This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8U_zk1sniBP3zDNjPYOXdrxXP70.roa File: 8U_zk1sniBP3zDNjPYOXdrxXP70.roa (raw, json) Hash identifier: XWdsNZpCqmMz7JJ0fESmTwn/j8lMMRjvJTqIlY4S7Aw= Subject key identifier: F1:4F:F3:93:5B:27:88:13:F7:CC:33:63:3D:83:97:76:BC:57:3F:BD Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AB11E2FA81DA99B7D7F7BE5CCA0CE Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8U_zk1sniBP3zDNjPYOXdrxXP70.roa Signing time: Thu 01 Jan 2026 16:18:42 +0000 ROA not before: Thu 01 Jan 2026 16:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 138997 IP address blocks: 77.107.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b1:1e:2f:a8:1d:a9:9b:7d:7f:7b:e5:cc:a0:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f14ff3935b278813f7cc33633d839776bc573fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1b:85:d3:c6:32:12:90:39:f3:0a:fa:8d:d7: f1:40:7b:eb:b0:f3:89:e2:2e:82:54:0c:c8:b7:00: dd:89:08:c6:13:cc:3b:a0:fc:d4:94:db:83:28:d0: 8b:87:86:0d:58:d5:73:35:99:cd:c8:05:16:6d:ab: b8:9f:80:33:44:63:f2:c0:17:5a:f5:f1:13:da:49: e9:f0:a1:25:00:82:c6:a9:0b:10:f5:04:d4:a9:2e: 35:a3:08:a0:10:45:5e:33:94:7a:2f:64:3e:bc:c9: 09:81:74:51:fc:71:e2:27:28:6f:c9:5b:a8:78:f1: 97:43:02:fa:08:54:03:94:20:32:36:91:a5:22:5b: ae:a3:93:73:cc:1d:c3:a3:20:5d:17:60:a8:3a:13: 36:96:61:05:17:67:94:36:b8:86:a6:f4:0b:ba:c8: 94:ba:0b:54:db:c8:49:c5:d3:c8:5b:2b:96:e5:f3: 81:6d:3e:09:9f:ae:1a:b8:23:4a:b8:2a:5c:3c:09: 3c:64:bb:3b:f2:2b:27:13:98:05:27:ab:9b:b0:1d: 20:2d:63:d6:c5:fb:10:44:8d:f1:cd:6c:2b:e3:39: 5a:f5:2e:ca:cb:4c:11:a4:c1:7b:f7:dc:11:6f:ec: b4:43:c7:73:8d:ad:60:44:51:58:93:15:a5:51:8e: ac:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:4F:F3:93:5B:27:88:13:F7:CC:33:63:3D:83:97:76:BC:57:3F:BD X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8U_zk1sniBP3zDNjPYOXdrxXP70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.107.85.0/24 Signature Algorithm: sha256WithRSAEncryption 65:0e:eb:90:67:32:14:9e:1f:a0:68:5f:5d:75:49:c3:79:0d: de:2f:b8:a5:b8:dd:6a:75:c4:64:57:fa:18:d5:d2:f2:b3:4b: 74:0f:fc:3a:b3:89:f3:52:a1:04:17:87:62:02:a8:58:33:1b: f5:59:e3:3e:55:6d:93:2e:4a:0c:f5:3e:62:3e:c0:d2:7e:56: 64:0a:b0:ef:84:fa:08:b7:90:09:5e:0e:1b:7d:ad:08:47:87: 0a:13:e8:2c:15:ea:0d:bd:1d:f7:0a:a9:cc:8f:8b:e0:49:85: 0a:5c:4e:b3:f7:af:18:08:82:43:a1:7f:83:0b:bd:d7:f7:87: e3:94:fe:e4:6b:0b:19:c3:e0:93:21:00:c0:31:06:85:78:5c: 56:53:49:e7:0f:02:cd:a2:45:2f:fc:9b:dd:5c:05:47:b6:7c: 8a:b2:b3:09:29:53:96:35:03:fc:f5:6a:7c:d7:36:e3:52:d3: 10:2a:9b:31:95:98:f7:5b:61:68:06:99:ef:0f:92:46:d0:54: 06:cf:f0:cd:40:d4:ef:fd:aa:75:24:5d:d9:4f:47:2c:8f:d8: d2:46:3d:27:74:c7:11:ef:af:27:03:85:5d:d1:81:0a:17:7b: 80:1c:06:62:50:84:be:c3:1f:d2:1e:28:a7:00:d3:18:27:92: ee:ed:15:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WrEeL6gdqZt9f3vlzKDOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTRmZjM5MzViMjc4ODEzZjdjYzMzNjMzZDgzOTc3NmJjNTczZmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixuF08YyEpA58wr6jdfxQHvrsPOJ 4i6CVAzItwDdiQjGE8w7oPzUlNuDKNCLh4YNWNVzNZnNyAUWbau4n4AzRGPywBda 9fET2knp8KElAILGqQsQ9QTUqS41owigEEVeM5R6L2Q+vMkJgXRR/HHiJyhvyVuo ePGXQwL6CFQDlCAyNpGlIluuo5NzzB3DoyBdF2CoOhM2lmEFF2eUNriGpvQLusiU ugtU28hJxdPIWyuW5fOBbT4Jn64auCNKuCpcPAk8ZLs78isnE5gFJ6ubsB0gLWPW xfsQRI3xzWwr4zla9S7Ky0wRpMF799wRb+y0Q8dzja1gRFFYkxWlUY6sqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPFP85NbJ4gT98wzYz2Dl3a8Vz+9MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvOFVfemsxc25pQlAzekROalBZT1hkcnhYUDcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATWtVMA0G CSqGSIb3DQEBCwUAA4IBAQBlDuuQZzIUnh+gaF9ddUnDeQ3eL7iluN1qdcRkV/oY 1dLys0t0D/w6s4nzUqEEF4diAqhYMxv1WeM+VW2TLkoM9T5iPsDSflZkCrDvhPoI t5AJXg4bfa0IR4cKE+gsFeoNvR33CqnMj4vgSYUKXE6z968YCIJDoX+DC73X94fj lP7kawsZw+CTIQDAMQaFeFxWU0nnDwLNokUv/JvdXAVHtnyKsrMJKVOWNQP89Wp8 1zbjUtMQKpsxlZj3W2FoBpnvD5JG0FQGz/DNQNTv/ap1JF3ZT0csj9jSRj0ndMcR 768nA4Vd0YEKF3uAHAZiUIS+wx/SHiinANMYJ5Lu7RVX -----END CERTIFICATE-----Generated at Sun Jan 25 07:15:21 2026 by rpki-client