This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/8JfslYvm4v2DCkR1-kzWFB_UtnE.roa File: 8JfslYvm4v2DCkR1-kzWFB_UtnE.roa (raw, json) Hash identifier: h87YXxxAOMgfpmrehAUMRdu+AwUhFPQd8qPAjnOPFQU= Subject key identifier: F0:97:EC:95:8B:E6:E2:FD:83:0A:44:75:FA:4C:D6:14:1F:D4:B6:71 Certificate issuer: /CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a Certificate serial: 019B7D5B36EA6C7A2B2132E8402839B0EA01 Authority key identifier: E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/8JfslYvm4v2DCkR1-kzWFB_UtnE.roa Signing time: Fri 02 Jan 2026 06:18:08 +0000 ROA not before: Fri 02 Jan 2026 06:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15870 IP address blocks: 109.120.21.0/24 maxlen: 24 176.62.76.0/24 maxlen: 24 176.62.80.0/24 maxlen: 24 178.74.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:36:ea:6c:7a:2b:21:32:e8:40:28:39:b0:ea:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a Validity Not Before: Jan 2 06:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f097ec958be6e2fd830a4475fa4cd6141fd4b671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8e:2a:44:a8:49:b1:ff:47:ca:7c:61:06:4c: 2d:19:fb:28:f8:65:28:69:c1:c7:fa:60:40:3b:2f: bc:5b:e7:9e:ab:eb:c5:fa:3d:d9:1f:fe:83:48:38: 30:6a:11:dc:e3:7c:67:12:84:16:ac:0d:3b:75:f8: 01:fa:d4:d8:8b:50:5a:a5:cd:54:9f:59:1b:42:6c: 89:b8:ae:0e:2d:5b:e9:db:e7:bf:9b:ee:d0:16:70: 55:48:3d:9b:a7:3c:5e:b2:40:d9:01:c9:d4:d1:e6: bc:fe:01:ee:42:d0:f7:d1:ab:0f:8f:ef:bb:c3:c9: b1:b6:92:10:a8:72:50:c1:94:d1:46:13:c5:e4:73: f6:21:da:84:5c:41:b1:57:b2:df:d3:b9:43:f6:eb: 0a:f0:e0:bd:21:1f:5e:29:17:0e:5d:fa:42:29:0d: 0a:36:14:2f:a7:78:5e:e9:89:e9:a8:d5:7a:c2:9b: 64:1b:b5:78:ae:5f:a3:35:05:e4:cc:a9:06:95:50: 8f:aa:e3:09:7b:77:24:11:cd:b5:58:3b:33:ed:8d: 5b:d4:ad:d9:0b:2e:e9:72:6e:bb:ec:0c:00:90:81: 51:b7:d8:5c:24:cb:4c:19:b9:49:2c:78:36:69:2e: 8f:21:23:b2:ae:b5:c9:bb:8a:78:f2:88:1a:e1:e5: c3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:97:EC:95:8B:E6:E2:FD:83:0A:44:75:FA:4C:D6:14:1F:D4:B6:71 X509v3 Authority Key Identifier: keyid:E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/8JfslYvm4v2DCkR1-kzWFB_UtnE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.120.21.0/24 176.62.76.0/24 176.62.80.0/24 178.74.109.0/24 Signature Algorithm: sha256WithRSAEncryption be:c5:01:5d:b5:1a:c9:6e:2d:89:ea:7c:27:ea:76:49:aa:0e: b2:9c:88:62:d0:07:45:be:df:cd:5d:f0:8c:4d:95:08:c2:be: d9:ea:14:90:44:c0:f1:f8:b7:b2:61:ed:58:98:9f:54:d9:ce: 12:f6:b8:bf:1d:33:67:e7:45:d0:31:a1:ea:99:40:dd:7e:1f: 0b:c9:d6:17:12:04:33:4b:bd:31:a8:cd:8a:45:9e:e4:6e:55: 36:c7:90:73:4e:e3:2d:c0:fe:fe:de:86:41:22:24:02:9c:af: 53:73:48:5f:9c:23:2b:8d:1a:fd:61:5c:c0:e3:de:48:37:c6: 21:3d:1a:c1:d2:69:3c:db:11:5b:05:4c:aa:94:46:e5:7f:b1: cf:51:53:a3:a4:2c:39:24:20:31:55:cd:80:2d:d5:2d:7a:a7: c8:3b:e8:23:26:8d:d6:7d:dd:d7:20:29:de:f3:a5:6c:99:fb: a1:b4:cc:93:4f:3d:05:76:06:05:4d:55:de:80:5d:15:08:61: 3b:50:64:7e:12:f1:44:76:3b:0b:38:ee:e0:28:59:84:23:f3: cd:b9:9f:23:fb:55:07:c1:2b:b9:5f:d9:53:14:03:70:d5:08: 6d:36:5e:d7:a1:59:11:24:84:28:c8:b5:47:10:8b:21:1a:26: 76:2f:2e:d1 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9WzbqbHorITLoQCg5sOoBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YjEzMDYxMDFjYzllYzlmY2U5ODUyODBjMWRiMGYzN2Mx MzVhM2EwHhcNMjYwMTAyMDYxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDk3ZWM5NThiZTZlMmZkODMwYTQ0NzVmYTRjZDYxNDFmZDRiNjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0I4qRKhJsf9HynxhBkwtGfso+GUo acHH+mBAOy+8W+eeq+vF+j3ZH/6DSDgwahHc43xnEoQWrA07dfgB+tTYi1Bapc1U n1kbQmyJuK4OLVvp2+e/m+7QFnBVSD2bpzxeskDZAcnU0ea8/gHuQtD30asPj++7 w8mxtpIQqHJQwZTRRhPF5HP2IdqEXEGxV7Lf07lD9usK8OC9IR9eKRcOXfpCKQ0K NhQvp3he6YnpqNV6wptkG7V4rl+jNQXkzKkGlVCPquMJe3ckEc21WDsz7Y1b1K3Z Cy7pcm677AwAkIFRt9hcJMtMGblJLHg2aS6PISOyrrXJu4p48oga4eXDQwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPCX7JWL5uL9gwpEdfpM1hQf1LZxMB8GA1UdIwQY MBaAFOSxMGEBzJ7J/OmFKAwdsPN8E1o6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80ZDA4OWUtNWQxYy00ZTM0LTk0NjUt ZmE2MzQ4ZjY5NWI1LzEvOEpmc2xZdm00djJEQ2tSMS1reldGQl9VdG5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS80ZDA4OWUtNWQxYy00ZTM0LTk0NjUtZmE2MzQ4ZjY5NWI1 LzEvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAbXgVAwQA sD5MAwQAsD5QAwQAskptMA0GCSqGSIb3DQEBCwUAA4IBAQC+xQFdtRrJbi2J6nwn 6nZJqg6ynIhi0AdFvt/NXfCMTZUIwr7Z6hSQRMDx+LeyYe1YmJ9U2c4S9ri/HTNn 50XQMaHqmUDdfh8LydYXEgQzS70xqM2KRZ7kblU2x5BzTuMtwP7+3oZBIiQCnK9T c0hfnCMrjRr9YVzA495IN8YhPRrB0mk82xFbBUyqlEblf7HPUVOjpCw5JCAxVc2A LdUteqfIO+gjJo3Wfd3XICne86VsmfuhtMyTTz0FdgYFTVXegF0VCGE7UGR+EvFE djsLOO7gKFmEI/PNuZ8j+1UHwSu5X9lTFANw1QhtNl7XoVkRJIQoyLVHEIshGiZ2 Ly7R -----END CERTIFICATE-----Generated at Fri Jan 2 11:34:16 2026 by rpki-client