This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/8DylJ6bMwHx9Bdrvn2E9Zu5-6Yc.roa File: 8DylJ6bMwHx9Bdrvn2E9Zu5-6Yc.roa (raw, json) Hash identifier: vmfPrDMZxv7M04Wo8WXPZw8AXlVkf20vtyHb5e8KwgU= Subject key identifier: F0:3C:A5:27:A6:CC:C0:7C:7D:05:DA:EF:9F:61:3D:66:EE:7E:E9:87 Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Certificate serial: 019B7F80D2C1B590778E9AD54ACCB69EBB47 Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/8DylJ6bMwHx9Bdrvn2E9Zu5-6Yc.roa Signing time: Fri 02 Jan 2026 16:18:27 +0000 ROA not before: Fri 02 Jan 2026 16:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12859 IP address blocks: 195.8.208.0/23 maxlen: 24 2a05:1500:fe00::/40 maxlen: 40 2a0b:8f80:201::/48 maxlen: 48 2a0b:8f80:301::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:d2:c1:b5:90:77:8e:9a:d5:4a:cc:b6:9e:bb:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Validity Not Before: Jan 2 16:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f03ca527a6ccc07c7d05daef9f613d66ee7ee987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:92:8d:63:85:9a:c3:0b:07:18:13:ad:fe:aa: c2:08:26:5c:4a:ab:02:a1:71:43:a4:94:2b:b7:e6: 9f:95:b9:e2:bd:24:96:36:93:8c:40:2f:0e:d1:71: f0:f7:84:38:2c:ea:57:61:98:62:17:b6:8f:2a:7e: 34:27:be:fe:c0:7c:34:36:55:0e:7f:51:68:c8:ec: ff:15:a2:f7:5e:90:dc:30:0d:76:40:93:d5:3c:00: aa:85:bc:f8:cd:3b:eb:ff:08:00:88:9e:bc:84:1a: b3:b5:5e:a5:30:34:e0:8d:6c:b8:8c:4f:90:55:5f: 7b:8a:ea:d0:cb:ed:75:e6:37:29:22:bf:a1:ac:c2: 66:b5:b2:8e:05:09:fc:40:c5:01:3d:a9:4b:57:29: 2a:fd:65:cd:24:8c:24:95:7e:5b:fd:10:26:23:aa: 07:cd:28:6a:71:18:b4:2f:9d:88:cf:bf:82:be:46: 1f:69:00:80:bd:a2:38:e9:34:f4:a5:91:2b:29:11: 63:a3:9f:f9:1f:38:e6:18:6f:83:90:b5:23:ad:42: 88:dd:31:ae:c9:ea:aa:1c:86:07:6f:0c:62:27:ea: fd:7d:07:45:37:74:a7:cc:ab:e0:9f:94:89:a0:ee: 30:9a:d5:b7:9d:ee:89:fd:69:fa:36:0a:6b:f4:f4: 9c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:3C:A5:27:A6:CC:C0:7C:7D:05:DA:EF:9F:61:3D:66:EE:7E:E9:87 X509v3 Authority Key Identifier: keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/8DylJ6bMwHx9Bdrvn2E9Zu5-6Yc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.8.208.0/23 IPv6: 2a05:1500:fe00::/40 2a0b:8f80:201::/48 2a0b:8f80:301::/48 Signature Algorithm: sha256WithRSAEncryption 49:29:91:af:40:f0:70:a2:89:57:63:b6:b9:04:03:de:38:2e: ba:8e:01:f1:c0:67:04:cc:4b:99:f9:c8:47:e4:ef:21:d4:45: 1c:c0:bf:d5:c7:b6:23:bb:52:fb:6b:c7:88:77:9b:d0:0b:70: 85:dc:7a:18:27:89:60:db:93:ab:d3:e2:b3:16:7e:60:ed:f3: 51:3c:a8:28:81:50:28:7e:4b:da:aa:39:65:b0:8d:c6:d5:a7: 15:b0:0c:bc:75:28:c1:19:15:e2:6b:5d:9b:03:cf:15:19:cc: ba:9c:c0:4f:3e:47:52:16:ee:a4:98:2d:92:f0:a2:a9:9f:1f: ea:c3:10:61:15:f8:85:0d:fe:1a:b4:a5:9f:b2:1e:bb:c4:f1: 21:74:56:26:af:df:19:f3:47:a0:6d:97:15:51:85:98:4b:99: 74:2d:6e:0a:33:fb:4c:7c:dc:6f:15:8b:57:33:94:23:eb:af: ca:3e:0b:f1:0c:0c:e8:bb:df:6f:ab:a5:33:81:2a:65:b6:ea: 97:97:00:cd:3a:f7:cd:74:c6:1d:f7:b6:4e:1b:c6:eb:c5:9c: 5e:c9:ee:55:25:39:36:e5:02:28:b8:7a:c0:5e:c1:33:4a:1b: 77:ff:85:90:2b:24:10:da:70:75:43:f5:17:da:2b:56:18:29: ba:10:86:95 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt/gNLBtZB3jprVSsy2nrtHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4 NGU4YzYwHhcNMjYwMTAyMTYxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDNjYTUyN2E2Y2NjMDdjN2QwNWRhZWY5ZjYxM2Q2NmVlN2VlOTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJKNY4WawwsHGBOt/qrCCCZcSqsC oXFDpJQrt+aflbnivSSWNpOMQC8O0XHw94Q4LOpXYZhiF7aPKn40J77+wHw0NlUO f1FoyOz/FaL3XpDcMA12QJPVPACqhbz4zTvr/wgAiJ68hBqztV6lMDTgjWy4jE+Q VV97iurQy+115jcpIr+hrMJmtbKOBQn8QMUBPalLVykq/WXNJIwklX5b/RAmI6oH zShqcRi0L52Iz7+CvkYfaQCAvaI46TT0pZErKRFjo5/5HzjmGG+DkLUjrUKI3TGu yeqqHIYHbwxiJ+r9fQdFN3SnzKvgn5SJoO4wmtW3ne6J/Wn6Ngpr9PScuQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFPA8pSemzMB8fQXa759hPWbufumHMB8GA1UdIwQY MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt YjBkNzJlOTEwZWZlLzEvOER5bEo2Yk13SHg5QmRydm4yRTladTUtNlljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAMBAIAATAGAwQBwwjQMCAE AgACMBoDBgAqBRUA/gMHACoLj4ACAQMHACoLj4ADATANBgkqhkiG9w0BAQsFAAOC AQEASSmRr0DwcKKJV2O2uQQD3jguuo4B8cBnBMxLmfnIR+TvIdRFHMC/1ce2I7tS +2vHiHeb0Atwhdx6GCeJYNuTq9PisxZ+YO3zUTyoKIFQKH5L2qo5ZbCNxtWnFbAM vHUowRkV4mtdmwPPFRnMupzATz5HUhbupJgtkvCiqZ8f6sMQYRX4hQ3+GrSln7Ie u8TxIXRWJq/fGfNHoG2XFVGFmEuZdC1uCjP7THzcbxWLVzOUI+uvyj4L8QwM6Lvf b6ulM4EqZbbql5cAzTr3zXTGHfe2ThvG68WcXsnuVSU5NuUCKLh6wF7BM0obd/+F kCskENpwdUP1F9orVhgpuhCGlQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:40 2026 by rpki-client