This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/8P_M0aIDtey6z1-uBYdoER49gbI.roa File: 8P_M0aIDtey6z1-uBYdoER49gbI.roa (raw, json) Hash identifier: FSnmoR8GJtfy3UCUFj4zRO9IpsS4G6PEH7oMczL8wlA= Subject key identifier: F0:FF:CC:D1:A2:03:B5:EC:BA:CF:5F:AE:05:87:68:11:1E:3D:81:B2 Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B7F8453D4560134F9B96B108A49D36B4D Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/8P_M0aIDtey6z1-uBYdoER49gbI.roa Signing time: Fri 02 Jan 2026 16:22:17 +0000 ROA not before: Fri 02 Jan 2026 16:22:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213831 IP address blocks: 194.39.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:53:d4:56:01:34:f9:b9:6b:10:8a:49:d3:6b:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Jan 2 16:22:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0ffccd1a203b5ecbacf5fae058768111e3d81b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d8:34:77:68:33:4f:48:50:b3:3d:c0:83:ed: 63:53:23:8d:ea:0b:94:e5:45:f3:d5:b6:93:6a:50: c5:8d:e1:a1:70:8e:b2:93:95:cc:71:85:6c:47:cc: 1f:23:67:36:3a:e9:06:7f:d4:70:8a:43:a8:51:f5: bf:99:b0:4c:0e:ed:23:e9:3a:58:81:70:32:e6:91: 21:6a:09:b7:45:c6:53:bb:c4:2a:fa:69:3b:5f:d1: b3:a3:f9:ff:19:2b:37:ce:ee:50:b5:1a:4f:1b:2d: a7:df:35:3b:b9:5d:ce:a1:ea:23:a1:7b:c5:10:28: 30:2e:eb:d9:c8:3f:f5:fc:f1:df:c9:00:ae:69:3c: 8c:98:a7:93:9a:4f:56:d5:05:dc:16:bd:64:47:56: c6:fd:fa:d1:af:48:c3:70:e0:e0:24:14:23:8e:76: ab:bc:d9:a7:eb:79:85:d8:86:92:ca:d4:d6:fa:cb: 40:f5:9c:c1:9c:ea:be:5b:2b:af:46:78:c9:00:86: e8:29:95:2e:05:cd:fa:6f:8d:5e:ea:09:01:2a:8a: 24:f1:45:9c:1f:70:45:f7:fe:f7:cb:6d:de:fc:60: 01:56:8a:14:38:4b:ca:28:8f:b8:cf:77:42:14:dd: f0:94:25:7f:2f:f8:43:ab:13:44:84:93:65:e3:9e: 04:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FF:CC:D1:A2:03:B5:EC:BA:CF:5F:AE:05:87:68:11:1E:3D:81:B2 X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/8P_M0aIDtey6z1-uBYdoER49gbI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.39.217.0/24 Signature Algorithm: sha256WithRSAEncryption 67:7b:b0:a3:eb:ab:bc:48:1a:eb:97:aa:95:ba:7b:bd:a8:d5: 23:97:80:f5:d2:29:de:5d:85:c0:b1:e9:85:24:ac:ba:a2:06: b3:cb:81:16:5a:6b:6b:d9:40:5c:2b:f8:31:55:43:18:93:29: 1f:77:84:89:3a:7e:03:c2:c8:cb:33:a9:5b:f9:91:cb:f3:8f: 45:32:7c:90:b8:bf:bb:b7:f0:fc:86:38:34:3d:ff:ef:f5:46: 82:fe:53:e8:19:89:c7:e0:50:4c:98:e1:14:21:d8:82:3f:1c: 79:db:06:5b:e1:3c:e2:40:d9:13:8b:6f:59:34:25:41:91:57: 86:05:61:e4:e5:a1:dd:ac:6f:15:2b:2d:bc:36:5c:73:88:0e: 97:86:24:26:88:d4:34:b6:fe:09:f4:b3:17:fa:a6:ab:98:d4: 95:d8:eb:c7:18:aa:73:23:3c:47:5a:e3:64:e7:38:f8:cf:a0: d1:f4:f7:24:19:27:a2:80:69:df:64:b7:4d:25:33:aa:ef:5f: 90:eb:7e:52:8d:7f:30:58:72:e2:cf:5a:e3:66:d5:87:48:2a: c9:57:ab:c6:51:0f:70:8a:0c:21:09:43:4b:c9:57:5b:24:c9: 6d:77:62:3c:29:40:8c:76:88:42:f4:44:06:52:c4:ee:df:ac: ba:22:af:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hFPUVgE0+blrEIpJ02tNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjYwMTAyMTYyMjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGZmY2NkMWEyMDNiNWVjYmFjZjVmYWUwNTg3NjgxMTFlM2Q4MWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09g0d2gzT0hQsz3Ag+1jUyON6guU 5UXz1baTalDFjeGhcI6yk5XMcYVsR8wfI2c2OukGf9RwikOoUfW/mbBMDu0j6TpY gXAy5pEhagm3RcZTu8Qq+mk7X9Gzo/n/GSs3zu5QtRpPGy2n3zU7uV3OoeojoXvF ECgwLuvZyD/1/PHfyQCuaTyMmKeTmk9W1QXcFr1kR1bG/frRr0jDcODgJBQjjnar vNmn63mF2IaSytTW+stA9ZzBnOq+WyuvRnjJAIboKZUuBc36b41e6gkBKook8UWc H3BF9/73y23e/GABVooUOEvKKI+4z3dCFN3wlCV/L/hDqxNEhJNl454EUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPD/zNGiA7Xsus9frgWHaBEePYGyMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvOFBfTTBhSUR0ZXk2ejEtdUJZZG9FUjQ5Z2JJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwifZMA0G CSqGSIb3DQEBCwUAA4IBAQBne7Cj66u8SBrrl6qVunu9qNUjl4D10ineXYXAsemF JKy6ogazy4EWWmtr2UBcK/gxVUMYkykfd4SJOn4DwsjLM6lb+ZHL849FMnyQuL+7 t/D8hjg0Pf/v9UaC/lPoGYnH4FBMmOEUIdiCPxx52wZb4TziQNkTi29ZNCVBkVeG BWHk5aHdrG8VKy28NlxziA6XhiQmiNQ0tv4J9LMX+qarmNSV2OvHGKpzIzxHWuNk 5zj4z6DR9PckGSeigGnfZLdNJTOq71+Q635SjX8wWHLiz1rjZtWHSCrJV6vGUQ9w igwhCUNLyVdbJMltd2I8KUCMdohC9EQGUsTu36y6Iq/3 -----END CERTIFICATE-----Generated at Wed Jan 21 16:58:58 2026 by rpki-client