This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/j8rGil1Q99cXiy4wHBKzzsKv93s.roa File: j8rGil1Q99cXiy4wHBKzzsKv93s.roa (raw, json) Hash identifier: U9Hz8djx34h6Nab+qY2wHquJzqc1/9nIwuGkR5Yv/u0= Subject key identifier: 8F:CA:C6:8A:5D:50:F7:D7:17:8B:2E:30:1C:12:B3:CE:C2:AF:F7:7B Certificate issuer: /CN=1662cfd26eccf289757399cc99c17d1cb4357535 Certificate serial: 019B7AC7DABEB178B5CCBE54098EB749C0DC Authority key identifier: 16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/j8rGil1Q99cXiy4wHBKzzsKv93s.roa Signing time: Thu 01 Jan 2026 18:17:56 +0000 ROA not before: Thu 01 Jan 2026 18:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198818 IP address blocks: 178.132.64.0/22 maxlen: 22 178.132.70.0/23 maxlen: 23 178.132.71.0/24 maxlen: 24 2a03:2380::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:da:be:b1:78:b5:cc:be:54:09:8e:b7:49:c0:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1662cfd26eccf289757399cc99c17d1cb4357535 Validity Not Before: Jan 1 18:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8fcac68a5d50f7d7178b2e301c12b3cec2aff77b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4d:ea:5b:f9:73:e9:0e:39:b6:55:1c:dc:4e: 97:5d:db:25:6f:f0:ec:0c:b0:2b:c7:31:93:c7:1a: 81:ae:60:e5:06:08:ad:f7:bb:39:43:d2:22:ef:ae: 5f:de:90:7c:98:67:d4:46:74:c3:34:ff:f9:e1:a5: 63:e2:dc:30:1d:a7:85:09:58:18:b3:82:88:62:f4: dd:a3:e2:a1:1b:4f:b8:d6:86:3d:b3:d9:db:39:bf: f3:db:43:9b:c9:ea:27:17:91:f3:de:0c:f1:42:5a: 5b:62:6e:ea:51:5d:6c:0d:14:8a:bf:f0:e6:15:1b: b4:69:a6:16:6c:be:c5:e5:0e:7a:c0:5f:46:5a:28: 74:5d:d6:10:d8:ae:71:c0:97:e6:e1:f7:57:49:34: 7f:80:df:0b:03:c7:ca:6a:5e:d5:1e:a6:92:45:5f: 6d:5d:8b:6b:40:1e:aa:de:f6:45:84:1b:bb:51:6c: 71:ed:a3:8c:4b:b5:05:36:37:c3:e0:a8:f2:40:0e: e9:a6:3b:9b:68:f9:50:e4:ef:16:ed:04:7b:ab:35: 95:92:c6:a7:06:54:2c:8e:ce:e8:cc:fa:3b:d7:6a: 91:6d:e3:d1:b9:55:41:ea:54:62:3a:af:53:39:21: 8b:d9:60:d7:b0:00:68:ee:7c:38:2f:a3:29:8d:5e: d5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:CA:C6:8A:5D:50:F7:D7:17:8B:2E:30:1C:12:B3:CE:C2:AF:F7:7B X509v3 Authority Key Identifier: keyid:16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/j8rGil1Q99cXiy4wHBKzzsKv93s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.132.64.0/22 178.132.70.0/23 IPv6: 2a03:2380::/32 Signature Algorithm: sha256WithRSAEncryption 92:21:f6:30:6e:74:42:e6:bb:42:79:69:0f:db:5f:d3:e9:64: cd:e6:63:c1:2d:f5:2f:37:81:1f:da:a4:ef:64:2c:35:dd:70: ae:ea:3f:de:9c:1b:14:e5:aa:e6:bf:bc:46:58:d7:de:b5:57: 2d:c0:db:58:2d:57:0b:8e:5d:70:6e:cd:43:0e:85:1b:ba:4c: 0a:c6:da:ab:76:8e:84:5c:f2:aa:a8:8b:92:6f:13:01:4a:72: fe:8c:16:37:75:1b:db:34:fb:dc:f7:04:8c:33:4a:aa:e5:9d: 16:10:73:b2:28:6d:f8:36:30:ef:f7:a7:c2:db:ff:71:eb:de: 11:bd:58:9b:f2:c0:e6:9a:a8:60:e7:c7:32:10:10:95:f0:e4: 29:c8:d5:57:c6:e2:34:de:ce:f4:f9:85:7c:ea:7e:29:83:59: 3c:30:c7:4d:02:3b:af:8a:46:10:d9:1f:ae:6d:d2:d2:c4:91: cf:eb:6d:8d:4e:e1:82:9c:f4:32:c2:60:87:26:ce:4c:9c:5e: 99:85:33:83:3b:1b:46:07:40:24:ee:05:8e:25:16:6c:39:54: 77:ea:57:7a:38:82:a1:d7:3e:16:61:bb:a1:90:57:08:f2:e4: 62:c7:cd:9b:76:e1:f6:e1:f7:f9:17:cd:d7:d5:2b:21:0b:42: 49:ae:e2:42 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6x9q+sXi1zL5UCY63ScDcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NjJjZmQyNmVjY2YyODk3NTczOTljYzk5YzE3ZDFjYjQz NTc1MzUwHhcNMjYwMTAxMTgxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmNhYzY4YTVkNTBmN2Q3MTc4YjJlMzAxYzEyYjNjZWMyYWZmNzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU3qW/lz6Q45tlUc3E6XXdslb/Ds DLArxzGTxxqBrmDlBgit97s5Q9Ii765f3pB8mGfURnTDNP/54aVj4twwHaeFCVgY s4KIYvTdo+KhG0+41oY9s9nbOb/z20ObyeonF5Hz3gzxQlpbYm7qUV1sDRSKv/Dm FRu0aaYWbL7F5Q56wF9GWih0XdYQ2K5xwJfm4fdXSTR/gN8LA8fKal7VHqaSRV9t XYtrQB6q3vZFhBu7UWxx7aOMS7UFNjfD4KjyQA7ppjubaPlQ5O8W7QR7qzWVksan BlQsjs7ozPo712qRbePRuVVB6lRiOq9TOSGL2WDXsABo7nw4L6MpjV7VMwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFI/KxopdUPfXF4suMBwSs87Cr/d7MB8GA1UdIwQY MBaAFBZiz9JuzPKJdXOZzJnBfRy0NXU1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1MUDBtN004b2wxYzVuTW1jRjlITFExZFRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81Yjk4NzgtMjA4MC00MzU0LTk1OTIt YjcyMzE5NDFmYzNhLzEvajhyR2lsMVE5OWNYaXk0d0hCS3p6c0t2OTNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My81Yjk4NzgtMjA4MC00MzU0LTk1OTItYjcyMzE5NDFmYzNh LzEvRm1MUDBtN004b2wxYzVuTW1jRjlITFExZFRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCsoRAAwQB soRGMA0EAgACMAcDBQAqAyOAMA0GCSqGSIb3DQEBCwUAA4IBAQCSIfYwbnRC5rtC eWkP21/T6WTN5mPBLfUvN4Ef2qTvZCw13XCu6j/enBsU5armv7xGWNfetVctwNtY LVcLjl1wbs1DDoUbukwKxtqrdo6EXPKqqIuSbxMBSnL+jBY3dRvbNPvc9wSMM0qq 5Z0WEHOyKG34NjDv96fC2/9x694RvVib8sDmmqhg58cyEBCV8OQpyNVXxuI03s70 +YV86n4pg1k8MMdNAjuvikYQ2R+ubdLSxJHP622NTuGCnPQywmCHJs5MnF6ZhTOD OxtGB0Ak7gWOJRZsOVR36ld6OIKh1z4WYbuhkFcI8uRix82bduH24ff5F83X1Ssh C0JJruJC -----END CERTIFICATE-----Generated at Mon Jan 26 05:32:44 2026 by rpki-client