This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/8lYolr8WnShp94BshyvtiYI6yeg.roa File: 8lYolr8WnShp94BshyvtiYI6yeg.roa (raw, json) Hash identifier: mJBuhedzv80zyZzgTQjnDi83juTrUie+tyXWSZEcxf0= Subject key identifier: F2:56:28:96:BF:16:9D:28:69:F7:80:6C:87:2B:ED:89:82:3A:C9:E8 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14B912256FD6CB9968C82ABD005634 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/8lYolr8WnShp94BshyvtiYI6yeg.roa Signing time: Fri 02 Jan 2026 14:20:23 +0000 ROA not before: Fri 02 Jan 2026 14:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 194.231.133.0/24 maxlen: 24 194.231.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:b9:12:25:6f:d6:cb:99:68:c8:2a:bd:00:56:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2562896bf169d2869f7806c872bed89823ac9e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:81:a9:3e:7c:cd:8e:25:ea:d8:52:10:d3:29: 41:38:bf:f8:3a:8b:3c:b2:4b:22:84:ac:e3:9d:28: 80:8d:0a:a4:8c:bb:a3:ce:30:35:1c:41:39:41:7c: 0e:14:9d:79:51:bc:78:29:bb:f1:cf:0e:b8:a4:ae: d7:f5:77:c8:44:b0:50:e8:a6:24:34:12:86:ab:ff: c3:92:8a:af:af:d0:f4:bd:59:36:76:e9:d5:64:61: b8:76:10:4b:5e:f4:ec:5e:0a:91:52:18:75:86:0a: d2:5f:71:f6:c8:6a:e3:e8:43:eb:57:d7:3c:aa:a4: e4:cd:e9:27:d9:44:ac:78:a8:8e:e5:37:7a:16:1e: ee:6b:2e:0f:ec:08:cf:95:c4:ba:81:b8:78:4c:ef: 46:f9:bb:50:9a:d8:2e:84:93:98:6b:19:03:14:25: 9d:71:02:3f:7f:9c:23:13:41:75:c1:43:61:71:92: ed:28:ca:2a:c3:0e:d4:60:71:52:6e:3c:0d:bc:73: 34:74:a6:15:76:db:fa:e8:40:34:5a:cb:60:b5:ed: ad:30:54:e0:f0:a8:8c:d5:29:22:70:76:36:72:5b: bd:3e:7c:84:a9:0e:af:ee:ab:90:2e:c4:9f:a5:98: ec:ea:b8:d5:d3:9b:3e:5e:d1:b3:81:09:5b:15:ea: a6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:56:28:96:BF:16:9D:28:69:F7:80:6C:87:2B:ED:89:82:3A:C9:E8 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/8lYolr8WnShp94BshyvtiYI6yeg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.231.133.0/24 194.231.197.0/24 Signature Algorithm: sha256WithRSAEncryption 05:7d:32:4c:16:35:63:5f:c4:b4:d7:31:1e:e6:6b:8e:42:8e: ed:90:cc:92:02:27:c9:1a:52:c0:11:c7:35:3e:dd:6f:c8:d3: 1e:eb:f9:79:6e:fa:24:ec:94:55:e5:13:6a:8e:eb:69:15:4c: 34:10:28:c9:d5:70:4f:17:af:f9:81:08:03:5c:33:69:28:e2: 48:20:bf:a3:7d:93:03:17:eb:52:e5:d0:83:52:5c:db:4a:31: dd:ad:71:96:04:9f:01:17:10:3e:4d:3f:53:bc:1b:2b:d9:9a: 0d:5f:b6:37:93:60:e9:c2:77:ee:1b:66:f8:b1:48:f6:a2:6e: fa:f5:09:a1:37:59:0e:97:80:0d:15:df:68:bc:f9:6c:06:dc: ce:46:f2:57:ee:13:5d:93:71:2a:f4:5a:c0:60:ad:0f:0b:ed: 99:d7:60:de:0d:44:75:9e:bc:c1:5a:00:1d:c4:44:f6:20:ed: af:3a:27:02:3b:7b:27:04:12:31:f5:bb:58:8e:d9:56:20:75: 25:c8:4d:3c:bb:c0:1c:60:fe:63:5a:73:fa:fb:26:76:72:d5: 42:d4:f2:eb:50:ce:0e:d0:ce:aa:56:ad:e0:46:ed:e1:88:e6: 9e:81:e5:3f:d3:1c:04:38:b2:dd:54:fe:1a:e4:bd:02:ba:b9: 66:5a:31:74 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FLkSJW/Wy5loyCq9AFY0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjU2Mjg5NmJmMTY5ZDI4NjlmNzgwNmM4NzJiZWQ4OTgyM2FjOWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoGpPnzNjiXq2FIQ0ylBOL/4Oos8 sksihKzjnSiAjQqkjLujzjA1HEE5QXwOFJ15Ubx4Kbvxzw64pK7X9XfIRLBQ6KYk NBKGq//Dkoqvr9D0vVk2dunVZGG4dhBLXvTsXgqRUhh1hgrSX3H2yGrj6EPrV9c8 qqTkzekn2USseKiO5Td6Fh7uay4P7AjPlcS6gbh4TO9G+btQmtguhJOYaxkDFCWd cQI/f5wjE0F1wUNhcZLtKMoqww7UYHFSbjwNvHM0dKYVdtv66EA0Wstgte2tMFTg 8KiM1SkicHY2clu9PnyEqQ6v7quQLsSfpZjs6rjV05s+XtGzgQlbFeqmywIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPJWKJa/Fp0oafeAbIcr7YmCOsnoMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvOGxZb2xyOFduU2hwOTRCc2h5dnRpWUk2eWVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwueFAwQA wufFMA0GCSqGSIb3DQEBCwUAA4IBAQAFfTJMFjVjX8S01zEe5muOQo7tkMySAifJ GlLAEcc1Pt1vyNMe6/l5bvok7JRV5RNqjutpFUw0ECjJ1XBPF6/5gQgDXDNpKOJI IL+jfZMDF+tS5dCDUlzbSjHdrXGWBJ8BFxA+TT9TvBsr2ZoNX7Y3k2DpwnfuG2b4 sUj2om769QmhN1kOl4ANFd9ovPlsBtzORvJX7hNdk3Eq9FrAYK0PC+2Z12DeDUR1 nrzBWgAdxET2IO2vOicCO3snBBIx9btYjtlWIHUlyE08u8AcYP5jWnP6+yZ2ctVC 1PLrUM4O0M6qVq3gRu3hiOaegeU/0xwEOLLdVP4a5L0CurlmWjF0 -----END CERTIFICATE-----Generated at Thu Jan 8 12:56:55 2026 by rpki-client