This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/8DpSJKviZ7cSTOBb1JPdqUAWjZI.roa File: 8DpSJKviZ7cSTOBb1JPdqUAWjZI.roa (raw, json) Hash identifier: KJ3gvkRDPvd6FYiFgYbSLnhGd4p7f+DOyl+s6ewmo1Y= Subject key identifier: F0:3A:52:24:AB:E2:67:B7:12:4C:E0:5B:D4:93:DD:A9:40:16:8D:92 Certificate issuer: /CN=4b99cd612420b8593491d8686ce4c4af85b90ad5 Certificate serial: 019BC76B0913F5BE2D31DB0920C436911C16 Authority key identifier: 4B:99:CD:61:24:20:B8:59:34:91:D8:68:6C:E4:C4:AF:85:B9:0A:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5nNYSQguFk0kdhobOTEr4W5CtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/8DpSJKviZ7cSTOBb1JPdqUAWjZI.roa Signing time: Fri 16 Jan 2026 15:27:19 +0000 ROA not before: Fri 16 Jan 2026 15:27:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8461 IP address blocks: 193.254.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.crl rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft rsync://rpki.ripe.net/repository/DEFAULT/S5nNYSQguFk0kdhobOTEr4W5CtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c7:6b:09:13:f5:be:2d:31:db:09:20:c4:36:91:1c:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b99cd612420b8593491d8686ce4c4af85b90ad5 Validity Not Before: Jan 16 15:27:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f03a5224abe267b7124ce05bd493dda940168d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1b:60:85:d4:03:eb:b8:01:60:e6:91:97:37: 6d:ea:8f:e2:5e:1d:0e:f5:bb:0c:e9:f5:45:d8:e4: 3a:c3:15:d0:79:bb:34:54:70:89:5a:cd:ce:75:56: ab:6b:9e:1a:6f:d1:3f:99:a5:ad:5d:13:d3:c3:59: 73:66:47:48:a3:43:72:bb:78:11:83:c6:59:a2:a4: ca:33:00:34:01:84:f3:65:e1:cf:12:3b:58:83:56: 9c:ab:43:0f:59:c6:e6:55:71:bd:50:9a:68:0e:5c: dc:49:98:2b:35:73:8f:bf:35:3d:15:1d:09:75:16: 60:11:69:3c:4e:2c:fe:e6:56:f2:8f:72:75:ff:f8: d0:01:9c:80:e2:7f:0f:30:0b:fc:9a:19:38:16:dc: d1:19:1b:1e:82:34:0e:84:28:a4:e4:b4:94:49:cd: ec:95:6e:b2:5f:c2:cd:cc:b0:fa:ea:6b:01:1a:45: dd:28:eb:5b:bf:7f:22:bb:9e:1e:d1:d0:ee:ac:e7: 16:72:c3:30:b1:0e:b5:97:9c:0a:ac:42:5c:55:3c: f2:a4:06:0c:ad:e4:48:96:5d:2d:33:60:13:d1:58: 97:93:36:27:db:a1:70:da:21:cc:55:2e:e0:64:af: 2a:ba:16:09:c2:48:84:20:43:1d:04:25:16:e9:2d: 6b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:3A:52:24:AB:E2:67:B7:12:4C:E0:5B:D4:93:DD:A9:40:16:8D:92 X509v3 Authority Key Identifier: keyid:4B:99:CD:61:24:20:B8:59:34:91:D8:68:6C:E4:C4:AF:85:B9:0A:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5nNYSQguFk0kdhobOTEr4W5CtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/8DpSJKviZ7cSTOBb1JPdqUAWjZI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.254.216.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:1e:4d:dc:f1:eb:c0:05:21:0a:b1:42:8c:11:a9:0a:26:a8: 47:b1:46:43:ce:33:d3:ff:8f:f4:40:11:a7:b6:88:da:0b:47: 4a:6b:2d:3d:9b:28:f6:55:ef:62:38:a3:3a:4e:1f:a6:b1:5a: e0:ff:57:0a:9e:23:af:9b:70:bb:fc:83:9a:04:a9:31:9c:78: c0:f1:21:53:ae:c6:1e:91:06:dd:bc:b4:f6:a8:98:86:cf:29: c8:30:86:2f:0c:94:72:4c:46:79:c9:6a:5e:f4:76:0e:da:99: e0:3e:e9:21:95:37:40:b8:cf:a3:36:7b:52:4e:b0:e6:22:3b: 25:26:8c:2e:04:01:b0:0f:a9:6d:7c:26:cb:c8:c1:30:28:0e: 28:e4:90:ae:30:97:dc:80:2f:5a:4d:92:1f:2e:ee:94:be:71: 7c:ef:79:f1:e9:19:0c:8d:90:0b:76:ff:c2:d7:53:29:9a:8c: c3:e6:9b:3c:f3:c2:08:a7:18:df:2a:c9:e2:2f:2d:a3:c6:54: 0e:f5:a3:e9:39:90:b6:79:37:d9:3d:93:f7:dd:3a:de:3d:63: 77:58:c5:a2:7d:8e:91:a0:84:ad:e1:0f:c2:b0:16:34:f7:5c: 3e:04:05:13:23:f7:09:7f:aa:fc:9e:4c:77:e5:bb:d7:5e:0c: d2:25:9f:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvHawkT9b4tMdsJIMQ2kRwWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOTljZDYxMjQyMGI4NTkzNDkxZDg2ODZjZTRjNGFmODVi OTBhZDUwHhcNMjYwMTE2MTUyNzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDNhNTIyNGFiZTI2N2I3MTI0Y2UwNWJkNDkzZGRhOTQwMTY4ZDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxtghdQD67gBYOaRlzdt6o/iXh0O 9bsM6fVF2OQ6wxXQebs0VHCJWs3OdVara54ab9E/maWtXRPTw1lzZkdIo0Nyu3gR g8ZZoqTKMwA0AYTzZeHPEjtYg1acq0MPWcbmVXG9UJpoDlzcSZgrNXOPvzU9FR0J dRZgEWk8Tiz+5lbyj3J1//jQAZyA4n8PMAv8mhk4FtzRGRsegjQOhCik5LSUSc3s lW6yX8LNzLD66msBGkXdKOtbv38iu54e0dDurOcWcsMwsQ61l5wKrEJcVTzypAYM reRIll0tM2AT0ViXkzYn26Fw2iHMVS7gZK8quhYJwkiEIEMdBCUW6S1rXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPA6UiSr4me3EkzgW9ST3alAFo2SMB8GA1UdIwQY MBaAFEuZzWEkILhZNJHYaGzkxK+FuQrVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzVuTllTUWd1Rmswa2Rob2JPVEVyNFc1Q3RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83YzFiMTctYjdiNS00NDAxLWIwYTct OTc0NzIwODg5ZmZhLzEvOERwU0pLdmlaN2NTVE9CYjFKUGRxVUFXalpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS83YzFiMTctYjdiNS00NDAxLWIwYTctOTc0NzIwODg5ZmZh LzEvUzVuTllTUWd1Rmswa2Rob2JPVEVyNFc1Q3RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwf7YMA0G CSqGSIb3DQEBCwUAA4IBAQBuHk3c8evABSEKsUKMEakKJqhHsUZDzjPT/4/0QBGn tojaC0dKay09myj2Ve9iOKM6Th+msVrg/1cKniOvm3C7/IOaBKkxnHjA8SFTrsYe kQbdvLT2qJiGzynIMIYvDJRyTEZ5yWpe9HYO2pngPukhlTdAuM+jNntSTrDmIjsl JowuBAGwD6ltfCbLyMEwKA4o5JCuMJfcgC9aTZIfLu6UvnF873nx6RkMjZALdv/C 11MpmozD5ps888IIpxjfKsniLy2jxlQO9aPpOZC2eTfZPZP33TrePWN3WMWifY6R oISt4Q/CsBY091w+BAUTI/cJf6r8nkx35bvXXgzSJZ8I -----END CERTIFICATE-----Generated at Tue Jan 27 02:07:42 2026 by rpki-client