This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/8Z2E2Cqzk4y0-GvrjpUMoQrCJZQ.roa File: 8Z2E2Cqzk4y0-GvrjpUMoQrCJZQ.roa (raw, json) Hash identifier: 3IGS/Th+5XuXfhPqqj6fRqktsHtiN3hRa/vgu2EjrnY= Subject key identifier: F1:9D:84:D8:2A:B3:93:8C:B4:F8:6B:EB:8E:95:0C:A1:0A:C2:25:94 Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205 Certificate serial: 019B783552B5BBF555022EB3B6CF74AF753F Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/8Z2E2Cqzk4y0-GvrjpUMoQrCJZQ.roa Signing time: Thu 01 Jan 2026 06:18:39 +0000 ROA not before: Thu 01 Jan 2026 06:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8737 IP address blocks: 84.39.0.0/19 maxlen: 19 109.72.32.0/20 maxlen: 20 128.127.32.0/20 maxlen: 20 195.64.64.0/19 maxlen: 19 195.121.0.0/16 maxlen: 16 195.121.0.0/17 maxlen: 17 195.121.64.0/18 maxlen: 18 195.121.128.0/17 maxlen: 17 212.182.128.0/18 maxlen: 18 213.75.0.0/16 maxlen: 16 213.75.0.0/17 maxlen: 17 213.75.128.0/17 maxlen: 17 213.148.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:52:b5:bb:f5:55:02:2e:b3:b6:cf:74:af:75:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205 Validity Not Before: Jan 1 06:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f19d84d82ab3938cb4f86beb8e950ca10ac22594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:14:2b:25:7c:f5:7f:e5:3c:4c:a7:72:f6:02: b4:8c:45:dd:cd:4a:e2:f4:6f:16:7f:6c:77:f3:5c: 42:1f:d8:71:ab:fb:de:e3:0b:fc:51:44:29:7c:ca: 37:95:0b:48:2a:3a:d9:6c:9a:01:ae:75:35:25:62: 02:60:56:64:47:41:5a:90:e1:de:c5:37:42:31:c5: 8e:8a:4e:f2:59:50:c6:b7:5f:8c:7f:1e:00:92:f5: cc:00:24:ea:a7:21:d4:dc:db:42:1a:0a:1c:54:19: 4a:3f:53:ae:90:da:a5:1a:3d:85:cb:e0:fe:ad:92: 89:a4:42:de:5e:c3:0e:15:83:20:07:16:4f:50:61: fe:8a:7a:da:bc:fb:27:1c:70:6b:f9:de:f8:0d:26: a3:69:a3:d8:ba:04:af:da:a0:9f:d2:57:27:43:3d: e2:9d:aa:05:1e:56:18:42:e2:29:1d:a8:64:f2:74: 48:16:57:c9:fe:74:82:be:8b:61:11:ef:f3:81:76: ad:e6:74:4a:9a:87:3e:b8:f5:38:4d:bb:29:b7:35: 25:67:55:da:bf:58:d4:8f:9a:07:dd:da:78:30:2c: e5:0d:25:f2:ca:e0:87:98:fb:d5:4b:9c:ce:41:33: 81:51:1d:b9:27:40:f7:b2:38:3a:4d:d3:58:5b:b3: d3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:9D:84:D8:2A:B3:93:8C:B4:F8:6B:EB:8E:95:0C:A1:0A:C2:25:94 X509v3 Authority Key Identifier: keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/8Z2E2Cqzk4y0-GvrjpUMoQrCJZQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.39.0.0/19 109.72.32.0/20 128.127.32.0/20 195.64.64.0/19 195.121.0.0/16 212.182.128.0/18 213.75.0.0/16 213.148.224.0/19 Signature Algorithm: sha256WithRSAEncryption 4f:dd:0f:5e:56:a5:ea:66:60:bc:f3:70:07:63:ec:47:3e:c2: 74:d5:90:f3:a1:3b:fa:02:53:17:16:2f:03:92:83:bb:bb:82: b5:1f:a0:92:98:07:b6:e7:1b:51:65:5c:1b:5d:7a:cb:6a:c3: a7:12:c4:a5:f5:8c:bc:15:5f:ff:dd:ed:01:91:52:5b:7b:b4: 1a:49:97:4e:cf:ca:bd:bb:69:b7:c8:4a:76:42:50:7f:07:0e: 99:8e:f0:21:58:f9:f0:95:5b:ef:b5:68:4f:fd:a7:12:99:e6: d4:63:01:f0:a5:90:8a:37:88:62:f8:35:ff:56:ce:68:b7:04: 29:9c:4c:0c:26:6a:6b:21:7c:ce:5c:77:0d:9a:c4:4d:59:8f: c3:71:12:3a:ba:1e:52:83:01:fe:85:9c:1e:f3:ed:75:c5:60: 27:58:7e:c8:a8:e2:cc:a2:c8:5e:e0:da:a9:80:fb:19:1d:99: d9:98:54:cd:f8:81:b3:55:88:0d:e4:1c:81:c0:59:48:3b:fa: 24:3d:19:03:c8:d5:fc:3f:82:b9:b4:84:63:7a:b5:2b:3a:f2: 2a:73:14:97:4b:09:e8:f5:9b:4f:62:24:ee:d6:1a:fa:45:0e: f3:3b:42:16:47:45:8f:f8:ed:db:18:6e:c9:ef:d7:ec:08:be: 4d:d3:c0:81 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt4NVK1u/VVAi6zts90r3U/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZWVkNDA5MTM4M2Q5ZWQ0MDU2ZDlmNGVmZjdkMjYyMmRk Y2UyMDUwHhcNMjYwMTAxMDYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTlkODRkODJhYjM5MzhjYjRmODZiZWI4ZTk1MGNhMTBhYzIyNTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxQrJXz1f+U8TKdy9gK0jEXdzUri 9G8Wf2x381xCH9hxq/ve4wv8UUQpfMo3lQtIKjrZbJoBrnU1JWICYFZkR0FakOHe xTdCMcWOik7yWVDGt1+Mfx4AkvXMACTqpyHU3NtCGgocVBlKP1OukNqlGj2Fy+D+ rZKJpELeXsMOFYMgBxZPUGH+inravPsnHHBr+d74DSajaaPYugSv2qCf0lcnQz3i naoFHlYYQuIpHahk8nRIFlfJ/nSCvothEe/zgXat5nRKmoc+uPU4TbsptzUlZ1Xa v1jUj5oH3dp4MCzlDSXyyuCHmPvVS5zOQTOBUR25J0D3sjg6TdNYW7PT6QIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFPGdhNgqs5OMtPhr646VDKEKwiWUMB8GA1UdIwQY MBaAFIHu1AkTg9ntQFbZ9O/30mIt3OIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2Et ODcyYjM3MTBjMmExLzEvOFoyRTJDcXprNHkwLUd2cmpwVU1vUXJDSlpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2EtODcyYjM3MTBjMmEx LzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQFVCcAAwQE bUggAwQEgH8gAwQFw0BAAwMAw3kDBAbUtoADAwDVSwMEBdWU4DANBgkqhkiG9w0B AQsFAAOCAQEAT90PXlal6mZgvPNwB2PsRz7CdNWQ86E7+gJTFxYvA5KDu7uCtR+g kpgHtucbUWVcG116y2rDpxLEpfWMvBVf/93tAZFSW3u0GkmXTs/Kvbtpt8hKdkJQ fwcOmY7wIVj58JVb77VoT/2nEpnm1GMB8KWQijeIYvg1/1bOaLcEKZxMDCZqayF8 zlx3DZrETVmPw3ESOroeUoMB/oWcHvPtdcVgJ1h+yKjizKLIXuDaqYD7GR2Z2ZhU zfiBs1WIDeQcgcBZSDv6JD0ZA8jV/D+CubSEY3q1KzryKnMUl0sJ6PWbT2Ik7tYa +kUO8ztCFkdFj/jt2xhuye/X7Ai+TdPAgQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:59 2026 by rpki-client