This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/36c386-2f53-4a0e-920d-628765eb1d59/1/8opqSQFWn_CI2ZlcfZ1AN0aFK1w.roa File: 8opqSQFWn_CI2ZlcfZ1AN0aFK1w.roa (raw, json) Hash identifier: vXfeL+0RKgCPsIija90RHF8JebjeFtVHh8+GzMyNBJE= Subject key identifier: F2:8A:6A:49:01:56:9F:F0:88:D9:99:5C:7D:9D:40:37:46:85:2B:5C Certificate issuer: /CN=bee7b754859f6d3c870d22af784f2344fcbaa630 Certificate serial: 019B79ECA335B6925D9708C4D8C5B19BEAE1 Authority key identifier: BE:E7:B7:54:85:9F:6D:3C:87:0D:22:AF:78:4F:23:44:FC:BA:A6:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vue3VIWfbTyHDSKveE8jRPy6pjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/36c386-2f53-4a0e-920d-628765eb1d59/1/8opqSQFWn_CI2ZlcfZ1AN0aFK1w.roa Signing time: Thu 01 Jan 2026 14:18:29 +0000 ROA not before: Thu 01 Jan 2026 14:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 195.191.49.0/24 maxlen: 24 195.245.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/36c386-2f53-4a0e-920d-628765eb1d59/1/vue3VIWfbTyHDSKveE8jRPy6pjA.crl rsync://rpki.ripe.net/repository/DEFAULT/77/36c386-2f53-4a0e-920d-628765eb1d59/1/vue3VIWfbTyHDSKveE8jRPy6pjA.mft rsync://rpki.ripe.net/repository/DEFAULT/vue3VIWfbTyHDSKveE8jRPy6pjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 02:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:a3:35:b6:92:5d:97:08:c4:d8:c5:b1:9b:ea:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bee7b754859f6d3c870d22af784f2344fcbaa630 Validity Not Before: Jan 1 14:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f28a6a4901569ff088d9995c7d9d403746852b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cf:b6:9d:07:ba:b7:49:21:5e:80:d7:78:3f: 8d:3c:c5:2d:9d:20:92:10:ad:4a:8d:2e:59:26:06: 38:18:3f:a4:9f:65:f1:5b:07:c4:0e:1e:c9:f7:58: e6:13:c6:83:71:fe:e9:18:bb:1d:bc:12:4c:b3:28: 8c:44:9b:b2:69:49:cd:3d:96:6d:c6:60:68:18:c7: 1f:c5:01:3f:fb:c3:3b:ab:8e:7a:83:f4:81:27:5e: 45:ef:b6:67:d2:8c:e9:69:c1:79:8e:4b:b7:a6:22: db:91:dc:c8:6f:70:57:bd:45:7b:4b:d3:bd:4e:33: 0b:b0:61:e3:fc:ab:65:5d:e5:d7:12:2e:9f:15:fd: 9a:38:c2:11:f3:e3:c4:3a:bc:e6:e2:5a:bf:ec:36: 2f:cb:c1:65:a7:07:dd:7c:c7:04:09:7b:eb:e1:88: 94:fb:38:ce:ea:83:36:24:8e:55:97:a0:bf:13:35: 4a:3a:41:42:40:c3:49:ba:58:76:51:07:1a:91:af: 76:31:31:0c:e9:d0:39:bc:c0:00:8b:b0:1c:32:8a: cc:73:21:9e:c0:fa:dc:54:7e:fa:9f:c4:68:f8:4f: 4e:5d:d4:30:88:57:87:94:b4:df:76:c9:07:59:28: ce:e7:28:2e:63:fa:bf:a3:ba:9f:2d:b9:3c:05:d8: b2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:8A:6A:49:01:56:9F:F0:88:D9:99:5C:7D:9D:40:37:46:85:2B:5C X509v3 Authority Key Identifier: keyid:BE:E7:B7:54:85:9F:6D:3C:87:0D:22:AF:78:4F:23:44:FC:BA:A6:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vue3VIWfbTyHDSKveE8jRPy6pjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/36c386-2f53-4a0e-920d-628765eb1d59/1/8opqSQFWn_CI2ZlcfZ1AN0aFK1w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/36c386-2f53-4a0e-920d-628765eb1d59/1/vue3VIWfbTyHDSKveE8jRPy6pjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.191.49.0/24 195.245.198.0/24 Signature Algorithm: sha256WithRSAEncryption ca:8a:85:3a:bb:87:e3:0d:18:f4:60:7f:e4:3a:a4:61:12:bb: f9:0f:8f:95:17:8d:ce:7d:12:58:e7:6b:ed:f9:10:bb:56:95: f2:dd:f7:67:69:b6:79:33:ad:75:84:72:5e:90:f7:c4:07:d1: d0:f6:43:76:9b:83:47:28:bb:7f:1e:c6:02:82:b4:8e:26:fc: 5c:0e:d5:78:00:cf:24:3a:0b:ba:54:e1:09:65:0a:4d:bc:a8: 6d:17:f1:ba:36:6e:82:be:c6:28:ce:9a:13:69:7a:48:fe:b2: 49:94:77:af:df:bf:d4:92:1a:f4:e5:7f:59:42:25:6d:af:a6: 6d:b3:c3:10:75:43:4c:f8:d9:04:dc:f9:7c:90:55:6c:7b:1c: 28:9a:74:b5:c3:66:33:e1:53:ff:9e:6b:98:44:be:22:57:b8: ac:cd:e9:9b:d0:af:56:44:2b:4f:77:07:44:c0:7b:a7:a3:f0: b7:67:98:cc:42:c5:8f:00:5f:7c:23:f0:2a:dc:f0:f8:f5:b0: bc:dc:6f:08:1e:0c:20:08:dc:39:65:72:8d:4c:38:3a:59:10: 18:e9:92:e0:8b:a7:17:4e:66:f8:16:1a:2c:a0:38:da:b5:a6: e1:8a:20:32:fe:e9:0c:92:2c:5b:96:c9:ba:ae:de:38:37:dc: e2:01:c4:87 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57KM1tpJdlwjE2MWxm+rhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlZTdiNzU0ODU5ZjZkM2M4NzBkMjJhZjc4NGYyMzQ0ZmNi YWE2MzAwHhcNMjYwMTAxMTQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjhhNmE0OTAxNTY5ZmYwODhkOTk5NWM3ZDlkNDAzNzQ2ODUyYjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs+2nQe6t0khXoDXeD+NPMUtnSCS EK1KjS5ZJgY4GD+kn2XxWwfEDh7J91jmE8aDcf7pGLsdvBJMsyiMRJuyaUnNPZZt xmBoGMcfxQE/+8M7q456g/SBJ15F77Zn0ozpacF5jku3piLbkdzIb3BXvUV7S9O9 TjMLsGHj/KtlXeXXEi6fFf2aOMIR8+PEOrzm4lq/7DYvy8FlpwfdfMcECXvr4YiU +zjO6oM2JI5Vl6C/EzVKOkFCQMNJulh2UQcaka92MTEM6dA5vMAAi7AcMorMcyGe wPrcVH76n8Ro+E9OXdQwiFeHlLTfdskHWSjO5yguY/q/o7qfLbk8BdiylQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPKKakkBVp/wiNmZXH2dQDdGhStcMB8GA1UdIwQY MBaAFL7nt1SFn208hw0ir3hPI0T8uqYwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnVlM1ZJV2ZiVHlIRFNLdmVFOGpSUHk2cGpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8zNmMzODYtMmY1My00YTBlLTkyMGQt NjI4NzY1ZWIxZDU5LzEvOG9wcVNRRlduX0NJMlpsY2ZaMUFOMGFGSzF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8zNmMzODYtMmY1My00YTBlLTkyMGQtNjI4NzY1ZWIxZDU5 LzEvdnVlM1ZJV2ZiVHlIRFNLdmVFOGpSUHk2cGpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw78xAwQA w/XGMA0GCSqGSIb3DQEBCwUAA4IBAQDKioU6u4fjDRj0YH/kOqRhErv5D4+VF43O fRJY52vt+RC7VpXy3fdnabZ5M611hHJekPfEB9HQ9kN2m4NHKLt/HsYCgrSOJvxc DtV4AM8kOgu6VOEJZQpNvKhtF/G6Nm6CvsYozpoTaXpI/rJJlHev37/Ukhr05X9Z QiVtr6Zts8MQdUNM+NkE3Pl8kFVsexwomnS1w2Yz4VP/nmuYRL4iV7iszemb0K9W RCtPdwdEwHuno/C3Z5jMQsWPAF98I/Aq3PD49bC83G8IHgwgCNw5ZXKNTDg6WRAY 6ZLgi6cXTmb4FhosoDjatabhiiAy/ukMkixblsm6rt44N9ziAcSH -----END CERTIFICATE-----Generated at Sun Jan 18 08:55:00 2026 by rpki-client