This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/8DVQ-9ugCgky3pnqMNoEBWadgvs.roa File: 8DVQ-9ugCgky3pnqMNoEBWadgvs.roa (raw, json) Hash identifier: 3usiPYnmDDCd45PFwwCGuxvoOoTqgdlnQ1RDqdrxlXg= Subject key identifier: F0:35:50:FB:DB:A0:0A:09:32:DE:99:EA:30:DA:04:05:66:9D:82:FB Certificate issuer: /CN=88f84cda3f2b9f967d9e8a8485d99e6a1b7f7c6e Certificate serial: 019BF0DF1527781CAF4CB3A43618BF6404F3 Authority key identifier: 88:F8:4C:DA:3F:2B:9F:96:7D:9E:8A:84:85:D9:9E:6A:1B:7F:7C:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPhM2j8rn5Z9noqEhdmeaht_fG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/8DVQ-9ugCgky3pnqMNoEBWadgvs.roa Signing time: Sat 24 Jan 2026 16:38:30 +0000 ROA not before: Sat 24 Jan 2026 16:38:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214237 IP address blocks: 185.127.43.0/24 maxlen: 24 2a01:e880::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.crl rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.mft rsync://rpki.ripe.net/repository/DEFAULT/iPhM2j8rn5Z9noqEhdmeaht_fG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f0:df:15:27:78:1c:af:4c:b3:a4:36:18:bf:64:04:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88f84cda3f2b9f967d9e8a8485d99e6a1b7f7c6e Validity Not Before: Jan 24 16:38:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f03550fbdba00a0932de99ea30da0405669d82fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fb:36:31:0c:06:24:38:62:7f:a1:5f:fb:cd: 51:35:fc:eb:c3:a6:d3:27:51:89:e9:dd:03:83:9a: d9:ce:5d:27:c1:3c:09:a9:b6:df:2e:8b:20:ce:6b: 24:78:62:8f:ed:fd:92:25:8b:97:49:81:83:6e:e7: 60:8e:7d:2b:b3:7c:39:35:eb:9b:d4:42:a4:5e:13: e2:bd:9f:9d:02:1f:a3:af:4b:4f:86:4d:26:d8:61: 05:75:b5:69:e4:07:0b:5c:0f:29:78:8a:33:10:5b: 39:30:bf:7d:c7:91:85:fa:6b:0d:7d:d4:d5:20:bd: 08:9c:96:db:f6:34:c6:3a:10:fc:d0:bd:71:79:78: b2:f1:3f:58:a5:17:ed:f7:e1:d5:f5:ff:74:8c:27: a8:70:b4:67:fa:d9:5c:f3:5b:db:d1:9a:dd:f0:74: 70:8c:1e:b7:c7:4a:28:4d:7b:c1:db:ba:b8:10:61: f1:67:a4:85:32:64:0f:12:64:73:70:38:7e:fd:63: 02:b9:e2:95:43:00:05:c3:38:af:e2:06:4e:ea:7e: 9a:f2:d7:12:ff:3d:eb:4e:ba:e5:5b:48:bd:f3:ef: 7f:49:ae:5d:0a:ac:4f:45:12:fa:65:a1:59:f8:26: 6d:10:62:f3:cf:25:61:56:c5:2d:aa:88:5f:98:68: 11:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:35:50:FB:DB:A0:0A:09:32:DE:99:EA:30:DA:04:05:66:9D:82:FB X509v3 Authority Key Identifier: keyid:88:F8:4C:DA:3F:2B:9F:96:7D:9E:8A:84:85:D9:9E:6A:1B:7F:7C:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPhM2j8rn5Z9noqEhdmeaht_fG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/8DVQ-9ugCgky3pnqMNoEBWadgvs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.127.43.0/24 IPv6: 2a01:e880::/32 Signature Algorithm: sha256WithRSAEncryption 12:0b:d5:ee:68:0f:83:a0:5b:93:d3:39:02:fd:e9:95:25:27: 08:86:82:30:1d:22:05:6f:f2:56:73:db:b9:04:3c:b6:30:f5: de:62:1e:14:6a:8e:b0:37:cc:58:e3:79:05:5e:6b:24:ff:d9: ab:ec:09:e3:8c:82:25:ea:d1:76:16:bf:6f:e3:68:4b:ab:d6: 7b:1d:79:ea:14:e4:59:0d:36:b0:19:6d:7e:8f:a6:25:3c:a2: 38:26:73:63:66:36:ef:ec:69:33:41:6d:08:41:af:bb:f1:1d: 45:b8:a5:fb:e1:88:42:6f:1a:83:34:f3:cb:8d:10:c8:8d:46: 59:fb:aa:a7:12:c0:fb:3a:18:b6:9f:09:e6:4d:a8:08:fe:36: 50:dd:2f:64:26:2f:8c:ff:14:f0:26:c5:cd:be:bf:fe:59:02: 7a:cf:07:ea:ef:aa:11:be:4a:65:ea:71:bc:a6:b9:d2:3b:0c: b1:d8:10:7a:86:b0:c9:ea:9e:9b:73:6a:37:be:5d:01:b1:6e: 0d:3e:89:3c:a2:6f:6c:1d:e9:c1:c1:25:68:09:49:a5:40:0c: 0f:67:4f:8e:ec:e8:5b:32:d9:f4:99:a4:4e:a3:05:28:7c:08: 2d:fd:1b:8c:02:80:06:9c:95:c1:45:3c:7c:15:22:bc:8e:3b: 18:ca:18:bd -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZvw3xUneByvTLOkNhi/ZATzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4Zjg0Y2RhM2YyYjlmOTY3ZDllOGE4NDg1ZDk5ZTZhMWI3 ZjdjNmUwHhcNMjYwMTI0MTYzODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDM1NTBmYmRiYTAwYTA5MzJkZTk5ZWEzMGRhMDQwNTY2OWQ4MmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fs2MQwGJDhif6Ff+81RNfzrw6bT J1GJ6d0Dg5rZzl0nwTwJqbbfLosgzmskeGKP7f2SJYuXSYGDbudgjn0rs3w5Neub 1EKkXhPivZ+dAh+jr0tPhk0m2GEFdbVp5AcLXA8peIozEFs5ML99x5GF+msNfdTV IL0InJbb9jTGOhD80L1xeXiy8T9YpRft9+HV9f90jCeocLRn+tlc81vb0Zrd8HRw jB63x0ooTXvB27q4EGHxZ6SFMmQPEmRzcDh+/WMCueKVQwAFwziv4gZO6n6a8tcS /z3rTrrlW0i98+9/Sa5dCqxPRRL6ZaFZ+CZtEGLzzyVhVsUtqohfmGgRhwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPA1UPvboAoJMt6Z6jDaBAVmnYL7MB8GA1UdIwQY MBaAFIj4TNo/K5+WfZ6KhIXZnmobf3xuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVBoTTJqOHJuNVo5bm9xRWhkbWVhaHRfZkc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mMjM4MzEtNmViNS00NDI3LTgxYjAt MzRkMzQxYzVlYjYxLzEvOERWUS05dWdDZ2t5M3BucU1Ob0VCV2FkZ3ZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9mMjM4MzEtNmViNS00NDI3LTgxYjAtMzRkMzQxYzVlYjYx LzEvaVBoTTJqOHJuNVo5bm9xRWhkbWVhaHRfZkc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuX8rMA0E AgACMAcDBQAqAeiAMA0GCSqGSIb3DQEBCwUAA4IBAQASC9XuaA+DoFuT0zkC/emV JScIhoIwHSIFb/JWc9u5BDy2MPXeYh4Uao6wN8xY43kFXmsk/9mr7AnjjIIl6tF2 Fr9v42hLq9Z7HXnqFORZDTawGW1+j6YlPKI4JnNjZjbv7GkzQW0IQa+78R1FuKX7 4YhCbxqDNPPLjRDIjUZZ+6qnEsD7Ohi2nwnmTagI/jZQ3S9kJi+M/xTwJsXNvr/+ WQJ6zwfq76oRvkpl6nG8prnSOwyx2BB6hrDJ6p6bc2o3vl0BsW4NPok8om9sHenB wSVoCUmlQAwPZ0+O7OhbMtn0maROowUofAgt/RuMAoAGnJXBRTx8FSK8jjsYyhi9 -----END CERTIFICATE-----Generated at Mon Feb 9 20:10:17 2026 by rpki-client