This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/Ax8-r-En_jV12HWCMP3xAmC-QDo.roa File: Ax8-r-En_jV12HWCMP3xAmC-QDo.roa (raw, json) Hash identifier: DTlvOtpcsab+lqdAbmVznR+Ar32K7k6eVkxqJFUVOG0= Subject key identifier: 03:1F:3E:AF:E1:27:FE:35:75:D8:75:82:30:FD:F1:02:60:BE:40:3A Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Certificate serial: 019B7E388EC082DEDFF3AE03A416F2CC1902 Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/Ax8-r-En_jV12HWCMP3xAmC-QDo.roa Signing time: Fri 02 Jan 2026 10:19:54 +0000 ROA not before: Fri 02 Jan 2026 10:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39855 IP address blocks: 195.226.205.0/24 maxlen: 24 213.249.73.0/24 maxlen: 24 213.249.74.0/24 maxlen: 24 213.249.76.0/24 maxlen: 24 213.249.77.0/24 maxlen: 24 213.249.78.0/24 maxlen: 24 213.249.81.0/24 maxlen: 24 213.249.82.0/23 maxlen: 24 213.249.85.0/24 maxlen: 24 213.249.86.0/23 maxlen: 24 213.249.89.0/24 maxlen: 24 213.249.90.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:8e:c0:82:de:df:f3:ae:03:a4:16:f2:cc:19:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Validity Not Before: Jan 2 10:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=031f3eafe127fe3575d8758230fdf10260be403a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cb:9a:b7:2d:3a:b7:8f:37:a6:ac:9b:db:ea: dd:76:ee:b5:57:3e:46:3b:c7:67:e1:1a:d7:34:83: ce:bf:a2:54:cb:00:2a:27:05:cf:a8:4c:a8:f1:4c: 46:b3:b0:ef:82:b8:30:fd:99:f5:cb:c4:a3:80:ca: fb:e4:78:86:bb:c8:20:e1:bd:e3:fb:16:b0:05:07: 54:e7:56:dc:0c:f9:e5:47:43:40:57:21:a2:4d:90: 33:f2:ba:e9:bf:63:b1:1b:42:54:55:db:26:00:ba: fc:73:be:e7:88:a7:d3:8e:db:50:9c:66:cb:53:c9: b8:62:6c:5e:52:09:3d:74:75:9a:62:f9:f7:70:d5: 96:de:47:2b:e8:a4:3d:9a:85:b7:2e:99:1c:96:64: f7:69:2f:0a:d8:91:f4:ef:05:28:1d:33:0d:f6:72: 78:ab:e0:3f:94:1f:23:2a:a2:ed:05:91:62:2d:f7: 89:b7:14:a5:80:28:19:83:57:4e:98:32:c2:dd:f7: 79:89:dc:6a:9b:a7:03:0b:52:42:e3:ff:6a:a7:ae: e5:47:d0:f3:d8:5e:17:a8:8a:38:b0:cf:68:69:48: 91:fa:a4:07:ab:87:e0:c3:ba:9c:78:cc:d8:d5:27: 48:07:e1:24:4b:45:7d:b0:c7:c1:84:09:0f:4d:01: 53:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:1F:3E:AF:E1:27:FE:35:75:D8:75:82:30:FD:F1:02:60:BE:40:3A X509v3 Authority Key Identifier: keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/Ax8-r-En_jV12HWCMP3xAmC-QDo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.226.205.0/24 213.249.73.0-213.249.74.255 213.249.76.0-213.249.78.255 213.249.81.0-213.249.83.255 213.249.85.0-213.249.87.255 213.249.89.0-213.249.91.255 Signature Algorithm: sha256WithRSAEncryption 85:95:e6:70:0f:c8:ed:bb:50:fa:7a:9f:5a:31:42:c0:c3:ea: 51:da:ac:db:78:8c:89:99:f7:5c:91:cf:7f:06:e0:f6:b9:4e: 5d:8d:dc:ea:25:4a:38:b4:23:4a:cc:8f:99:10:5b:58:2b:22: 3f:93:78:d4:c5:ea:8f:ec:df:b4:e9:88:45:9d:7b:26:4c:2b: 66:41:aa:05:3c:a2:8a:b7:ba:96:78:77:73:62:ee:0f:a9:f6: 73:98:ec:e1:55:0f:ec:52:d3:1b:71:51:de:b9:37:82:bc:d7: ed:9b:48:9f:24:cc:17:5b:b3:62:77:88:30:bc:36:88:dc:7d: 6d:04:58:99:d9:12:ee:6f:8e:2c:b5:06:89:a6:82:99:86:58: 45:5a:8b:0f:99:f9:3c:9d:6e:80:63:15:b6:f3:29:c7:66:dd: 26:8e:5c:7c:15:4c:28:03:21:a6:f1:e6:b8:18:1c:73:68:ac: 8b:ac:53:fc:58:b9:cd:6c:ef:6a:f6:13:df:e5:5d:77:57:1e: 2c:40:b6:9e:0b:f4:70:6a:c3:77:95:01:43:95:08:c9:24:d5: 09:93:09:37:7e:b8:94:77:3d:5a:2f:52:6a:1b:fe:04:35:b8: ee:77:b6:9b:99:56:76:e3:e0:43:23:ff:68:6e:41:e1:64:ef: 05:3e:96:59 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZt+OI7Agt7f864DpBbyzBkCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk MTRjYzYwHhcNMjYwMTAyMTAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzFmM2VhZmUxMjdmZTM1NzVkODc1ODIzMGZkZjEwMjYwYmU0MDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMuaty06t483pqyb2+rddu61Vz5G O8dn4RrXNIPOv6JUywAqJwXPqEyo8UxGs7Dvgrgw/Zn1y8SjgMr75HiGu8gg4b3j +xawBQdU51bcDPnlR0NAVyGiTZAz8rrpv2OxG0JUVdsmALr8c77niKfTjttQnGbL U8m4YmxeUgk9dHWaYvn3cNWW3kcr6KQ9moW3LpkclmT3aS8K2JH07wUoHTMN9nJ4 q+A/lB8jKqLtBZFiLfeJtxSlgCgZg1dOmDLC3fd5idxqm6cDC1JC4/9qp67lR9Dz 2F4XqIo4sM9oaUiR+qQHq4fgw7qceMzY1SdIB+EkS0V9sMfBhAkPTQFTTQIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFAMfPq/hJ/41ddh1gjD98QJgvkA6MB8GA1UdIwQY MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt ZDFiYjZiNGRkNzAxLzEvQXg4LXItRW5falYxMkhXQ01QM3hBbUMtUURvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMAwQAw+LNMAwD BADV+UkDBADV+UowDAMEAtX5TAMEANX5TjAMAwQA1flRAwQC1flQMAwDBADV+VUD BAPV+VAwDAMEANX5WQMEAtX5WDANBgkqhkiG9w0BAQsFAAOCAQEAhZXmcA/I7btQ +nqfWjFCwMPqUdqs23iMiZn3XJHPfwbg9rlOXY3c6iVKOLQjSsyPmRBbWCsiP5N4 1MXqj+zftOmIRZ17JkwrZkGqBTyiire6lnh3c2LuD6n2c5js4VUP7FLTG3FR3rk3 grzX7ZtInyTMF1uzYneIMLw2iNx9bQRYmdkS7m+OLLUGiaaCmYZYRVqLD5n5PJ1u gGMVtvMpx2bdJo5cfBVMKAMhpvHmuBgcc2isi6xT/Fi5zWzvavYT3+Vdd1ceLEC2 ngv0cGrDd5UBQ5UIySTVCZMJN364lHc9Wi9Sahv+BDW47ne2m5lWduPgQyP/aG5B 4WTvBT6WWQ== -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:32 2026 by rpki-client