This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/F8n8ce-NfYDSZF8f7AlTRhbIAY0.roa File: F8n8ce-NfYDSZF8f7AlTRhbIAY0.roa (raw, json) Hash identifier: vWf41qx16Vmcw0y0bCyXnjMlStPLww8Y1GU9KJvOQ28= Subject key identifier: 17:C9:FC:71:EF:8D:7D:80:D2:64:5F:1F:EC:09:53:46:16:C8:01:8D Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C13013BD32A472EB9A1DFD24993758A Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/F8n8ce-NfYDSZF8f7AlTRhbIAY0.roa Signing time: Fri 02 Jan 2026 00:19:38 +0000 ROA not before: Fri 02 Jan 2026 00:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204510 IP address blocks: 194.209.4.0/24 maxlen: 24 194.209.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:01:3b:d3:2a:47:2e:b9:a1:df:d2:49:93:75:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17c9fc71ef8d7d80d2645f1fec09534616c8018d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ba:c3:c4:3a:5c:b0:da:b5:b3:3d:3b:0b:87: ae:2e:bf:59:00:f3:b2:3c:4d:53:8f:57:93:ee:a0: 61:47:4b:60:07:7a:a2:8d:d1:71:85:d6:ca:a0:b2: 0f:f9:81:13:f8:68:af:29:35:04:d6:34:02:d1:82: 2d:c5:99:5d:72:7e:96:71:3c:d1:b2:4b:cf:ef:f1: 9a:89:cd:cd:8f:9f:c6:cf:e2:12:63:80:e5:d8:e3: 98:59:2c:58:c3:b0:76:78:70:6e:ab:3e:54:ad:c8: e2:8d:78:d4:30:59:df:3d:27:59:7f:4b:f0:13:6e: d0:6f:e0:aa:3d:61:c5:d3:6e:43:87:f3:2e:92:df: 5f:a6:19:91:6a:3f:91:22:6d:e2:8c:2c:df:ae:43: e6:10:1d:48:80:85:be:01:03:fe:dc:f3:52:05:21: ef:00:5d:30:64:cb:0b:07:a6:ee:a9:93:59:f3:2f: 0d:ea:f3:37:99:75:fc:5b:df:d7:55:5c:30:31:06: 62:6b:75:fc:ab:94:6f:ff:be:32:7b:f6:30:7c:f8: 26:08:d0:39:06:ae:1c:da:c5:ac:56:b7:6b:06:33: 38:2f:17:74:48:06:cc:22:f2:b8:37:f6:34:cd:af: ad:26:3e:a7:08:ed:de:e3:e2:f7:30:03:de:b0:a1: b9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C9:FC:71:EF:8D:7D:80:D2:64:5F:1F:EC:09:53:46:16:C8:01:8D X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/F8n8ce-NfYDSZF8f7AlTRhbIAY0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.209.4.0/24 194.209.28.0/24 Signature Algorithm: sha256WithRSAEncryption b3:44:a8:9a:d2:d8:33:e1:1e:23:a2:fb:46:75:a1:1a:90:80: 10:a1:97:f2:b7:34:76:f6:98:37:16:ce:e1:75:a5:35:ec:b8: c2:72:40:e4:dd:5c:14:e1:2d:82:11:b1:77:ff:94:3d:84:98: 0b:81:5c:a6:19:d2:fe:5e:2d:92:a7:bd:22:34:d8:b1:a5:9f: 09:23:01:9a:87:18:7f:42:84:44:38:54:fc:b9:27:93:2d:a1: b9:9f:1b:91:82:9c:b6:1d:27:ef:97:e1:5f:b4:62:1c:b5:6c: 5d:3e:62:9e:8e:28:9d:21:d0:4e:dd:66:76:4c:21:8e:8a:88: a7:2f:3e:3c:5a:d2:ba:4f:f8:b8:22:33:84:fc:a4:c0:48:ec: 98:d8:be:75:83:50:37:ab:09:ce:5d:2e:44:c3:b8:40:ee:d8: 49:b0:78:ae:b9:cf:41:f7:78:67:48:c1:c9:66:f4:78:c6:10: 62:5c:e9:b8:98:44:76:59:47:55:ef:05:64:61:0c:e1:9f:81: 25:2e:5b:c7:36:be:57:9a:cc:c9:b3:b3:46:4b:29:9d:66:c6: e8:2c:41:53:a2:50:de:11:d3:ea:73:38:ed:63:f0:3e:76:b2: 49:78:67:b8:f0:06:83:f4:f9:4a:cb:2b:eb:95:af:b6:b3:4f: 63:f2:46:90 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EwE70ypHLrmh39JJk3WKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2M5ZmM3MWVmOGQ3ZDgwZDI2NDVmMWZlYzA5NTM0NjE2YzgwMThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbrDxDpcsNq1sz07C4euLr9ZAPOy PE1Tj1eT7qBhR0tgB3qijdFxhdbKoLIP+YET+GivKTUE1jQC0YItxZldcn6WcTzR skvP7/Gaic3Nj5/Gz+ISY4Dl2OOYWSxYw7B2eHBuqz5UrcjijXjUMFnfPSdZf0vw E27Qb+CqPWHF025Dh/Mukt9fphmRaj+RIm3ijCzfrkPmEB1IgIW+AQP+3PNSBSHv AF0wZMsLB6buqZNZ8y8N6vM3mXX8W9/XVVwwMQZia3X8q5Rv/74ye/YwfPgmCNA5 Bq4c2sWsVrdrBjM4Lxd0SAbMIvK4N/Y0za+tJj6nCO3e4+L3MAPesKG5swIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBfJ/HHvjX2A0mRfH+wJU0YWyAGNMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvRjhuOGNlLU5mWURTWkY4ZjdBbFRSaGJJQVkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwtEEAwQA wtEcMA0GCSqGSIb3DQEBCwUAA4IBAQCzRKia0tgz4R4jovtGdaEakIAQoZfytzR2 9pg3Fs7hdaU17LjCckDk3VwU4S2CEbF3/5Q9hJgLgVymGdL+Xi2Sp70iNNixpZ8J IwGahxh/QoREOFT8uSeTLaG5nxuRgpy2HSfvl+FftGIctWxdPmKejiidIdBO3WZ2 TCGOioinLz48WtK6T/i4IjOE/KTASOyY2L51g1A3qwnOXS5Ew7hA7thJsHiuuc9B 93hnSMHJZvR4xhBiXOm4mER2WUdV7wVkYQzhn4ElLlvHNr5XmszJs7NGSymdZsbo LEFTolDeEdPqczjtY/A+drJJeGe48AaD9PlKyyvrla+2s09j8kaQ -----END CERTIFICATE-----Generated at Mon Jan 26 17:44:23 2026 by rpki-client