This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/R8F1DSddbUmoi5Lvz7GVdblbDkk.roa File: R8F1DSddbUmoi5Lvz7GVdblbDkk.roa (raw, json) Hash identifier: ti1BqLXIAMU2z5zdrrvdHJM6DJeICOfg1NjS+8ZVzTI= Subject key identifier: 47:C1:75:0D:27:5D:6D:49:A8:8B:92:EF:CF:B1:95:75:B9:5B:0E:49 Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Certificate serial: 019B76EB2C543D6BE88070DFDE2373E60F13 Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/R8F1DSddbUmoi5Lvz7GVdblbDkk.roa Signing time: Thu 01 Jan 2026 00:18:02 +0000 ROA not before: Thu 01 Jan 2026 00:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8274 IP address blocks: 91.203.232.0/23 maxlen: 23 91.203.232.0/24 maxlen: 24 91.203.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:2c:54:3d:6b:e8:80:70:df:de:23:73:e6:0f:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Validity Not Before: Jan 1 00:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47c1750d275d6d49a88b92efcfb19575b95b0e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4a:3b:aa:8a:98:68:ba:3c:97:69:7d:5c:3c: 2d:02:df:11:5a:47:d8:44:cb:6a:55:37:2a:1c:12: 19:bb:4d:b9:c5:41:e5:9b:8b:42:0a:2b:0f:98:6a: 56:4e:d3:e5:5e:ee:06:68:73:f7:46:e2:67:b7:86: 60:5b:5c:8a:4b:aa:4e:bf:62:2f:c9:1e:34:6b:2b: 95:36:0a:c7:46:8c:4d:0f:ae:e7:8c:9f:07:51:2e: a4:a5:73:51:55:24:17:9c:30:41:24:fd:9a:69:57: 27:6c:6e:75:c2:c4:ab:b6:9b:46:9b:ca:fe:96:c0: 9f:2d:d4:07:43:e4:34:3d:bd:21:27:a8:42:98:fa: a0:75:90:9d:f0:e8:82:0f:ef:b5:06:f3:1e:02:45: 83:16:b3:b3:34:1d:c0:a4:c5:a8:f9:3d:8b:e7:de: 0d:86:05:2e:62:09:21:b3:96:73:37:61:04:ab:16: 22:5f:17:94:36:34:b8:b1:00:d4:b9:fa:f0:cb:13: ef:54:2d:8c:8f:21:25:86:2e:c9:ff:c0:8b:3b:75: 2d:c6:2c:5c:28:b5:1b:55:f5:70:61:59:e5:88:5f: bc:88:23:26:2d:5e:55:00:fb:d6:18:71:e0:ba:fd: b1:5b:e1:a7:ee:15:0a:a8:f2:ec:f4:2e:4d:f7:9c: ec:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C1:75:0D:27:5D:6D:49:A8:8B:92:EF:CF:B1:95:75:B9:5B:0E:49 X509v3 Authority Key Identifier: keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/R8F1DSddbUmoi5Lvz7GVdblbDkk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.203.232.0/23 Signature Algorithm: sha256WithRSAEncryption 94:b3:8d:8f:d7:72:57:72:ae:a0:8f:d4:71:72:ce:a7:71:bb: dd:60:3c:f6:bb:b9:a7:eb:f8:37:56:e3:93:cc:91:0c:b5:47: b5:cc:d1:e8:17:d5:1d:cf:d5:a8:ff:7c:e2:4d:11:4e:a0:ea: d1:3e:f5:09:14:fc:ca:ef:38:03:93:f1:19:eb:3a:c1:0f:cf: f7:a6:6d:a1:7e:fa:f9:71:39:2d:4d:5a:c4:09:22:45:ab:f9: b7:df:bf:dc:c9:63:07:41:b9:c0:b0:19:a4:1a:83:52:e4:1f: d7:4d:58:8e:3e:42:83:5a:7c:36:6a:49:9b:4b:41:e3:d8:1d: 5f:ba:5d:ee:4d:61:15:25:ac:3a:89:bd:49:15:b4:26:1c:d2: ea:80:81:0e:79:d0:3c:45:e5:10:9f:d7:20:44:fc:77:b8:d7: bf:a6:9a:76:44:3e:25:6b:7b:29:99:ba:46:06:1b:15:9a:59: 68:c1:1c:7a:97:96:7f:d3:71:38:aa:e8:67:8b:91:02:31:df: 73:48:ce:51:7d:2e:a5:38:c4:b4:46:a5:b9:ef:4d:b3:32:44: 34:91:40:24:03:75:40:24:82:3f:bf:2b:19:6b:da:9a:d8:2e: c8:4e:99:39:b8:b9:c3:e1:ae:59:d3:f7:74:ee:d4:b6:cb:46: 8b:dc:6a:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26yxUPWvogHDf3iNz5g8TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2 Njk0NmYwHhcNMjYwMTAxMDAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2MxNzUwZDI3NWQ2ZDQ5YTg4YjkyZWZjZmIxOTU3NWI5NWIwZTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Eo7qoqYaLo8l2l9XDwtAt8RWkfY RMtqVTcqHBIZu025xUHlm4tCCisPmGpWTtPlXu4GaHP3RuJnt4ZgW1yKS6pOv2Iv yR40ayuVNgrHRoxND67njJ8HUS6kpXNRVSQXnDBBJP2aaVcnbG51wsSrtptGm8r+ lsCfLdQHQ+Q0Pb0hJ6hCmPqgdZCd8OiCD++1BvMeAkWDFrOzNB3ApMWo+T2L594N hgUuYgkhs5ZzN2EEqxYiXxeUNjS4sQDUufrwyxPvVC2MjyElhi7J/8CLO3Utxixc KLUbVfVwYVnliF+8iCMmLV5VAPvWGHHguv2xW+Gn7hUKqPLs9C5N95zsEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEfBdQ0nXW1JqIuS78+xlXW5Ww5JMB8GA1UdIwQY MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct MDhhZDk0MTAxZDdlLzEvUjhGMURTZGRiVW1vaTVMdno3R1ZkYmxiRGtrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8voMA0G CSqGSIb3DQEBCwUAA4IBAQCUs42P13JXcq6gj9Rxcs6ncbvdYDz2u7mn6/g3VuOT zJEMtUe1zNHoF9Udz9Wo/3ziTRFOoOrRPvUJFPzK7zgDk/EZ6zrBD8/3pm2hfvr5 cTktTVrECSJFq/m337/cyWMHQbnAsBmkGoNS5B/XTViOPkKDWnw2akmbS0Hj2B1f ul3uTWEVJaw6ib1JFbQmHNLqgIEOedA8ReUQn9cgRPx3uNe/ppp2RD4la3spmbpG BhsVmllowRx6l5Z/03E4quhni5ECMd9zSM5RfS6lOMS0RqW5702zMkQ0kUAkA3VA JII/vysZa9qa2C7ITpk5uLnD4a5Z0/d07tS2y0aL3GqG -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:47 2026 by rpki-client