This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/8u-VD7FljxZvcLpnyXStSLCmbYQ.roa File: 8u-VD7FljxZvcLpnyXStSLCmbYQ.roa (raw, json) Hash identifier: IHUQhM8LauFximAQjPWFusy8Syac3KxUX2JvRXQgSUY= Subject key identifier: F2:EF:95:0F:B1:65:8F:16:6F:70:BA:67:C9:74:AD:48:B0:A6:6D:84 Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21 Certificate serial: 019B7F15051BAC6C293AFE9CB0E03C7CB966 Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/8u-VD7FljxZvcLpnyXStSLCmbYQ.roa Signing time: Fri 02 Jan 2026 14:20:42 +0000 ROA not before: Fri 02 Jan 2026 14:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204650 IP address blocks: 62.220.118.0/23 maxlen: 24 81.12.43.0/24 maxlen: 24 81.12.77.0/24 maxlen: 24 81.12.100.0/24 maxlen: 24 81.12.102.0/23 maxlen: 23 87.107.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:05:1b:ac:6c:29:3a:fe:9c:b0:e0:3c:7c:b9:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21 Validity Not Before: Jan 2 14:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2ef950fb1658f166f70ba67c974ad48b0a66d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a5:99:73:e5:1b:dd:a7:49:c6:0c:af:d2:bb: 12:26:a1:1c:53:70:e6:c8:61:af:19:fc:66:69:cc: d8:44:42:e2:84:15:36:41:a8:15:e5:27:60:f1:16: 9d:3c:9e:ad:29:ac:d7:06:e5:cf:52:51:4f:c6:3e: 35:7f:71:c6:c4:50:92:72:cb:61:f6:83:e5:fe:5b: 82:d4:e7:22:cd:56:7e:5c:7b:d6:2e:34:8c:7b:4d: 8c:58:b1:51:8d:a0:07:77:ad:5c:ab:41:9c:30:30: 3c:ca:18:bc:fa:f3:c8:42:d6:4f:fe:8d:33:21:af: 99:3d:b3:12:81:c6:da:ae:6d:21:3f:f9:67:f9:0f: 4e:3f:8a:ae:58:76:37:5c:0a:11:b1:84:a8:ec:11: 63:79:03:4e:2f:c0:4f:a6:0f:38:61:6d:9f:a8:0c: bb:20:43:16:e0:35:e0:50:30:c2:ce:e0:d0:02:9e: 41:77:cb:73:0b:c5:7b:9f:11:26:1d:02:17:ca:bc: 89:3a:71:98:37:72:ce:52:00:50:27:1f:f4:96:4a: 01:d1:b7:3e:3b:c8:06:1b:8f:9c:8d:d3:a5:8b:07: 6b:b7:bd:8c:02:d4:44:ab:6f:fc:70:a1:16:42:b2: 6f:8d:4f:6a:87:f4:7b:b3:6c:f4:18:a6:ed:00:52: e1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:EF:95:0F:B1:65:8F:16:6F:70:BA:67:C9:74:AD:48:B0:A6:6D:84 X509v3 Authority Key Identifier: keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/8u-VD7FljxZvcLpnyXStSLCmbYQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.220.118.0/23 81.12.43.0/24 81.12.77.0/24 81.12.100.0/24 81.12.102.0/23 87.107.100.0/22 Signature Algorithm: sha256WithRSAEncryption cf:8c:a2:0f:08:4b:91:0a:ee:43:71:92:bc:f9:3c:84:db:7c: b0:30:a5:bb:a6:cb:d2:c9:a2:62:ca:f7:d5:36:16:25:73:63: 2c:c3:6b:f2:c8:ff:33:d4:79:ab:37:38:9f:c2:d8:bf:a5:e4: 45:4f:91:fd:90:84:c7:a6:44:80:42:18:6f:3e:c9:cb:e4:29: d9:2c:77:67:7d:95:ec:d4:d4:7b:86:db:8b:a1:69:ca:de:67: 24:c5:bd:f4:95:42:43:33:3d:fb:c8:1b:01:23:65:0a:27:8a: ff:7e:84:df:8d:1c:15:7d:f2:20:88:ed:74:6d:5a:11:ad:3d: 8c:68:48:df:4e:2f:10:0d:39:8d:5d:45:35:43:37:d5:da:51: 83:99:8b:aa:f1:bf:06:8f:e4:a1:d6:e7:d5:b9:df:30:e0:fa: a3:ad:97:83:cb:9f:66:81:c7:f4:65:c2:40:fe:63:f4:a4:a5: 5f:8e:dc:cb:ab:f4:8e:b1:c7:3b:b4:2f:12:4a:b7:5e:32:a1: 94:6e:01:c7:ed:49:e9:26:34:84:81:66:db:be:5f:f2:0b:46: 9c:2b:a7:42:99:e6:75:75:c4:d9:3a:57:dd:44:a7:ec:19:5a: c0:bb:fe:fe:8e:a3:8c:cb:0b:0a:a6:f3:0a:dc:06:1f:86:02: 6c:06:43:f8 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt/FQUbrGwpOv6csOA8fLlmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk ZDVjMjEwHhcNMjYwMTAyMTQyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmVmOTUwZmIxNjU4ZjE2NmY3MGJhNjdjOTc0YWQ0OGIwYTY2ZDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKWZc+Ub3adJxgyv0rsSJqEcU3Dm yGGvGfxmaczYRELihBU2QagV5Sdg8RadPJ6tKazXBuXPUlFPxj41f3HGxFCScsth 9oPl/luC1OcizVZ+XHvWLjSMe02MWLFRjaAHd61cq0GcMDA8yhi8+vPIQtZP/o0z Ia+ZPbMSgcbarm0hP/ln+Q9OP4quWHY3XAoRsYSo7BFjeQNOL8BPpg84YW2fqAy7 IEMW4DXgUDDCzuDQAp5Bd8tzC8V7nxEmHQIXyryJOnGYN3LOUgBQJx/0lkoB0bc+ O8gGG4+cjdOliwdrt72MAtREq2/8cKEWQrJvjU9qh/R7s2z0GKbtAFLh0QIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFPLvlQ+xZY8Wb3C6Z8l0rUiwpm2EMB8GA1UdIwQY MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt NzZiMzNlNGNlODIxLzEvOHUtVkQ3RmxqeFp2Y0xwbnlYU3RTTENtYllRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBPtx2AwQA UQwrAwQAUQxNAwQAUQxkAwQBUQxmAwQCV2tkMA0GCSqGSIb3DQEBCwUAA4IBAQDP jKIPCEuRCu5DcZK8+TyE23ywMKW7psvSyaJiyvfVNhYlc2Msw2vyyP8z1HmrNzif wti/peRFT5H9kITHpkSAQhhvPsnL5CnZLHdnfZXs1NR7htuLoWnK3mckxb30lUJD Mz37yBsBI2UKJ4r/foTfjRwVffIgiO10bVoRrT2MaEjfTi8QDTmNXUU1QzfV2lGD mYuq8b8Gj+Sh1ufVud8w4PqjrZeDy59mgcf0ZcJA/mP0pKVfjtzLq/SOscc7tC8S SrdeMqGUbgHH7UnpJjSEgWbbvl/yC0acK6dCmeZ1dcTZOlfdRKfsGVrAu/7+jqOM ywsKpvMK3AYfhgJsBkP4 -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:43 2026 by rpki-client