This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/8f4-tHMe1_zfMdQiJbY1PQ5lT3c.roa File: 8f4-tHMe1_zfMdQiJbY1PQ5lT3c.roa (raw, json) Hash identifier: 1EfLr/LiMTpt9+tNTY1NQrpFVMSuEtCowZrWCkArzsw= Subject key identifier: F1:FE:3E:B4:73:1E:D7:FC:DF:31:D4:22:25:B6:35:3D:0E:65:4F:77 Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Certificate serial: 019B7A5B1572C1AE167770540F75EEFCFEFF Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/8f4-tHMe1_zfMdQiJbY1PQ5lT3c.roa Signing time: Thu 01 Jan 2026 16:19:08 +0000 ROA not before: Thu 01 Jan 2026 16:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 138380 IP address blocks: 153.112.200.0/23 maxlen: 24 153.112.201.0/24 maxlen: 24 153.112.204.0/24 maxlen: 24 192.157.12.0/23 maxlen: 24 192.157.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:15:72:c1:ae:16:77:70:54:0f:75:ee:fc:fe:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Validity Not Before: Jan 1 16:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1fe3eb4731ed7fcdf31d42225b6353d0e654f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a2:b3:3e:a5:9c:4c:a8:a0:91:41:68:18:d7: eb:be:e3:60:ec:e9:0b:23:4b:05:25:5e:c7:d0:17: 4a:b4:42:a1:27:71:a2:04:23:8e:4b:51:13:5b:27: 90:20:c1:3a:ae:80:2a:12:d5:c0:10:56:a1:93:96: 9b:39:22:ca:08:b6:6c:08:08:56:05:75:85:5c:70: b2:2d:64:a8:0d:5e:e8:44:a0:7b:47:84:4b:9e:4e: ee:7b:27:a1:92:40:26:59:29:a1:d5:f2:a7:fd:1b: 3b:bf:5d:5e:40:0b:69:8c:13:2f:c7:39:63:b6:d7: 4e:cb:02:75:fd:2b:27:6d:cf:02:34:13:cb:e3:92: 39:ef:72:54:d7:62:9f:1a:97:b2:63:5a:c8:aa:8a: a5:0e:39:08:b7:04:c9:67:da:26:43:28:86:0a:2d: 72:a0:06:ac:16:d0:2c:31:df:13:97:2f:25:80:8b: 78:7c:13:a5:c4:18:e5:52:3e:6a:90:ca:ef:2a:2f: ce:c2:6e:c7:c0:33:e0:75:07:72:0c:d4:3e:1e:d5: 40:5b:35:fb:a7:54:d2:94:08:99:41:4b:ca:66:cd: a4:3a:c2:3c:1e:02:f7:a3:eb:ee:aa:b3:81:ee:d3: 87:7a:a3:a4:57:4a:57:cf:04:dd:cd:7e:0c:da:c0: 80:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:FE:3E:B4:73:1E:D7:FC:DF:31:D4:22:25:B6:35:3D:0E:65:4F:77 X509v3 Authority Key Identifier: keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/8f4-tHMe1_zfMdQiJbY1PQ5lT3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 153.112.200.0/23 153.112.204.0/24 192.157.12.0/23 Signature Algorithm: sha256WithRSAEncryption 92:60:ed:d0:7b:d1:31:17:9d:0f:2c:4e:e7:ee:63:92:30:02: ae:67:79:a6:44:36:79:8c:c6:df:ae:7f:0b:98:df:d7:df:00: d9:bc:99:bc:5a:29:a5:08:db:ba:82:a1:b6:d8:0e:4b:1e:7a: 97:1d:11:c2:d7:05:ea:0a:7e:74:08:74:a8:58:10:82:0a:b0: 05:e8:42:0a:11:9b:3b:dd:7f:9d:43:06:00:d4:5a:2d:c2:11: 10:d6:ff:c8:67:fd:d6:68:46:9d:07:5d:f3:6c:9c:d0:3a:d0: 40:e3:d0:f4:db:1e:ad:6a:f0:98:d7:31:be:e4:3d:16:24:0d: 12:9b:92:34:19:80:30:c2:5e:3c:e2:26:57:54:3b:74:93:89: 0f:03:51:ed:e9:4b:8d:ef:4a:7b:34:51:8b:55:28:66:29:de: 90:e0:2f:ab:8a:3d:07:13:91:72:80:63:67:f4:b9:3b:c7:81: bb:5d:a9:3c:01:28:85:c1:b5:c4:58:2c:38:23:d5:80:ce:99: e9:bd:6a:50:97:44:1c:ca:ee:e3:94:cf:e4:86:0d:fa:fa:95: 60:ba:f3:aa:84:0d:69:c8:35:bf:63:ce:93:89:43:cb:ec:fb: 38:cd:f4:f6:bd:e5:85:09:64:bd:71:69:82:cb:70:b7:92:6b: db:82:58:2f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6WxVywa4Wd3BUD3Xu/P7/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODUyZmZiYTdkNTdjNWE4YWZiYjZlYTViZWFmN2RmZWMw YzE0NWEwHhcNMjYwMTAxMTYxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWZlM2ViNDczMWVkN2ZjZGYzMWQ0MjIyNWI2MzUzZDBlNjU0Zjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqKzPqWcTKigkUFoGNfrvuNg7OkL I0sFJV7H0BdKtEKhJ3GiBCOOS1ETWyeQIME6roAqEtXAEFahk5abOSLKCLZsCAhW BXWFXHCyLWSoDV7oRKB7R4RLnk7ueyehkkAmWSmh1fKn/Rs7v11eQAtpjBMvxzlj ttdOywJ1/Ssnbc8CNBPL45I573JU12KfGpeyY1rIqoqlDjkItwTJZ9omQyiGCi1y oAasFtAsMd8Tly8lgIt4fBOlxBjlUj5qkMrvKi/Owm7HwDPgdQdyDNQ+HtVAWzX7 p1TSlAiZQUvKZs2kOsI8HgL3o+vuqrOB7tOHeqOkV0pXzwTdzX4M2sCA+QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPH+PrRzHtf83zHUIiW2NT0OZU93MB8GA1UdIwQY MBaAFLSFL/un1Xxaivu26lvq99/sDBRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQt ZjcxMDM4ZTk2N2E0LzEvOGY0LXRITWUxX3pmTWRRaUpiWTFQUTVsVDNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQtZjcxMDM4ZTk2N2E0 LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBmXDIAwQA mXDMAwQBwJ0MMA0GCSqGSIb3DQEBCwUAA4IBAQCSYO3Qe9ExF50PLE7n7mOSMAKu Z3mmRDZ5jMbfrn8LmN/X3wDZvJm8WimlCNu6gqG22A5LHnqXHRHC1wXqCn50CHSo WBCCCrAF6EIKEZs73X+dQwYA1FotwhEQ1v/IZ/3WaEadB13zbJzQOtBA49D02x6t avCY1zG+5D0WJA0Sm5I0GYAwwl484iZXVDt0k4kPA1Ht6UuN70p7NFGLVShmKd6Q 4C+rij0HE5FygGNn9Lk7x4G7Xak8ASiFwbXEWCw4I9WAzpnpvWpQl0Qcyu7jlM/k hg36+pVguvOqhA1pyDW/Y86TiUPL7Ps4zfT2veWFCWS9cWmCy3C3kmvbglgv -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:49 2026 by rpki-client