This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/8FXA3L_y6fWlVvjuoMZYug9-ctc.roa File: 8FXA3L_y6fWlVvjuoMZYug9-ctc.roa (raw, json) Hash identifier: LjYIRZujlxSVqdlmuA5Ws4SCBiAXV3LI+Wur00HvyGs= Subject key identifier: F0:55:C0:DC:BF:F2:E9:F5:A5:56:F8:EE:A0:C6:58:BA:0F:7E:72:D7 Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5 Certificate serial: 019B791118658B08FA3AE50397AA2E0E5B64 Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/8FXA3L_y6fWlVvjuoMZYug9-ctc.roa Signing time: Thu 01 Jan 2026 10:18:42 +0000 ROA not before: Thu 01 Jan 2026 10:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51789 IP address blocks: 91.220.109.0/24 maxlen: 24 193.164.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:18:65:8b:08:fa:3a:e5:03:97:aa:2e:0e:5b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5 Validity Not Before: Jan 1 10:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f055c0dcbff2e9f5a556f8eea0c658ba0f7e72d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4f:72:7a:96:6b:b6:19:96:02:b0:72:0c:75: 84:86:e5:e0:31:c7:a9:3d:14:0c:77:4b:8b:0d:e6: 94:67:6a:d9:e9:cb:f6:9b:b6:89:75:d4:67:f2:3c: 07:8f:9b:86:fe:6a:75:68:74:a1:50:01:64:15:0e: 90:64:bb:3d:47:7d:f1:11:76:ba:a3:34:7e:3c:d4: d2:3c:45:50:41:87:fa:62:2e:3d:b3:0f:27:78:05: 12:bd:eb:86:39:92:2e:5b:02:4a:dd:3f:48:c9:cf: 9f:44:bf:c6:1f:5e:0b:94:83:69:52:6c:66:6f:ac: ba:3f:b9:de:e6:9c:13:48:17:ed:0a:0f:cd:ec:ae: 96:c1:60:42:75:52:d9:a7:37:71:ff:a3:7e:cc:cf: 7e:3c:f5:5e:5a:22:94:28:79:21:21:ca:ac:02:fe: 4c:64:f6:94:3f:d4:b8:38:51:09:bb:a6:92:24:1b: 1b:d1:fc:45:1f:11:fe:8b:bd:06:18:16:51:18:80: 6d:fb:2f:bd:01:3a:c8:6d:38:24:3e:aa:6c:a5:e3: 3f:89:c5:7d:39:02:91:11:39:4e:f1:cd:30:ef:69: 27:52:17:f7:21:d3:4d:97:e1:30:b5:f9:66:1f:12: d1:78:74:23:0c:eb:2a:6e:69:e1:cc:3a:75:db:60: 5e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:55:C0:DC:BF:F2:E9:F5:A5:56:F8:EE:A0:C6:58:BA:0F:7E:72:D7 X509v3 Authority Key Identifier: keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/8FXA3L_y6fWlVvjuoMZYug9-ctc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.109.0/24 193.164.152.0/24 Signature Algorithm: sha256WithRSAEncryption b8:4f:3f:08:3e:a5:d8:2e:a5:e0:15:59:ce:3d:08:3e:b7:25: 38:ca:67:c6:fe:da:f7:b0:48:88:c4:a0:61:42:ba:d6:46:c2: b0:a2:88:61:7e:df:6a:1b:75:69:ab:67:3f:94:81:ab:48:53: db:f2:92:c9:60:29:79:19:ea:21:6a:a8:9c:79:43:b1:d8:5d: f2:a4:31:83:76:2e:cc:39:99:40:78:09:e7:cf:af:b6:a2:da: a4:92:43:a3:4b:26:34:a5:59:6c:7d:83:da:e2:bd:68:41:70: 90:87:e8:65:8b:a3:21:cb:b5:9c:1a:ed:4c:06:13:d4:34:76: 65:74:5f:30:08:f2:e1:dc:75:9a:1f:58:bd:59:76:92:a6:1a: 12:cf:93:cc:0b:53:04:5f:c8:20:5f:28:c6:05:6a:f5:46:3a: d9:af:2e:3c:f6:3b:d4:6c:0b:a6:98:bc:dc:42:da:c7:1d:3a: 55:c3:26:3a:a0:c8:7e:bc:8c:0a:c1:ce:60:d4:50:26:a3:9f: 44:2f:6f:18:d6:75:75:21:88:de:f7:d9:2d:9b:a0:2f:87:41: 73:69:f2:dd:02:c3:48:44:21:29:42:a0:76:b7:1a:0c:3c:90: 64:e8:76:c2:af:af:c9:8f:c0:65:52:a2:ab:d3:7c:2c:14:c8: 09:26:13:87 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ERhliwj6OuUDl6ouDltkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNjBiMmIxYzgyOWQ4ODkzNmIxYWRhZWVjOTdmZGQxYjQw ZDQxZTUwHhcNMjYwMTAxMTAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDU1YzBkY2JmZjJlOWY1YTU1NmY4ZWVhMGM2NThiYTBmN2U3MmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu09yepZrthmWArByDHWEhuXgMcep PRQMd0uLDeaUZ2rZ6cv2m7aJddRn8jwHj5uG/mp1aHShUAFkFQ6QZLs9R33xEXa6 ozR+PNTSPEVQQYf6Yi49sw8neAUSveuGOZIuWwJK3T9Iyc+fRL/GH14LlINpUmxm b6y6P7ne5pwTSBftCg/N7K6WwWBCdVLZpzdx/6N+zM9+PPVeWiKUKHkhIcqsAv5M ZPaUP9S4OFEJu6aSJBsb0fxFHxH+i70GGBZRGIBt+y+9ATrIbTgkPqpspeM/icV9 OQKRETlO8c0w72knUhf3IdNNl+EwtflmHxLReHQjDOsqbmnhzDp122BeGwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPBVwNy/8un1pVb47qDGWLoPfnLXMB8GA1UdIwQY MBaAFCFgsrHIKdiJNrGtruyX/dG0DUHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVdDeXNjZ3AySWsyc2EydTdKZjkwYlFOUWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kYjFlMjAtZGMzNi00ODhkLTkxYTEt M2RmN2ZhZjM1MzVkLzEvOEZYQTNMX3k2ZldsVnZqdW9NWll1ZzktY3RjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9kYjFlMjAtZGMzNi00ODhkLTkxYTEtM2RmN2ZhZjM1MzVk LzEvSVdDeXNjZ3AySWsyc2EydTdKZjkwYlFOUWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9xtAwQA waSYMA0GCSqGSIb3DQEBCwUAA4IBAQC4Tz8IPqXYLqXgFVnOPQg+tyU4ymfG/tr3 sEiIxKBhQrrWRsKwoohhft9qG3Vpq2c/lIGrSFPb8pLJYCl5GeohaqiceUOx2F3y pDGDdi7MOZlAeAnnz6+2otqkkkOjSyY0pVlsfYPa4r1oQXCQh+hli6Mhy7WcGu1M BhPUNHZldF8wCPLh3HWaH1i9WXaSphoSz5PMC1MEX8ggXyjGBWr1RjrZry489jvU bAummLzcQtrHHTpVwyY6oMh+vIwKwc5g1FAmo59EL28Y1nV1IYje99ktm6Avh0Fz afLdAsNIRCEpQqB2txoMPJBk6HbCr6/Jj8BlUqKr03wsFMgJJhOH -----END CERTIFICATE-----Generated at Sun Jan 25 13:00:54 2026 by rpki-client