This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/e8O6jHZnnxFN6jXhrWrbp8jv7m0.roa File: e8O6jHZnnxFN6jXhrWrbp8jv7m0.roa (raw, json) Hash identifier: oYoj+Ap4IHXg1gtH78drwk88Ptq15W+fIpoCre/+UjE= Subject key identifier: 7B:C3:BA:8C:76:67:9F:11:4D:EA:35:E1:AD:6A:DB:A7:C8:EF:EE:6D Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Certificate serial: 019B7D5D1E314727803D17043D9A12587EC1 Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/e8O6jHZnnxFN6jXhrWrbp8jv7m0.roa Signing time: Fri 02 Jan 2026 06:20:13 +0000 ROA not before: Fri 02 Jan 2026 06:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47324 IP address blocks: 91.120.33.0/24 maxlen: 24 195.56.124.0/24 maxlen: 24 195.56.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:1e:31:47:27:80:3d:17:04:3d:9a:12:58:7e:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Validity Not Before: Jan 2 06:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7bc3ba8c76679f114dea35e1ad6adba7c8efee6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ba:2f:f6:53:37:40:f4:19:b2:23:ff:6b:ec: 2f:d7:f9:70:33:4b:50:2f:c9:97:dc:75:6a:0c:3e: 48:20:d9:cf:35:0b:bb:41:a6:26:f9:df:60:18:28: 62:6b:69:0b:70:ba:c9:11:52:0c:9b:0d:d2:d0:42: 53:13:72:8a:5b:0a:1c:24:39:8a:ab:6f:e4:20:ee: ae:14:c7:8c:75:4c:97:99:11:be:a5:54:f1:62:27: ba:db:a6:58:82:cd:77:ba:d2:5e:63:32:65:74:65: 5e:ee:0a:a4:a3:d3:6e:4a:b8:bf:03:9d:13:9e:b6: 70:0c:8c:d3:c5:ee:f1:74:a2:22:4c:aa:d0:33:9b: 89:b3:e4:cc:d0:93:ab:b7:22:dc:ca:40:41:98:1c: cf:9a:49:62:a8:a5:f8:75:ed:4b:b1:28:6e:3c:66: e8:f1:47:85:ac:5a:d5:e1:17:d8:32:ec:96:ab:62: e3:b3:1c:6d:d6:90:30:63:99:cb:fb:bf:75:0b:05: 96:2a:52:95:f8:78:a4:8e:24:65:7f:57:f4:64:ac: 0c:32:24:d5:64:7f:95:33:f0:80:44:cb:d9:0a:23: 77:91:55:23:2d:e5:1d:e3:43:b2:69:f4:b5:6e:0c: 64:4f:f5:ac:be:3a:33:93:b9:5f:45:fc:06:b2:4e: c3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C3:BA:8C:76:67:9F:11:4D:EA:35:E1:AD:6A:DB:A7:C8:EF:EE:6D X509v3 Authority Key Identifier: keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/e8O6jHZnnxFN6jXhrWrbp8jv7m0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.120.33.0/24 195.56.124.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:45:e9:d8:20:3c:7c:33:24:d5:dc:00:f3:62:c6:1f:fa:89: f4:26:ed:10:2e:a8:12:cf:cc:c5:86:cf:fb:7f:d7:4d:38:7d: 2f:fe:ba:4b:1e:71:d7:a1:16:e1:dd:b3:f9:b0:59:b2:c2:f1: 1f:d3:6d:82:05:c5:a4:0d:1f:ea:fc:97:9e:75:4d:18:c3:cf: 1d:cd:7d:e6:87:ad:c2:6e:8f:c0:a0:da:a3:b3:1c:15:6a:6a: d3:26:77:49:48:b9:b7:f4:ae:e7:a7:fe:e7:0a:6d:e4:45:06: 65:1c:70:97:b4:6e:3e:89:90:16:fd:c5:c5:65:e0:a4:85:7f: 86:ee:e3:ea:f5:d6:95:17:d9:4e:60:b1:8d:11:52:67:9a:c2: c5:be:b7:1c:a1:a1:06:92:6d:15:d1:b1:50:3a:6a:60:a1:44: 7c:03:13:60:a1:bd:58:64:a8:d4:98:b4:76:68:32:27:69:b4: 11:3d:17:7e:4a:ee:42:12:fc:25:bf:37:b4:c3:aa:b7:52:5a: 94:ae:07:70:3c:3e:da:df:f8:32:d6:da:5a:de:81:7d:da:0e: 42:af:1d:fe:c7:0f:3d:99:45:6a:e4:aa:c2:65:cb:93:b0:27: 02:60:9f:04:eb:a0:bc:3c:4d:64:bc:29:c0:f1:d9:9c:d5:ec: 16:b0:a8:6a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XR4xRyeAPRcEPZoSWH7BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4 YWFlN2IwHhcNMjYwMTAyMDYyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmMzYmE4Yzc2Njc5ZjExNGRlYTM1ZTFhZDZhZGJhN2M4ZWZlZTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLov9lM3QPQZsiP/a+wv1/lwM0tQ L8mX3HVqDD5IINnPNQu7QaYm+d9gGChia2kLcLrJEVIMmw3S0EJTE3KKWwocJDmK q2/kIO6uFMeMdUyXmRG+pVTxYie626ZYgs13utJeYzJldGVe7gqko9NuSri/A50T nrZwDIzTxe7xdKIiTKrQM5uJs+TM0JOrtyLcykBBmBzPmkliqKX4de1LsShuPGbo 8UeFrFrV4RfYMuyWq2Ljsxxt1pAwY5nL+791CwWWKlKV+HikjiRlf1f0ZKwMMiTV ZH+VM/CARMvZCiN3kVUjLeUd40OyafS1bgxkT/Wsvjozk7lfRfwGsk7DMQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHvDuox2Z58RTeo14a1q26fI7+5tMB8GA1UdIwQY MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt MjkyYWU0NmU2MzAyLzEvZThPNmpIWm5ueEZONmpYaHJXcmJwOGp2N20wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW3ghAwQB wzh8MA0GCSqGSIb3DQEBCwUAA4IBAQBvRenYIDx8MyTV3ADzYsYf+on0Ju0QLqgS z8zFhs/7f9dNOH0v/rpLHnHXoRbh3bP5sFmywvEf022CBcWkDR/q/JeedU0Yw88d zX3mh63Cbo/AoNqjsxwVamrTJndJSLm39K7np/7nCm3kRQZlHHCXtG4+iZAW/cXF ZeCkhX+G7uPq9daVF9lOYLGNEVJnmsLFvrccoaEGkm0V0bFQOmpgoUR8AxNgob1Y ZKjUmLR2aDInabQRPRd+Su5CEvwlvze0w6q3UlqUrgdwPD7a3/gy1tpa3oF92g5C rx3+xw89mUVq5KrCZcuTsCcCYJ8E66C8PE1kvCnA8dmc1ewWsKhq -----END CERTIFICATE-----Generated at Sun Jan 25 16:53:45 2026 by rpki-client