This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/8jbviDQFoKAhlEjW0jC3b3qtGcI.roa File: 8jbviDQFoKAhlEjW0jC3b3qtGcI.roa (raw, json) Hash identifier: Gqk9VF0dkefof36zEJuvdRT5XkqcUqe0DMO1kA7Q6OU= Subject key identifier: F2:36:EF:88:34:05:A0:A0:21:94:48:D6:D2:30:B7:6F:7A:AD:19:C2 Certificate issuer: /CN=3c361707514c4420ce82bce1bb71995c25171be3 Certificate serial: 019AA6276C1493F02FE6A05B475C880CD4C4 Authority key identifier: 3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/8jbviDQFoKAhlEjW0jC3b3qtGcI.roa Signing time: Fri 21 Nov 2025 11:23:12 +0000 ROA not before: Fri 21 Nov 2025 11:23:12 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39477 IP address blocks: 46.43.144.0/20 maxlen: 20 80.74.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a6:27:6c:14:93:f0:2f:e6:a0:5b:47:5c:88:0c:d4:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c361707514c4420ce82bce1bb71995c25171be3 Validity Not Before: Nov 21 11:23:12 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f236ef883405a0a0219448d6d230b76f7aad19c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6d:81:66:fb:cc:b6:70:48:31:ee:34:4b:b6: a2:87:9c:5f:cc:12:ab:58:62:60:6d:2b:2a:99:d7: 7b:dc:ef:f1:e9:5c:09:c0:57:15:cb:23:6e:51:c5: 3a:e3:8f:05:84:36:d9:ed:43:f7:fb:1c:5e:12:f8: 6d:e7:42:7b:76:97:e8:4e:43:5f:6a:54:65:ec:f4: 7c:03:3b:0e:d0:2d:3b:48:ac:41:42:4e:00:66:38: 1f:46:a9:5d:a9:47:7e:12:16:c2:ee:79:36:d0:da: 0c:b3:78:cb:3e:59:65:80:f6:2c:55:48:d7:c1:ba: 1f:2c:0b:3f:9d:8c:64:a3:78:30:18:23:09:c7:ff: eb:9e:44:e9:a5:e0:95:d7:96:02:15:22:e9:fb:70: bf:1e:4d:32:3e:b4:10:01:93:fa:fc:ce:96:85:57: 9d:58:6a:3d:1e:5f:b1:08:42:d2:48:01:31:0d:76: 63:9c:57:8f:0e:1f:41:a8:23:4b:97:8f:ce:67:d5: ca:fb:fd:d3:3b:35:15:65:3f:b7:05:2a:e4:88:de: b2:50:46:84:b3:1b:fb:a3:28:2e:cf:c6:a9:c5:7d: 8d:7a:56:a7:22:10:f1:e0:66:f2:60:64:7d:05:e9: 9d:1c:af:f5:bb:da:3f:be:31:9b:26:2f:90:6a:05: 26:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:36:EF:88:34:05:A0:A0:21:94:48:D6:D2:30:B7:6F:7A:AD:19:C2 X509v3 Authority Key Identifier: keyid:3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/8jbviDQFoKAhlEjW0jC3b3qtGcI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.43.144.0/20 80.74.224.0/20 Signature Algorithm: sha256WithRSAEncryption b8:44:38:08:4e:df:b3:19:c7:79:4d:6d:f1:5d:fa:f1:b5:53: 46:50:12:46:cb:4e:e8:31:62:c7:61:d5:84:6c:45:37:1d:fa: 21:d2:7d:01:23:3a:49:e8:60:28:fc:7d:ca:75:39:69:e1:bc: 5f:1b:e2:ea:5e:f8:b3:26:00:5e:49:9f:8c:94:e8:1b:20:ef: a6:ef:5c:8f:05:6b:a4:b0:0e:53:33:43:7a:2f:24:ab:6e:22: bd:4d:2b:74:ce:cd:e4:f4:ba:71:03:09:dd:0b:90:56:87:ff: 0c:49:be:8e:de:23:ed:ee:26:10:6c:5d:95:88:82:e2:3d:76: 60:17:4c:92:06:ab:33:c9:f2:7f:2c:f5:1e:a3:bb:4b:5e:c5: cb:43:3b:be:8e:a5:49:a9:22:0b:e9:92:24:11:48:3b:96:ab: 3a:52:30:18:ad:ad:65:95:d4:09:d7:19:6f:9c:0c:c4:31:2c: b9:7c:1f:01:b0:57:0a:b7:a7:20:cb:50:9f:d0:4f:e6:24:5f: ad:87:2e:d3:10:aa:e5:60:8e:6d:d8:47:43:fb:39:9f:a1:b7: a5:67:63:63:ae:64:b7:f7:df:52:e8:e3:3f:05:e4:c5:36:6a: 0d:11:72:8f:43:f6:14:e5:a9:87:f9:08:2b:80:88:3c:c2:5e: 6e:31:51:34 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqmJ2wUk/Av5qBbR1yIDNTEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMzYxNzA3NTE0YzQ0MjBjZTgyYmNlMWJiNzE5OTVjMjUx NzFiZTMwHhcNMjUxMTIxMTEyMzEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjM2ZWY4ODM0MDVhMGEwMjE5NDQ4ZDZkMjMwYjc2ZjdhYWQxOWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA222BZvvMtnBIMe40S7aih5xfzBKr WGJgbSsqmdd73O/x6VwJwFcVyyNuUcU6448FhDbZ7UP3+xxeEvht50J7dpfoTkNf alRl7PR8AzsO0C07SKxBQk4AZjgfRqldqUd+EhbC7nk20NoMs3jLPlllgPYsVUjX wbofLAs/nYxko3gwGCMJx//rnkTppeCV15YCFSLp+3C/Hk0yPrQQAZP6/M6WhVed WGo9Hl+xCELSSAExDXZjnFePDh9BqCNLl4/OZ9XK+/3TOzUVZT+3BSrkiN6yUEaE sxv7oyguz8apxX2NelanIhDx4GbyYGR9BemdHK/1u9o/vjGbJi+QagUmzQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPI274g0BaCgIZRI1tIwt296rRnCMB8GA1UdIwQY MBaAFDw2FwdRTEQgzoK84btxmVwlFxvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUERZWEIxRk1SQ0RPZ3J6aHUzR1pYQ1VYRy1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iOGMwOTgtODM4Yy00MjUzLTgyODgt OWI5MzczNTc5NzRkLzEvOGpidmlEUUZvS0FobEVqVzBqQzNiM3F0R2NJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9iOGMwOTgtODM4Yy00MjUzLTgyODgtOWI5MzczNTc5NzRk LzEvUERZWEIxRk1SQ0RPZ3J6aHUzR1pYQ1VYRy1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQELiuQAwQE UErgMA0GCSqGSIb3DQEBCwUAA4IBAQC4RDgITt+zGcd5TW3xXfrxtVNGUBJGy07o MWLHYdWEbEU3Hfoh0n0BIzpJ6GAo/H3KdTlp4bxfG+LqXvizJgBeSZ+MlOgbIO+m 71yPBWuksA5TM0N6LySrbiK9TSt0zs3k9LpxAwndC5BWh/8MSb6O3iPt7iYQbF2V iILiPXZgF0ySBqszyfJ/LPUeo7tLXsXLQzu+jqVJqSIL6ZIkEUg7lqs6UjAYra1l ldQJ1xlvnAzEMSy5fB8BsFcKt6cgy1Cf0E/mJF+thy7TEKrlYI5t2EdD+zmfobel Z2NjrmS3999S6OM/BeTFNmoNEXKPQ/YU5amH+QgrgIg8wl5uMVE0 -----END CERTIFICATE-----Generated at Sat Dec 6 09:22:36 2025 by rpki-client