This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/8U9Wp8aMDTMHire9KsQQwLfqs00.roa File: 8U9Wp8aMDTMHire9KsQQwLfqs00.roa (raw, json) Hash identifier: X/erkao+YL7ZRtCVh/gBhtM8++R5nL+zCJPtIYT4ET0= Subject key identifier: F1:4F:56:A7:C6:8C:0D:33:07:8A:B7:BD:2A:C4:10:C0:B7:EA:B3:4D Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9 Certificate serial: 019B7DCA087630515907E7DD6DEBE0FB222A Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/8U9Wp8aMDTMHire9KsQQwLfqs00.roa Signing time: Fri 02 Jan 2026 08:19:10 +0000 ROA not before: Fri 02 Jan 2026 08:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1239 IP address blocks: 84.22.148.0/23 maxlen: 23 84.22.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:08:76:30:51:59:07:e7:dd:6d:eb:e0:fb:22:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9 Validity Not Before: Jan 2 08:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f14f56a7c68c0d33078ab7bd2ac410c0b7eab34d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:23:81:ff:d3:41:2b:94:14:7b:b5:ac:23:bc: 3f:6a:86:44:1a:a6:07:5d:6f:8e:e6:2a:32:ae:96: bf:4d:3c:e9:c2:11:be:79:fd:37:c6:63:7e:a4:bb: 35:f3:49:7f:87:4a:81:ab:8a:7d:4b:7b:05:93:f7: d7:95:95:b5:34:9b:c3:9c:2e:17:8b:20:55:40:0b: 5e:15:18:2f:e7:00:28:ee:ea:2c:b6:ab:b4:8c:fb: dc:29:73:40:23:ee:bc:02:e8:d0:ff:13:d6:55:93: 3b:cf:b9:19:6b:4f:0c:33:61:dc:bd:d2:f3:8c:f9: 7d:16:60:e4:dd:4f:24:ac:ee:02:a5:fc:30:38:02: 2e:35:d4:5a:08:19:9c:03:22:56:a9:3f:6c:37:95: 8c:cf:8c:66:e1:2f:5f:32:3d:13:89:2f:00:eb:3c: 28:40:17:c0:af:eb:21:d8:9a:34:a3:4b:32:91:dd: 3d:df:39:90:e5:7d:cb:d2:9f:5b:eb:fe:d8:ec:05: 23:bd:bd:8a:eb:d3:85:41:ce:e1:b2:82:4b:7e:d3: 17:a1:28:dc:70:05:21:db:06:6b:32:dc:2e:00:a8: 9a:95:a6:84:79:3d:2d:42:80:e7:c1:c2:28:06:74: b5:9c:dd:f7:99:dd:d1:3e:f6:70:55:86:25:71:b2: 06:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:4F:56:A7:C6:8C:0D:33:07:8A:B7:BD:2A:C4:10:C0:B7:EA:B3:4D X509v3 Authority Key Identifier: keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/8U9Wp8aMDTMHire9KsQQwLfqs00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.22.148.0-84.22.150.255 Signature Algorithm: sha256WithRSAEncryption 48:2f:85:a4:d9:88:a3:9b:c8:77:ec:b4:a3:5e:0d:61:44:86: c2:0a:be:f0:9c:fe:f1:4c:5f:7e:45:6f:43:19:0c:09:ff:40: 47:1b:62:15:2c:a5:3c:71:ee:b6:7c:65:dd:c4:17:32:f4:eb: 6c:e7:d7:9a:54:b7:cd:99:27:e0:5d:bb:3c:c1:c7:8b:a8:dc: 23:f7:18:7d:77:e5:5f:44:89:c9:a7:29:9d:c9:6b:f0:b2:5d: 7e:69:50:6f:da:6d:22:eb:69:66:33:29:f3:21:c7:e9:e6:f3: ad:0d:ab:bd:48:7e:5e:d5:c0:cc:40:d8:b2:55:45:8b:77:17: 09:96:57:16:18:ee:a9:07:79:ef:e9:cc:de:a4:01:e3:db:0d: e0:77:a1:51:bd:c5:08:df:81:d3:eb:20:b8:b5:c2:45:fb:42: 55:88:6d:c9:e6:de:2d:58:26:7d:13:05:45:a2:c2:6d:19:b9: 46:1a:ab:b6:2d:6e:5f:33:08:e5:ec:b1:2a:f6:b2:7a:fc:03: 70:2b:d6:3c:9d:02:c8:50:40:5f:d9:65:a6:2c:aa:6e:5c:7c: f8:09:9b:18:09:55:61:b7:50:9b:d8:82:3b:ed:61:08:fe:fe: d7:dd:6d:45:03:85:ad:1e:b1:84:ef:1a:77:2f:88:fb:3e:97: 07:a7:b7:d9 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt9ygh2MFFZB+fdbevg+yIqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOTgwZmI2YWRlODU4ZjI2NTJlNzM2OTkzMTI2Yzg1NzU5 ZjA2ZDkwHhcNMjYwMTAyMDgxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTRmNTZhN2M2OGMwZDMzMDc4YWI3YmQyYWM0MTBjMGI3ZWFiMzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSOB/9NBK5QUe7WsI7w/aoZEGqYH XW+O5ioyrpa/TTzpwhG+ef03xmN+pLs180l/h0qBq4p9S3sFk/fXlZW1NJvDnC4X iyBVQAteFRgv5wAo7uostqu0jPvcKXNAI+68AujQ/xPWVZM7z7kZa08MM2HcvdLz jPl9FmDk3U8krO4CpfwwOAIuNdRaCBmcAyJWqT9sN5WMz4xm4S9fMj0TiS8A6zwo QBfAr+sh2Jo0o0sykd093zmQ5X3L0p9b6/7Y7AUjvb2K69OFQc7hsoJLftMXoSjc cAUh2wZrMtwuAKialaaEeT0tQoDnwcIoBnS1nN33md3RPvZwVYYlcbIG3QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFPFPVqfGjA0zB4q3vSrEEMC36rNNMB8GA1UdIwQY MBaAFFCYD7at6FjyZS5zaZMSbIV1nwbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEt Y2NhNzlhNjk4MjBhLzEvOFU5V3A4YU1EVE1IaXJlOUtzUVF3TGZxczAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEtY2NhNzlhNjk4MjBh LzEvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJUFpQD BABUFpYwDQYJKoZIhvcNAQELBQADggEBAEgvhaTZiKObyHfstKNeDWFEhsIKvvCc /vFMX35Fb0MZDAn/QEcbYhUspTxx7rZ8Zd3EFzL062zn15pUt82ZJ+BduzzBx4uo 3CP3GH135V9EicmnKZ3Ja/CyXX5pUG/abSLraWYzKfMhx+nm860Nq71Ifl7VwMxA 2LJVRYt3FwmWVxYY7qkHee/pzN6kAePbDeB3oVG9xQjfgdPrILi1wkX7QlWIbcnm 3i1YJn0TBUWiwm0ZuUYaq7Ytbl8zCOXssSr2snr8A3Ar1jydAshQQF/ZZaYsqm5c fPgJmxgJVWG3UJvYgjvtYQj+/tfdbUUDha0esYTvGncviPs+lwent9k= -----END CERTIFICATE-----Generated at Sun Jan 25 13:05:28 2026 by rpki-client