This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/8sncQGN_dofXozDeejTadUl8wRs.roa File: 8sncQGN_dofXozDeejTadUl8wRs.roa (raw, json) Hash identifier: SW1+/cf3HtR0IB+S11zpo2LhAnvKL4afLlJ8vSGUHZ4= Subject key identifier: F2:C9:DC:40:63:7F:76:87:D7:A3:30:DE:7A:34:DA:75:49:7C:C1:1B Certificate issuer: /CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e Certificate serial: 019B79ECAE82D5A5DA10FBBECFDA1EFE8620 Authority key identifier: 8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/8sncQGN_dofXozDeejTadUl8wRs.roa Signing time: Thu 01 Jan 2026 14:18:32 +0000 ROA not before: Thu 01 Jan 2026 14:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8676 IP address blocks: 194.24.162.96/28 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 02:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ae:82:d5:a5:da:10:fb:be:cf:da:1e:fe:86:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e Validity Not Before: Jan 1 14:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2c9dc40637f7687d7a330de7a34da75497cc11b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0c:10:be:a0:ae:27:c2:ea:88:85:dd:e0:a5: cd:75:1f:51:23:de:a2:2f:d9:b1:c6:9f:ae:18:57: c3:85:25:56:6f:81:eb:03:ea:4a:9e:c6:5e:87:8c: ec:e7:17:ee:3d:ca:87:5d:a4:df:d7:17:18:75:81: f4:6a:51:fd:f2:8e:bc:7a:0b:e3:eb:1b:3e:c9:40: 88:4e:33:2f:d0:63:4b:b6:20:c4:05:fe:fd:b6:9d: 4e:30:74:41:77:91:eb:d8:da:14:d4:6b:18:24:a0: 6e:e8:0e:7d:ac:43:39:62:44:81:a7:69:84:ab:da: c0:47:73:0e:26:76:41:48:b9:33:73:ee:74:25:6e: 3d:01:9e:4c:0d:fc:67:0c:ca:e6:20:9b:fa:bb:2b: 0d:e3:61:30:72:64:86:1a:b3:1f:6d:b8:2f:81:90: 6c:1c:3d:63:47:a2:d3:c7:31:32:61:e7:42:2b:98: bf:f8:83:2a:1c:4e:ab:77:ce:b8:1e:e5:57:7b:ab: c7:9c:34:9c:61:3e:c9:f8:5e:2a:74:e1:5e:9a:bf: 82:2e:b1:3f:11:09:25:8d:d4:86:7f:4d:53:f3:ca: 3d:f3:0e:0b:8d:79:d6:b2:da:53:1f:90:94:73:26: be:5c:72:ed:c1:7d:38:55:8f:84:bd:45:98:c7:44: 7e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C9:DC:40:63:7F:76:87:D7:A3:30:DE:7A:34:DA:75:49:7C:C1:1B X509v3 Authority Key Identifier: keyid:8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/8sncQGN_dofXozDeejTadUl8wRs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.24.162.96/28 Signature Algorithm: sha256WithRSAEncryption a0:7e:45:33:c7:a9:ae:d8:88:c2:7c:da:75:c9:f5:41:ee:a2: 4b:97:49:77:3c:2a:61:ae:cb:34:55:93:d0:cc:11:fd:5e:56: bb:a6:77:a0:c6:8b:8e:79:e9:34:01:f0:a1:79:85:75:f7:9c: 44:f1:09:b5:ff:b8:6f:ba:22:43:c8:c3:7e:a8:eb:02:8e:14: de:46:30:20:25:de:52:b3:36:89:c5:fe:3f:9b:57:62:e7:5f: a1:dd:bb:4b:dc:bc:2a:ea:c4:7f:23:e4:25:4e:78:47:fc:ab: fb:e3:bf:90:fa:41:c5:34:4d:c3:23:79:8d:52:f2:b9:77:76: 04:bf:9d:a3:ed:df:76:55:3f:a1:68:dd:fe:58:4a:dd:8a:dc: 23:b0:25:ac:f1:1b:5c:6a:32:6f:fa:02:8b:03:2e:58:e4:f1: d4:1a:72:01:61:e8:65:bf:16:a2:03:c5:43:54:1f:8f:50:16: 78:fd:e1:01:b0:c2:47:b7:ad:fe:81:93:bb:51:44:2c:05:90: 33:e5:99:d1:3e:b3:2d:e4:4b:20:3b:d6:ca:55:ac:80:36:41: bd:f9:60:ee:c1:7e:23:a7:4d:b7:04:2f:90:87:32:51:e9:72: 40:e1:0b:61:44:be:30:42:eb:a8:7a:08:86:1a:3a:1b:6b:cf: 77:55:50:20 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt57K6C1aXaEPu+z9oe/oYgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYjQ0YjA3ODUyMmRhOWMzMTA2MmI5YzdlZjdmNTE3Mjdl NzNlNWUwHhcNMjYwMTAxMTQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmM5ZGM0MDYzN2Y3Njg3ZDdhMzMwZGU3YTM0ZGE3NTQ5N2NjMTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQwQvqCuJ8LqiIXd4KXNdR9RI96i L9mxxp+uGFfDhSVWb4HrA+pKnsZeh4zs5xfuPcqHXaTf1xcYdYH0alH98o68egvj 6xs+yUCITjMv0GNLtiDEBf79tp1OMHRBd5Hr2NoU1GsYJKBu6A59rEM5YkSBp2mE q9rAR3MOJnZBSLkzc+50JW49AZ5MDfxnDMrmIJv6uysN42EwcmSGGrMfbbgvgZBs HD1jR6LTxzEyYedCK5i/+IMqHE6rd864HuVXe6vHnDScYT7J+F4qdOFemr+CLrE/ EQkljdSGf01T88o98w4LjXnWstpTH5CUcya+XHLtwX04VY+EvUWYx0R+jQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPLJ3EBjf3aH16Mw3no02nVJfMEbMB8GA1UdIwQY MBaAFI60SweFItqcMQYrnH739Rcn5z5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanJSTEI0VWkycHd4Qml1Y2Z2ZjFGeWZuUGw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81NzkyZTAtNmEzYS00NTI3LTkwZmMt NjdmZjVhMGNlMWE1LzEvOHNuY1FHTl9kb2ZYb3pEZWVqVGFkVWw4d1JzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS81NzkyZTAtNmEzYS00NTI3LTkwZmMtNjdmZjVhMGNlMWE1 LzEvanJSTEI0VWkycHd4Qml1Y2Z2ZjFGeWZuUGw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEwhiiYDAN BgkqhkiG9w0BAQsFAAOCAQEAoH5FM8eprtiIwnzadcn1Qe6iS5dJdzwqYa7LNFWT 0MwR/V5Wu6Z3oMaLjnnpNAHwoXmFdfecRPEJtf+4b7oiQ8jDfqjrAo4U3kYwICXe UrM2icX+P5tXYudfod27S9y8KurEfyPkJU54R/yr++O/kPpBxTRNwyN5jVLyuXd2 BL+do+3fdlU/oWjd/lhK3YrcI7AlrPEbXGoyb/oCiwMuWOTx1BpyAWHoZb8WogPF Q1Qfj1AWeP3hAbDCR7et/oGTu1FELAWQM+WZ0T6zLeRLIDvWylWsgDZBvflg7sF+ I6dNtwQvkIcyUelyQOELYUS+MELrqHoIhho6G2vPd1VQIA== -----END CERTIFICATE-----Generated at Mon Feb 2 09:39:20 2026 by rpki-client