This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/8oGUZV5rDuOAmPAiHSVq6YFIa4c.roa File: 8oGUZV5rDuOAmPAiHSVq6YFIa4c.roa (raw, json) Hash identifier: itFCiAzcsWnQOTmyfhBB9FmGr68OYeNmm+DboS8k52c= Subject key identifier: F2:81:94:65:5E:6B:0E:E3:80:98:F0:22:1D:25:6A:E9:81:48:6B:87 Certificate issuer: /CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd Certificate serial: 019B7BA47DD969E14E54FA79A7237110D0EC Authority key identifier: 02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/8oGUZV5rDuOAmPAiHSVq6YFIa4c.roa Signing time: Thu 01 Jan 2026 22:18:56 +0000 ROA not before: Thu 01 Jan 2026 22:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50220 IP address blocks: 193.104.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:7d:d9:69:e1:4e:54:fa:79:a7:23:71:10:d0:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd Validity Not Before: Jan 1 22:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f28194655e6b0ee38098f0221d256ae981486b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d4:78:37:7d:a8:33:d5:0c:02:c7:3f:85:fb: 84:e3:f5:05:26:69:0c:c5:0b:3b:3b:e3:ab:78:83: 79:12:96:4d:50:64:31:db:39:55:18:9d:7f:36:43: c8:15:a5:96:e5:ab:49:c3:b6:53:b6:00:90:d9:64: 81:cb:e9:69:03:5c:33:3f:1b:1d:23:ee:71:c1:2b: 85:48:22:58:a2:a7:10:e5:ea:b7:fc:87:d9:30:c1: bb:79:70:69:65:54:9e:f2:70:90:b4:c5:61:b2:a1: 39:d3:06:b5:0d:4e:09:84:2b:12:2e:2c:5c:45:ef: 56:6f:39:e9:a3:35:81:37:d8:ca:b7:8f:ad:77:80: c1:60:32:c0:f5:8f:82:d6:64:fe:6d:4b:1e:61:f0: b3:be:ad:6e:58:60:ad:0c:bc:b0:91:d7:40:2f:98: 42:2b:4a:e3:2f:d7:09:f1:2d:2a:76:a1:73:b0:f5: 33:f7:77:cd:36:bb:92:a2:14:53:d9:3d:4d:54:7b: cd:38:86:5c:d1:37:ff:33:8d:a9:20:fa:aa:1f:4f: 9c:63:95:e9:12:3e:a3:93:ce:c5:06:f1:38:6a:7d: 38:da:8e:1d:49:f8:da:54:32:33:49:07:be:f0:91: 9f:ec:01:5f:db:4f:c0:8f:b2:7a:cd:f4:db:fb:4f: fc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:81:94:65:5E:6B:0E:E3:80:98:F0:22:1D:25:6A:E9:81:48:6B:87 X509v3 Authority Key Identifier: keyid:02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/8oGUZV5rDuOAmPAiHSVq6YFIa4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.180.0/24 Signature Algorithm: sha256WithRSAEncryption 27:ac:14:95:dd:aa:bc:b6:86:fe:9a:66:61:cd:71:c5:34:f7: c2:b5:3e:96:ea:fc:f1:2e:09:05:af:fd:72:5d:72:c0:7e:e2: d0:f7:84:f7:e0:68:5b:bb:7e:db:97:8a:b1:58:19:35:57:99: 5c:64:1e:b0:5f:23:02:86:e0:ad:75:fb:fa:4c:9c:f1:81:7b: 20:fe:c8:77:10:17:59:e8:15:bb:3c:81:85:18:b2:c5:84:32: 39:96:87:e9:07:d8:fa:cc:2a:b4:6b:1d:43:cd:b4:01:70:2c: da:2d:4e:d0:a0:ab:b5:68:49:39:b3:77:e8:5d:30:f3:91:eb: a1:47:9f:e3:c2:5a:ef:91:50:a5:7d:18:1b:a2:67:03:95:68: a7:1b:3a:de:6c:8f:71:3d:4a:4f:fd:c5:11:f7:37:d7:f4:81: 9e:03:92:20:95:04:00:83:d1:5e:d6:d7:c4:7e:08:e4:f7:4f: d4:94:b5:65:16:6b:28:31:bb:a2:10:8c:62:75:d7:da:85:f1: b1:bc:88:f6:7d:bf:15:cf:6d:04:fa:4f:e8:cd:55:d0:65:b5: c0:59:28:4a:29:44:49:1d:2b:e9:62:cb:b9:c4:f2:b7:a6:19: 0b:ed:85:4f:b3:d6:3f:8d:fa:32:83:5d:49:a6:9a:43:bc:1d: 8a:d6:49:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pH3ZaeFOVPp5pyNxENDsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyM2FkNmM0NDU4ZmU2OWY0NTkxZmFjY2I1NmJkYzMzMWFm NmI0Y2QwHhcNMjYwMTAxMjIxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjgxOTQ2NTVlNmIwZWUzODA5OGYwMjIxZDI1NmFlOTgxNDg2Yjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNR4N32oM9UMAsc/hfuE4/UFJmkM xQs7O+OreIN5EpZNUGQx2zlVGJ1/NkPIFaWW5atJw7ZTtgCQ2WSBy+lpA1wzPxsd I+5xwSuFSCJYoqcQ5eq3/IfZMMG7eXBpZVSe8nCQtMVhsqE50wa1DU4JhCsSLixc Re9WbznpozWBN9jKt4+td4DBYDLA9Y+C1mT+bUseYfCzvq1uWGCtDLywkddAL5hC K0rjL9cJ8S0qdqFzsPUz93fNNruSohRT2T1NVHvNOIZc0Tf/M42pIPqqH0+cY5Xp Ej6jk87FBvE4an042o4dSfjaVDIzSQe+8JGf7AFf20/Aj7J6zfTb+0/8PQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPKBlGVeaw7jgJjwIh0laumBSGuHMB8GA1UdIwQY MBaAFAI61sRFj+afRZH6zLVr3DMa9rTNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWpyV3hFV1A1cDlGa2ZyTXRXdmNNeHIydE0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWQ3YjMtMjMwNS00ZTJlLWJlYWQt MjRmMjg3YzlhNWY0LzEvOG9HVVpWNXJEdU9BbVBBaUhTVnE2WUZJYTRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWQ3YjMtMjMwNS00ZTJlLWJlYWQtMjRmMjg3YzlhNWY0 LzEvQWpyV3hFV1A1cDlGa2ZyTXRXdmNNeHIydE0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWi0MA0G CSqGSIb3DQEBCwUAA4IBAQAnrBSV3aq8tob+mmZhzXHFNPfCtT6W6vzxLgkFr/1y XXLAfuLQ94T34Ghbu37bl4qxWBk1V5lcZB6wXyMChuCtdfv6TJzxgXsg/sh3EBdZ 6BW7PIGFGLLFhDI5lofpB9j6zCq0ax1DzbQBcCzaLU7QoKu1aEk5s3foXTDzkeuh R5/jwlrvkVClfRgbomcDlWinGzrebI9xPUpP/cUR9zfX9IGeA5IglQQAg9Fe1tfE fgjk90/UlLVlFmsoMbuiEIxiddfahfGxvIj2fb8Vz20E+k/ozVXQZbXAWShKKURJ HSvpYsu5xPK3phkL7YVPs9Y/jfoyg11JpppDvB2K1kl0 -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:26 2026 by rpki-client