This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/j8NRcneTJ0erjUoC8sEq4kTQQnI.roa File: j8NRcneTJ0erjUoC8sEq4kTQQnI.roa (raw, json) Hash identifier: jexHV1h3hwT59/VOtHkOcyrNIXBETEJ/OwCKAiLIB9o= Subject key identifier: 8F:C3:51:72:77:93:27:47:AB:8D:4A:02:F2:C1:2A:E2:44:D0:42:72 Certificate issuer: /CN=e8c89b3dcdfa2697b48721308c76b67372a13b15 Certificate serial: 019B7C80051EE3E78E29991858FA6A293E0E Authority key identifier: E8:C8:9B:3D:CD:FA:26:97:B4:87:21:30:8C:76:B6:73:72:A1:3B:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/j8NRcneTJ0erjUoC8sEq4kTQQnI.roa Signing time: Fri 02 Jan 2026 02:18:43 +0000 ROA not before: Fri 02 Jan 2026 02:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7155 IP address blocks: 194.53.128.0/23 maxlen: 24 194.53.214.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.crl rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft rsync://rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:05:1e:e3:e7:8e:29:99:18:58:fa:6a:29:3e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8c89b3dcdfa2697b48721308c76b67372a13b15 Validity Not Before: Jan 2 02:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8fc3517277932747ab8d4a02f2c12ae244d04272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b7:83:48:f7:c4:fe:2a:d0:97:91:a1:17:6d: 77:a4:fe:8a:97:cc:73:47:48:0f:b3:70:6b:df:5a: 31:f6:9e:ce:58:91:3d:3a:43:e7:cc:28:ff:ea:06: 60:fe:8a:40:03:ea:bd:4f:1a:17:96:7a:2b:6a:98: c4:e6:26:fc:ec:35:1b:7f:0c:bf:2d:e6:da:1b:9f: 82:46:c2:a4:91:f4:89:b9:12:bb:e1:67:f1:b3:5f: 6c:54:87:16:49:18:c6:78:61:a2:94:3a:15:9c:8e: 22:b7:a7:13:46:98:5b:79:39:c8:8b:07:0b:6c:21: b1:4d:af:c0:3c:3e:fd:48:d2:65:f2:73:ed:2e:b5: f1:47:d9:10:90:93:f2:10:90:b7:56:4c:21:09:77: 4c:81:d2:d2:a0:fe:8d:3d:ff:ef:4a:0c:8f:3f:2a: a6:d7:ef:50:c9:5e:7a:38:a2:2a:1c:90:a1:68:7b: 7f:3b:66:ac:a4:4c:40:ee:ee:b9:90:ea:0a:90:be: 4f:e8:ff:92:d1:51:01:4f:4b:3d:3b:ae:e1:a5:4f: 7d:9b:33:a5:ab:a1:cf:10:2d:56:32:fa:88:a8:15: fe:2f:0c:4b:2f:f4:87:13:66:f8:16:0d:7e:e9:46: f2:75:04:6c:4e:aa:28:88:d0:ad:e3:09:2a:d9:0c: af:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C3:51:72:77:93:27:47:AB:8D:4A:02:F2:C1:2A:E2:44:D0:42:72 X509v3 Authority Key Identifier: keyid:E8:C8:9B:3D:CD:FA:26:97:B4:87:21:30:8C:76:B6:73:72:A1:3B:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/j8NRcneTJ0erjUoC8sEq4kTQQnI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.53.128.0/23 194.53.214.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:39:0e:62:a4:be:e7:75:a7:34:7f:c7:76:63:23:77:ce:ad: 25:18:6f:9b:f1:fc:4d:32:b6:ea:6c:45:44:48:82:a5:e0:b7: 95:21:be:1e:97:f6:38:6f:bf:c6:49:d3:46:2b:89:92:1a:92: 46:46:5b:39:2f:8b:86:a8:19:2c:c3:75:32:e0:45:35:de:33: ac:1d:6c:ff:4c:ff:ad:81:bb:d7:74:7f:03:c6:8a:d1:29:9f: 00:4c:b5:fc:d2:09:fe:12:fe:57:47:25:3c:ed:0e:3e:ab:47: f3:38:bf:75:ac:a4:73:46:61:97:65:b2:9d:c9:58:bc:11:ee: ba:da:83:5d:90:ef:4a:73:67:3f:f5:fc:16:f5:98:64:d0:af: 32:48:89:a7:cf:9c:41:be:b4:f1:5d:81:ab:a1:b8:cf:92:34: cd:42:1a:a2:0c:51:63:a8:b6:e6:a9:e2:77:4d:6e:2b:c5:6b: f0:0a:2a:e6:37:fd:f1:a8:11:61:d5:41:0c:bb:2c:77:d5:09: 90:9e:9b:49:64:0e:5b:76:78:94:14:77:aa:41:aa:2d:40:11: 2f:d1:11:1b:75:26:b8:58:f1:28:8f:7c:c9:a9:4f:7d:d4:ac: ab:e8:5e:db:cf:de:ea:9a:ff:34:cb:22:2b:25:a1:02:11:f0: 8e:e7:bb:ec -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gAUe4+eOKZkYWPpqKT4OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4Yzg5YjNkY2RmYTI2OTdiNDg3MjEzMDhjNzZiNjczNzJh MTNiMTUwHhcNMjYwMTAyMDIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmMzNTE3Mjc3OTMyNzQ3YWI4ZDRhMDJmMmMxMmFlMjQ0ZDA0MjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7eDSPfE/irQl5GhF213pP6Kl8xz R0gPs3Br31ox9p7OWJE9OkPnzCj/6gZg/opAA+q9TxoXlnorapjE5ib87DUbfwy/ LebaG5+CRsKkkfSJuRK74Wfxs19sVIcWSRjGeGGilDoVnI4it6cTRphbeTnIiwcL bCGxTa/APD79SNJl8nPtLrXxR9kQkJPyEJC3VkwhCXdMgdLSoP6NPf/vSgyPPyqm 1+9QyV56OKIqHJChaHt/O2aspExA7u65kOoKkL5P6P+S0VEBT0s9O67hpU99mzOl q6HPEC1WMvqIqBX+LwxLL/SHE2b4Fg1+6UbydQRsTqooiNCt4wkq2Qyv7QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI/DUXJ3kydHq41KAvLBKuJE0EJyMB8GA1UdIwQY MBaAFOjImz3N+iaXtIchMIx2tnNyoTsVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk1pYlBjMzZKcGUwaHlFd2pIYTJjM0toT3hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9mMjMxZTQtNjdhNi00YzU1LTkxZjUt OTM0YjQ0MzkwOTJkLzEvajhOUmNuZVRKMGVyalVvQzhzRXE0a1RRUW5JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9mMjMxZTQtNjdhNi00YzU1LTkxZjUtOTM0YjQ0MzkwOTJk LzEvNk1pYlBjMzZKcGUwaHlFd2pIYTJjM0toT3hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwjWAAwQB wjXWMA0GCSqGSIb3DQEBCwUAA4IBAQBrOQ5ipL7ndac0f8d2YyN3zq0lGG+b8fxN MrbqbEVESIKl4LeVIb4el/Y4b7/GSdNGK4mSGpJGRls5L4uGqBksw3Uy4EU13jOs HWz/TP+tgbvXdH8DxorRKZ8ATLX80gn+Ev5XRyU87Q4+q0fzOL91rKRzRmGXZbKd yVi8Ee662oNdkO9Kc2c/9fwW9Zhk0K8ySImnz5xBvrTxXYGrobjPkjTNQhqiDFFj qLbmqeJ3TW4rxWvwCirmN/3xqBFh1UEMuyx31QmQnptJZA5bdniUFHeqQaotQBEv 0REbdSa4WPEoj3zJqU991Kyr6F7bz97qmv80yyIrJaECEfCO57vs -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:41 2026 by rpki-client