This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/8mE4y9-glZyuFs0R4Pgt7x0a8gw.roa File: 8mE4y9-glZyuFs0R4Pgt7x0a8gw.roa (raw, json) Hash identifier: +d8h1ReixbytM7dwnoMVnYFyX1CBsG+Ttn0J0PbNE80= Subject key identifier: F2:61:38:CB:DF:A0:95:9C:AE:16:CD:11:E0:F8:2D:EF:1D:1A:F2:0C Certificate issuer: /CN=240fd0d33886d839c5cc90103a186e13a348ad50 Certificate serial: 019B7F15D658891838E07A178A3AA12C0A3D Authority key identifier: 24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/8mE4y9-glZyuFs0R4Pgt7x0a8gw.roa Signing time: Fri 02 Jan 2026 14:21:35 +0000 ROA not before: Fri 02 Jan 2026 14:21:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51918 IP address blocks: 195.10.232.0/24 maxlen: 24 195.10.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d6:58:89:18:38:e0:7a:17:8a:3a:a1:2c:0a:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240fd0d33886d839c5cc90103a186e13a348ad50 Validity Not Before: Jan 2 14:21:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f26138cbdfa0959cae16cd11e0f82def1d1af20c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6b:86:71:55:58:8a:b1:15:44:c1:a4:2c:8e: 64:43:cc:fb:fe:79:ed:3c:b9:da:a9:bc:92:82:ea: 31:38:4f:8f:56:9a:f2:15:8c:de:21:7c:c1:a4:d8: c3:7c:6b:5f:86:8c:00:fd:5d:20:40:f0:5e:1a:0f: fd:6b:5d:70:a7:fa:e0:78:9f:b2:32:16:06:c3:ba: 57:76:35:c3:9d:5a:9f:9d:63:e2:8a:1e:07:66:a1: 0a:ac:12:e0:3c:4a:70:e4:7c:54:8b:2a:c5:a7:20: 36:c9:e8:23:b6:b1:0c:dd:b3:24:e0:a7:48:1f:9e: 93:70:2b:0d:bc:a6:02:be:65:aa:a0:69:ed:b7:12: 9d:84:42:2c:82:36:3f:50:a7:92:5d:09:eb:a0:83: a0:fd:89:7e:9b:4d:ba:e9:ee:33:fb:69:18:2f:f7: 2c:67:81:c4:db:e9:12:9c:d5:bb:35:8c:19:fe:32: 69:ec:8c:d6:ae:00:8e:c8:2f:44:91:06:21:35:d0: 83:0e:19:5c:b0:5b:ef:c8:28:48:97:2f:6a:66:f3: 40:77:c7:6b:86:d9:61:81:63:49:9f:ee:61:56:53: 3f:69:dc:66:3e:86:3f:f1:c6:26:84:bc:9f:c2:ed: 57:3c:9e:43:19:56:ac:1d:b8:61:b1:c9:d5:93:26: f5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:61:38:CB:DF:A0:95:9C:AE:16:CD:11:E0:F8:2D:EF:1D:1A:F2:0C X509v3 Authority Key Identifier: keyid:24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/8mE4y9-glZyuFs0R4Pgt7x0a8gw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.10.232.0/24 195.10.239.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:3b:99:04:4f:5c:52:fe:11:ae:41:5c:15:11:12:70:ab:76: 16:ea:65:c7:aa:c0:5c:b1:6d:67:d3:bf:cb:27:93:8a:1a:f6: 26:c4:4a:ed:f7:f3:12:59:0e:5c:3b:89:a7:cc:1e:b6:c3:9d: 64:ed:1d:02:77:61:a9:6a:8f:bb:52:45:d2:c6:c1:db:dd:1c: 34:09:4b:32:7d:69:ea:f1:d7:77:8a:3f:d0:00:e1:47:29:ef: e6:cd:3a:f8:ac:7c:08:0d:6c:ec:83:e9:ac:df:e2:ce:23:db: 3e:0f:9c:b0:83:42:2b:7c:60:b3:82:8a:c8:36:f8:d6:da:98: 9b:1c:90:4b:c3:2d:42:91:50:fc:89:24:97:c9:b4:77:77:bf: ee:3e:ba:00:02:e5:eb:eb:16:9d:88:38:8a:f1:02:07:db:ff: 32:83:73:f2:e8:2b:23:79:77:13:67:fb:ed:01:17:40:02:c1: 95:80:4b:7d:6c:ae:50:c9:75:08:ae:20:c1:56:dc:d5:4c:38: 1b:eb:34:e1:a9:e2:e8:f1:a8:fe:4e:90:9c:ba:dc:4e:75:55: 52:db:4f:5e:7e:00:30:9c:a7:fb:37:8c:11:79:ff:e6:0b:a2: 0e:3b:ae:ab:3a:bc:47:5a:9b:30:41:2e:b5:8a:c9:58:84:71: e3:ae:e6:b2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FdZYiRg44HoXijqhLAo9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MGZkMGQzMzg4NmQ4MzljNWNjOTAxMDNhMTg2ZTEzYTM0 OGFkNTAwHhcNMjYwMTAyMTQyMTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjYxMzhjYmRmYTA5NTljYWUxNmNkMTFlMGY4MmRlZjFkMWFmMjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2uGcVVYirEVRMGkLI5kQ8z7/nnt PLnaqbySguoxOE+PVpryFYzeIXzBpNjDfGtfhowA/V0gQPBeGg/9a11wp/rgeJ+y MhYGw7pXdjXDnVqfnWPiih4HZqEKrBLgPEpw5HxUiyrFpyA2yegjtrEM3bMk4KdI H56TcCsNvKYCvmWqoGnttxKdhEIsgjY/UKeSXQnroIOg/Yl+m0266e4z+2kYL/cs Z4HE2+kSnNW7NYwZ/jJp7IzWrgCOyC9EkQYhNdCDDhlcsFvvyChIly9qZvNAd8dr htlhgWNJn+5hVlM/adxmPoY/8cYmhLyfwu1XPJ5DGVasHbhhscnVkyb1rwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPJhOMvfoJWcrhbNEeD4Le8dGvIMMB8GA1UdIwQY MBaAFCQP0NM4htg5xcyQEDoYbhOjSK1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85NThhNTktZjgwZC00ZDU4LTlkNDMt ZjI2YmZmOGI0OTk0LzEvOG1FNHk5LWdsWnl1RnMwUjRQZ3Q3eDBhOGd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy85NThhNTktZjgwZC00ZDU4LTlkNDMtZjI2YmZmOGI0OTk0 LzEvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwwroAwQA wwrvMA0GCSqGSIb3DQEBCwUAA4IBAQALO5kET1xS/hGuQVwVERJwq3YW6mXHqsBc sW1n07/LJ5OKGvYmxErt9/MSWQ5cO4mnzB62w51k7R0Cd2Gpao+7UkXSxsHb3Rw0 CUsyfWnq8dd3ij/QAOFHKe/mzTr4rHwIDWzsg+ms3+LOI9s+D5ywg0IrfGCzgorI NvjW2pibHJBLwy1CkVD8iSSXybR3d7/uProAAuXr6xadiDiK8QIH2/8yg3Py6Csj eXcTZ/vtARdAAsGVgEt9bK5QyXUIriDBVtzVTDgb6zThqeLo8aj+TpCcutxOdVVS 209efgAwnKf7N4wRef/mC6IOO66rOrxHWpswQS61islYhHHjruay -----END CERTIFICATE-----Generated at Mon Feb 9 20:02:53 2026 by rpki-client