This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/8TcJH-qO38Nnc49nDFhjl3i6q20.roa File: 8TcJH-qO38Nnc49nDFhjl3i6q20.roa (raw, json) Hash identifier: HYqFnkRnK7UVCZ7277kZ3SagdWM8Y+qSNG/b1PHhvmw= Subject key identifier: F1:37:09:1F:EA:8E:DF:C3:67:73:8F:67:0C:58:63:97:78:BA:AB:6D Certificate issuer: /CN=23d8448c5cb90398e4c285cec9c0f4766ac931df Certificate serial: 019B7D5C640C39109BA7FD894F59C1AB5CC4 Authority key identifier: 23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/8TcJH-qO38Nnc49nDFhjl3i6q20.roa Signing time: Fri 02 Jan 2026 06:19:25 +0000 ROA not before: Fri 02 Jan 2026 06:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1853 IP address blocks: 78.104.0.0/16 maxlen: 16 185.154.40.0/22 maxlen: 22 193.170.0.0/15 maxlen: 15 193.171.1.0/24 maxlen: 24 2001:628::/29 maxlen: 29 2001:67c:1864::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.crl rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:64:0c:39:10:9b:a7:fd:89:4f:59:c1:ab:5c:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23d8448c5cb90398e4c285cec9c0f4766ac931df Validity Not Before: Jan 2 06:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f137091fea8edfc367738f670c58639778baab6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:31:b6:4a:5b:c4:85:67:f9:36:0a:9c:47:7f: 87:9f:58:94:7a:e0:7a:06:95:80:ab:f6:60:74:17: 66:7b:bc:76:3f:d5:00:8d:19:7b:3b:38:07:01:fe: ad:1b:7f:7b:01:ca:f4:f8:86:62:f4:85:9c:e0:53: 0e:2c:ea:27:21:67:a2:e4:4c:bf:64:28:18:cb:b0: 19:ae:76:72:bb:69:8a:77:77:2a:3e:0c:3e:42:39: b9:3c:41:fa:0d:52:de:d2:ee:7f:49:69:16:17:99: 8d:d2:ac:e7:fb:22:5a:ef:c2:6e:ee:af:11:c4:40: 79:d7:4b:16:32:a8:90:4d:13:a6:32:b7:5e:b4:cf: 95:1f:45:d5:6c:22:29:cc:07:2b:c0:29:06:6a:aa: 7e:c0:04:0d:2f:47:f3:3d:a6:e9:cc:f0:b7:eb:41: e8:57:98:fc:68:30:33:a7:fe:c9:15:25:1d:f2:2e: 6f:0b:a5:e3:8d:b3:35:c2:46:f2:26:73:dc:fa:fc: 2b:96:98:6e:d6:6d:75:f8:56:b9:18:b7:bb:c1:b6: 53:74:4e:f8:b1:cc:d1:01:87:1e:30:20:82:00:5d: b3:a4:5d:13:db:89:9d:15:8f:e7:9e:d4:28:8f:9a: f4:11:33:9d:be:a1:2f:d3:0a:a5:01:b2:13:fb:26: 4c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:37:09:1F:EA:8E:DF:C3:67:73:8F:67:0C:58:63:97:78:BA:AB:6D X509v3 Authority Key Identifier: keyid:23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/8TcJH-qO38Nnc49nDFhjl3i6q20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.104.0.0/16 185.154.40.0/22 193.170.0.0/15 IPv6: 2001:628::/29 2001:67c:1864::/48 Signature Algorithm: sha256WithRSAEncryption 5b:be:28:fd:52:34:d6:02:2d:65:d2:25:21:1f:ec:e3:fc:5a: 4a:28:c5:bf:79:20:40:50:89:af:5d:c3:d0:77:9a:c0:23:d8: 29:e5:f6:94:63:39:a9:21:82:97:1d:aa:7a:f1:ad:0c:32:19: 57:d4:dc:4e:cc:dd:ee:be:6b:b7:9d:ae:65:50:69:80:f3:ab: 8d:ca:a1:7b:1a:2c:93:17:bb:7d:22:f7:40:e8:c9:99:d0:fd: 64:3e:3d:b7:90:19:02:79:b6:4c:a8:9d:37:3e:65:26:4a:66: e5:1e:0f:df:26:1e:92:e4:5e:15:bb:ef:8d:1e:03:d0:d5:9b: 4f:a6:60:fa:59:02:13:00:1f:44:5e:2c:16:0b:cd:24:50:34: ac:92:92:d6:ef:40:9a:17:a1:c4:ec:b6:4e:44:74:82:ee:84: a0:8b:dd:83:67:57:ea:da:83:37:54:9d:7d:cc:54:42:87:e3: 1d:5c:62:ba:23:1b:40:10:05:5c:93:9e:4c:63:16:f8:b1:c3: c8:d7:7d:53:de:62:02:94:86:21:cf:56:24:0e:5e:a6:34:c2: 97:35:3a:87:85:66:3c:c3:28:9e:21:7f:b2:90:33:dc:b7:29: 55:21:7f:b8:a0:c8:80:b2:38:1e:44:34:56:e4:19:54:f6:ec: 9f:b8:b6:83 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt9XGQMORCbp/2JT1nBq1zEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZDg0NDhjNWNiOTAzOThlNGMyODVjZWM5YzBmNDc2NmFj OTMxZGYwHhcNMjYwMTAyMDYxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTM3MDkxZmVhOGVkZmMzNjc3MzhmNjcwYzU4NjM5Nzc4YmFhYjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDG2SlvEhWf5NgqcR3+Hn1iUeuB6 BpWAq/ZgdBdme7x2P9UAjRl7OzgHAf6tG397Acr0+IZi9IWc4FMOLOonIWei5Ey/ ZCgYy7AZrnZyu2mKd3cqPgw+Qjm5PEH6DVLe0u5/SWkWF5mN0qzn+yJa78Ju7q8R xEB510sWMqiQTROmMrdetM+VH0XVbCIpzAcrwCkGaqp+wAQNL0fzPabpzPC360Ho V5j8aDAzp/7JFSUd8i5vC6XjjbM1wkbyJnPc+vwrlphu1m11+Fa5GLe7wbZTdE74 sczRAYceMCCCAF2zpF0T24mdFY/nntQoj5r0ETOdvqEv0wqlAbIT+yZMUwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFPE3CR/qjt/DZ3OPZwxYY5d4uqttMB8GA1UdIwQY MBaAFCPYRIxcuQOY5MKFzsnA9HZqyTHfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTloRWpGeTVBNWprd29YT3ljRDBkbXJKTWQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9mNGE4MGQtZjVmNy00NTIyLWI5YjUt Zjc3MmEwMTM5MDE2LzEvOFRjSkgtcU8zOE5uYzQ5bkRGaGpsM2k2cTIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9mNGE4MGQtZjVmNy00NTIyLWI5YjUtZjc3MmEwMTM5MDE2 LzEvSTloRWpGeTVBNWprd29YT3ljRDBkbXJKTWQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAWBAIAATAQAwMATmgDBAK5 migDAwHBqjAWBAIAAjAQAwUDIAEGKAMHACABBnwYZDANBgkqhkiG9w0BAQsFAAOC AQEAW74o/VI01gItZdIlIR/s4/xaSijFv3kgQFCJr13D0HeawCPYKeX2lGM5qSGC lx2qevGtDDIZV9TcTszd7r5rt52uZVBpgPOrjcqhexoskxe7fSL3QOjJmdD9ZD49 t5AZAnm2TKidNz5lJkpm5R4P3yYekuReFbvvjR4D0NWbT6Zg+lkCEwAfRF4sFgvN JFA0rJKS1u9AmhehxOy2TkR0gu6EoIvdg2dX6tqDN1SdfcxUQofjHVxiuiMbQBAF XJOeTGMW+LHDyNd9U95iApSGIc9WJA5epjTClzU6h4VmPMMoniF/spAz3LcpVSF/ uKDIgLI4HkQ0VuQZVPbsn7i2gw== -----END CERTIFICATE-----Generated at Tue Jan 27 12:42:43 2026 by rpki-client