This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/8f-eDRc6_FXPO45wpxV1xiQ1HAI.roa File: 8f-eDRc6_FXPO45wpxV1xiQ1HAI.roa (raw, json) Hash identifier: qCD4Jc/TwmM8SzWErouUslVtMstyIPcxvXJzTBG565w= Subject key identifier: F1:FF:9E:0D:17:3A:FC:55:CF:3B:8E:70:A7:15:75:C6:24:35:1C:02 Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5 Certificate serial: 019B79ECBD0E712E9A9D340E4E482D90F812 Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/8f-eDRc6_FXPO45wpxV1xiQ1HAI.roa Signing time: Thu 01 Jan 2026 14:18:36 +0000 ROA not before: Thu 01 Jan 2026 14:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7843 IP address blocks: 37.143.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:bd:0e:71:2e:9a:9d:34:0e:4e:48:2d:90:f8:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5 Validity Not Before: Jan 1 14:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1ff9e0d173afc55cf3b8e70a71575c624351c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ae:ba:36:98:60:80:7f:c7:53:7c:e3:46:bb: 16:08:e7:e0:9d:7c:73:84:cd:72:83:db:08:22:05: ec:12:f9:58:b5:9f:9f:14:ca:43:89:d4:27:f1:07: 41:dd:0b:7e:99:73:c8:aa:79:db:86:ea:17:d4:a0: 1c:18:7a:9d:52:80:a1:84:49:e7:b0:b8:2c:ec:ee: 8d:b2:df:23:ae:c4:be:f2:84:72:c8:e5:3b:f1:fa: 82:f5:0c:3b:37:c5:5a:b9:1d:d7:66:4a:a0:ee:e4: 22:5e:ba:23:ec:65:3d:b2:f1:4c:80:e3:c0:5d:fc: 2c:76:0d:66:fc:5b:2d:8a:af:83:34:a9:9a:25:38: cc:6a:78:85:9c:bf:7e:32:80:e8:72:07:fc:8e:e9: fc:e7:58:65:f1:58:50:60:c9:7f:40:6f:20:87:51: e8:55:b9:f8:0a:f0:43:99:db:8a:ce:47:04:69:46: ee:20:0c:ff:f6:dd:2d:9b:14:83:f1:b0:84:d2:de: d0:3b:d9:90:79:5d:b3:23:d1:5f:be:60:e7:43:88: c9:9b:66:99:f4:20:12:79:18:64:a6:6a:f7:64:b8: e3:94:d2:9f:29:95:dc:3a:b2:db:e2:1b:f4:e6:92: 8c:4e:f5:4a:32:b8:5c:73:6d:bb:d9:f8:3a:61:4a: 9f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:FF:9E:0D:17:3A:FC:55:CF:3B:8E:70:A7:15:75:C6:24:35:1C:02 X509v3 Authority Key Identifier: keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/8f-eDRc6_FXPO45wpxV1xiQ1HAI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.143.0.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:70:87:86:95:10:6a:1f:62:47:de:d8:34:79:5b:8b:4b:7b: 5e:fe:23:7a:7e:e9:30:38:cf:7e:dd:45:f9:77:f6:52:f2:e8: 76:56:12:37:85:96:b8:39:a0:04:99:ef:7b:8e:1e:54:bd:a0: 73:62:95:de:c8:ea:02:db:93:c4:d3:1a:91:9a:4f:27:d0:33: 0f:cf:c1:5e:57:a1:9e:bf:8a:a9:02:45:48:a8:b7:2e:0c:d0: 96:67:41:f1:5c:8f:ee:4c:a3:a9:e9:ea:07:2d:5b:d5:f1:18: fb:bd:2e:b1:77:29:7a:f9:a5:aa:97:c3:1e:35:0b:67:9a:a9: f2:60:1e:3b:cb:45:a3:70:4d:93:ce:a1:5e:6e:e2:9a:50:cf: ca:d1:47:1b:58:f3:41:f1:f5:ae:ed:a8:f3:fa:fe:00:67:32: d0:f1:f9:86:f9:c2:17:45:be:2b:16:92:dc:7c:d0:90:39:f6: 4b:c0:36:a4:c6:0f:70:c1:03:f3:61:32:91:37:6b:00:d7:16: 3b:17:e4:59:8a:7c:18:bb:89:da:41:d8:73:ec:73:ec:9c:dd: b0:d9:dc:08:9b:85:b0:d3:46:61:67:5d:50:aa:57:a7:86:1c: de:68:9f:e4:7d:0d:c3:8c:24:6e:ec:18:63:a5:77:3d:a8:25: e4:84:38:8a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57L0OcS6anTQOTkgtkPgSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNjM2M2Q0MjhiNzkxNWMxMDg4MjVmMDk3MDYwMDRiOGVh M2Q0YjUwHhcNMjYwMTAxMTQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWZmOWUwZDE3M2FmYzU1Y2YzYjhlNzBhNzE1NzVjNjI0MzUxYzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3666NphggH/HU3zjRrsWCOfgnXxz hM1yg9sIIgXsEvlYtZ+fFMpDidQn8QdB3Qt+mXPIqnnbhuoX1KAcGHqdUoChhEnn sLgs7O6Nst8jrsS+8oRyyOU78fqC9Qw7N8VauR3XZkqg7uQiXroj7GU9svFMgOPA Xfwsdg1m/Fstiq+DNKmaJTjManiFnL9+MoDocgf8jun851hl8VhQYMl/QG8gh1Ho Vbn4CvBDmduKzkcEaUbuIAz/9t0tmxSD8bCE0t7QO9mQeV2zI9FfvmDnQ4jJm2aZ 9CASeRhkpmr3ZLjjlNKfKZXcOrLb4hv05pKMTvVKMrhcc2272fg6YUqfcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPH/ng0XOvxVzzuOcKcVdcYkNRwCMB8GA1UdIwQY MBaAFA9jY9Qot5FcEIgl8JcGAEuOo9S1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEt MmUxYzBhZjRmYWE0LzEvOGYtZURSYzZfRlhQTzQ1d3B4VjF4aVExSEFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEtMmUxYzBhZjRmYWE0 LzEvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJY8AMA0G CSqGSIb3DQEBCwUAA4IBAQCPcIeGlRBqH2JH3tg0eVuLS3te/iN6fukwOM9+3UX5 d/ZS8uh2VhI3hZa4OaAEme97jh5UvaBzYpXeyOoC25PE0xqRmk8n0DMPz8FeV6Ge v4qpAkVIqLcuDNCWZ0HxXI/uTKOp6eoHLVvV8Rj7vS6xdyl6+aWql8MeNQtnmqny YB47y0WjcE2TzqFebuKaUM/K0UcbWPNB8fWu7ajz+v4AZzLQ8fmG+cIXRb4rFpLc fNCQOfZLwDakxg9wwQPzYTKRN2sA1xY7F+RZinwYu4naQdhz7HPsnN2w2dwIm4Ww 00ZhZ11QqlenhhzeaJ/kfQ3DjCRu7BhjpXc9qCXkhDiK -----END CERTIFICATE-----Generated at Mon Jan 26 05:02:14 2026 by rpki-client