This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/A-8nhpgeRouHY2UnNZP3Ty36Mq4.roa File: A-8nhpgeRouHY2UnNZP3Ty36Mq4.roa (raw, json) Hash identifier: 0Z1tKMjOQH8GDFQdN2zkZ1XfpKKTrB+7t0AWIQlWOsU= Subject key identifier: 03:EF:27:86:98:1E:46:8B:87:63:65:27:35:93:F7:4F:2D:FA:32:AE Certificate issuer: /CN=a82a023ebdb12e971e7a8729d826a7924cf7e832 Certificate serial: 019B7F8541D2E9D981FC4893DF626DB74746 Authority key identifier: A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/A-8nhpgeRouHY2UnNZP3Ty36Mq4.roa Signing time: Fri 02 Jan 2026 16:23:18 +0000 ROA not before: Fri 02 Jan 2026 16:23:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2116 IP address blocks: 151.187.0.0/16 maxlen: 16 159.216.0.0/16 maxlen: 16 159.216.119.0/24 maxlen: 24 159.216.220.0/23 maxlen: 23 2a13:6200::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:41:d2:e9:d9:81:fc:48:93:df:62:6d:b7:47:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a82a023ebdb12e971e7a8729d826a7924cf7e832 Validity Not Before: Jan 2 16:23:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03ef2786981e468b876365273593f74f2dfa32ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:39:8e:4b:ef:43:e9:68:78:83:90:85:7d:34: 1a:cf:7b:c9:73:be:69:b4:ce:cd:3a:28:4d:00:37: 55:95:00:ca:2f:a2:0e:08:4e:61:59:1a:e1:aa:12: e0:93:d6:89:35:5f:51:59:0b:7d:60:2c:91:e6:79: b9:a8:8a:f7:ee:ed:77:94:92:4f:e4:8c:46:e5:d1: 05:1d:e7:55:1e:0f:0a:42:22:43:6d:79:3d:aa:85: 2d:b7:8f:fc:3f:ed:2d:48:7a:87:56:fe:17:97:70: 40:d9:52:29:2a:6d:e9:89:93:64:e3:a2:2f:18:56: a4:f2:98:44:19:e4:a9:5e:c6:7c:f7:f4:78:82:b4: 87:8a:b8:18:b2:7b:cb:35:b5:5b:c6:97:94:ce:a7: 54:99:92:21:c8:b5:3f:ee:ab:f5:dc:c7:22:10:ab: 62:b2:4b:15:c2:b8:78:f8:eb:9b:9a:65:61:4f:55: 15:0b:c8:37:d4:ad:f3:13:59:30:fe:1f:3e:17:d2: 5e:06:57:21:1a:8b:ad:f7:10:e6:6f:b6:36:29:43: 87:40:05:16:bd:12:6d:12:2d:62:73:da:b6:8e:9a: ad:ee:72:76:98:bb:d7:5a:9c:7a:35:d8:a2:52:9a: 41:87:8d:98:d3:23:b8:7c:5b:28:eb:92:53:2b:6e: fc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:EF:27:86:98:1E:46:8B:87:63:65:27:35:93:F7:4F:2D:FA:32:AE X509v3 Authority Key Identifier: keyid:A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/A-8nhpgeRouHY2UnNZP3Ty36Mq4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.187.0.0/16 159.216.0.0/16 IPv6: 2a13:6200::/29 Signature Algorithm: sha256WithRSAEncryption 46:27:af:27:38:90:77:ad:e8:6f:b1:f1:ab:67:29:84:7f:dc: 27:d6:e8:c4:e4:a2:a9:f7:a0:d4:01:23:59:4b:98:60:b2:17: ba:42:af:ef:98:10:f6:4d:96:ee:22:3b:dd:97:e7:01:48:0c: 32:e6:1c:54:71:73:01:5c:34:1e:68:0e:13:6f:3e:7e:82:03: 9d:01:84:3c:e2:4f:07:57:21:b9:42:83:63:32:6d:ab:95:71: 7c:cb:16:01:76:b2:83:91:5f:75:5c:b9:62:66:69:41:93:4e: 36:2e:4e:64:01:cc:ae:8e:70:de:a6:80:84:0c:fd:e1:59:88: c9:93:f2:0d:c6:6a:0f:47:1f:08:1e:ba:77:e4:ea:04:ec:47: 9e:27:c9:6d:c4:83:80:fc:dd:68:77:10:97:dc:58:5f:7a:f6: e4:2f:74:7c:ef:9a:6a:8f:12:18:73:5d:83:a6:b0:d3:ba:f6: e8:d7:79:cf:8d:c8:3c:a9:d2:3c:1f:18:ef:b4:63:4e:22:5b: ce:e1:6b:97:0a:82:e1:02:ee:3c:53:f2:ef:87:37:5e:ba:f0: d7:6e:2d:e1:fe:b2:21:41:df:46:63:16:51:b7:4b:2d:64:ce: 8e:36:c1:8d:c3:20:4b:e8:32:86:f5:b0:90:fc:ad:09:4e:e8: d0:aa:36:02 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZt/hUHS6dmB/EiT32Jtt0dGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MmEwMjNlYmRiMTJlOTcxZTdhODcyOWQ4MjZhNzkyNGNm N2U4MzIwHhcNMjYwMTAyMTYyMzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2VmMjc4Njk4MWU0NjhiODc2MzY1MjczNTkzZjc0ZjJkZmEzMmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDmOS+9D6Wh4g5CFfTQaz3vJc75p tM7NOihNADdVlQDKL6IOCE5hWRrhqhLgk9aJNV9RWQt9YCyR5nm5qIr37u13lJJP 5IxG5dEFHedVHg8KQiJDbXk9qoUtt4/8P+0tSHqHVv4Xl3BA2VIpKm3piZNk46Iv GFak8phEGeSpXsZ89/R4grSHirgYsnvLNbVbxpeUzqdUmZIhyLU/7qv13MciEKti sksVwrh4+OubmmVhT1UVC8g31K3zE1kw/h8+F9JeBlchGout9xDmb7Y2KUOHQAUW vRJtEi1ic9q2jpqt7nJ2mLvXWpx6NdiiUppBh42Y0yO4fFso65JTK278qwIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFAPvJ4aYHkaLh2NlJzWT908t+jKuMB8GA1UdIwQY MBaAFKgqAj69sS6XHnqHKdgmp5JM9+gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUNvQ1ByMnhMcGNlZW9jcDJDYW5ra3ozNkRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zMTdkZGQtNjg3ZC00NThhLTlmZjUt MjJmYzU4OGJjNjZmLzEvQS04bmhwZ2VSb3VIWTJVbk5aUDNUeTM2TXE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8zMTdkZGQtNjg3ZC00NThhLTlmZjUtMjJmYzU4OGJjNjZm LzEvcUNvQ1ByMnhMcGNlZW9jcDJDYW5ra3ozNkRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAQBAIAATAKAwMAl7sDAwCf 2DANBAIAAjAHAwUDKhNiADANBgkqhkiG9w0BAQsFAAOCAQEARievJziQd63ob7Hx q2cphH/cJ9boxOSiqfeg1AEjWUuYYLIXukKv75gQ9k2W7iI73ZfnAUgMMuYcVHFz AVw0HmgOE28+foIDnQGEPOJPB1chuUKDYzJtq5VxfMsWAXayg5FfdVy5YmZpQZNO Ni5OZAHMro5w3qaAhAz94VmIyZPyDcZqD0cfCB66d+TqBOxHnifJbcSDgPzdaHcQ l9xYX3r25C90fO+aao8SGHNdg6aw07r26Nd5z43IPKnSPB8Y77RjTiJbzuFrlwqC 4QLuPFPy74c3Xrrw124t4f6yIUHfRmMWUbdLLWTOjjbBjcMgS+gyhvWwkPytCU7o 0Ko2Ag== -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:55 2026 by rpki-client