This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/8f1gsQJvei2ndGgGzbE2q61rqaY.roa File: 8f1gsQJvei2ndGgGzbE2q61rqaY.roa (raw, json) Hash identifier: iWFMGHls8EyIEkAg6Qm+dl/+p7FExBuCdoG6ggjSBpA= Subject key identifier: F1:FD:60:B1:02:6F:7A:2D:A7:74:68:06:CD:B1:36:AB:AD:6B:A9:A6 Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 019B7FF16864DC50C3997E79A35B07F1DFA4 Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/8f1gsQJvei2ndGgGzbE2q61rqaY.roa Signing time: Fri 02 Jan 2026 18:21:25 +0000 ROA not before: Fri 02 Jan 2026 18:21:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20115 IP address blocks: 194.38.48.0/24 maxlen: 24 194.38.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:68:64:dc:50:c3:99:7e:79:a3:5b:07:f1:df:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Jan 2 18:21:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1fd60b1026f7a2da7746806cdb136abad6ba9a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9e:81:f1:10:a4:ec:67:42:08:75:11:ae:07: 0b:09:12:65:45:e7:0c:28:de:2d:59:44:1e:ea:12: 0e:58:d3:dd:91:d8:3d:eb:85:26:78:24:34:57:09: d3:43:64:42:a6:1a:e6:3e:78:43:f9:8b:57:f3:fd: 14:b0:b0:8f:04:41:1e:46:4b:c4:b8:01:b2:60:7d: a3:76:b8:c6:6c:6c:64:88:2e:c2:38:d2:15:f6:49: a2:e0:e7:db:c0:77:ef:f9:54:30:8e:f3:08:c2:1f: b3:eb:9e:04:2c:8a:99:0a:27:a7:a3:99:44:ee:44: e2:2e:b1:7d:4b:d5:fe:51:6b:08:23:eb:d7:97:c8: 81:a0:97:3e:be:63:e5:5a:55:c1:60:7e:0d:b4:f3: 9f:2d:dc:b8:40:b9:ea:cc:54:70:82:c7:b0:18:2a: 14:7f:aa:88:06:45:01:ec:f4:35:fd:15:11:1f:97: 9d:e5:25:46:de:4e:57:00:b1:3b:29:a5:04:54:da: 9b:a6:00:a1:92:d6:94:00:dd:89:4d:9c:00:02:57: ee:2b:e2:fc:01:fb:df:6e:4c:9e:8f:d0:d7:36:3b: 64:bb:56:17:8a:de:50:40:49:0d:f7:a9:f9:83:39: 0d:b0:87:0a:14:a3:33:f7:48:4b:6f:97:8c:62:86: cb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:FD:60:B1:02:6F:7A:2D:A7:74:68:06:CD:B1:36:AB:AD:6B:A9:A6 X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/8f1gsQJvei2ndGgGzbE2q61rqaY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.38.48.0/24 194.38.50.0/24 Signature Algorithm: sha256WithRSAEncryption 76:be:fd:fd:eb:0c:c9:45:26:78:70:73:ec:be:55:9d:84:88: ab:87:27:c6:9b:d7:6c:ba:73:5f:be:f4:d4:62:be:75:c2:f0: c7:0c:ca:ec:1d:38:31:49:4b:47:5a:a7:4a:3f:49:65:99:8a: b4:de:e0:3f:e4:fb:47:02:70:16:fa:e6:e6:23:5f:e0:38:ae: 31:23:bf:b4:20:70:1f:d0:a4:11:8f:87:69:e0:e7:63:e0:2d: b1:b2:8e:5e:97:ab:53:a7:27:d8:26:05:bc:e6:2e:b7:e3:2d: f2:93:88:5e:2b:db:f8:71:3c:fa:4e:be:61:6d:60:5a:c9:a3: 68:21:29:d3:91:16:09:a4:23:cf:8d:30:57:0c:cb:be:27:aa: e9:21:1d:b2:5c:0e:a8:89:7a:7c:bf:d1:e6:ae:04:be:5a:02: 0b:49:53:36:c4:96:d1:e4:b8:39:86:54:c9:40:94:d9:82:d9: 59:d9:84:12:b0:63:60:d6:96:18:35:9f:4f:9e:b8:c7:59:b6: f6:15:f2:6c:44:ff:d9:93:4c:54:d7:b6:ba:23:66:70:a2:d4: 6e:08:ee:c3:d3:f9:2a:fd:01:5f:82:24:db:06:9a:4c:dc:9b: 32:22:a9:cc:83:4f:ee:1d:09:6e:da:1d:e0:8d:9e:79:2d:3f: 5a:e8:5a:63 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8Whk3FDDmX55o1sH8d+kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjYwMTAyMTgyMTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWZkNjBiMTAyNmY3YTJkYTc3NDY4MDZjZGIxMzZhYmFkNmJhOWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh56B8RCk7GdCCHURrgcLCRJlRecM KN4tWUQe6hIOWNPdkdg964UmeCQ0VwnTQ2RCphrmPnhD+YtX8/0UsLCPBEEeRkvE uAGyYH2jdrjGbGxkiC7CONIV9kmi4OfbwHfv+VQwjvMIwh+z654ELIqZCieno5lE 7kTiLrF9S9X+UWsII+vXl8iBoJc+vmPlWlXBYH4NtPOfLdy4QLnqzFRwgsewGCoU f6qIBkUB7PQ1/RURH5ed5SVG3k5XALE7KaUEVNqbpgChktaUAN2JTZwAAlfuK+L8 Afvfbkyej9DXNjtku1YXit5QQEkN96n5gzkNsIcKFKMz90hLb5eMYobLGQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPH9YLECb3otp3RoBs2xNquta6mmMB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvOGYxZ3NRSnZlaTJuZEdnR3piRTJxNjFycWFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwiYwAwQA wiYyMA0GCSqGSIb3DQEBCwUAA4IBAQB2vv396wzJRSZ4cHPsvlWdhIirhyfGm9ds unNfvvTUYr51wvDHDMrsHTgxSUtHWqdKP0llmYq03uA/5PtHAnAW+ubmI1/gOK4x I7+0IHAf0KQRj4dp4Odj4C2xso5el6tTpyfYJgW85i634y3yk4heK9v4cTz6Tr5h bWBayaNoISnTkRYJpCPPjTBXDMu+J6rpIR2yXA6oiXp8v9HmrgS+WgILSVM2xJbR 5Lg5hlTJQJTZgtlZ2YQSsGNg1pYYNZ9PnrjHWbb2FfJsRP/Zk0xU17a6I2ZwotRu CO7D0/kq/QFfgiTbBppM3JsyIqnMg0/uHQlu2h3gjZ55LT9a6Fpj -----END CERTIFICATE-----Generated at Mon Jan 19 14:38:56 2026 by rpki-client