This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/8VX81mIN7vUsRhJW48dZspn-gfQ.roa File: 8VX81mIN7vUsRhJW48dZspn-gfQ.roa (raw, json) Hash identifier: opWYJ7DxQf0ldyigS/RlqXZSlYWzHJuairf51+euGWc= Subject key identifier: F1:55:FC:D6:62:0D:EE:F5:2C:46:12:56:E3:C7:59:B2:99:FE:81:F4 Certificate issuer: /CN=290cc4d0ad5dafc27aa4e342fa80e34814e845c3 Certificate serial: 019B79ED6561676D27BF1A69BAE0C1D17F5E Authority key identifier: 29:0C:C4:D0:AD:5D:AF:C2:7A:A4:E3:42:FA:80:E3:48:14:E8:45:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/8VX81mIN7vUsRhJW48dZspn-gfQ.roa Signing time: Thu 01 Jan 2026 14:19:19 +0000 ROA not before: Thu 01 Jan 2026 14:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210579 IP address blocks: 91.227.138.0/23 maxlen: 23 217.13.104.0/23 maxlen: 23 217.13.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:65:61:67:6d:27:bf:1a:69:ba:e0:c1:d1:7f:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=290cc4d0ad5dafc27aa4e342fa80e34814e845c3 Validity Not Before: Jan 1 14:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f155fcd6620deef52c461256e3c759b299fe81f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:34:93:2d:ba:24:1a:d8:b3:5e:ad:93:92:c1: 61:f7:d8:5c:44:66:f3:6c:2e:b5:ac:0b:ec:7c:83: 83:8e:63:13:c1:60:45:76:ad:52:c8:ca:53:26:f9: 1c:c8:a6:57:50:44:08:d0:a3:0e:70:c4:d1:c6:25: 4c:17:ca:5d:d8:99:9b:b7:4f:f5:cb:f9:52:94:35: 06:84:d0:04:ac:81:1e:31:df:89:b5:a9:04:1d:b5: b0:ba:c0:7e:af:83:10:85:ff:3a:e0:1f:7a:5b:50: 2c:c8:27:89:89:b9:f6:44:5d:9e:cf:98:11:b9:1a: 08:dc:d0:09:eb:ae:49:f9:d9:b5:c1:fa:ab:26:26: 21:7f:50:d1:da:68:50:ca:52:de:6f:64:a3:03:77: cc:67:b6:19:0d:5a:86:66:8c:04:ea:a4:2e:d7:76: c1:62:fd:da:fc:c9:51:9e:47:f9:82:fa:9c:0e:48: 6d:36:9d:2d:66:7a:9a:86:45:84:af:dd:95:0e:43: 2c:e9:47:e7:ca:69:3f:3a:24:80:89:bd:c4:c1:71: ae:75:bc:40:88:bc:a6:2f:77:af:e9:23:3d:ca:35: ed:12:82:a7:ed:b9:c1:e8:bd:29:78:64:53:b8:50: ab:a6:03:cf:aa:7a:93:a7:7d:15:24:ca:ca:b6:82: ce:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:55:FC:D6:62:0D:EE:F5:2C:46:12:56:E3:C7:59:B2:99:FE:81:F4 X509v3 Authority Key Identifier: keyid:29:0C:C4:D0:AD:5D:AF:C2:7A:A4:E3:42:FA:80:E3:48:14:E8:45:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/8VX81mIN7vUsRhJW48dZspn-gfQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.227.138.0/23 217.13.104.0/23 217.13.111.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:4b:9e:bb:16:32:bd:c9:8d:a4:c5:5a:5f:9d:f3:1a:a8:01: 9f:7e:fb:63:15:62:79:9c:99:86:5d:25:e2:6e:9c:81:a8:69: ae:cf:7f:6b:6e:a1:26:7c:f7:4f:9c:fc:be:f5:b2:5c:1d:26: cd:57:73:71:8a:2c:61:6d:ba:7f:d1:f9:2f:26:ce:a2:b9:f5: 41:0e:9f:67:4d:74:45:9f:bc:a9:a3:7a:0f:54:66:36:be:e2: 00:78:74:33:46:00:5b:6d:bc:b3:7d:79:8a:bf:4c:5c:14:f2: c5:41:15:50:05:73:a6:80:2b:45:d7:4f:ae:2b:f2:f1:8c:60: 77:61:ce:85:1b:e0:4f:2c:97:2d:14:3b:20:d9:7f:3d:ee:33: f3:5b:fa:1a:ee:5e:2c:2a:f6:0b:02:1d:4f:0e:67:1e:d0:6e: ac:69:e8:d2:cc:2a:11:e5:ed:b5:3d:8a:eb:39:3a:01:79:77: 74:0f:99:19:c7:4d:87:b7:49:ed:1a:d4:82:49:57:cf:a7:32: a6:93:fd:74:97:89:e1:ee:35:88:88:fc:52:15:d5:ae:bb:98: 6c:d6:a7:90:74:fe:56:58:7a:bd:c7:18:d8:90:36:40:bd:91: d4:02:1c:76:b4:e1:e3:bc:56:cd:75:d8:a5:98:07:a9:7a:f3: f7:93:d3:cf -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt57WVhZ20nvxppuuDB0X9eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MGNjNGQwYWQ1ZGFmYzI3YWE0ZTM0MmZhODBlMzQ4MTRl ODQ1YzMwHhcNMjYwMTAxMTQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTU1ZmNkNjYyMGRlZWY1MmM0NjEyNTZlM2M3NTliMjk5ZmU4MWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjSTLbokGtizXq2TksFh99hcRGbz bC61rAvsfIODjmMTwWBFdq1SyMpTJvkcyKZXUEQI0KMOcMTRxiVMF8pd2Jmbt0/1 y/lSlDUGhNAErIEeMd+JtakEHbWwusB+r4MQhf864B96W1AsyCeJibn2RF2ez5gR uRoI3NAJ665J+dm1wfqrJiYhf1DR2mhQylLeb2SjA3fMZ7YZDVqGZowE6qQu13bB Yv3a/MlRnkf5gvqcDkhtNp0tZnqahkWEr92VDkMs6Ufnymk/OiSAib3EwXGudbxA iLymL3ev6SM9yjXtEoKn7bnB6L0peGRTuFCrpgPPqnqTp30VJMrKtoLOCQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPFV/NZiDe71LEYSVuPHWbKZ/oH0MB8GA1UdIwQY MBaAFCkMxNCtXa/CeqTjQvqA40gU6EXDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1F6RTBLMWRyOEo2cE9OQy1vRGpTQlRvUmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85MjM1MmYtNDA1MS00NTBlLWIzYTYt MmUwMDc4Y2VlMTgyLzEvOFZYODFtSU43dlVzUmhKVzQ4ZFpzcG4tZ2ZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS85MjM1MmYtNDA1MS00NTBlLWIzYTYtMmUwMDc4Y2VlMTgy LzEvS1F6RTBLMWRyOEo2cE9OQy1vRGpTQlRvUmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW+OKAwQB 2Q1oAwQA2Q1vMA0GCSqGSIb3DQEBCwUAA4IBAQCNS567FjK9yY2kxVpfnfMaqAGf fvtjFWJ5nJmGXSXibpyBqGmuz39rbqEmfPdPnPy+9bJcHSbNV3Nxiixhbbp/0fkv Js6iufVBDp9nTXRFn7ypo3oPVGY2vuIAeHQzRgBbbbyzfXmKv0xcFPLFQRVQBXOm gCtF10+uK/LxjGB3Yc6FG+BPLJctFDsg2X897jPzW/oa7l4sKvYLAh1PDmce0G6s aejSzCoR5e21PYrrOToBeXd0D5kZx02Ht0ntGtSCSVfPpzKmk/10l4nh7jWIiPxS FdWuu5hs1qeQdP5WWHq9xxjYkDZAvZHUAhx2tOHjvFbNddilmAepevP3k9PP -----END CERTIFICATE-----Generated at Sun Jan 25 13:01:21 2026 by rpki-client