This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/8YUiZ85PlRhz7TBGGcWg7NDNYWI.roa File: 8YUiZ85PlRhz7TBGGcWg7NDNYWI.roa (raw, json) Hash identifier: HluXeCvfpzkK5VcC8Fl2tqttrwtEbm95Qa1RMQM/WcE= Subject key identifier: F1:85:22:67:CE:4F:95:18:73:ED:30:46:19:C5:A0:EC:D0:CD:61:62 Certificate issuer: /CN=49f7c1a4677eb7826dae69de01a699b6201d6244 Certificate serial: 019B7AC8721B7F722A5D601F48B33BA39149 Authority key identifier: 49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/8YUiZ85PlRhz7TBGGcWg7NDNYWI.roa Signing time: Thu 01 Jan 2026 18:18:35 +0000 ROA not before: Thu 01 Jan 2026 18:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207592 IP address blocks: 141.5.96.0/19 maxlen: 19 2a02:d480:700::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:72:1b:7f:72:2a:5d:60:1f:48:b3:3b:a3:91:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49f7c1a4677eb7826dae69de01a699b6201d6244 Validity Not Before: Jan 1 18:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1852267ce4f951873ed304619c5a0ecd0cd6162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c5:63:5c:27:1f:bf:1d:d8:44:3d:39:e5:36: 7d:b7:0d:5c:10:47:45:c5:98:1a:ee:e4:00:8d:6a: 3e:e6:33:32:de:ec:f1:db:97:52:dc:f8:26:65:6b: 2d:1d:70:81:dc:74:fe:3b:0b:90:6b:f5:cc:e9:0d: ad:67:05:38:cc:d3:f2:62:e4:26:57:55:c5:dd:82: 70:4e:e2:85:fe:75:b3:96:34:16:74:06:d8:98:ac: c1:41:dd:f0:d0:9d:7a:57:99:a0:ad:64:9a:f6:bd: 30:bc:a0:a3:5c:f3:b3:d1:74:a1:90:b8:5c:37:38: 77:d9:f6:e7:6a:79:61:35:2c:e5:d6:a3:db:2f:e6: e1:1a:7f:6a:ef:94:36:01:93:ac:7a:39:92:cd:69: a7:60:dc:44:a5:9f:28:a8:11:c8:89:ad:ae:79:f7: aa:6a:25:97:e5:67:fd:e9:0d:b2:63:7e:4f:44:21: 87:a4:6c:c9:f8:4a:dd:69:76:d9:d7:91:ff:4b:76: 8b:1f:4c:ea:aa:ee:a3:3d:00:ea:8d:52:c4:d0:c7: 58:ed:98:16:71:53:e6:02:11:96:05:e0:24:19:7a: f5:5f:ac:61:be:7f:e3:33:09:6b:24:ae:9f:18:bd: 8f:3b:e3:f7:9c:2c:e3:e3:c2:95:c4:a4:7e:0d:eb: d7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:85:22:67:CE:4F:95:18:73:ED:30:46:19:C5:A0:EC:D0:CD:61:62 X509v3 Authority Key Identifier: keyid:49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/8YUiZ85PlRhz7TBGGcWg7NDNYWI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.5.96.0/19 IPv6: 2a02:d480:700::/42 Signature Algorithm: sha256WithRSAEncryption 0c:9c:ea:48:c9:7e:c7:31:4e:95:e1:6d:97:fb:a9:a3:3b:c2: 34:83:e2:3b:67:27:96:1f:2d:43:cb:59:ae:14:a1:de:71:43: 5c:79:2f:a4:6d:88:0f:8c:98:53:2e:45:48:88:b0:1a:2f:e1: 14:0d:84:7f:8f:20:34:04:69:b2:a2:0d:39:04:3f:b1:2f:cf: 98:39:d0:60:ea:53:13:b0:83:a4:9c:9c:99:70:70:90:40:34: 11:d5:af:91:21:5a:c4:d9:0d:f3:09:9d:bd:93:16:ba:b5:c4: 61:ea:da:1a:6f:e5:94:ca:c6:94:6c:5d:74:fb:c4:93:8a:26: 34:df:86:8f:a1:07:06:35:de:94:4a:28:59:cf:9f:9c:fb:e0: 67:8e:67:59:a3:30:43:51:9d:02:59:57:3a:b3:20:3c:07:01: 6d:b6:b5:56:1e:a3:6e:e2:3d:8a:20:e2:77:9e:0e:8e:6f:39: 2c:b4:82:99:e2:d9:fb:67:0c:48:55:ab:47:7b:00:12:23:cb: 22:24:d3:ff:88:98:8f:09:4e:29:1a:ac:31:39:c3:bf:99:52: 8e:4a:cd:c0:28:6b:73:03:c0:ea:e4:52:be:6a:fb:a7:f6:9d: 2c:b9:a5:d9:68:d3:71:76:45:7a:52:d2:d3:c7:c7:65:39:2f: 8a:d1:4c:84 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6yHIbf3IqXWAfSLM7o5FJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZjdjMWE0Njc3ZWI3ODI2ZGFlNjlkZTAxYTY5OWI2MjAx ZDYyNDQwHhcNMjYwMTAxMTgxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTg1MjI2N2NlNGY5NTE4NzNlZDMwNDYxOWM1YTBlY2QwY2Q2MTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08VjXCcfvx3YRD055TZ9tw1cEEdF xZga7uQAjWo+5jMy3uzx25dS3PgmZWstHXCB3HT+OwuQa/XM6Q2tZwU4zNPyYuQm V1XF3YJwTuKF/nWzljQWdAbYmKzBQd3w0J16V5mgrWSa9r0wvKCjXPOz0XShkLhc Nzh32fbnanlhNSzl1qPbL+bhGn9q75Q2AZOsejmSzWmnYNxEpZ8oqBHIia2uefeq aiWX5Wf96Q2yY35PRCGHpGzJ+ErdaXbZ15H/S3aLH0zqqu6jPQDqjVLE0MdY7ZgW cVPmAhGWBeAkGXr1X6xhvn/jMwlrJK6fGL2PO+P3nCzj48KVxKR+DevXywIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFPGFImfOT5UYc+0wRhnFoOzQzWFiMB8GA1UdIwQY MBaAFEn3waRnfreCba5p3gGmmbYgHWJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2ZmQnBHZC10NEp0cm1uZUFhYVp0aUFkWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS80ZGJkNjMtNzZiMS00YjAzLTlkZWEt NTBjMTZiZGQ1YzI0LzEvOFlVaVo4NVBsUmh6N1RCR0djV2c3TkROWVdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS80ZGJkNjMtNzZiMS00YjAzLTlkZWEtNTBjMTZiZGQ1YzI0 LzEvU2ZmQnBHZC10NEp0cm1uZUFhYVp0aUFkWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQFjQVgMA8E AgACMAkDBwYqAtSABwAwDQYJKoZIhvcNAQELBQADggEBAAyc6kjJfscxTpXhbZf7 qaM7wjSD4jtnJ5YfLUPLWa4Uod5xQ1x5L6RtiA+MmFMuRUiIsBov4RQNhH+PIDQE abKiDTkEP7Evz5g50GDqUxOwg6ScnJlwcJBANBHVr5EhWsTZDfMJnb2TFrq1xGHq 2hpv5ZTKxpRsXXT7xJOKJjTfho+hBwY13pRKKFnPn5z74GeOZ1mjMENRnQJZVzqz IDwHAW22tVYeo27iPYog4neeDo5vOSy0gpni2ftnDEhVq0d7ABIjyyIk0/+ImI8J TikarDE5w7+ZUo5KzcAoa3MDwOrkUr5q+6f2nSy5pdlo03F2RXpS0tPHx2U5L4rR TIQ= -----END CERTIFICATE-----Generated at Mon Jan 26 10:24:09 2026 by rpki-client