This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/8iuwSKbcD40JlrWc-UFGLUuEj8g.roa File: 8iuwSKbcD40JlrWc-UFGLUuEj8g.roa (raw, json) Hash identifier: 6fOJSxE+CIikpa4WVDqWmdZFK3k2eETcYaoppQLIdkI= Subject key identifier: F2:2B:B0:48:A6:DC:0F:8D:09:96:B5:9C:F9:41:46:2D:4B:84:8F:C8 Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c Certificate serial: 019B7B3601552028048FB8D996EF9F0A45A0 Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/8iuwSKbcD40JlrWc-UFGLUuEj8g.roa Signing time: Thu 01 Jan 2026 20:18:15 +0000 ROA not before: Thu 01 Jan 2026 20:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5483 IP address blocks: 86.104.9.0/24 maxlen: 24 93.114.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:01:55:20:28:04:8f:b8:d9:96:ef:9f:0a:45:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c Validity Not Before: Jan 1 20:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f22bb048a6dc0f8d0996b59cf941462d4b848fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:63:28:a3:43:94:21:b6:3c:aa:96:45:92:7c: e8:d4:db:19:d4:9a:0d:4a:c9:ae:80:bd:2a:85:72: 8c:94:bd:eb:ed:ed:c6:db:14:7a:40:7c:e7:7d:db: 63:38:21:bc:eb:60:30:d9:6d:49:56:4a:be:7f:98: a4:f4:55:8b:e6:7d:72:83:d6:65:45:b4:88:86:d5: 75:89:88:0f:72:a6:96:a1:b3:12:c6:15:6c:25:66: 55:e8:d2:58:0d:03:e9:c4:f6:69:98:6b:86:9e:b1: cd:04:4c:7e:0f:8d:bf:ed:4b:d8:22:34:40:9a:80: ce:a2:0f:cb:1f:ec:59:d9:00:8d:75:16:77:93:7d: e0:22:a2:de:c6:91:b1:0b:83:78:19:b3:d3:12:fc: ac:91:ec:11:a9:ca:98:56:3f:eb:8e:a6:85:bd:8e: 88:b1:96:aa:24:fc:29:bd:3c:a2:05:cb:5f:24:03: 56:d5:a8:8f:80:30:e0:34:30:49:d6:78:98:8e:c1: b5:41:ea:63:c2:d9:cd:c2:be:f1:08:a3:46:5f:5a: 9b:be:4e:2d:da:85:b4:9c:15:93:1a:60:d7:8a:bb: b5:47:a8:58:e2:62:ee:12:1e:96:6d:c5:7c:13:55: 30:25:08:0e:52:c2:e2:d4:fb:c5:d3:ca:94:1d:6d: 42:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:2B:B0:48:A6:DC:0F:8D:09:96:B5:9C:F9:41:46:2D:4B:84:8F:C8 X509v3 Authority Key Identifier: keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/8iuwSKbcD40JlrWc-UFGLUuEj8g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.104.9.0/24 93.114.97.0/24 Signature Algorithm: sha256WithRSAEncryption 17:6c:40:b1:b3:f5:e4:ab:6c:3d:1e:16:66:2c:ec:91:0a:68: f5:f8:9e:97:67:7c:df:af:bf:42:6e:53:ae:10:42:21:5d:d4: 7a:d3:96:cb:5d:7b:9f:10:90:35:09:b0:dc:5e:03:a8:5b:97: 51:ec:9f:20:81:fa:da:e6:8d:35:fc:f1:92:49:13:61:30:99: e6:fb:ae:c4:db:e4:34:23:77:46:6d:6d:dd:98:d0:55:a4:af: a2:fa:f1:35:28:87:7f:06:dc:6d:27:ac:d9:af:0e:9c:79:c9: 44:64:98:4d:b2:6e:35:e6:a3:c8:74:d3:88:ee:a3:a5:41:e0: 3e:7f:48:46:53:ee:11:0d:a7:3c:81:1e:d9:be:73:b1:89:97: 3d:a4:0d:ec:0a:df:d2:2e:44:ff:8c:c6:4e:0a:08:5f:c4:f8: b0:6f:0a:9c:de:3a:af:59:9c:d6:ae:ad:c9:25:ad:9b:45:be: 49:bf:32:c1:84:bb:25:f1:dc:0c:27:de:a3:58:ce:1e:d7:9b: fd:2e:a7:e7:90:38:2a:29:f5:86:79:07:97:73:3b:ae:4e:f9: 07:96:7d:6d:8c:85:7f:d6:4b:93:18:6c:06:a2:c4:fc:5a:1d: 4e:db:ea:04:ad:c3:2b:db:da:be:24:b1:53:cd:0e:d1:a2:20: 3e:35:0f:35 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NgFVICgEj7jZlu+fCkWgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm NmMxNGMwHhcNMjYwMTAxMjAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjJiYjA0OGE2ZGMwZjhkMDk5NmI1OWNmOTQxNDYyZDRiODQ4ZmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWMoo0OUIbY8qpZFknzo1NsZ1JoN SsmugL0qhXKMlL3r7e3G2xR6QHznfdtjOCG862Aw2W1JVkq+f5ik9FWL5n1yg9Zl RbSIhtV1iYgPcqaWobMSxhVsJWZV6NJYDQPpxPZpmGuGnrHNBEx+D42/7UvYIjRA moDOog/LH+xZ2QCNdRZ3k33gIqLexpGxC4N4GbPTEvyskewRqcqYVj/rjqaFvY6I sZaqJPwpvTyiBctfJANW1aiPgDDgNDBJ1niYjsG1QepjwtnNwr7xCKNGX1qbvk4t 2oW0nBWTGmDXiru1R6hY4mLuEh6WbcV8E1UwJQgOUsLi1PvF08qUHW1CWwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPIrsEim3A+NCZa1nPlBRi1LhI/IMB8GA1UdIwQY MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt OTc3ODY3NGVkYzk3LzEvOGl1d1NLYmNENDBKbHJXYy1VRkdMVXVFajhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3 LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVmgJAwQA XXJhMA0GCSqGSIb3DQEBCwUAA4IBAQAXbECxs/Xkq2w9HhZmLOyRCmj1+J6XZ3zf r79CblOuEEIhXdR605bLXXufEJA1CbDcXgOoW5dR7J8ggfra5o01/PGSSRNhMJnm +67E2+Q0I3dGbW3dmNBVpK+i+vE1KId/BtxtJ6zZrw6ceclEZJhNsm415qPIdNOI 7qOlQeA+f0hGU+4RDac8gR7ZvnOxiZc9pA3sCt/SLkT/jMZOCghfxPiwbwqc3jqv WZzWrq3JJa2bRb5JvzLBhLsl8dwMJ96jWM4e15v9LqfnkDgqKfWGeQeXczuuTvkH ln1tjIV/1kuTGGwGosT8Wh1O2+oErcMr29q+JLFTzQ7RoiA+NQ81 -----END CERTIFICATE-----Generated at Sun Jan 25 21:24:33 2026 by rpki-client