This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/8l0bbv2uUBlilBWZ-F4pKnrQmO0.roa File: 8l0bbv2uUBlilBWZ-F4pKnrQmO0.roa (raw, json) Hash identifier: yr3qgoPKK+MW0Wmz/o5fGlppgkLAJukaAckqwL8mZRo= Subject key identifier: F2:5D:1B:6E:FD:AE:50:19:62:94:15:99:F8:5E:29:2A:7A:D0:98:ED Certificate issuer: /CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054 Certificate serial: 019B7F827A4C205C3F8F967CA049A11FFDB3 Authority key identifier: D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/8l0bbv2uUBlilBWZ-F4pKnrQmO0.roa Signing time: Fri 02 Jan 2026 16:20:15 +0000 ROA not before: Fri 02 Jan 2026 16:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 194.130.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 04:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:7a:4c:20:5c:3f:8f:96:7c:a0:49:a1:1f:fd:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054 Validity Not Before: Jan 2 16:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f25d1b6efdae501962941599f85e292a7ad098ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:31:59:73:5d:c1:cc:59:56:43:c2:db:af:12: 07:7a:93:7e:9d:88:09:37:da:0c:4a:17:fd:f3:fe: 0a:d9:a7:93:5a:f2:99:19:de:ef:95:9f:1e:61:53: 84:6a:af:9d:34:43:1f:82:b6:b8:a6:9c:17:af:92: 47:a4:8c:dd:50:e1:42:5c:64:7d:b6:1e:ed:26:84: 49:aa:db:bc:fd:4e:ce:ee:67:77:2f:71:1b:52:8f: d1:f4:ff:b2:ea:60:9f:22:84:bc:95:69:09:d0:4e: 50:be:55:34:5b:37:cd:55:f8:11:92:67:2f:51:a7: 03:c8:9a:47:0e:6a:b0:55:4e:99:16:51:1a:e0:f9: 94:a5:42:1d:6b:0e:a3:f0:14:4b:99:44:3f:c3:dc: f4:6a:04:fb:f6:a6:2d:19:18:25:d6:ad:dc:8a:6f: dc:4b:e4:1e:87:e1:97:f9:3c:5e:49:d0:49:f7:e5: 93:e1:38:03:49:66:7a:fb:15:b7:1f:db:3f:2d:99: fe:31:90:52:ef:fc:df:47:a7:ba:73:90:74:8e:77: 90:ea:95:6f:eb:cf:81:93:e0:f4:f5:8a:0e:d8:03: b5:5a:9c:e1:18:1b:86:59:4e:f7:a4:f7:dd:d0:4e: 22:7d:37:df:9a:a3:39:b7:1e:f6:db:92:2c:5c:6f: 03:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:5D:1B:6E:FD:AE:50:19:62:94:15:99:F8:5E:29:2A:7A:D0:98:ED X509v3 Authority Key Identifier: keyid:D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/8l0bbv2uUBlilBWZ-F4pKnrQmO0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.130.116.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:1e:ec:7a:75:14:0b:e6:2e:0f:e1:74:cd:c6:d5:59:01:a8: f5:5f:66:95:46:46:26:ff:32:dd:ff:44:e6:a6:c6:60:6c:da: ae:c3:13:95:bc:17:98:49:1a:46:d0:f9:a2:76:87:c7:7f:bd: b9:db:27:0b:cd:91:d6:26:00:72:d0:f1:e0:67:2a:89:fd:e5: fc:0b:33:dc:e6:be:5d:c6:01:48:a3:fa:3b:4e:6d:4c:5b:8a: e7:33:cf:f5:7b:0f:2b:5e:98:14:b2:30:22:96:bd:95:07:c4: 38:f1:ac:34:ca:2c:a8:7a:6e:7c:7c:0e:db:16:68:ae:ef:b9: b1:22:ea:ff:c9:33:30:74:b5:31:f4:ba:38:6f:f9:da:e5:21: 77:d0:20:97:38:4a:0d:9a:4e:2a:f1:84:9f:50:be:26:d7:52: 26:67:30:72:58:42:b2:9f:f7:7c:cb:7a:2c:13:fb:cb:eb:2b: 94:9a:36:f8:f1:51:d3:5c:6c:dc:1b:45:21:d6:dd:6f:de:64: a8:ef:ba:4e:1c:7a:57:65:c2:9d:84:92:78:12:cd:65:96:92: 6d:e9:6d:6f:27:6a:cf:90:67:74:13:e7:cb:f9:f2:9f:66:45: 9f:d9:aa:30:f6:87:84:c0:bd:91:54:a6:f5:0c:a5:3e:f8:a9: a0:18:9f:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gnpMIFw/j5Z8oEmhH/2zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZjYwYjE3NmQ5NWZkOGQzZDBiZDY1YzVkMTJjODM5NDFm N2YwNTQwHhcNMjYwMTAyMTYyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjVkMWI2ZWZkYWU1MDE5NjI5NDE1OTlmODVlMjkyYTdhZDA5OGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DFZc13BzFlWQ8LbrxIHepN+nYgJ N9oMShf98/4K2aeTWvKZGd7vlZ8eYVOEaq+dNEMfgra4ppwXr5JHpIzdUOFCXGR9 th7tJoRJqtu8/U7O7md3L3EbUo/R9P+y6mCfIoS8lWkJ0E5QvlU0WzfNVfgRkmcv UacDyJpHDmqwVU6ZFlEa4PmUpUIdaw6j8BRLmUQ/w9z0agT79qYtGRgl1q3cim/c S+Qeh+GX+TxeSdBJ9+WT4TgDSWZ6+xW3H9s/LZn+MZBS7/zfR6e6c5B0jneQ6pVv 68+Bk+D09YoO2AO1WpzhGBuGWU73pPfd0E4ifTffmqM5tx7225IsXG8DUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPJdG279rlAZYpQVmfheKSp60JjtMB8GA1UdIwQY MBaAFNP2Cxdtlf2NPQvWXF0SyDlB9/BUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMF9ZTEYyMlZfWTA5QzlaY1hSTElPVUgzOEZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9iYzVmZDctM2U2My00OTQ1LWFmYjct MTE3NWU1YTA3YTU1LzEvOGwwYmJ2MnVVQmxpbEJXWi1GNHBLbnJRbU8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9iYzVmZDctM2U2My00OTQ1LWFmYjctMTE3NWU1YTA3YTU1 LzEvMF9ZTEYyMlZfWTA5QzlaY1hSTElPVUgzOEZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwoJ0MA0G CSqGSIb3DQEBCwUAA4IBAQAvHux6dRQL5i4P4XTNxtVZAaj1X2aVRkYm/zLd/0Tm psZgbNquwxOVvBeYSRpG0PmidofHf7252ycLzZHWJgBy0PHgZyqJ/eX8CzPc5r5d xgFIo/o7Tm1MW4rnM8/1ew8rXpgUsjAilr2VB8Q48aw0yiyoem58fA7bFmiu77mx Iur/yTMwdLUx9Lo4b/na5SF30CCXOEoNmk4q8YSfUL4m11ImZzByWEKyn/d8y3os E/vL6yuUmjb48VHTXGzcG0Uh1t1v3mSo77pOHHpXZcKdhJJ4Es1llpJt6W1vJ2rP kGd0E+fL+fKfZkWf2aow9oeEwL2RVKb1DKU++KmgGJ+s -----END CERTIFICATE-----Generated at Sat Jan 10 14:24:02 2026 by rpki-client