This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/8q11ZXlsuNY-5BnKL-DZjg8yXCc.roa File: 8q11ZXlsuNY-5BnKL-DZjg8yXCc.roa (raw, json) Hash identifier: ouWFvShqIiSVhc7XwLMg1RvjjhIXPIC2TEXQAFnoIdY= Subject key identifier: F2:AD:75:65:79:6C:B8:D6:3E:E4:19:CA:2F:E0:D9:8E:0F:32:5C:27 Certificate issuer: /CN=776405e0283743cf52180d5b13812dfba3ded7fc Certificate serial: 019B77594AC6F715C10EC8824CB38B5D412B Authority key identifier: 77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/8q11ZXlsuNY-5BnKL-DZjg8yXCc.roa Signing time: Thu 01 Jan 2026 02:18:19 +0000 ROA not before: Thu 01 Jan 2026 02:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12417 IP address blocks: 212.44.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:4a:c6:f7:15:c1:0e:c8:82:4c:b3:8b:5d:41:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=776405e0283743cf52180d5b13812dfba3ded7fc Validity Not Before: Jan 1 02:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2ad7565796cb8d63ee419ca2fe0d98e0f325c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:de:bc:06:0e:1c:c6:ac:7a:41:81:8d:c3:7e: 83:03:5f:8e:c4:68:7c:15:26:61:33:66:52:d1:d8: 8d:97:c9:29:34:1d:37:ac:71:f4:82:c0:f7:54:ee: 7f:2c:c4:20:8c:21:51:9d:3c:65:ab:8d:5e:41:e8: 1e:59:bb:6e:a8:77:26:88:e4:a0:a7:1d:2b:9e:60: a8:e8:f8:00:76:4b:69:72:53:e9:44:52:94:34:cc: 21:84:86:45:69:3a:87:4d:a5:34:cf:1e:e0:73:0a: f5:bd:01:24:8c:c7:54:cf:21:3f:1b:fe:ea:3a:71: 8b:4d:fc:23:3f:09:06:3b:da:54:a6:5a:03:4b:5e: 5b:3a:d8:93:b5:c5:5d:42:f2:c6:c1:bd:34:29:d8: d2:af:5f:89:b3:26:de:44:b3:92:56:60:74:77:83: 43:ad:b5:0f:4c:6c:fb:bf:b9:85:17:f9:53:36:0d: 78:26:c6:d2:a3:c1:df:14:9b:9f:98:f2:41:e4:7e: ca:cf:b8:1f:c3:95:67:b9:1d:90:05:2b:e0:b9:b3: 25:fe:20:18:1a:64:2f:c2:91:7a:ad:d2:72:f2:ea: 36:f9:4e:53:fc:e5:19:82:f1:f2:18:45:41:3a:0a: d8:a9:69:9f:69:8b:0f:03:98:c5:09:25:35:ab:40: 01:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:AD:75:65:79:6C:B8:D6:3E:E4:19:CA:2F:E0:D9:8E:0F:32:5C:27 X509v3 Authority Key Identifier: keyid:77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/8q11ZXlsuNY-5BnKL-DZjg8yXCc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.44.127.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:14:42:df:64:b0:31:ab:16:1e:c3:27:2e:0e:2d:a1:7c:38: fb:40:4f:78:ea:73:74:4a:0c:9f:73:6c:a8:3f:5a:87:e5:79: 2d:bb:d2:7a:d9:d7:64:a7:54:59:a7:81:aa:77:68:75:c3:34: d9:df:20:c3:e9:ed:cf:af:5a:e8:0a:38:72:2a:70:00:04:b7: a0:57:9b:9a:57:ad:1d:17:03:7a:40:17:13:7d:28:97:30:2e: 24:cd:37:49:38:f2:47:9d:2e:e0:05:c9:77:4f:ca:29:e2:d7: b4:3e:28:e9:ff:be:60:e3:a1:77:cd:39:c3:c7:c9:61:5a:ce: f7:66:60:78:7f:55:84:44:d5:01:21:50:26:16:f6:84:19:ed: 6d:b2:33:c3:ef:aa:31:96:af:e4:d9:3c:07:18:6a:0a:06:7f: db:c1:3b:1f:17:4a:05:60:eb:78:5e:35:ca:87:e5:6a:1d:58: c6:3f:70:db:a8:ae:42:1b:94:8b:a5:ee:59:22:19:8f:a7:19: 90:98:bd:ac:3e:64:f9:fd:d3:bd:d8:49:0b:a5:57:e4:db:1a: 3e:77:de:c4:40:b6:75:67:e8:71:d8:f2:1d:2e:95:d9:58:3f: 37:21:28:d7:ab:c6:11:d4:cb:4e:f5:f0:16:17:0c:40:0c:37: 85:3c:e9:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WUrG9xXBDsiCTLOLXUErMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NjQwNWUwMjgzNzQzY2Y1MjE4MGQ1YjEzODEyZGZiYTNk ZWQ3ZmMwHhcNMjYwMTAxMDIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmFkNzU2NTc5NmNiOGQ2M2VlNDE5Y2EyZmUwZDk4ZTBmMzI1YzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN68Bg4cxqx6QYGNw36DA1+OxGh8 FSZhM2ZS0diNl8kpNB03rHH0gsD3VO5/LMQgjCFRnTxlq41eQegeWbtuqHcmiOSg px0rnmCo6PgAdktpclPpRFKUNMwhhIZFaTqHTaU0zx7gcwr1vQEkjMdUzyE/G/7q OnGLTfwjPwkGO9pUploDS15bOtiTtcVdQvLGwb00KdjSr1+JsybeRLOSVmB0d4ND rbUPTGz7v7mFF/lTNg14JsbSo8HfFJufmPJB5H7Kz7gfw5VnuR2QBSvgubMl/iAY GmQvwpF6rdJy8uo2+U5T/OUZgvHyGEVBOgrYqWmfaYsPA5jFCSU1q0AB1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPKtdWV5bLjWPuQZyi/g2Y4PMlwnMB8GA1UdIwQY MBaAFHdkBeAoN0PPUhgNWxOBLfuj3tf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDJRRjRDZzNRODlTR0ExYkU0RXQtNlBlMV93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8zNjM1ODYtOWI4MC00NTdiLWJkZjAt NmNhNTJlMDI5Y2JlLzEvOHExMVpYbHN1TlktNUJuS0wtRFpqZzh5WENjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8zNjM1ODYtOWI4MC00NTdiLWJkZjAtNmNhNTJlMDI5Y2Jl LzEvZDJRRjRDZzNRODlTR0ExYkU0RXQtNlBlMV93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Cx/MA0G CSqGSIb3DQEBCwUAA4IBAQAvFELfZLAxqxYewycuDi2hfDj7QE946nN0Sgyfc2yo P1qH5Xktu9J62ddkp1RZp4Gqd2h1wzTZ3yDD6e3Pr1roCjhyKnAABLegV5uaV60d FwN6QBcTfSiXMC4kzTdJOPJHnS7gBcl3T8op4te0Pijp/75g46F3zTnDx8lhWs73 ZmB4f1WERNUBIVAmFvaEGe1tsjPD76oxlq/k2TwHGGoKBn/bwTsfF0oFYOt4XjXK h+VqHVjGP3DbqK5CG5SLpe5ZIhmPpxmQmL2sPmT5/dO92EkLpVfk2xo+d97EQLZ1 Z+hx2PIdLpXZWD83ISjXq8YR1MtO9fAWFwxADDeFPOkA -----END CERTIFICATE-----Generated at Sun Jan 25 21:28:44 2026 by rpki-client