This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/8B8vNJprt_a72jOmXQM-F490tXo.roa File: 8B8vNJprt_a72jOmXQM-F490tXo.roa (raw, json) Hash identifier: F5YCvPhlVWdx+f7EZy0fcKquQGYn+k90R79Opfv4HL8= Subject key identifier: F0:1F:2F:34:9A:6B:B7:F6:BB:DA:33:A6:5D:03:3E:17:8F:74:B5:7A Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019B77C741A63AAF97142AE47627A7B8AF24 Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/8B8vNJprt_a72jOmXQM-F490tXo.roa Signing time: Thu 01 Jan 2026 04:18:25 +0000 ROA not before: Thu 01 Jan 2026 04:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60544 IP address blocks: 62.76.205.0/24 maxlen: 32 194.226.244.0/23 maxlen: 32 195.209.149.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:41:a6:3a:af:97:14:2a:e4:76:27:a7:b8:af:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Jan 1 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f01f2f349a6bb7f6bbda33a65d033e178f74b57a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c9:da:80:80:0a:c7:1c:56:f4:c1:72:c1:b4: 21:e6:01:c7:a3:bf:de:b6:8f:22:2e:63:2f:ec:a3: ae:e5:a0:1b:0a:4c:c0:d1:3a:d0:64:a8:c5:21:4b: 43:f9:43:3a:7c:1b:72:93:82:91:ae:28:76:9a:5f: e6:23:95:a1:9b:c5:d0:02:3c:0c:d3:ae:0b:c0:3b: 3f:d7:2b:05:b0:99:b4:07:f7:3c:02:d2:1f:6b:2b: 62:22:ee:d5:1d:cc:0e:6d:85:5c:ec:d4:1a:58:31: 3c:c0:91:73:d1:3b:52:e3:f3:87:d4:c4:0f:fe:93: f3:eb:bf:84:a2:ea:34:08:8e:58:0c:5a:23:17:d5: 47:90:4d:7d:5e:92:56:c0:97:6e:d0:bc:f1:47:50: a2:d9:59:06:0d:d6:dc:6a:6c:14:23:e0:6b:91:1d: cb:02:09:d1:d7:44:be:fb:af:07:61:6c:34:50:50: de:4f:81:84:62:8b:22:13:4b:b1:6f:b9:e2:29:54: 7d:65:de:10:9d:5d:ae:09:a5:11:2d:a4:45:00:3a: 8e:3c:de:4b:00:f2:99:46:32:27:59:87:89:51:16: 5b:d8:30:76:17:05:72:78:ca:90:fe:2e:ec:3c:cc: e0:99:7b:40:f2:33:53:f2:96:52:0d:d7:91:de:8e: 42:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:1F:2F:34:9A:6B:B7:F6:BB:DA:33:A6:5D:03:3E:17:8F:74:B5:7A X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/8B8vNJprt_a72jOmXQM-F490tXo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.76.205.0/24 194.226.244.0/23 195.209.149.0/24 Signature Algorithm: sha256WithRSAEncryption 14:39:40:43:2b:8f:9c:1e:17:08:8f:64:d1:0f:8c:3d:7b:d1: df:26:ca:39:64:60:91:ae:37:c5:ea:b1:5b:b6:1f:df:8b:93: 4a:7d:62:88:d1:1b:b6:29:d4:93:b1:a0:eb:fd:2d:38:a2:56: 8d:3a:97:0a:fc:a1:e3:4a:92:1e:11:fa:2c:c3:8c:42:93:c4: 83:5e:ad:b4:4f:5b:86:95:99:d1:43:05:7f:ad:7c:bb:ce:38: 2a:b3:9a:ed:a9:ab:e7:9c:9a:78:b0:69:cd:15:99:34:00:fb: 6c:0a:5d:e7:47:44:ea:74:61:6a:e3:58:25:c8:a1:84:37:90: 14:c3:7b:4a:0d:4a:27:70:b6:33:98:f5:70:6c:2b:8b:ce:f1: 15:93:79:b3:26:fe:3f:73:56:3f:36:bb:bd:87:29:22:08:e6: e3:f9:85:66:57:e7:2e:54:fa:48:57:8e:e9:86:8f:51:51:45: 4d:0f:c4:8d:0b:9f:c2:62:b1:4c:e8:9d:83:46:ca:76:3b:6c: 67:b1:62:5d:49:b4:1e:8b:ac:e5:6b:23:4c:73:52:1f:f3:8d: 9c:9c:54:73:5b:ec:5a:47:b4:9e:d1:df:d4:d0:bb:69:32:4b: b9:fc:5d:1b:39:f8:a2:2f:af:5a:28:67:c5:97:33:39:49:f7: 28:dd:e0:2f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3x0GmOq+XFCrkdienuK8kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjYwMTAxMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDFmMmYzNDlhNmJiN2Y2YmJkYTMzYTY1ZDAzM2UxNzhmNzRiNTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMnagIAKxxxW9MFywbQh5gHHo7/e to8iLmMv7KOu5aAbCkzA0TrQZKjFIUtD+UM6fBtyk4KRrih2ml/mI5Whm8XQAjwM 064LwDs/1ysFsJm0B/c8AtIfaytiIu7VHcwObYVc7NQaWDE8wJFz0TtS4/OH1MQP /pPz67+Eouo0CI5YDFojF9VHkE19XpJWwJdu0LzxR1Ci2VkGDdbcamwUI+BrkR3L AgnR10S++68HYWw0UFDeT4GEYosiE0uxb7niKVR9Zd4QnV2uCaURLaRFADqOPN5L APKZRjInWYeJURZb2DB2FwVyeMqQ/i7sPMzgmXtA8jNT8pZSDdeR3o5CXQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPAfLzSaa7f2u9ozpl0DPhePdLV6MB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvOEI4dk5KcHJ0X2E3MmpPbVhRTS1GNDkwdFhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPkzNAwQB wuL0AwQAw9GVMA0GCSqGSIb3DQEBCwUAA4IBAQAUOUBDK4+cHhcIj2TRD4w9e9Hf Jso5ZGCRrjfF6rFbth/fi5NKfWKI0Ru2KdSTsaDr/S04olaNOpcK/KHjSpIeEfos w4xCk8SDXq20T1uGlZnRQwV/rXy7zjgqs5rtqavnnJp4sGnNFZk0APtsCl3nR0Tq dGFq41glyKGEN5AUw3tKDUoncLYzmPVwbCuLzvEVk3mzJv4/c1Y/Nru9hykiCObj +YVmV+cuVPpIV47pho9RUUVND8SNC5/CYrFM6J2DRsp2O2xnsWJdSbQei6zlayNM c1If842cnFRzW+xaR7Se0d/U0LtpMku5/F0bOfiiL69aKGfFlzM5Sfco3eAv -----END CERTIFICATE-----Generated at Sun Jan 25 14:39:44 2026 by rpki-client