This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/n8D_NKCQjks2jeuzf-VmDEGhJy0.roa File: n8D_NKCQjks2jeuzf-VmDEGhJy0.roa (raw, json) Hash identifier: BxlSKmYiJSjve5WPsQ9b002bw4r8+dfXErMK1Yu3iW0= Subject key identifier: 9F:C0:FF:34:A0:90:8E:4B:36:8D:EB:B3:7F:E5:66:0C:41:A1:27:2D Certificate issuer: /CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae Certificate serial: 019B7E39071CA4D715725186BF77D6080FBF Authority key identifier: BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/n8D_NKCQjks2jeuzf-VmDEGhJy0.roa Signing time: Fri 02 Jan 2026 10:20:24 +0000 ROA not before: Fri 02 Jan 2026 10:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48375 IP address blocks: 93.174.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 10:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:07:1c:a4:d7:15:72:51:86:bf:77:d6:08:0f:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae Validity Not Before: Jan 2 10:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fc0ff34a0908e4b368debb37fe5660c41a1272d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f8:9d:92:a6:7d:de:8e:79:28:1b:82:c6:dc: 00:e2:00:62:ff:cb:54:3b:be:71:45:a0:8a:bb:3a: e0:ae:fa:7b:62:2e:5f:28:6f:6b:64:3d:62:02:43: 0d:f7:5c:9f:ca:f9:a5:43:0a:8a:26:cf:70:ff:75: 0a:a6:c6:bc:32:7c:d6:20:8d:93:ba:c1:de:30:78: 61:e0:1b:2d:e2:98:3f:d4:ab:6c:42:14:1d:aa:80: 81:99:19:0e:eb:44:16:df:6a:31:2e:d0:fa:81:58: 28:cc:fb:77:74:52:b6:71:c1:35:43:00:2b:01:2f: c8:d7:fc:e9:64:c8:6c:b3:0f:71:00:f7:71:22:bb: d3:72:0d:f4:26:db:8a:8a:5d:39:d3:a2:17:e1:f6: 6a:00:51:b4:0b:8a:d2:90:1d:e9:5d:db:fa:cb:7e: c0:65:2a:bf:e3:22:c6:3e:75:1f:ee:94:84:5b:08: 94:30:cc:2c:1d:3f:a1:93:c4:8a:89:b7:64:85:2f: ed:c4:96:15:38:d6:fb:22:7d:c3:c6:bc:74:82:05: b8:5b:69:cd:6c:ec:79:cf:f3:62:89:bc:dc:9f:84: b0:52:33:ca:9b:47:97:7a:9e:60:f8:b6:3b:37:a9: 35:25:dc:4d:d3:12:b4:ce:c3:9a:ce:95:1b:b8:b9: 28:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C0:FF:34:A0:90:8E:4B:36:8D:EB:B3:7F:E5:66:0C:41:A1:27:2D X509v3 Authority Key Identifier: keyid:BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/n8D_NKCQjks2jeuzf-VmDEGhJy0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.174.209.0/24 Signature Algorithm: sha256WithRSAEncryption 32:98:de:ed:c8:40:d2:6a:df:05:9b:28:b6:3c:0f:44:63:22: b9:8b:9f:ec:59:c0:de:67:11:ab:28:9a:45:3b:2b:47:70:e5: 40:d2:73:0a:3c:c3:a4:54:c1:6e:ba:fd:0d:79:93:26:5f:98: 37:22:87:f3:d0:90:2d:75:b2:02:e8:c3:45:6d:54:6e:7c:72: d7:fa:bd:f7:5d:dc:bb:14:40:eb:7c:90:74:5b:68:7f:63:82: 7a:cb:ad:49:6f:fa:aa:32:0a:f0:3a:d7:57:75:a9:bf:30:b9: 16:3b:5e:bc:50:e1:01:6c:25:25:70:9c:73:eb:fa:88:ec:40: c6:eb:95:35:c5:da:55:fe:01:eb:37:e3:4d:35:9a:b7:95:bf: 74:1d:90:6c:fd:bd:af:40:da:99:97:28:93:f1:9c:c5:91:6a: e3:27:dc:65:6a:7d:4f:d2:cd:22:f6:a5:44:b7:f5:da:35:09: 8c:1a:55:37:d0:81:5d:00:97:1d:cb:1a:dd:55:8a:93:93:70: 71:2e:42:a8:a4:00:3c:10:2e:32:49:da:eb:d8:3d:73:2f:d6: ef:54:20:58:83:65:8d:5b:f7:49:f6:c7:f0:84:d0:2f:88:e0: 34:d6:f6:9e:66:1d:27:90:b8:38:ee:e4:f2:33:81:e2:1c:a0: d4:ec:90:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OQccpNcVclGGv3fWCA+/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMjM5Yzc3OTBmYzNkNTc3NjI2ZDViYmYxODYxZTU5Yzli NDcwYWUwHhcNMjYwMTAyMTAyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmMwZmYzNGEwOTA4ZTRiMzY4ZGViYjM3ZmU1NjYwYzQxYTEyNzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vidkqZ93o55KBuCxtwA4gBi/8tU O75xRaCKuzrgrvp7Yi5fKG9rZD1iAkMN91yfyvmlQwqKJs9w/3UKpsa8MnzWII2T usHeMHhh4Bst4pg/1KtsQhQdqoCBmRkO60QW32oxLtD6gVgozPt3dFK2ccE1QwAr AS/I1/zpZMhssw9xAPdxIrvTcg30JtuKil0506IX4fZqAFG0C4rSkB3pXdv6y37A ZSq/4yLGPnUf7pSEWwiUMMwsHT+hk8SKibdkhS/txJYVONb7In3Dxrx0ggW4W2nN bOx5z/Niibzcn4SwUjPKm0eXep5g+LY7N6k1JdxN0xK0zsOazpUbuLkoUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ/A/zSgkI5LNo3rs3/lZgxBoSctMB8GA1UdIwQY MBaAFL8jnHeQ/D1XdibVu/GGHlnJtHCuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnlPY2Q1RDhQVmQySnRXNzhZWWVXY20wY0s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMGRlZWMtNzIzMy00MmYzLTg3Njct YjU1MDNhMzJlZGZlLzEvbjhEX05LQ1Fqa3MyamV1emYtVm1ERUdoSnkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMGRlZWMtNzIzMy00MmYzLTg3NjctYjU1MDNhMzJlZGZl LzEvdnlPY2Q1RDhQVmQySnRXNzhZWWVXY20wY0s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXa7RMA0G CSqGSIb3DQEBCwUAA4IBAQAymN7tyEDSat8Fmyi2PA9EYyK5i5/sWcDeZxGrKJpF OytHcOVA0nMKPMOkVMFuuv0NeZMmX5g3Iofz0JAtdbIC6MNFbVRufHLX+r33Xdy7 FEDrfJB0W2h/Y4J6y61Jb/qqMgrwOtdXdam/MLkWO168UOEBbCUlcJxz6/qI7EDG 65U1xdpV/gHrN+NNNZq3lb90HZBs/b2vQNqZlyiT8ZzFkWrjJ9xlan1P0s0i9qVE t/XaNQmMGlU30IFdAJcdyxrdVYqTk3BxLkKopAA8EC4ySdrr2D1zL9bvVCBYg2WN W/dJ9sfwhNAviOA01vaeZh0nkLg47uTyM4HiHKDU7JAD -----END CERTIFICATE-----Generated at Fri Jan 2 14:42:29 2026 by rpki-client