This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/8iHCL-HIsWmSQWcboIJtcTz5dA0.roa File: 8iHCL-HIsWmSQWcboIJtcTz5dA0.roa (raw, json) Hash identifier: yMhfyArXlBp53ltADAhKVaNnmVsKrW5l1Xn8ONQr2Og= Subject key identifier: F2:21:C2:2F:E1:C8:B1:69:92:41:67:1B:A0:82:6D:71:3C:F9:74:0D Certificate issuer: /CN=12557d4c7e07c6e95cb391292dc11866f6619f5d Certificate serial: 019B77588243DBE01E75E88AD4C6274FB0E9 Authority key identifier: 12:55:7D:4C:7E:07:C6:E9:5C:B3:91:29:2D:C1:18:66:F6:61:9F:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ElV9TH4Hxulcs5EpLcEYZvZhn10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/8iHCL-HIsWmSQWcboIJtcTz5dA0.roa Signing time: Thu 01 Jan 2026 02:17:27 +0000 ROA not before: Thu 01 Jan 2026 02:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39686 IP address blocks: 91.212.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/ElV9TH4Hxulcs5EpLcEYZvZhn10.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/ElV9TH4Hxulcs5EpLcEYZvZhn10.mft rsync://rpki.ripe.net/repository/DEFAULT/ElV9TH4Hxulcs5EpLcEYZvZhn10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:82:43:db:e0:1e:75:e8:8a:d4:c6:27:4f:b0:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12557d4c7e07c6e95cb391292dc11866f6619f5d Validity Not Before: Jan 1 02:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f221c22fe1c8b1699241671ba0826d713cf9740d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c4:3f:88:e9:79:68:54:36:47:7d:d8:0f:ab: ba:b3:d3:41:b5:93:58:77:86:82:63:bf:a6:87:ed: fc:a1:6e:fc:52:96:22:fb:b0:c2:76:7a:79:3b:43: 39:dc:e1:40:24:b9:63:5e:df:52:ab:fb:66:31:44: 56:a1:6c:c0:b9:95:f5:64:b8:ba:d0:3c:b8:78:1b: af:f0:7b:11:fc:11:60:2d:a1:7f:a9:cd:0a:60:67: 7b:fb:e5:ce:1f:6f:d8:80:fa:b0:de:19:0d:50:04: 64:9c:83:47:7f:e0:d6:22:89:e1:c4:7b:ee:e6:dd: a4:da:75:09:e8:68:d1:57:35:86:bc:60:48:3d:c2: b8:c4:3b:17:74:cd:85:04:fd:08:eb:5c:30:c4:e6: 59:bc:98:a5:c2:ac:97:f7:99:e5:fb:1b:b5:67:d1: 1c:dc:77:fe:d4:08:f2:99:1c:4a:66:08:32:8e:67: a2:a6:a1:42:6c:95:b0:30:51:f7:c0:93:b8:87:37: 4d:b7:da:f7:b9:3d:92:45:ee:44:15:b9:12:12:81: 44:07:64:3b:65:7f:02:81:25:6a:4c:d1:3f:81:13: ec:16:40:33:69:be:03:41:38:94:17:5e:a8:fb:c3: b8:c1:6e:95:60:b1:cc:a3:e2:22:16:de:df:b8:4e: a6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:21:C2:2F:E1:C8:B1:69:92:41:67:1B:A0:82:6D:71:3C:F9:74:0D X509v3 Authority Key Identifier: keyid:12:55:7D:4C:7E:07:C6:E9:5C:B3:91:29:2D:C1:18:66:F6:61:9F:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElV9TH4Hxulcs5EpLcEYZvZhn10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/8iHCL-HIsWmSQWcboIJtcTz5dA0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/ElV9TH4Hxulcs5EpLcEYZvZhn10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.104.0/24 Signature Algorithm: sha256WithRSAEncryption 46:9b:10:c4:92:d1:4f:8b:1b:8c:bf:f9:e3:3c:f6:5b:65:b4: 2d:b2:c9:6f:d1:c1:59:f4:e3:48:1c:a7:69:a0:74:38:05:e3: 3e:07:25:3d:14:1c:23:c6:a0:20:92:88:05:5c:e5:2c:af:6b: 89:d4:a4:f7:7f:86:0b:34:b1:64:71:69:04:2d:30:d2:d9:c7: a9:67:b7:42:f7:35:8b:8d:92:32:e8:dd:67:c9:60:6c:c6:8c: e8:55:55:b0:20:76:78:9b:63:ea:f5:0e:08:74:2b:14:ae:f5: b2:9c:e5:47:7e:65:c9:f4:93:58:49:59:f5:ea:bf:fb:5e:c9: 6c:ba:13:18:91:de:6c:64:78:67:19:df:fb:bf:ce:80:39:7e: 45:a8:36:f0:87:3d:1a:89:5d:93:81:ad:71:aa:28:d6:f4:19: 50:b3:11:16:d6:29:a4:71:4d:e2:83:56:68:4b:f4:85:6b:f9: bc:9e:05:38:52:ca:e0:84:ea:b7:ac:78:c7:62:c3:72:3c:88: 5c:39:33:89:c7:80:b3:52:a2:c4:94:4e:9e:ab:ed:14:63:37: b4:13:b5:94:8a:4f:b3:f5:05:01:4e:1b:99:81:2e:7b:d7:9a: b3:d2:b5:5c:6f:d2:e6:fb:e3:45:76:00:31:fc:d4:fd:28:a4: 91:5e:1f:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WIJD2+AedeiK1MYnT7DpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNTU3ZDRjN2UwN2M2ZTk1Y2IzOTEyOTJkYzExODY2ZjY2 MTlmNWQwHhcNMjYwMTAxMDIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjIxYzIyZmUxYzhiMTY5OTI0MTY3MWJhMDgyNmQ3MTNjZjk3NDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMQ/iOl5aFQ2R33YD6u6s9NBtZNY d4aCY7+mh+38oW78UpYi+7DCdnp5O0M53OFAJLljXt9Sq/tmMURWoWzAuZX1ZLi6 0Dy4eBuv8HsR/BFgLaF/qc0KYGd7++XOH2/YgPqw3hkNUARknINHf+DWIonhxHvu 5t2k2nUJ6GjRVzWGvGBIPcK4xDsXdM2FBP0I61wwxOZZvJilwqyX95nl+xu1Z9Ec 3Hf+1AjymRxKZggyjmeipqFCbJWwMFH3wJO4hzdNt9r3uT2SRe5EFbkSEoFEB2Q7 ZX8CgSVqTNE/gRPsFkAzab4DQTiUF16o+8O4wW6VYLHMo+IiFt7fuE6mjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPIhwi/hyLFpkkFnG6CCbXE8+XQNMB8GA1UdIwQY MBaAFBJVfUx+B8bpXLORKS3BGGb2YZ9dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWxWOVRINEh4dWxjczVFcExjRVladlpobjEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi80NTY1MDUtY2UzMi00YTViLWEyYTgt YmQ0ZjdiNzI4OTk1LzEvOGlIQ0wtSElzV21TUVdjYm9JSnRjVHo1ZEEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi80NTY1MDUtY2UzMi00YTViLWEyYTgtYmQ0ZjdiNzI4OTk1 LzEvRWxWOVRINEh4dWxjczVFcExjRVladlpobjEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9RoMA0G CSqGSIb3DQEBCwUAA4IBAQBGmxDEktFPixuMv/njPPZbZbQtsslv0cFZ9ONIHKdp oHQ4BeM+ByU9FBwjxqAgkogFXOUsr2uJ1KT3f4YLNLFkcWkELTDS2cepZ7dC9zWL jZIy6N1nyWBsxozoVVWwIHZ4m2Pq9Q4IdCsUrvWynOVHfmXJ9JNYSVn16r/7Xsls uhMYkd5sZHhnGd/7v86AOX5FqDbwhz0aiV2Tga1xqijW9BlQsxEW1imkcU3ig1Zo S/SFa/m8ngU4UsrghOq3rHjHYsNyPIhcOTOJx4CzUqLElE6eq+0UYze0E7WUik+z 9QUBThuZgS5715qz0rVcb9Lm++NFdgAx/NT9KKSRXh81 -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:37 2026 by rpki-client