This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/8HZ9HwPcvCjV2P3D1Xns45l-b7g.roa File: 8HZ9HwPcvCjV2P3D1Xns45l-b7g.roa (raw, json) Hash identifier: DvNeLlKBHFprmUWgVpmbGaSEgyoFZqbsKOxc6r1Ij8M= Subject key identifier: F0:76:7D:1F:03:DC:BC:28:D5:D8:FD:C3:D5:79:EC:E3:99:7E:6F:B8 Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Certificate serial: 019B7A5B137840A7240B04C62EC4A510908F Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/8HZ9HwPcvCjV2P3D1Xns45l-b7g.roa Signing time: Thu 01 Jan 2026 16:19:07 +0000 ROA not before: Thu 01 Jan 2026 16:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35950 IP address blocks: 153.112.216.0/23 maxlen: 23 153.112.216.0/24 maxlen: 24 153.112.217.0/24 maxlen: 24 153.112.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:13:78:40:a7:24:0b:04:c6:2e:c4:a5:10:90:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Validity Not Before: Jan 1 16:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0767d1f03dcbc28d5d8fdc3d579ece3997e6fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:2f:14:7b:0c:9f:1d:b6:5c:56:62:5b:3e:96: 3d:04:93:f3:78:a3:22:72:19:0d:de:61:ab:63:6a: 92:55:36:a1:f4:57:61:13:c7:2d:e8:a2:ab:dd:ba: ab:fb:ba:63:ce:72:c2:1e:b3:3f:55:85:84:b6:99: ce:f5:c9:9b:66:b4:12:0d:f3:78:49:37:50:dd:e3: 10:a3:62:84:30:e0:6b:f9:25:03:7b:54:35:8f:c4: 5b:71:15:0b:42:a7:a5:19:04:2b:c1:cf:07:bc:fb: 67:bf:e5:28:39:c0:3a:0a:09:ec:45:75:11:b2:39: 3e:65:13:e4:f8:19:4a:fb:6d:14:12:52:50:b8:18: 74:57:63:4a:cf:c8:1b:37:09:65:61:11:f7:48:9b: f9:b4:a3:08:68:14:95:49:f3:a3:3c:e1:2a:91:1d: e8:bc:f1:02:cd:82:56:f8:c2:16:d6:5e:04:da:e7: 6a:75:b1:82:2e:41:3a:90:e5:1b:98:f6:73:d3:d5: 7f:0b:21:db:f3:14:ae:b8:8a:e3:03:ab:54:c0:e7: b0:3b:58:87:67:08:f2:e0:ec:4c:fe:23:fc:6d:9a: 4a:4c:c8:43:1a:ff:4d:9c:7e:cc:35:09:1c:fe:9e: 3b:ea:93:e7:76:9f:ec:31:82:2f:5b:59:d8:bd:45: 5f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:76:7D:1F:03:DC:BC:28:D5:D8:FD:C3:D5:79:EC:E3:99:7E:6F:B8 X509v3 Authority Key Identifier: keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/8HZ9HwPcvCjV2P3D1Xns45l-b7g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 153.112.216.0/23 153.112.223.0/24 Signature Algorithm: sha256WithRSAEncryption 34:06:27:a9:a4:7f:6f:ab:2b:0c:e4:f4:b1:73:51:1d:f8:34: 7e:ba:90:96:14:3c:73:9a:fe:2e:66:31:da:9f:dc:32:a4:8e: 53:22:a2:1b:3b:53:4a:f8:1a:15:2c:d2:32:f3:8e:71:3d:8b: ff:6f:3f:83:7a:dd:f5:26:52:ee:ac:93:67:8b:2f:fe:cc:3a: d1:7b:29:35:10:4c:00:15:08:d7:4b:77:e8:ff:15:e5:88:e4: 23:29:49:03:1a:2d:8c:60:87:26:9f:13:08:0e:d0:74:f2:7b: 0a:b9:f3:e0:07:a0:49:94:47:ef:5c:6f:35:fb:8d:2c:7e:4e: a8:e8:cf:db:e7:8e:b2:7e:1a:28:7c:4f:e4:07:03:11:3b:d1: 5f:a2:fd:b4:3d:47:5d:25:33:c9:4a:67:7c:2e:cd:8d:31:c3: 83:b3:c7:8f:b7:14:a4:87:89:ca:03:49:b0:ed:9a:fb:06:d6: 18:da:58:1f:20:bb:2e:15:a6:fc:f6:f9:dd:a3:a3:29:cd:c6: d7:bf:aa:b6:45:bd:88:c9:07:0d:15:ec:74:14:81:17:34:8b: 3b:ff:88:56:08:15:36:68:8e:55:a9:e2:b4:a3:2d:41:2e:b4: 6b:c0:6b:f9:a8:fe:6d:8e:b0:ad:fb:55:a1:e4:5a:a5:ce:9b: d7:3f:8f:e2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WxN4QKckCwTGLsSlEJCPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODUyZmZiYTdkNTdjNWE4YWZiYjZlYTViZWFmN2RmZWMw YzE0NWEwHhcNMjYwMTAxMTYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDc2N2QxZjAzZGNiYzI4ZDVkOGZkYzNkNTc5ZWNlMzk5N2U2ZmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5y8UewyfHbZcVmJbPpY9BJPzeKMi chkN3mGrY2qSVTah9FdhE8ct6KKr3bqr+7pjznLCHrM/VYWEtpnO9cmbZrQSDfN4 STdQ3eMQo2KEMOBr+SUDe1Q1j8RbcRULQqelGQQrwc8HvPtnv+UoOcA6CgnsRXUR sjk+ZRPk+BlK+20UElJQuBh0V2NKz8gbNwllYRH3SJv5tKMIaBSVSfOjPOEqkR3o vPECzYJW+MIW1l4E2udqdbGCLkE6kOUbmPZz09V/CyHb8xSuuIrjA6tUwOewO1iH Zwjy4OxM/iP8bZpKTMhDGv9NnH7MNQkc/p476pPndp/sMYIvW1nYvUVfCQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPB2fR8D3Lwo1dj9w9V57OOZfm+4MB8GA1UdIwQY MBaAFLSFL/un1Xxaivu26lvq99/sDBRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQt ZjcxMDM4ZTk2N2E0LzEvOEhaOUh3UGN2Q2pWMlAzRDFYbnM0NWwtYjdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQtZjcxMDM4ZTk2N2E0 LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBmXDYAwQA mXDfMA0GCSqGSIb3DQEBCwUAA4IBAQA0BieppH9vqysM5PSxc1Ed+DR+upCWFDxz mv4uZjHan9wypI5TIqIbO1NK+BoVLNIy845xPYv/bz+Det31JlLurJNniy/+zDrR eyk1EEwAFQjXS3fo/xXliOQjKUkDGi2MYIcmnxMIDtB08nsKufPgB6BJlEfvXG81 +40sfk6o6M/b546yfhoofE/kBwMRO9Ffov20PUddJTPJSmd8Ls2NMcODs8ePtxSk h4nKA0mw7Zr7BtYY2lgfILsuFab89vndo6MpzcbXv6q2Rb2IyQcNFex0FIEXNIs7 /4hWCBU2aI5VqeK0oy1BLrRrwGv5qP5tjrCt+1Wh5FqlzpvXP4/i -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:36 2026 by rpki-client