This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/8Ql9UfBMlhf-9sEO0J-6rh-4uGE.roa File: 8Ql9UfBMlhf-9sEO0J-6rh-4uGE.roa (raw, json) Hash identifier: cCjd/UNv//U8Wz2A7iG4uR2Nv+n8ykigX0NiqbbBYBw= Subject key identifier: F1:09:7D:51:F0:4C:96:17:FE:F6:C1:0E:D0:9F:BA:AE:1F:B8:B8:61 Certificate issuer: /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0 Certificate serial: 019B7E38BBFCCE617F6ED174FC035748B6CB Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/8Ql9UfBMlhf-9sEO0J-6rh-4uGE.roa Signing time: Fri 02 Jan 2026 10:20:05 +0000 ROA not before: Fri 02 Jan 2026 10:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209811 IP address blocks: 2.57.232.0/23 maxlen: 23 2.57.234.0/23 maxlen: 23 95.215.200.0/23 maxlen: 23 95.215.202.0/23 maxlen: 23 185.151.228.0/23 maxlen: 23 185.151.230.0/23 maxlen: 23 185.208.8.0/24 maxlen: 24 194.31.160.0/23 maxlen: 23 194.31.162.0/23 maxlen: 23 2a09:1680::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:bb:fc:ce:61:7f:6e:d1:74:fc:03:57:48:b6:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0 Validity Not Before: Jan 2 10:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1097d51f04c9617fef6c10ed09fbaae1fb8b861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:24:fa:54:b6:a1:72:3e:2a:28:64:0f:06:99: 45:1a:8a:0a:b1:69:71:3c:2e:c8:66:dc:3d:4e:7e: 08:80:4b:06:cf:27:20:73:ee:18:99:6e:21:c4:c8: cc:c2:65:b8:56:ab:ad:68:99:34:a3:34:83:59:54: 0b:f1:8c:7e:ab:f3:19:08:3c:91:21:74:69:3b:a2: e3:95:e3:ca:7a:86:89:ff:c4:c2:c9:12:2e:5f:0e: 4a:5a:a8:55:bb:ec:29:17:1c:ac:28:38:b5:3a:35: aa:b9:47:7d:24:01:a1:f9:08:d0:61:b6:95:9d:c4: 9d:dd:a1:da:be:ae:2d:a3:04:60:88:ac:10:44:8e: 0b:78:7f:fc:01:a7:2d:2c:94:36:cc:6e:19:10:5b: 9c:33:28:fc:5e:d4:76:3a:73:ea:cc:c9:36:56:a6: 48:dc:b1:32:82:51:e3:17:4c:3c:e9:38:3b:79:ac: 3c:d5:42:3e:ad:a7:96:5a:cf:8e:45:bf:83:b0:26: 4a:6a:b4:cf:2c:e1:df:59:89:42:08:37:0f:aa:69: 4f:80:d7:77:e0:55:43:33:3f:ca:06:89:72:f9:ce: b3:0d:fa:b3:3a:f4:b7:83:38:10:79:c2:64:77:13: f8:4c:44:0e:b1:a9:51:4e:8a:52:74:b7:a5:6f:1c: 34:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:09:7D:51:F0:4C:96:17:FE:F6:C1:0E:D0:9F:BA:AE:1F:B8:B8:61 X509v3 Authority Key Identifier: keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/8Ql9UfBMlhf-9sEO0J-6rh-4uGE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.232.0/22 95.215.200.0/22 185.151.228.0/22 185.208.8.0/24 194.31.160.0/22 IPv6: 2a09:1680::/48 Signature Algorithm: sha256WithRSAEncryption 5f:d6:52:e1:e4:8c:d3:6a:98:cc:a3:1a:0a:ef:eb:93:39:3f: 25:a6:39:b7:d8:4c:d9:c3:68:d0:c6:04:f6:53:16:8f:87:e7: d0:e0:91:17:ee:83:a4:e0:db:97:fd:33:95:00:ed:2f:2d:14: f6:a7:f5:88:d8:81:33:8b:fb:aa:ef:6f:88:07:f0:66:88:41: 53:a8:c4:85:35:60:19:25:54:f7:5c:17:b8:a0:6c:c0:03:8d: 16:98:9f:91:c9:7f:35:5b:ad:a6:34:0a:f0:a3:b4:4b:35:40: 1c:be:d7:08:d4:57:bc:8d:aa:a7:d8:94:5a:e1:7b:96:2d:d4: f7:87:13:0d:b1:d4:53:e9:d8:11:3f:a2:e4:79:ad:37:ce:6f: 74:69:e0:f7:c4:7f:85:d8:8b:4b:bc:cb:4a:85:6b:12:16:b2: 05:be:d9:71:fd:3a:e1:9e:42:af:f1:c5:31:a0:1c:fb:cd:f4: 74:db:72:e3:10:9d:b1:75:e2:aa:35:cd:d2:68:6a:8e:af:6d: 40:0b:65:49:da:e7:45:bb:22:7c:7a:bb:d4:e2:20:49:16:00: bd:07:67:e4:87:cc:ae:62:2d:5e:6c:e1:66:c6:72:4a:41:ab: ac:cc:0e:f6:f5:9a:3d:9d:9f:e6:2c:e6:ad:20:37:3e:5b:21: b2:55:90:e9 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt+OLv8zmF/btF0/ANXSLbLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4YTg0YThlNDc1ZjY2MDZlN2ExMmY5MmIzMzBkNjNkOGY4 ODBiZTAwHhcNMjYwMTAyMTAyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTA5N2Q1MWYwNGM5NjE3ZmVmNmMxMGVkMDlmYmFhZTFmYjhiODYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yT6VLahcj4qKGQPBplFGooKsWlx PC7IZtw9Tn4IgEsGzycgc+4YmW4hxMjMwmW4VqutaJk0ozSDWVQL8Yx+q/MZCDyR IXRpO6LjlePKeoaJ/8TCyRIuXw5KWqhVu+wpFxysKDi1OjWquUd9JAGh+QjQYbaV ncSd3aHavq4towRgiKwQRI4LeH/8AactLJQ2zG4ZEFucMyj8XtR2OnPqzMk2VqZI 3LEyglHjF0w86Tg7eaw81UI+raeWWs+ORb+DsCZKarTPLOHfWYlCCDcPqmlPgNd3 4FVDMz/KBoly+c6zDfqzOvS3gzgQecJkdxP4TEQOsalRTopSdLelbxw0yQIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFPEJfVHwTJYX/vbBDtCfuq4fuLhhMB8GA1UdIwQY MBaAFBioSo5HX2YG56EvkrMw1j2PiAvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84OTJhMjctZmRiNi00Mjg1LTgyOWEt ODdmNWI2NDc5ZDFlLzEvOFFsOVVmQk1saGYtOXNFTzBKLTZyaC00dUdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC84OTJhMjctZmRiNi00Mjg1LTgyOWEtODdmNWI2NDc5ZDFl LzEvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAkBAIAATAeAwQCAjnoAwQC X9fIAwQCuZfkAwQAudAIAwQCwh+gMA8EAgACMAkDBwAqCRaAAAAwDQYJKoZIhvcN AQELBQADggEBAF/WUuHkjNNqmMyjGgrv65M5PyWmObfYTNnDaNDGBPZTFo+H59Dg kRfug6Tg25f9M5UA7S8tFPan9YjYgTOL+6rvb4gH8GaIQVOoxIU1YBklVPdcF7ig bMADjRaYn5HJfzVbraY0CvCjtEs1QBy+1wjUV7yNqqfYlFrhe5Yt1PeHEw2x1FPp 2BE/ouR5rTfOb3Rp4PfEf4XYi0u8y0qFaxIWsgW+2XH9OuGeQq/xxTGgHPvN9HTb cuMQnbF14qo1zdJoao6vbUALZUna50W7Inx6u9TiIEkWAL0HZ+SHzK5iLV5s4WbG ckpBq6zMDvb1mj2dn+Ys5q0gNz5bIbJVkOk= -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:37 2026 by rpki-client