:7b:e0:2a:91:b6:f5:18:4d:c2:aa:a8:1b:70:16:e7: bc:63:fe:6f:6b:1f:93:3e:d7:19:23:eb:a3:e7:7d:cb:63:97: c7:dd:c4:cc:3b:3d:bc:d6:d8:a0:dc:ac:df:9c:dd:b5:d2:36: 03:3c:31:b2:7c:24:64:c6:d8:db:c3:1f:1a:9f:0a:e3:b0:d9: 15:38:57:de:0c:58:7d:9a:c6:05:1a:cc:29:7a:1d:27:61:62: 39:5c:6e:b2:81:6a:87:3f:46:52:a9:52:f1:5d:68:69:c8:4c: 54:27:03:70:dc:7a:9a:4d:78:94:5a:51:45:e7:58:a4:69:84: f2:f8:4b:7a:5a:b3:e7:3a:91:05:a9:81:5b:24:83:f6:40:89: 9a:fa:d6:8c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EFK0+khZQ0tZNOXXampjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNDQyOTdlOTI3MWM2ZWRmMDY0OTE1ZjYxODBhZTEyNjkw ZGRhOGIwHhcNMjYwMTAxMTAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGYwN2M4N2UyMTI0YWJmMzg5YzY2NzJhMTIyNjljNGFkMzdjNTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiQYwNnHqJqL/3/fR6AxvZrTWpJk WWqNpQK79zX9ok+4NWB5cK4/rcdldNkVAzSdQd62p+GTGUBObzpooVmrlVHHy/tc g+gXR+SerujQPRm5QOgwVGIkG1QnFFmKMjbSBd6bxLomEVpHJ4Rfv/PKD3T1IHWE 1Hy0rTLzg2w4wwowH06YjsT7HVtqFXPM3I6J2yUQdI38t8wHpkhX2i27N7zqa/No xySf14mjAFbpL/Rf/Lk8SkurQgrA7HqDo70usSS5g4Z3T3yPH8/W2CB7qR+8QhmP 44JBsewYAl7Mf7UuPkx3PyOnZ7hbm1f9c8rg5zyCFzHI+F9rrmUfPpkREwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPDwfIfiEkq/OJxmcqEiacStN8WSMB8GA1UdIwQY MBaAFPxEKX6Sccbt8GSRX2GArhJpDdqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUt YWUwN2YzMmU0MTAyLzEvOFBCOGgtSVNTcjg0bkdaeW9TSnB4SzAzeFpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUtYWUwN2YzMmU0MTAy LzEvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA1amWAwQB 1amYAwQA1ambMA0GCSqGSIb3DQEBCwUAA4IBAQBOO/FGKU+sw4+q249BsdO0jNB7 3t0Zk1n6N4agpePWnQtMwroMLo4r8RA2UfsedtgXG66mKyfDY1iztaFK8D/BfdVG 6bw6MaVF2AO8fZyaiFsDG1/iLeeLYYaha/xSmV6wSE+qS71czmnk8UzmaLB74CqR tvUYTcKqqBtwFue8Y/5vax+TPtcZI+uj533LY5fH3cTMOz281tig3KzfnN210jYD PDGyfCRkxtjbwx8anwrjsNkVOFfeDFh9msYFGswpeh0nYWI5XG6ygWqHP0ZSqVLx XWhpyExUJwNw3HqaTXiUWlFF51ikaYTy+Et6WrPnOpEFqYFbJIP2QIma+taM -----END CERTIFICATE-----Generated at Mon Jan 26 00:16:07 2026 by rpki-client