This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/iFH8kIof4Bf2ZNAAgpOOhNv9_48.roa File: iFH8kIof4Bf2ZNAAgpOOhNv9_48.roa (raw, json) Hash identifier: x8zBwmCQvHkgb9zrfYzXpfld67ZAlmEFxLD8Z9xwwSY= Subject key identifier: 88:51:FC:90:8A:1F:E0:17:F6:64:D0:00:82:93:8E:84:DB:FD:FF:8F Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Certificate serial: 019B7C12C4AD6C63E3298958091FC8D0A08F Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/iFH8kIof4Bf2ZNAAgpOOhNv9_48.roa Signing time: Fri 02 Jan 2026 00:19:23 +0000 ROA not before: Fri 02 Jan 2026 00:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212505 IP address blocks: 83.139.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:c4:ad:6c:63:e3:29:89:58:09:1f:c8:d0:a0:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Validity Not Before: Jan 2 00:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8851fc908a1fe017f664d00082938e84dbfdff8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:23:ba:6d:61:70:39:b7:50:5a:87:01:7d:0a: 44:a0:25:4a:94:a8:d3:18:72:37:e4:0a:b3:e6:4a: 9f:9f:3d:c5:36:62:ec:c8:91:20:f5:e8:5d:4e:47: 1f:04:5b:fa:66:aa:b6:c8:a4:63:e7:b3:0c:31:c5: 69:9f:eb:47:1f:68:76:bb:11:d0:d6:d3:99:ea:5b: a0:3b:27:49:94:da:bb:85:db:78:3c:29:43:a5:7c: f6:94:81:6f:c4:ac:cd:e1:cc:0a:3d:2b:08:93:cb: 44:d1:8b:00:2f:fc:1c:fd:e8:89:79:8c:99:f4:23: 05:19:f9:b3:8f:5b:e2:83:f0:9d:f5:01:7e:10:7b: ab:cf:c7:ce:6f:be:e4:85:c7:c6:72:4e:d7:d3:51: 55:a5:10:14:9b:a5:25:bf:16:ec:b9:60:21:e7:ed: 63:1c:52:97:39:31:d5:6b:d3:0b:f6:95:b9:62:d5: a4:f7:8e:a1:81:be:99:0c:5c:e3:b2:4f:c5:18:ac: 60:38:87:4f:5e:78:bd:43:a6:c5:26:d5:e5:b2:7e: 9b:2d:27:aa:fc:4f:a9:94:0f:cd:e7:3a:ad:21:f1: a8:20:4a:72:7e:95:f4:e4:90:8b:36:ff:05:7f:55: 6a:5e:ba:bd:c1:54:af:73:69:ff:09:ee:82:27:4b: 42:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:51:FC:90:8A:1F:E0:17:F6:64:D0:00:82:93:8E:84:DB:FD:FF:8F X509v3 Authority Key Identifier: keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/iFH8kIof4Bf2ZNAAgpOOhNv9_48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.139.19.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:d1:f0:e4:5b:39:ab:f8:82:b4:f2:c9:67:fe:88:20:07:17: 49:b1:42:99:bb:20:e4:37:57:59:0c:bf:a1:fe:86:c5:7b:b0: ce:61:30:51:7d:93:45:7d:33:77:06:04:c2:49:1b:ab:53:ff: 6b:84:db:73:57:69:dc:14:7e:f0:49:25:c7:61:87:71:ca:d1: 6c:bf:4e:24:f3:e2:c3:06:44:70:30:1d:6d:ce:a2:f9:0c:83: 8c:9e:96:15:f3:74:20:a3:4f:b1:ac:f7:94:7c:91:93:cb:e8: 02:4d:f7:93:77:e3:9a:a8:59:ce:0b:a8:6f:60:c2:3f:8d:69: 48:25:e0:7e:06:2d:f3:d7:f6:5b:4e:81:ef:fe:17:be:8b:c7: f3:1c:a0:28:54:92:7d:f0:51:27:b1:63:00:eb:0a:ff:3e:dd: f7:41:8b:89:eb:19:8e:1e:95:d2:07:99:24:a0:e6:a2:b3:fe: e8:68:b9:36:9b:9e:49:a1:36:da:90:a9:d7:06:72:0b:6f:35: 91:b7:d5:bc:bf:8b:b5:44:b4:0b:fb:5d:a3:1b:0d:0f:bc:d3: b0:3d:86:fe:e3:a7:5c:fa:96:22:74:f3:f8:d9:33:1c:c0:26: b7:65:0e:df:8e:4d:d6:3b:cf:2b:5b:82:f1:42:03:72:c5:00: 86:77:f9:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EsStbGPjKYlYCR/I0KCPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh ZTMyOGUwHhcNMjYwMTAyMDAxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODUxZmM5MDhhMWZlMDE3ZjY2NGQwMDA4MjkzOGU4NGRiZmRmZjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iO6bWFwObdQWocBfQpEoCVKlKjT GHI35Aqz5kqfnz3FNmLsyJEg9ehdTkcfBFv6Zqq2yKRj57MMMcVpn+tHH2h2uxHQ 1tOZ6lugOydJlNq7hdt4PClDpXz2lIFvxKzN4cwKPSsIk8tE0YsAL/wc/eiJeYyZ 9CMFGfmzj1vig/Cd9QF+EHurz8fOb77khcfGck7X01FVpRAUm6UlvxbsuWAh5+1j HFKXOTHVa9ML9pW5YtWk946hgb6ZDFzjsk/FGKxgOIdPXni9Q6bFJtXlsn6bLSeq /E+plA/N5zqtIfGoIEpyfpX05JCLNv8Ff1VqXrq9wVSvc2n/Ce6CJ0tCIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIhR/JCKH+AX9mTQAIKTjoTb/f+PMB8GA1UdIwQY MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt MzViYTI2N2RlZDNiLzEvaUZIOGtJb2Y0QmYyWk5BQWdwT09oTnY5XzQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU4sTMA0G CSqGSIb3DQEBCwUAA4IBAQBu0fDkWzmr+IK08sln/oggBxdJsUKZuyDkN1dZDL+h /obFe7DOYTBRfZNFfTN3BgTCSRurU/9rhNtzV2ncFH7wSSXHYYdxytFsv04k8+LD BkRwMB1tzqL5DIOMnpYV83Qgo0+xrPeUfJGTy+gCTfeTd+OaqFnOC6hvYMI/jWlI JeB+Bi3z1/ZbToHv/he+i8fzHKAoVJJ98FEnsWMA6wr/Pt33QYuJ6xmOHpXSB5kk oOais/7oaLk2m55JoTbakKnXBnILbzWRt9W8v4u1RLQL+12jGw0PvNOwPYb+46dc +pYidPP42TMcwCa3ZQ7fjk3WO88rW4LxQgNyxQCGd/kx -----END CERTIFICATE-----Generated at Sun Jan 25 15:28:42 2026 by rpki-client