This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/8KJsvZ90HMlVQ-Gu0ZDFDln93Ls.roa File: 8KJsvZ90HMlVQ-Gu0ZDFDln93Ls.roa (raw, json) Hash identifier: DGlt++jIzcEyf2YY8cq7I9ry7xE+xVwo5HjB9DimFnk= Subject key identifier: F0:A2:6C:BD:9F:74:1C:C9:55:43:E1:AE:D1:90:C5:0E:59:FD:DC:BB Certificate issuer: /CN=69507f066f2bb0389dd88436074e1426114f2d92 Certificate serial: 019B7758F3BC2AB76CC71A10B4ABCC46590C Authority key identifier: 69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/8KJsvZ90HMlVQ-Gu0ZDFDln93Ls.roa Signing time: Thu 01 Jan 2026 02:17:56 +0000 ROA not before: Thu 01 Jan 2026 02:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142113 IP address blocks: 2.56.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f3:bc:2a:b7:6c:c7:1a:10:b4:ab:cc:46:59:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69507f066f2bb0389dd88436074e1426114f2d92 Validity Not Before: Jan 1 02:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0a26cbd9f741cc95543e1aed190c50e59fddcbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ea:7f:b6:ba:50:ea:81:a7:d4:98:a4:46:ed: 89:62:e2:2e:da:d6:e8:71:fa:46:fc:39:5c:ec:f5: d4:1e:e5:40:72:14:78:3c:d8:f3:ad:4a:97:3f:9c: 7c:cd:d9:4c:c7:fa:4e:66:55:cf:24:29:05:77:c1: 36:6b:75:df:fd:7d:b2:00:13:a8:ba:e7:0a:f3:b7: 08:46:e9:93:38:50:34:a2:29:87:a4:81:8c:13:e9: 91:64:d9:b7:c3:91:97:80:0d:43:f3:6c:ec:e5:e9: ca:c4:fb:b8:96:50:db:b5:6c:51:3c:07:27:c4:4f: a6:45:a7:ff:93:33:26:ed:7a:1f:70:06:72:0e:51: 7f:4c:75:a4:f2:e6:fe:ae:08:9f:66:b8:dd:0d:0a: 38:eb:52:3b:ea:00:33:ad:59:b3:04:c8:84:cc:6a: 5a:b0:6f:dc:6f:1d:f1:0e:ad:a1:5a:1d:47:9e:bb: 2e:54:20:96:24:b5:86:14:60:1a:f8:a6:71:82:10: 95:cd:95:25:d5:2f:ad:1e:b2:a8:03:5b:88:2a:09: e8:66:8b:fc:88:23:3f:30:52:fa:84:31:bf:d1:c8: 53:5b:f1:33:71:0b:62:e8:14:b9:3a:4a:60:d7:1e: d1:5e:37:4a:ac:06:d5:7b:0e:53:51:d9:37:e9:e3: 0d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A2:6C:BD:9F:74:1C:C9:55:43:E1:AE:D1:90:C5:0E:59:FD:DC:BB X509v3 Authority Key Identifier: keyid:69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/8KJsvZ90HMlVQ-Gu0ZDFDln93Ls.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.91.0/24 Signature Algorithm: sha256WithRSAEncryption 64:58:ec:c6:c6:c1:7e:ea:cd:3b:59:52:3c:70:e5:02:76:63: ca:b5:7d:49:ac:cc:a4:e6:b7:fd:79:9d:f6:80:c1:07:b4:75: 57:32:f2:77:ec:66:76:fd:aa:a6:7d:5e:77:45:ca:dc:f9:94: 2b:3e:9b:a3:38:16:a3:c4:a2:a0:63:ac:76:09:26:bd:cd:21: d4:e3:ae:86:13:2a:c7:4f:1d:69:70:9e:9c:23:2f:5f:75:46: a2:93:d5:6a:f1:39:5e:dd:a8:10:cc:d0:c7:94:d0:7a:99:b5: c6:89:8f:d0:86:c5:88:0b:f9:43:75:ce:1b:24:31:3b:e0:40: e0:c3:f9:b4:61:d2:30:e5:de:85:d7:ae:15:cb:f0:f1:e9:c3: 23:b2:e7:37:8b:18:78:97:e0:3c:ba:dc:ec:97:0f:42:60:1b: b5:6c:0e:96:55:88:e7:00:18:cb:fb:0b:d0:c0:91:41:db:2d: fe:6d:c9:a9:1c:77:28:e9:72:c6:24:4c:f1:cc:64:47:e3:8b: 88:28:57:5c:5b:8b:97:c5:0b:9a:6f:4d:cc:0d:01:a5:83:0a: 69:ae:eb:6b:ac:93:20:4d:d9:a8:6c:a3:f4:df:ba:a1:9e:f3: a5:03:33:16:da:2c:ca:2a:0d:3e:eb:1c:f0:31:03:c2:64:2d: 9c:d4:eb:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WPO8KrdsxxoQtKvMRlkMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NTA3ZjA2NmYyYmIwMzg5ZGQ4ODQzNjA3NGUxNDI2MTE0 ZjJkOTIwHhcNMjYwMTAxMDIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGEyNmNiZDlmNzQxY2M5NTU0M2UxYWVkMTkwYzUwZTU5ZmRkY2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOp/trpQ6oGn1JikRu2JYuIu2tbo cfpG/Dlc7PXUHuVAchR4PNjzrUqXP5x8zdlMx/pOZlXPJCkFd8E2a3Xf/X2yABOo uucK87cIRumTOFA0oimHpIGME+mRZNm3w5GXgA1D82zs5enKxPu4llDbtWxRPAcn xE+mRaf/kzMm7XofcAZyDlF/THWk8ub+rgifZrjdDQo461I76gAzrVmzBMiEzGpa sG/cbx3xDq2hWh1HnrsuVCCWJLWGFGAa+KZxghCVzZUl1S+tHrKoA1uIKgnoZov8 iCM/MFL6hDG/0chTW/EzcQti6BS5Okpg1x7RXjdKrAbVew5TUdk36eMNOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPCibL2fdBzJVUPhrtGQxQ5Z/dy7MB8GA1UdIwQY MBaAFGlQfwZvK7A4ndiENgdOFCYRTy2SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVZCX0JtOHJzRGlkMklRMkIwNFVKaEZQTFpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iZjgzMzgtODc1Mi00ZDU1LTljMzEt MGUxYjhmZWE4OTEzLzEvOEtKc3ZaOTBITWxWUS1HdTBaREZEbG45M0xzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9iZjgzMzgtODc1Mi00ZDU1LTljMzEtMGUxYjhmZWE4OTEz LzEvYVZCX0JtOHJzRGlkMklRMkIwNFVKaEZQTFpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjhbMA0G CSqGSIb3DQEBCwUAA4IBAQBkWOzGxsF+6s07WVI8cOUCdmPKtX1JrMyk5rf9eZ32 gMEHtHVXMvJ37GZ2/aqmfV53Rcrc+ZQrPpujOBajxKKgY6x2CSa9zSHU466GEyrH Tx1pcJ6cIy9fdUaik9Vq8Tle3agQzNDHlNB6mbXGiY/QhsWIC/lDdc4bJDE74EDg w/m0YdIw5d6F164Vy/Dx6cMjsuc3ixh4l+A8utzslw9CYBu1bA6WVYjnABjL+wvQ wJFB2y3+bcmpHHco6XLGJEzxzGRH44uIKFdcW4uXxQuab03MDQGlgwpprutrrJMg TdmobKP037qhnvOlAzMW2izKKg0+6xzwMQPCZC2c1Ovh -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:31 2026 by rpki-client