This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/r8qCCvIMlIJga1tW0pg5E_VlYsc.roa File: r8qCCvIMlIJga1tW0pg5E_VlYsc.roa (raw, json) Hash identifier: 8/d868Y9tk1L4gtuTKfO2zc6sIo/t0ly5WZlYv+S/m8= Subject key identifier: AF:CA:82:0A:F2:0C:94:82:60:6B:5B:56:D2:98:39:13:F5:65:62:C7 Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21 Certificate serial: 019B7F15002C94CB5F24BCF903568810C837 Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/r8qCCvIMlIJga1tW0pg5E_VlYsc.roa Signing time: Fri 02 Jan 2026 14:20:41 +0000 ROA not before: Fri 02 Jan 2026 14:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59962 IP address blocks: 87.107.56.0/21 maxlen: 24 87.107.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:00:2c:94:cb:5f:24:bc:f9:03:56:88:10:c8:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21 Validity Not Before: Jan 2 14:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afca820af20c9482606b5b56d2983913f56562c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0b:26:9f:4f:a4:a3:d3:f2:89:8a:b0:5d:72: c1:31:86:84:3a:a2:fb:9a:fd:cd:25:bb:ca:ca:da: 57:20:c4:25:19:38:a4:76:50:69:2d:af:54:1a:e8: 8c:84:0c:5d:4c:3c:d8:b6:8f:13:3f:1b:1d:72:6d: b1:2d:7f:b4:85:46:2a:e4:cb:53:56:f6:7f:ac:b9: 42:5b:41:38:cb:09:d7:2a:f6:7b:20:5f:db:4d:79: 0e:58:bb:03:b1:f5:d4:7b:2c:31:7d:4b:65:25:e5: 27:87:92:69:65:76:ae:6f:19:f1:b8:b2:6a:5a:c5: 8e:15:46:b3:10:b2:da:ce:29:b1:db:f3:7f:77:22: 48:4d:bc:ad:81:42:7b:28:54:c3:44:85:dd:3f:5a: ee:c4:5c:a3:99:ec:36:32:c3:5b:3c:a3:2d:5b:fe: 9e:b8:9d:58:3c:0e:b3:a7:a4:63:57:cc:b7:99:05: 21:fb:ef:61:da:4f:ce:2c:1d:be:ff:42:11:05:51: 76:6a:40:34:c1:ab:78:1f:69:c6:f3:d7:86:c6:67: 94:73:17:3f:42:12:6d:1d:b7:99:e9:f3:d7:81:69: 64:fd:8a:24:74:24:fd:3b:e4:e8:3d:d2:2e:61:26: 15:9f:a8:52:59:18:7c:6a:7a:1f:b7:99:be:58:ed: a5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:CA:82:0A:F2:0C:94:82:60:6B:5B:56:D2:98:39:13:F5:65:62:C7 X509v3 Authority Key Identifier: keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/r8qCCvIMlIJga1tW0pg5E_VlYsc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.107.56.0/21 87.107.176.0/21 Signature Algorithm: sha256WithRSAEncryption 2f:67:f2:6f:4f:1d:57:a8:25:9c:46:33:b6:96:d3:b0:25:9c: 57:42:08:f3:64:1b:51:38:c4:01:a6:c0:75:e2:97:12:29:6a: 3a:e8:c1:19:4b:9c:ab:d4:9f:2d:51:62:06:61:5f:e0:c3:ad: d4:b8:ec:de:48:c8:01:53:d6:7f:ee:89:bb:35:a6:6e:10:ef: 45:6a:33:e7:3c:a5:68:46:7d:d9:65:65:3a:4d:26:8c:09:15: 04:3a:ff:10:25:05:77:5f:85:88:08:e9:17:a5:a9:d0:1f:40: a8:67:28:ad:0f:e6:37:b9:55:55:09:c8:73:12:48:1d:bc:6c: a3:67:f5:a1:49:a2:02:55:79:69:0d:7b:14:c8:e7:10:92:2f: 03:e9:dd:0f:9b:42:6d:76:ad:c8:77:10:9e:64:c9:84:c9:7b: 1c:7c:69:8f:40:50:ae:61:fd:ef:33:d0:57:4c:6b:49:5c:7c: 54:2f:28:4f:bd:e4:5b:97:ee:50:c6:cc:f8:6b:b5:0c:16:21: 97:7a:81:0f:30:1f:df:23:76:1c:a3:d6:03:ee:b3:88:69:87: f1:cc:f8:27:7c:46:e0:5f:47:27:97:9b:5b:ff:b3:82:ed:05: 06:e2:d8:53:db:a4:db:d0:6b:d6:08:54:5d:c1:e6:53:41:21: 9f:0b:c1:15 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FQAslMtfJLz5A1aIEMg3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk ZDVjMjEwHhcNMjYwMTAyMTQyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmNhODIwYWYyMGM5NDgyNjA2YjViNTZkMjk4MzkxM2Y1NjU2MmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQsmn0+ko9PyiYqwXXLBMYaEOqL7 mv3NJbvKytpXIMQlGTikdlBpLa9UGuiMhAxdTDzYto8TPxsdcm2xLX+0hUYq5MtT VvZ/rLlCW0E4ywnXKvZ7IF/bTXkOWLsDsfXUeywxfUtlJeUnh5JpZXaubxnxuLJq WsWOFUazELLazimx2/N/dyJITbytgUJ7KFTDRIXdP1ruxFyjmew2MsNbPKMtW/6e uJ1YPA6zp6RjV8y3mQUh++9h2k/OLB2+/0IRBVF2akA0wat4H2nG89eGxmeUcxc/ QhJtHbeZ6fPXgWlk/YokdCT9O+ToPdIuYSYVn6hSWRh8anoft5m+WO2lvwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK/KggryDJSCYGtbVtKYORP1ZWLHMB8GA1UdIwQY MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt NzZiMzNlNGNlODIxLzEvcjhxQ0N2SU1sSUpnYTF0VzBwZzVFX1ZsWXNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDV2s4AwQD V2uwMA0GCSqGSIb3DQEBCwUAA4IBAQAvZ/JvTx1XqCWcRjO2ltOwJZxXQgjzZBtR OMQBpsB14pcSKWo66MEZS5yr1J8tUWIGYV/gw63UuOzeSMgBU9Z/7om7NaZuEO9F ajPnPKVoRn3ZZWU6TSaMCRUEOv8QJQV3X4WICOkXpanQH0CoZyitD+Y3uVVVCchz EkgdvGyjZ/WhSaICVXlpDXsUyOcQki8D6d0Pm0Jtdq3IdxCeZMmEyXscfGmPQFCu Yf3vM9BXTGtJXHxULyhPveRbl+5Qxsz4a7UMFiGXeoEPMB/fI3Yco9YD7rOIaYfx zPgnfEbgX0cnl5tb/7OC7QUG4thT26Tb0GvWCFRdweZTQSGfC8EV -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:57 2026 by rpki-client