This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/8aHn1xycIl8uTaXnjg-XWCFbSk0.roa File: 8aHn1xycIl8uTaXnjg-XWCFbSk0.roa (raw, json) Hash identifier: KiEvyNKijFvNGgguxkes7RVZlreMURdJezWxI3ce/0o= Subject key identifier: F1:A1:E7:D7:1C:9C:22:5F:2E:4D:A5:E7:8E:0F:97:58:21:5B:4A:4D Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019B78A2C7F111A98F2075747288A6BC2193 Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/8aHn1xycIl8uTaXnjg-XWCFbSk0.roa Signing time: Thu 01 Jan 2026 08:18:12 +0000 ROA not before: Thu 01 Jan 2026 08:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8881 IP address blocks: 109.72.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:c7:f1:11:a9:8f:20:75:74:72:88:a6:bc:21:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Jan 1 08:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1a1e7d71c9c225f2e4da5e78e0f9758215b4a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9c:33:64:16:54:e7:c6:53:16:e2:db:00:c8: f2:10:a9:cc:c8:af:e4:4a:6e:45:8f:84:8c:59:11: 50:88:f1:80:65:98:1e:9d:7c:d8:9a:9b:bd:a3:3e: 31:e1:fe:48:ed:8a:f7:62:4c:31:09:0a:33:16:1f: d7:b2:bf:25:6d:8e:7d:ce:06:04:f2:0e:1b:65:a9: 93:da:43:6c:62:60:f7:92:47:18:87:a8:8e:2d:37: 4f:e2:71:fe:89:56:eb:cf:36:57:4d:de:5b:50:7f: c0:32:67:87:c0:5d:f5:74:7b:1b:92:9f:95:be:94: 6e:03:a8:84:23:d1:87:9e:b9:68:12:87:f5:28:e3: 04:6d:76:18:70:93:4e:7e:b8:0b:4d:0d:79:30:76: 87:0f:c4:15:42:ef:07:b4:f9:ec:00:85:d5:48:13: a1:f6:84:16:f9:cc:0d:c9:2f:a1:b3:8d:04:74:9e: 55:36:8a:55:56:5f:60:ae:28:d3:a3:25:69:56:b9: 2f:b3:d2:06:e0:6b:e4:c3:19:c2:aa:84:2d:bc:3e: b1:5f:3c:db:bd:a8:6b:ee:e3:bb:83:8e:4e:5f:3a: c9:1c:d5:d4:13:ec:83:a6:99:67:f4:ec:65:4a:5c: 04:70:b1:e2:62:d3:95:0d:a2:27:a5:8f:6f:58:b3: a7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A1:E7:D7:1C:9C:22:5F:2E:4D:A5:E7:8E:0F:97:58:21:5B:4A:4D X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/8aHn1xycIl8uTaXnjg-XWCFbSk0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.113.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:b6:d4:01:33:13:5a:a1:67:b0:59:5e:93:cb:8f:5f:62:5a: 10:e7:15:d4:a1:4c:2a:53:b3:16:36:ea:56:ac:d4:86:f9:da: 3d:1d:79:a0:08:4c:47:9c:a9:f5:dd:c7:af:da:68:9c:22:d7: 70:d3:bb:d5:6a:44:b5:e0:e7:db:b5:69:6c:1d:c4:5d:c9:d8: b3:4f:c1:45:e5:6d:ce:5a:8c:b1:ed:6f:17:3f:52:82:6e:1d: 8b:c9:67:f7:5b:b5:56:3a:69:c7:7e:16:9e:81:6d:a0:db:5c: ad:59:a5:48:38:70:7f:6f:d8:e1:f2:97:f4:b7:03:0e:5d:fc: 1e:c5:08:73:de:c4:9f:f7:21:b0:67:84:31:29:06:a9:3f:7b: a6:ac:fe:93:87:a1:9e:62:6e:04:3e:b8:e7:b5:01:33:9d:be: c8:68:f4:5a:f8:e7:ef:9c:e6:f9:f4:f7:3d:28:61:01:f1:0d: 33:50:14:93:83:94:02:54:a7:32:f5:35:c9:84:aa:53:4a:21: fa:4b:39:63:e1:3e:a3:00:dc:68:14:99:14:64:34:1d:d2:3c: 30:63:05:40:7e:74:0b:4e:f1:f8:23:09:e4:03:ef:6f:08:58: ab:01:d3:1a:4c:35:53:7a:00:93:08:4a:d3:fe:cc:3d:64:3e: 22:d6:c2:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4osfxEamPIHV0coimvCGTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjYwMTAxMDgxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWExZTdkNzFjOWMyMjVmMmU0ZGE1ZTc4ZTBmOTc1ODIxNWI0YTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZwzZBZU58ZTFuLbAMjyEKnMyK/k Sm5Fj4SMWRFQiPGAZZgenXzYmpu9oz4x4f5I7Yr3YkwxCQozFh/Xsr8lbY59zgYE 8g4bZamT2kNsYmD3kkcYh6iOLTdP4nH+iVbrzzZXTd5bUH/AMmeHwF31dHsbkp+V vpRuA6iEI9GHnrloEof1KOMEbXYYcJNOfrgLTQ15MHaHD8QVQu8HtPnsAIXVSBOh 9oQW+cwNyS+hs40EdJ5VNopVVl9grijToyVpVrkvs9IG4GvkwxnCqoQtvD6xXzzb vahr7uO7g45OXzrJHNXUE+yDppln9OxlSlwEcLHiYtOVDaInpY9vWLOnQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPGh59ccnCJfLk2l544Pl1ghW0pNMB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvOGFIbjF4eWNJbDh1VGFYbmpnLVhXQ0ZiU2swLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUhxMA0G CSqGSIb3DQEBCwUAA4IBAQBOttQBMxNaoWewWV6Ty49fYloQ5xXUoUwqU7MWNupW rNSG+do9HXmgCExHnKn13cev2micItdw07vVakS14OfbtWlsHcRdydizT8FF5W3O Woyx7W8XP1KCbh2LyWf3W7VWOmnHfhaegW2g21ytWaVIOHB/b9jh8pf0twMOXfwe xQhz3sSf9yGwZ4QxKQapP3umrP6Th6GeYm4EPrjntQEznb7IaPRa+OfvnOb59Pc9 KGEB8Q0zUBSTg5QCVKcy9TXJhKpTSiH6Szlj4T6jANxoFJkUZDQd0jwwYwVAfnQL TvH4IwnkA+9vCFirAdMaTDVTegCTCErT/sw9ZD4i1sIR -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:46 2026 by rpki-client