This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/8gHT_lp19vgQo-djG0BRf5eWAE4.roa
File: 8gHT_lp19vgQo-djG0BRf5eWAE4.roa (raw, json)
Hash identifier: Vche9wHHqKAp5aWnmI6EY8xEE+HzW3Pog606cPmiZs0=
Subject key identifier: F2:01:D3:FE:5A:75:F6:F8:10:A3:E7:63:1B:40:51:7F:97:96:00:4E
Certificate issuer: /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Certificate serial: 019B77590BE95E5555E739EF6D044B3B3479
Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/8gHT_lp19vgQo-djG0BRf5eWAE4.roa
Signing time: Thu 01 Jan 2026 02:18:03 +0000
ROA not before: Thu 01 Jan 2026 02:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3334
IP address blocks: 194.148.40.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:0b:e9:5e:55:55:e7:39:ef:6d:04:4b:3b:34:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Validity
Not Before: Jan 1 02:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f201d3fe5a75f6f810a3e7631b40517f9796004e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2f:9d:15:97:16:1c:1d:31:d4:9f:cd:68:c1:
5b:db:7b:c1:dc:96:24:a2:e0:06:c2:0a:47:10:90:
4f:de:7e:90:ed:b2:da:53:2e:ed:30:eb:9a:13:23:
16:7b:7a:88:09:44:a0:41:3b:61:cc:0e:21:77:69:
47:c6:fe:d8:6f:fd:b3:e0:61:1a:a3:85:c9:d5:27:
6d:01:03:67:bd:7f:1a:c5:47:c5:56:93:0b:76:2f:
9f:f6:61:72:08:8d:11:57:40:6a:3d:85:6b:ce:82:
50:41:e9:bb:cd:78:3b:b7:1c:14:58:a0:d2:50:42:
11:bd:02:a3:29:2b:68:2c:91:ab:d9:7f:80:b1:bb:
89:51:2b:01:06:d7:24:88:dd:2b:ef:ea:42:01:63:
ff:63:a8:5c:51:9e:32:8a:93:c3:28:f3:df:a0:2f:
4a:83:22:55:2d:55:86:76:bf:25:c4:8f:d9:50:91:
bf:28:04:1d:89:9a:92:3e:45:53:d0:ec:16:89:94:
87:91:30:ca:4e:84:a3:70:39:00:32:f1:6b:2e:44:
04:26:8b:61:ce:05:bc:4e:be:ec:b7:95:0d:63:50:
0a:0e:e0:70:7c:74:3a:eb:64:76:11:3b:4c:15:16:
b0:a4:cc:d7:da:db:9c:12:1f:eb:e4:d7:1c:e2:bc:
f6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:01:D3:FE:5A:75:F6:F8:10:A3:E7:63:1B:40:51:7F:97:96:00:4E
X509v3 Authority Key Identifier:
keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/8gHT_lp19vgQo-djG0BRf5eWAE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.148.40.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:72:d6:b3:4b:d1:e6:17:38:07:18:63:aa:d0:78:5e:2a:49:
b6:3a:cf:fc:ec:91:9a:fe:4d:e1:04:da:9c:e1:ec:6c:b7:e2:
de:a8:86:59:b1:ea:d9:9e:ce:0a:6e:ac:37:d6:ea:f5:57:b7:
0a:9f:e9:20:3d:95:75:61:69:81:a4:25:53:fb:4c:29:b8:ac:
3a:46:ea:12:7f:9d:15:07:dd:4c:df:79:5e:0f:cf:e4:60:1f:
2d:66:62:7a:28:e9:9c:a2:60:ea:9e:02:cf:77:d3:6a:1a:0a:
df:ee:1e:2b:ec:1e:0b:91:9e:2e:06:74:f5:da:3d:89:77:08:
d5:5e:56:2d:c4:c9:cb:da:e6:5f:d9:39:97:13:3c:e7:b5:b9:
be:7d:aa:a7:78:d8:3b:7d:54:85:62:92:b6:f4:44:da:c6:2d:
dc:7a:e5:8a:12:e3:01:e7:61:38:fb:77:38:23:82:ba:14:08:
79:aa:c2:52:4e:b2:71:e3:40:33:30:dc:9e:0c:50:6d:39:15:
54:7b:66:03:e4:ca:18:19:99:f0:ca:35:dc:ef:75:a4:a2:33:
5f:ed:e8:62:ca:13:24:3c:86:4e:0c:cd:bd:34:3b:da:05:9e:
17:1a:d3:96:13:40:ae:79:cb:5a:ea:34:84:50:f2:92:9b:b6:
28:cd:5e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:01:22 2026 by rpki-client