This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/8Se3uc3DbqWdAa0N6dnz-ulAChQ.roa File: 8Se3uc3DbqWdAa0N6dnz-ulAChQ.roa (raw, json) Hash identifier: ckIt3+/q1yKLUt7Gy6kAluKd1A3c865rgY5/YDCVxFs= Subject key identifier: F1:27:B7:B9:CD:C3:6E:A5:9D:01:AD:0D:E9:D9:F3:FA:E9:40:0A:14 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797EBF21D7D7DED60561A5625A9CC301 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/8Se3uc3DbqWdAa0N6dnz-ulAChQ.roa Signing time: Thu 01 Jan 2026 12:18:28 +0000 ROA not before: Thu 01 Jan 2026 12:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 178.253.210.0/24 maxlen: 24 188.255.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:bf:21:d7:d7:de:d6:05:61:a5:62:5a:9c:c3:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f127b7b9cdc36ea59d01ad0de9d9f3fae9400a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c4:6b:21:1e:88:34:d7:31:ce:52:27:aa:d6: 91:fa:ba:9c:35:cf:4c:5e:32:77:11:d2:a1:41:27: 51:c2:39:92:19:74:86:03:1f:e9:fa:82:64:d9:7f: 35:0d:27:29:89:19:a5:8d:bd:87:4b:b0:cd:78:cd: 81:12:ef:00:f2:64:35:51:0a:75:8d:ff:52:0c:a0: 91:a5:f0:6f:af:25:ab:08:f6:07:58:27:c5:e0:73: e6:58:17:bb:83:e9:80:60:09:dd:46:8c:95:70:1a: 94:18:c4:27:1f:a6:3a:b4:fe:ab:5b:4a:ca:8d:15: cd:2b:26:2e:f3:3e:4a:72:c7:08:3d:21:74:53:28: 68:d4:67:c0:30:08:34:ed:75:d7:4d:2e:25:47:6b: 7a:13:7f:af:da:a8:1d:f8:15:7b:59:ba:77:d4:0a: 3e:22:41:b1:fe:a9:0f:1f:b1:ce:a3:b4:28:c2:92: b4:fa:39:ce:10:7b:db:d9:cb:82:27:07:b3:ae:76: cc:cf:f4:46:1b:71:61:ff:92:3c:37:2c:4a:40:1f: b9:ec:74:cb:44:e9:47:a3:0f:36:30:13:ce:5f:02: f6:7d:df:cd:ea:9c:da:d0:16:55:51:23:95:f5:dc: f6:0f:85:dc:c9:c3:a1:44:be:7f:ec:61:0a:9f:34: b8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:27:B7:B9:CD:C3:6E:A5:9D:01:AD:0D:E9:D9:F3:FA:E9:40:0A:14 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/8Se3uc3DbqWdAa0N6dnz-ulAChQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.253.210.0/24 188.255.193.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:43:51:07:bb:f8:b0:ef:19:28:b5:03:44:9f:1c:fc:51:73: 4b:72:ed:3d:9d:b5:1f:5e:89:db:9c:cf:9a:2d:cf:52:72:70: 52:d3:18:47:cc:c4:5a:f6:cf:ef:f6:4a:17:a0:e9:07:69:19: e1:15:ae:11:4d:7c:f7:cf:46:ae:ab:4e:18:37:ca:6c:cb:1b: 62:78:89:d4:2c:ff:d3:07:74:45:4d:70:3f:36:3b:70:f5:76: 95:b2:a8:9c:6f:cb:5a:3c:a5:2c:2d:b2:35:76:08:dd:ae:fe: 50:a5:55:df:dc:cd:c8:7b:ba:3d:c1:80:54:04:2d:14:52:07: a4:54:d0:78:a2:60:0d:10:28:91:d4:d3:08:15:3e:56:2a:08: 5c:fa:78:4e:38:3b:0b:c9:2a:bc:31:a5:6a:da:36:9c:57:56: f3:55:f6:c9:9e:e2:a9:9d:a5:fb:b3:00:8a:53:ba:81:b5:76: 39:10:e0:8f:ed:07:e6:ed:0c:38:e8:d8:ef:d0:7f:21:85:8a: 74:49:1b:f5:01:2b:2c:d0:15:c1:a7:60:62:2b:84:4d:fe:2f: 0e:86:24:ca:6b:d4:54:0c:d2:b3:a5:9e:86:0e:71:1f:cc:ad: 8e:3c:59:7a:cb:9c:b5:e7:29:1b:a5:06:08:4e:be:3f:25:5c: 76:84:cf:3a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fr8h19fe1gVhpWJanMMBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTI3YjdiOWNkYzM2ZWE1OWQwMWFkMGRlOWQ5ZjNmYWU5NDAwYTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycRrIR6INNcxzlInqtaR+rqcNc9M XjJ3EdKhQSdRwjmSGXSGAx/p+oJk2X81DScpiRmljb2HS7DNeM2BEu8A8mQ1UQp1 jf9SDKCRpfBvryWrCPYHWCfF4HPmWBe7g+mAYAndRoyVcBqUGMQnH6Y6tP6rW0rK jRXNKyYu8z5KcscIPSF0Uyho1GfAMAg07XXXTS4lR2t6E3+v2qgd+BV7Wbp31Ao+ IkGx/qkPH7HOo7QowpK0+jnOEHvb2cuCJwezrnbMz/RGG3Fh/5I8NyxKQB+57HTL ROlHow82MBPOXwL2fd/N6pza0BZVUSOV9dz2D4XcycOhRL5/7GEKnzS4jQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPEnt7nNw26lnQGtDenZ8/rpQAoUMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvOFNlM3VjM0RicVdkQWEwTjZkbnotdWxBQ2hRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsv3SAwQA vP/BMA0GCSqGSIb3DQEBCwUAA4IBAQAsQ1EHu/iw7xkotQNEnxz8UXNLcu09nbUf XonbnM+aLc9ScnBS0xhHzMRa9s/v9koXoOkHaRnhFa4RTXz3z0auq04YN8psyxti eInULP/TB3RFTXA/Njtw9XaVsqicb8taPKUsLbI1dgjdrv5QpVXf3M3Ie7o9wYBU BC0UUgekVNB4omANECiR1NMIFT5WKghc+nhOODsLySq8MaVq2jacV1bzVfbJnuKp naX7swCKU7qBtXY5EOCP7Qfm7Qw46Njv0H8hhYp0SRv1ASss0BXBp2BiK4RN/i8O hiTKa9RUDNKzpZ6GDnEfzK2OPFl6y5y15ykbpQYITr4/JVx2hM86 -----END CERTIFICATE-----Generated at Mon Jan 19 13:53:32 2026 by rpki-client