This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/_8tc4RCFe-rX7Jy0Uh65AoQx9ns.roa File: _8tc4RCFe-rX7Jy0Uh65AoQx9ns.roa (raw, json) Hash identifier: w0EawB/FpMDgxmozLOGDKQsH0ich+2GzonUmpggAGPo= Subject key identifier: FF:CB:5C:E1:10:85:7B:EA:D7:EC:9C:B4:52:1E:B9:02:84:31:F6:7B Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7C2C06050B9DDB6787B69EB5C29B7 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/_8tc4RCFe-rX7Jy0Uh65AoQx9ns.roa Signing time: Thu 01 Jan 2026 18:17:50 +0000 ROA not before: Thu 01 Jan 2026 18:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15684 IP address blocks: 159.148.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:c2:c0:60:50:b9:dd:b6:78:7b:69:eb:5c:29:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffcb5ce110857bead7ec9cb4521eb9028431f67b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b2:c3:3b:50:6c:06:e1:f9:e8:17:28:96:4c: c7:14:3c:dc:ad:a0:ef:94:45:69:5c:e8:f0:44:1d: 91:93:3f:71:d7:45:d1:63:f0:8c:d5:64:7c:d6:81: 7f:c3:e2:0d:70:53:ab:78:78:6a:da:9e:fc:3d:a3: 40:93:0c:40:a2:b7:ed:2c:20:e1:8a:c5:9f:84:ff: fd:d0:33:91:b5:95:fd:f7:ce:28:00:77:05:92:8f: e0:c6:ba:b6:d4:0a:37:c6:0c:d7:8d:07:39:30:76: 25:77:98:97:4c:93:65:8e:7f:d7:a9:f4:4b:e5:b4: 6a:b6:35:40:0f:64:ae:2b:8f:5f:4c:f1:54:83:1e: ff:01:ef:44:c6:8f:a5:14:2a:3d:2c:7e:48:25:7c: db:31:24:28:68:c0:5c:9a:f3:4c:a6:bb:21:21:04: 6e:8a:a3:a6:56:83:4a:82:07:8e:27:56:03:b0:d5: 90:a9:4f:a9:3e:e9:e2:5f:c3:6e:18:3e:b2:2f:aa: 77:55:95:dc:15:cf:35:c5:61:5b:25:f5:dd:e8:9c: 4e:74:a7:55:2e:80:de:7d:b1:d4:b1:96:16:53:f3: a2:19:7c:84:b3:95:e4:53:4c:9f:70:64:66:13:63: 9d:9b:5a:69:ff:df:f2:f8:1f:00:3b:a3:43:4c:7e: 46:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:CB:5C:E1:10:85:7B:EA:D7:EC:9C:B4:52:1E:B9:02:84:31:F6:7B X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/_8tc4RCFe-rX7Jy0Uh65AoQx9ns.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.148.208.0/24 Signature Algorithm: sha256WithRSAEncryption 45:95:a2:1b:03:47:0b:95:69:c7:d5:b2:03:68:39:72:35:64: 28:45:aa:ce:63:da:74:38:0a:b7:e5:00:1e:22:9f:0d:cd:e7: 12:79:d3:3f:6d:06:9d:87:ae:a2:e2:04:e3:4a:ab:7e:9b:10: 9d:15:bf:56:b4:38:b7:86:21:cc:b2:e6:a6:49:30:f4:29:1f: ac:1c:7e:d7:20:c4:c0:06:7b:5a:2e:b3:a7:25:8e:bc:eb:0d: 91:ba:68:7f:b1:d3:b8:84:54:90:de:d2:49:b8:c4:d1:79:b9: d1:74:3f:80:63:b0:a2:ee:ec:5a:da:b7:13:98:25:de:7e:97: 81:7f:7b:19:97:1a:de:67:53:2b:1b:8b:f8:68:71:be:96:51: 14:47:cc:e5:5a:e0:8b:8f:3d:bd:3b:3c:e7:1e:f1:6b:52:29: 1b:98:cc:56:24:7d:0b:bb:ae:32:f7:3b:8b:ac:f4:f9:50:b8: c6:31:9f:9c:e6:6c:d1:f3:3b:f0:75:50:12:24:92:d3:08:08: 73:70:e4:37:00:2a:9e:fb:13:8a:8d:d6:f7:fd:f3:44:7a:76: 87:2e:d7:94:02:f4:67:66:c2:e6:83:94:9e:11:ca:87:fd:19: 96:bc:af:28:85:7a:41:af:c6:66:1f:fe:af:ab:ef:02:b8:81: 5d:02:76:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x8LAYFC53bZ4e2nrXCm3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmNiNWNlMTEwODU3YmVhZDdlYzljYjQ1MjFlYjkwMjg0MzFmNjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbLDO1BsBuH56BcolkzHFDzcraDv lEVpXOjwRB2Rkz9x10XRY/CM1WR81oF/w+INcFOreHhq2p78PaNAkwxAorftLCDh isWfhP/90DORtZX9984oAHcFko/gxrq21Ao3xgzXjQc5MHYld5iXTJNljn/XqfRL 5bRqtjVAD2SuK49fTPFUgx7/Ae9Exo+lFCo9LH5IJXzbMSQoaMBcmvNMprshIQRu iqOmVoNKggeOJ1YDsNWQqU+pPuniX8NuGD6yL6p3VZXcFc81xWFbJfXd6JxOdKdV LoDefbHUsZYWU/OiGXyEs5XkU0yfcGRmE2Odm1pp/9/y+B8AO6NDTH5GgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP/LXOEQhXvq1+yctFIeuQKEMfZ7MB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvXzh0YzRSQ0ZlLXJYN0p5MFVoNjVBb1F4OW5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn5TQMA0G CSqGSIb3DQEBCwUAA4IBAQBFlaIbA0cLlWnH1bIDaDlyNWQoRarOY9p0OAq35QAe Ip8NzecSedM/bQadh66i4gTjSqt+mxCdFb9WtDi3hiHMsuamSTD0KR+sHH7XIMTA BntaLrOnJY686w2Rumh/sdO4hFSQ3tJJuMTRebnRdD+AY7Ci7uxa2rcTmCXefpeB f3sZlxreZ1MrG4v4aHG+llEUR8zlWuCLjz29OzznHvFrUikbmMxWJH0Lu64y9zuL rPT5ULjGMZ+c5mzR8zvwdVASJJLTCAhzcOQ3ACqe+xOKjdb3/fNEenaHLteUAvRn ZsLmg5SeEcqH/RmWvK8ohXpBr8ZmH/6vq+8CuIFdAnaU -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:00 2026 by rpki-client