This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/8YjfuQgdLCvL-Jpmwk6qtizfv_I.roa File: 8YjfuQgdLCvL-Jpmwk6qtizfv_I.roa (raw, json) Hash identifier: brAMlNDL72wfdOjb6ddjdyt7eJo3B0Foc3PWILSQa/8= Subject key identifier: F1:88:DF:B9:08:1D:2C:2B:CB:F8:9A:66:C2:4E:AA:B6:2C:DF:BF:F2 Certificate issuer: /CN=3ad65216812ed24fd1c719871a59a971dec30a26 Certificate serial: 019B7CEE0C31F90800796694443B1B4FB0E7 Authority key identifier: 3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/8YjfuQgdLCvL-Jpmwk6qtizfv_I.roa Signing time: Fri 02 Jan 2026 04:18:54 +0000 ROA not before: Fri 02 Jan 2026 04:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212901 IP address blocks: 195.69.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:0c:31:f9:08:00:79:66:94:44:3b:1b:4f:b0:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad65216812ed24fd1c719871a59a971dec30a26 Validity Not Before: Jan 2 04:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f188dfb9081d2c2bcbf89a66c24eaab62cdfbff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:14:32:32:db:02:46:75:94:be:72:a0:84:08: 3c:85:90:ce:a6:43:d1:ce:ba:b1:e8:64:29:ef:e9: 62:56:68:12:f5:cb:a5:f9:b4:09:bf:d8:e2:c2:0b: 1b:b9:0e:aa:00:05:46:14:2f:ca:98:b3:e6:04:35: ea:bb:89:a9:2e:e0:9f:29:34:be:73:1d:15:4c:50: a7:2c:71:d5:f7:80:55:d5:2a:df:2c:c8:9a:0b:0f: 1d:84:91:b2:80:5e:6a:75:34:71:fb:80:fc:ac:e1: ab:4a:14:16:a6:1d:86:62:55:30:33:0b:74:6f:d8: 67:c2:04:77:fe:e3:86:0f:5d:38:80:04:4f:1b:a4: 96:91:58:eb:90:bc:8e:e7:00:9c:95:b6:5e:95:64: 4c:10:0f:c7:d5:99:80:8f:8e:a2:39:bc:01:d3:45: ab:1c:67:10:7e:74:9a:bd:90:ef:b6:e6:32:71:a7: 5e:63:d8:a4:23:35:66:10:24:16:7d:ff:09:58:c9: 6c:50:a5:27:ba:a8:2a:4c:e6:d3:58:2c:8d:09:f0: 2b:b9:a4:c4:92:a3:6b:54:50:8f:03:ef:98:45:bd: 76:69:df:da:57:e0:ac:a1:e4:3e:41:f6:6e:df:1a: 45:6d:79:65:29:0d:5e:c9:1e:90:01:a1:17:1d:8c: 75:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:88:DF:B9:08:1D:2C:2B:CB:F8:9A:66:C2:4E:AA:B6:2C:DF:BF:F2 X509v3 Authority Key Identifier: keyid:3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/8YjfuQgdLCvL-Jpmwk6qtizfv_I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.69.107.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:ff:65:14:17:da:2c:92:fa:4f:5e:73:ae:62:07:20:34:f6: d8:9e:d0:a4:9b:ff:9a:28:13:e7:d0:87:5c:3e:58:2e:fc:5a: 61:8f:a8:54:8d:08:da:c9:e3:16:fa:bc:0e:56:45:15:15:d2: 99:27:c2:66:6d:4b:94:07:ff:8e:eb:60:69:53:80:09:2f:12: 66:0d:d8:3a:f0:bc:ae:ba:9e:d9:67:71:d2:e3:88:58:f7:c7: b3:e6:b0:7b:c3:5a:b8:1f:16:70:64:6f:05:a3:90:fb:77:d9: c1:77:f3:bb:e9:15:32:02:52:bd:c4:70:b7:d4:ae:1e:68:d3: 7e:1f:bd:cc:2b:5b:e2:7e:0f:12:89:52:1e:53:25:42:c5:21: bc:66:3a:f7:6a:01:29:e7:fb:c2:87:ec:e9:eb:62:4d:fd:0c: e8:05:ec:6b:fa:62:21:60:75:de:90:30:c6:a3:5f:d6:d9:ec: fa:71:9a:3c:03:78:96:c5:99:f8:b1:dc:e5:18:ea:f4:c5:d0: 64:33:ef:2d:de:3f:6e:9e:a7:0c:f5:d4:82:47:4c:92:38:77: 80:5b:54:fc:66:61:46:9c:a9:fe:ee:43:c9:29:2e:af:a4:2b: 3d:80:86:32:43:28:c8:d0:61:f0:80:86:74:7d:5f:b0:d3:5c: 91:c1:31:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87gwx+QgAeWaURDsbT7DnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDY1MjE2ODEyZWQyNGZkMWM3MTk4NzFhNTlhOTcxZGVj MzBhMjYwHhcNMjYwMTAyMDQxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTg4ZGZiOTA4MWQyYzJiY2JmODlhNjZjMjRlYWFiNjJjZGZiZmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRQyMtsCRnWUvnKghAg8hZDOpkPR zrqx6GQp7+liVmgS9cul+bQJv9jiwgsbuQ6qAAVGFC/KmLPmBDXqu4mpLuCfKTS+ cx0VTFCnLHHV94BV1SrfLMiaCw8dhJGygF5qdTRx+4D8rOGrShQWph2GYlUwMwt0 b9hnwgR3/uOGD104gARPG6SWkVjrkLyO5wCclbZelWRMEA/H1ZmAj46iObwB00Wr HGcQfnSavZDvtuYycadeY9ikIzVmECQWff8JWMlsUKUnuqgqTObTWCyNCfAruaTE kqNrVFCPA++YRb12ad/aV+CsoeQ+QfZu3xpFbXllKQ1eyR6QAaEXHYx1cwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPGI37kIHSwry/iaZsJOqrYs37/yMB8GA1UdIwQY MBaAFDrWUhaBLtJP0ccZhxpZqXHewwomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RaU0ZvRXUwa19SeHhtSEdsbXBjZDdEQ2lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9iOGNhZTQtYjVhZi00MzgwLTk4MTct NDY1MzhjYTUzODNjLzEvOFlqZnVRZ2RMQ3ZMLUpwbXdrNnF0aXpmdl9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9iOGNhZTQtYjVhZi00MzgwLTk4MTctNDY1MzhjYTUzODNj LzEvT3RaU0ZvRXUwa19SeHhtSEdsbXBjZDdEQ2lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0VrMA0G CSqGSIb3DQEBCwUAA4IBAQBM/2UUF9oskvpPXnOuYgcgNPbYntCkm/+aKBPn0Idc Plgu/Fphj6hUjQjayeMW+rwOVkUVFdKZJ8JmbUuUB/+O62BpU4AJLxJmDdg68Lyu up7ZZ3HS44hY98ez5rB7w1q4HxZwZG8Fo5D7d9nBd/O76RUyAlK9xHC31K4eaNN+ H73MK1vifg8SiVIeUyVCxSG8Zjr3agEp5/vCh+zp62JN/QzoBexr+mIhYHXekDDG o1/W2ez6cZo8A3iWxZn4sdzlGOr0xdBkM+8t3j9unqcM9dSCR0ySOHeAW1T8ZmFG nKn+7kPJKS6vpCs9gIYyQyjI0GHwgIZ0fV+w01yRwTEp -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:46 2026 by rpki-client