This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/8XkVNhQzJTRinlrUY9NMe-jgS4A.roa File: 8XkVNhQzJTRinlrUY9NMe-jgS4A.roa (raw, json) Hash identifier: G+utkMfL+L6vdlEWdaNJIG/k/Ibg5tyzOCFT4hFaX5c= Subject key identifier: F1:79:15:36:14:33:25:34:62:9E:5A:D4:63:D3:4C:7B:E8:E0:4B:80 Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019B76EB0ED649F7C7D24CFB78BE91AECE96 Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/8XkVNhQzJTRinlrUY9NMe-jgS4A.roa Signing time: Thu 01 Jan 2026 00:17:54 +0000 ROA not before: Thu 01 Jan 2026 00:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199841 IP address blocks: 84.38.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:0e:d6:49:f7:c7:d2:4c:fb:78:be:91:ae:ce:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Jan 1 00:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f179153614332534629e5ad463d34c7be8e04b80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cf:c6:02:04:02:57:d8:9e:3e:85:ca:9f:4e: 74:81:00:78:63:c5:83:9d:cc:04:12:e8:72:49:0a: a7:90:b4:26:9e:b7:8d:b5:b0:12:86:e3:92:d2:21: 07:65:9f:ac:a7:94:80:ce:52:79:61:38:86:28:75: 16:bf:82:35:51:c7:b4:52:f4:f0:64:24:38:a5:00: b9:27:15:3f:3e:aa:e0:7d:d5:94:58:55:9e:66:8e: c9:67:f6:de:68:df:5d:a6:fe:c6:02:52:51:0e:a9: 6e:4a:ea:5f:bd:3a:00:73:64:b0:01:89:33:82:58: d7:4a:4b:10:0c:98:c4:2a:44:db:14:40:17:d8:d1: d3:72:05:fb:d0:85:c5:21:dd:76:cb:ad:e6:73:6d: 10:b5:e4:14:df:d7:bd:63:46:73:88:a6:57:bf:a9: 07:54:f3:c8:50:1c:6d:bd:26:7d:19:82:ec:c8:c2: 9d:13:a2:a6:70:09:6d:4b:00:6e:80:e4:22:fa:ab: 73:66:79:95:67:4c:dc:3a:7d:62:6d:90:89:9c:22: 8f:9e:43:e2:8a:4c:0a:15:f6:e3:d3:f9:17:36:71: 38:c2:ef:0d:ee:59:8d:a4:0a:76:f6:7b:8e:e6:68: 69:5e:c2:96:8d:20:12:27:55:ee:19:56:12:71:00: 9c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:79:15:36:14:33:25:34:62:9E:5A:D4:63:D3:4C:7B:E8:E0:4B:80 X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/8XkVNhQzJTRinlrUY9NMe-jgS4A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.38.242.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:80:8a:18:58:ea:94:f8:f1:99:d4:5c:a4:d8:16:d2:1e:f1: e4:c9:f7:59:51:a0:ba:d2:a9:7c:88:e4:5a:78:4a:78:a1:4e: 77:d6:9d:ca:6f:22:2d:4f:bf:84:a8:c2:a4:d5:fd:1c:d4:7f: 78:c5:c6:da:c3:a6:23:c9:2a:22:86:ef:f3:c5:a6:18:5d:96: 81:57:78:2b:8e:73:d6:1b:72:e8:73:13:eb:b0:0b:ef:31:03: 90:ac:a4:44:ad:de:32:15:e7:bb:35:f8:29:66:78:02:5c:5e: f8:0e:07:ae:9d:77:dc:c1:f6:d8:a2:df:e7:e6:40:8e:af:82: 5f:3a:0e:df:87:7a:5e:70:63:67:ff:eb:fa:d5:5d:d5:5f:f0: d5:a9:39:c5:07:75:6a:d6:8a:b1:62:c0:29:74:e5:e6:28:c1: e6:33:43:d3:99:4d:68:69:b7:de:d3:1d:93:67:d6:90:f5:ff: 8d:31:e8:12:58:15:1d:1b:a0:47:32:21:17:ba:49:51:e7:67: b4:e4:4a:fc:96:14:d1:7d:5b:20:da:89:ea:c4:c2:63:5c:04: ec:26:fd:9d:71:46:8d:ce:38:8b:4c:2c:b2:06:55:6f:80:74: 01:34:af:fe:48:83:54:5d:c6:79:82:5e:86:8f:fd:5c:bb:c7: 93:1d:f5:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26w7WSffH0kz7eL6Rrs6WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwMTAxMDAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTc5MTUzNjE0MzMyNTM0NjI5ZTVhZDQ2M2QzNGM3YmU4ZTA0YjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM/GAgQCV9iePoXKn050gQB4Y8WD ncwEEuhySQqnkLQmnreNtbAShuOS0iEHZZ+sp5SAzlJ5YTiGKHUWv4I1Uce0UvTw ZCQ4pQC5JxU/PqrgfdWUWFWeZo7JZ/beaN9dpv7GAlJRDqluSupfvToAc2SwAYkz gljXSksQDJjEKkTbFEAX2NHTcgX70IXFId12y63mc20QteQU39e9Y0ZziKZXv6kH VPPIUBxtvSZ9GYLsyMKdE6KmcAltSwBugOQi+qtzZnmVZ0zcOn1ibZCJnCKPnkPi ikwKFfbj0/kXNnE4wu8N7lmNpAp29nuO5mhpXsKWjSASJ1XuGVYScQCcGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPF5FTYUMyU0Yp5a1GPTTHvo4EuAMB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvOFhrVk5oUXpKVFJpbmxyVVk5Tk1lLWpnUzRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCbyMA0G CSqGSIb3DQEBCwUAA4IBAQAdgIoYWOqU+PGZ1Fyk2BbSHvHkyfdZUaC60ql8iORa eEp4oU531p3KbyItT7+EqMKk1f0c1H94xcbaw6YjySoihu/zxaYYXZaBV3grjnPW G3LocxPrsAvvMQOQrKRErd4yFee7NfgpZngCXF74DgeunXfcwfbYot/n5kCOr4Jf Og7fh3pecGNn/+v61V3VX/DVqTnFB3Vq1oqxYsApdOXmKMHmM0PTmU1oabfe0x2T Z9aQ9f+NMegSWBUdG6BHMiEXuklR52e05Er8lhTRfVsg2onqxMJjXATsJv2dcUaN zjiLTCyyBlVvgHQBNK/+SINUXcZ5gl6Gj/1cu8eTHfXn -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:33 2026 by rpki-client