This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8JqLIk_8XJ1vNZ4zPaXbZt2-pIQ.roa File: 8JqLIk_8XJ1vNZ4zPaXbZt2-pIQ.roa (raw, json) Hash identifier: PX2N5z9qQKKNP1oIv+4iv73OdyjTIBPvwhnBoUtMkEc= Subject key identifier: F0:9A:8B:22:4F:FC:5C:9D:6F:35:9E:33:3D:A5:DB:66:DD:BE:A4:84 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F856D96325CA706B21EF3F678003BC2 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8JqLIk_8XJ1vNZ4zPaXbZt2-pIQ.roa Signing time: Fri 02 Jan 2026 16:23:29 +0000 ROA not before: Fri 02 Jan 2026 16:23:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212165 IP address blocks: 212.193.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:6d:96:32:5c:a7:06:b2:1e:f3:f6:78:00:3b:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f09a8b224ffc5c9d6f359e333da5db66ddbea484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2b:f5:91:7a:a8:86:70:fa:c7:b8:3c:c1:c3: a5:24:e4:82:e5:c8:43:80:8b:42:ce:d4:a3:0a:01: e0:31:1d:a4:ad:cf:7b:5f:5e:19:ea:cf:84:8d:be: ee:d2:17:26:2c:fd:a2:ec:16:2d:94:11:49:02:17: a0:5d:bd:3b:b2:8e:2d:dd:fd:7e:7b:b2:3e:9f:d8: 38:69:5b:1c:d4:d0:b8:b4:73:eb:4b:39:75:a5:0a: a6:f0:49:06:d7:b9:53:40:ff:35:ea:85:24:5d:79: a8:95:93:5c:65:2b:08:d5:fc:22:28:75:46:25:96: a6:ec:c0:8a:21:16:4a:f7:e2:f5:ba:85:64:69:30: 0d:82:a0:bf:29:48:2a:90:9c:91:be:4f:87:c4:e6: b0:09:6c:37:47:92:de:94:3a:87:f6:f6:c4:12:23: c0:d6:22:c9:04:6b:ea:e7:f7:83:ff:cb:8c:0a:96: 55:de:91:02:13:f6:ca:58:c0:aa:63:14:0c:14:20: 25:04:7f:94:56:16:c4:66:6b:ef:e5:11:bd:70:c0: 7c:cc:d1:40:62:53:eb:1e:db:97:ea:45:e7:3c:14: 4c:44:97:41:60:46:42:4c:23:f2:1b:e0:b5:1f:55: 91:3b:c0:67:be:99:63:35:8b:4c:73:f2:19:ec:9e: d4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:9A:8B:22:4F:FC:5C:9D:6F:35:9E:33:3D:A5:DB:66:DD:BE:A4:84 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8JqLIk_8XJ1vNZ4zPaXbZt2-pIQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.193.31.0/24 Signature Algorithm: sha256WithRSAEncryption 85:0e:e9:17:36:a2:3d:5e:a8:88:ee:78:9f:e5:ad:5b:9d:1c: 35:4a:3f:4f:f9:be:d6:37:c9:f3:f2:93:44:a4:bc:95:e3:ba: 62:90:2b:2f:34:50:40:ae:0d:0d:9b:11:35:13:f8:a9:c2:f2: 19:0b:b9:66:2e:f6:40:8c:25:25:ec:63:7b:49:cb:e6:73:b7: 09:00:5b:8f:99:d0:c1:94:b7:3b:06:44:10:35:ee:40:3e:73: ad:bd:37:67:52:9d:c2:aa:39:17:72:c4:f7:9d:f3:1f:0d:77: fc:15:11:10:45:fc:f3:d7:9b:a0:d8:01:3e:ff:38:b6:0f:d8: 7a:97:5e:db:11:64:2f:cc:ac:ea:26:95:fa:38:76:71:41:14: fd:19:a2:bc:1d:8c:80:fc:53:a0:d9:03:1d:a0:6a:ab:88:2d: b5:2b:ee:04:3b:f7:28:6b:70:ec:d8:ae:db:7e:8c:2f:55:83: c2:a1:7f:a0:10:a6:b8:b5:1c:e9:05:8e:6f:56:49:44:85:72: da:39:03:0f:d5:ed:1b:ad:0e:90:10:e9:51:9b:b7:6b:ff:15: 83:ee:cd:77:55:65:3e:b7:09:5a:16:32:ee:8a:2b:dc:89:4d: 1a:75:c4:da:ba:bf:c6:d6:5d:02:eb:d9:d0:56:4a:32:1b:60: 32:ce:8d:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hW2WMlynBrIe8/Z4ADvCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDlhOGIyMjRmZmM1YzlkNmYzNTllMzMzZGE1ZGI2NmRkYmVhNDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCv1kXqohnD6x7g8wcOlJOSC5chD gItCztSjCgHgMR2krc97X14Z6s+Ejb7u0hcmLP2i7BYtlBFJAhegXb07so4t3f1+ e7I+n9g4aVsc1NC4tHPrSzl1pQqm8EkG17lTQP816oUkXXmolZNcZSsI1fwiKHVG JZam7MCKIRZK9+L1uoVkaTANgqC/KUgqkJyRvk+HxOawCWw3R5LelDqH9vbEEiPA 1iLJBGvq5/eD/8uMCpZV3pECE/bKWMCqYxQMFCAlBH+UVhbEZmvv5RG9cMB8zNFA YlPrHtuX6kXnPBRMRJdBYEZCTCPyG+C1H1WRO8BnvpljNYtMc/IZ7J7U9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPCaiyJP/FydbzWeMz2l22bdvqSEMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvOEpxTElrXzhYSjF2Tlo0elBhWGJadDItcElRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1MEfMA0G CSqGSIb3DQEBCwUAA4IBAQCFDukXNqI9XqiI7nif5a1bnRw1Sj9P+b7WN8nz8pNE pLyV47pikCsvNFBArg0NmxE1E/ipwvIZC7lmLvZAjCUl7GN7Scvmc7cJAFuPmdDB lLc7BkQQNe5APnOtvTdnUp3CqjkXcsT3nfMfDXf8FREQRfzz15ug2AE+/zi2D9h6 l17bEWQvzKzqJpX6OHZxQRT9GaK8HYyA/FOg2QMdoGqriC21K+4EO/coa3Ds2K7b fowvVYPCoX+gEKa4tRzpBY5vVklEhXLaOQMP1e0brQ6QEOlRm7dr/xWD7s13VWU+ twlaFjLuiivciU0adcTaur/G1l0C69nQVkoyG2Ayzo3Q -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:59 2026 by rpki-client