This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/8uI50pmDYsKDh_F6jtMLs-ICF5U.roa File: 8uI50pmDYsKDh_F6jtMLs-ICF5U.roa (raw, json) Hash identifier: CmVrQVblNLXB1oLlYOXrK8Zo61LVo2o8Pt/EENEAVLI= Subject key identifier: F2:E2:39:D2:99:83:62:C2:83:87:F1:7A:8E:D3:0B:B3:E2:02:17:95 Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Certificate serial: 019B7CEE08A15D28A38B4F491562C68DADA2 Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/8uI50pmDYsKDh_F6jtMLs-ICF5U.roa Signing time: Fri 02 Jan 2026 04:18:53 +0000 ROA not before: Fri 02 Jan 2026 04:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216159 IP address blocks: 80.71.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:08:a1:5d:28:a3:8b:4f:49:15:62:c6:8d:ad:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Validity Not Before: Jan 2 04:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2e239d2998362c28387f17a8ed30bb3e2021795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ee:f2:34:b4:b3:b7:b1:02:c2:1d:6e:e0:e7: 97:be:e3:22:db:ff:0e:45:be:77:dd:f6:30:44:aa: fe:b6:54:36:cb:a7:b9:fd:b8:c0:68:e5:c1:78:e6: 97:88:3c:9e:e3:ba:76:39:c7:07:19:e7:49:50:6b: 23:2e:42:d3:79:15:95:80:23:da:e0:16:4b:20:1e: 78:42:7a:1a:c8:ee:d3:01:e5:82:4f:ff:34:f1:b6: 4d:f3:58:bd:8d:b4:50:10:25:26:22:fe:17:c7:3b: 7d:ab:9d:dd:20:57:9a:a4:54:0b:7d:f6:15:1b:b6: 1f:44:f5:1a:1a:5b:33:87:7e:c4:2f:7b:c0:b1:5a: 5c:f3:7f:36:7f:bd:9f:42:c6:34:16:05:ee:a4:56: 18:8d:fb:19:32:18:5d:40:62:23:15:10:b5:35:7a: a8:9f:38:72:45:4f:bf:95:9b:1b:3d:c6:59:4b:3c: f0:bc:d0:54:48:fe:3b:6a:f7:43:c9:07:e0:c9:e1: 47:1f:3e:53:b5:f2:f2:28:5e:10:41:b9:ae:19:a4: 07:53:87:34:5f:ac:24:a7:e1:e8:ab:10:b5:10:06: 68:10:da:c1:7c:87:e9:04:02:ec:d9:9c:cc:59:29: 99:c2:38:25:3a:be:3f:45:43:34:23:c2:db:2a:5b: 55:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E2:39:D2:99:83:62:C2:83:87:F1:7A:8E:D3:0B:B3:E2:02:17:95 X509v3 Authority Key Identifier: keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/8uI50pmDYsKDh_F6jtMLs-ICF5U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.71.237.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:f3:71:e7:ad:86:ce:d2:6c:13:bb:a9:7b:e7:31:98:ca:bc: 80:17:5a:40:0f:34:42:4e:ca:b0:5c:84:f3:c0:ee:d8:2e:51: 96:ea:50:32:9e:c4:b5:4a:12:b1:e4:26:c9:12:f9:4b:2b:55: c5:ea:bd:10:dd:a0:6d:a4:2e:ef:4e:ea:26:f2:0a:47:09:ea: 96:3a:bc:47:a9:58:18:f3:39:0f:46:e9:3e:db:ef:d7:b7:93: 9b:92:c8:f7:e0:13:db:59:d7:b5:5a:9e:8a:c1:78:9c:e2:b8: a4:89:fa:3e:c7:7b:a4:10:b1:b4:d0:77:c6:93:39:12:4a:1f: b5:fc:c5:d8:94:05:0d:bc:16:f2:dc:5f:6f:af:b5:e1:a3:01: fa:bf:e0:67:1a:8a:84:2e:9f:d3:01:e1:a9:72:3e:db:bb:19: 9c:06:33:31:e4:40:8b:35:d5:6e:6f:ba:b4:1a:3f:3a:b1:f9: f3:69:85:3b:d6:a4:0c:53:ea:29:37:75:61:4b:e4:7b:6f:46: f8:cf:28:3f:64:51:77:e7:ab:51:11:a1:df:ee:37:af:6a:ef: d0:b2:87:99:fa:ca:a9:d0:84:dc:88:ed:21:6f:8d:0a:7d:f3: 41:e3:f6:ad:58:c5:1f:31:b7:d3:c6:46:bf:5f:e2:63:fe:00: 49:1c:67:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87gihXSiji09JFWLGja2iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx MDhlNDcwHhcNMjYwMTAyMDQxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmUyMzlkMjk5ODM2MmMyODM4N2YxN2E4ZWQzMGJiM2UyMDIxNzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+7yNLSzt7ECwh1u4OeXvuMi2/8O Rb533fYwRKr+tlQ2y6e5/bjAaOXBeOaXiDye47p2OccHGedJUGsjLkLTeRWVgCPa 4BZLIB54QnoayO7TAeWCT/808bZN81i9jbRQECUmIv4Xxzt9q53dIFeapFQLffYV G7YfRPUaGlszh37EL3vAsVpc8382f72fQsY0FgXupFYYjfsZMhhdQGIjFRC1NXqo nzhyRU+/lZsbPcZZSzzwvNBUSP47avdDyQfgyeFHHz5TtfLyKF4QQbmuGaQHU4c0 X6wkp+HoqxC1EAZoENrBfIfpBALs2ZzMWSmZwjglOr4/RUM0I8LbKltV3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPLiOdKZg2LCg4fxeo7TC7PiAheVMB8GA1UdIwQY MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt MTkxODliM2M5YzdkLzEvOHVJNTBwbURZc0tEaF9GNmp0TUxzLUlDRjVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEftMA0G CSqGSIb3DQEBCwUAA4IBAQAt83HnrYbO0mwTu6l75zGYyryAF1pADzRCTsqwXITz wO7YLlGW6lAynsS1ShKx5CbJEvlLK1XF6r0Q3aBtpC7vTuom8gpHCeqWOrxHqVgY 8zkPRuk+2+/Xt5Obksj34BPbWde1Wp6KwXic4rikifo+x3ukELG00HfGkzkSSh+1 /MXYlAUNvBby3F9vr7XhowH6v+BnGoqELp/TAeGpcj7buxmcBjMx5ECLNdVub7q0 Gj86sfnzaYU71qQMU+opN3VhS+R7b0b4zyg/ZFF356tREaHf7jevau/QsoeZ+sqp 0ITciO0hb40KffNB4/atWMUfMbfTxka/X+Jj/gBJHGeW -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:08 2026 by rpki-client