This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/8ZbZspaaJv_KkgNq99mMPPzKnYs.roa File: 8ZbZspaaJv_KkgNq99mMPPzKnYs.roa (raw, json) Hash identifier: 6uAVrvXqjzKL83+wSwJLKWAkyjtkfyXuirEr9ucsJBU= Subject key identifier: F1:96:D9:B2:96:9A:26:FF:CA:92:03:6A:F7:D9:8C:3C:FC:CA:9D:8B Certificate issuer: /CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71 Certificate serial: 019B7CEE0FAD66F0C35B79B39FCAE41F1F6B Authority key identifier: F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/8ZbZspaaJv_KkgNq99mMPPzKnYs.roa Signing time: Fri 02 Jan 2026 04:18:54 +0000 ROA not before: Fri 02 Jan 2026 04:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 31.14.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:0f:ad:66:f0:c3:5b:79:b3:9f:ca:e4:1f:1f:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71 Validity Not Before: Jan 2 04:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f196d9b2969a26ffca92036af7d98c3cfcca9d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3d:25:52:61:cb:46:e4:7a:fa:67:37:d8:8b: 8b:83:9d:dd:1b:db:e7:be:e6:14:72:f6:3b:65:1b: d9:0f:9e:c1:16:f3:c2:4a:d7:9c:03:39:f4:cc:41: 5f:d4:ef:94:fe:22:f6:a3:a4:75:9b:23:0e:51:73: df:b9:82:87:77:6c:c9:a2:73:6a:2b:8c:e4:97:19: a3:6a:8a:e0:3d:38:d9:1b:27:3d:df:03:71:35:bb: d2:73:6f:62:d0:6a:ce:77:20:e9:4c:1f:40:51:70: 0e:ed:90:85:8f:4a:a8:9c:09:d7:ad:6c:9c:ca:d1: 9d:1f:42:30:79:9f:d0:f1:ac:a1:ec:b8:79:68:18: 1f:87:cf:d9:28:5c:5d:c9:55:8e:4a:2d:24:39:a8: 48:1f:2f:b1:e0:38:be:7f:b1:43:4d:51:12:07:0f: b9:4c:be:57:80:f3:1e:26:18:49:fc:2d:d2:b1:86: c8:41:47:1c:7a:e4:77:92:db:95:3c:3a:5a:85:f8: fd:7f:6b:3d:27:81:a0:80:58:4f:44:3f:47:e8:b0: 20:06:21:48:c8:2a:9c:36:f0:89:96:71:1c:3e:05: c9:9d:30:f5:7f:18:b6:65:4b:94:b0:2d:1d:b7:49: 68:89:0a:c8:14:40:e7:1f:1c:4a:18:ec:d6:64:16: 0c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:96:D9:B2:96:9A:26:FF:CA:92:03:6A:F7:D9:8C:3C:FC:CA:9D:8B X509v3 Authority Key Identifier: keyid:F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/8ZbZspaaJv_KkgNq99mMPPzKnYs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.72.0/24 Signature Algorithm: sha256WithRSAEncryption 00:4e:13:ee:df:08:cc:18:e8:14:ba:5b:2b:81:51:6d:4f:85: c6:21:1b:7a:07:ff:d2:f2:ee:59:60:ac:79:a7:58:e8:03:b1: 68:10:4f:31:cb:52:6c:f5:86:25:d6:c2:74:0f:60:25:3f:b1: ed:6a:07:ab:1a:d9:e6:44:de:b0:18:16:cc:b9:0a:8d:04:cb: bc:92:80:c0:40:cb:9d:f7:dd:a2:a5:49:99:a2:ba:1a:fb:50: 97:b3:d9:36:c2:b5:db:10:5a:4f:c4:5d:7d:a8:a1:ae:f4:2d: ff:d5:af:e4:55:e7:f5:05:b6:17:93:81:0e:14:09:9e:4e:7d: b9:97:a4:1f:4c:87:9d:d2:db:d9:d9:78:52:72:9e:f0:db:1e: ef:3c:a0:62:2a:b0:cf:6b:8a:72:08:fe:99:4c:e4:bf:a8:60: f6:7a:04:28:33:7f:5b:5b:d3:51:3f:a0:a1:10:b0:a9:b0:75: 9e:cb:24:d7:31:fb:2c:7f:fd:76:9c:f9:d2:97:96:5b:43:41: 03:6d:29:34:4b:cb:09:04:a4:e8:2b:f7:41:6d:bf:f7:30:86: 8e:79:7c:0f:6d:25:a8:5b:07:46:f5:4e:22:22:27:00:3c:96: b1:bb:80:b5:2e:d7:e2:fd:1e:95:cc:e0:1f:13:5e:ec:71:f1: 55:a7:47:74 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt87g+tZvDDW3mzn8rkHx9rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZjczYzVjMGYzYTEwNmE4YmE3ZGZmM2UzNWM4MTZkMTA3 OGRjNzEwHhcNMjYwMTAyMDQxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTk2ZDliMjk2OWEyNmZmY2E5MjAzNmFmN2Q5OGMzY2ZjY2E5ZDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD0lUmHLRuR6+mc32IuLg53dG9vn vuYUcvY7ZRvZD57BFvPCStecAzn0zEFf1O+U/iL2o6R1myMOUXPfuYKHd2zJonNq K4zklxmjaorgPTjZGyc93wNxNbvSc29i0GrOdyDpTB9AUXAO7ZCFj0qonAnXrWyc ytGdH0IweZ/Q8ayh7Lh5aBgfh8/ZKFxdyVWOSi0kOahIHy+x4Di+f7FDTVESBw+5 TL5XgPMeJhhJ/C3SsYbIQUcceuR3ktuVPDpahfj9f2s9J4GggFhPRD9H6LAgBiFI yCqcNvCJlnEcPgXJnTD1fxi2ZUuUsC0dt0loiQrIFEDnHxxKGOzWZBYMpQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPGW2bKWmib/ypIDavfZjDz8yp2LMB8GA1UdIwQY MBaAFPj3PFwPOhBqi6ff8+NcgW0QeNxxMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1QYzhYQTg2RUdxTHA5X3o0MXlCYlJCNDNIRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvMDNjY2UzLWU2MjAtNDQ4My1iMDhi LTZkOGZkMzMwZTlhYS8xLzhaYlpzcGFhSnZfS2tnTnE5OW1NUFB6S25Zcy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMjYvMDNjY2UzLWU2MjAtNDQ4My1iMDhiLTZkOGZkMzMwZTlh YS8xLzEtUGM4WEE4NkVHcUxwOV96NDF5QmJSQjQzSEUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfDkgw DQYJKoZIhvcNAQELBQADggEBAABOE+7fCMwY6BS6WyuBUW1PhcYhG3oH/9Ly7llg rHmnWOgDsWgQTzHLUmz1hiXWwnQPYCU/se1qB6sa2eZE3rAYFsy5Co0Ey7ySgMBA y5333aKlSZmiuhr7UJez2TbCtdsQWk/EXX2ooa70Lf/Vr+RV5/UFtheTgQ4UCZ5O fbmXpB9Mh53S29nZeFJynvDbHu88oGIqsM9rinII/plM5L+oYPZ6BCgzf1tb01E/ oKEQsKmwdZ7LJNcx+yx//Xac+dKXlltDQQNtKTRLywkEpOgr90Ftv/cwho55fA9t JahbB0b1TiIiJwA8lrG7gLUu1+L9HpXM4B8TXuxx8VWnR3Q= -----END CERTIFICATE-----Generated at Mon Jan 19 16:51:35 2026 by rpki-client