This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/A8FvgdbHNRHsRdDyYbSZ8Cktx7A.roa File: A8FvgdbHNRHsRdDyYbSZ8Cktx7A.roa (raw, json) Hash identifier: RHm/c9RboC0AG29WQm/fpkqp72AQwurGiN64U8SLSDg= Subject key identifier: 03:C1:6F:81:D6:C7:35:11:EC:45:D0:F2:61:B4:99:F0:29:2D:C7:B0 Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Certificate serial: 019BDB8CC92755DA818F1E0CBBD408DC1FD8 Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/A8FvgdbHNRHsRdDyYbSZ8Cktx7A.roa Signing time: Tue 20 Jan 2026 13:16:35 +0000 ROA not before: Tue 20 Jan 2026 13:16:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206134 IP address blocks: 178.236.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:8c:c9:27:55:da:81:8f:1e:0c:bb:d4:08:dc:1f:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Validity Not Before: Jan 20 13:16:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03c16f81d6c73511ec45d0f261b499f0292dc7b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1c:69:6f:60:2a:64:63:54:a2:17:c2:22:56: 61:59:82:cf:19:22:54:73:fa:81:1d:89:58:8d:2c: ca:f9:35:67:a6:24:4d:94:a4:90:76:f5:d8:71:60: c0:7f:09:6f:4b:ba:dc:03:ca:22:14:f4:e0:5f:79: 05:16:bb:9a:82:03:c2:72:51:d9:92:c6:76:c9:ed: b5:5d:ef:38:fa:cb:6f:8d:69:ac:86:7e:57:82:af: 62:d1:82:d0:75:44:67:27:8d:6c:f7:67:a1:f5:68: c0:2e:2c:94:5f:44:85:f1:56:48:f0:ca:97:e1:ed: 8d:de:a1:b9:e4:25:05:ca:fc:22:5a:49:16:e9:61: 0c:83:a7:b2:e5:13:29:35:34:7c:d3:58:68:f2:67: 01:2c:8e:94:79:51:b1:9b:1a:4b:bf:64:b8:39:05: df:e5:04:f5:df:68:f0:5e:02:e6:d4:af:df:42:e7: a9:40:a0:c5:8d:2c:48:4b:86:95:ec:a4:65:20:7f: 10:05:3b:1a:7d:4e:c5:15:72:1c:25:28:68:f9:df: 1a:ec:0e:7a:a1:d5:4f:e7:ff:83:55:80:d2:18:76: 5e:38:e6:9a:4c:3d:b7:f3:b7:ad:79:87:30:8a:a1: 72:68:57:8f:fe:1f:2d:56:1f:0a:ae:3e:ef:57:35: 65:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C1:6F:81:D6:C7:35:11:EC:45:D0:F2:61:B4:99:F0:29:2D:C7:B0 X509v3 Authority Key Identifier: keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/A8FvgdbHNRHsRdDyYbSZ8Cktx7A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.236.243.0/24 Signature Algorithm: sha256WithRSAEncryption 66:bc:00:fa:a4:34:07:73:de:97:b4:25:ec:97:92:a6:70:e8: 41:fa:11:da:c3:af:d0:5b:77:f8:2f:7e:59:30:f3:cf:d3:bc: f0:0d:0c:83:8c:9e:42:d9:25:7f:38:49:b3:a4:2a:fb:fa:7e: 14:ae:0f:b6:45:32:4e:13:a6:62:57:74:43:1a:47:f6:95:78: 66:bb:d9:a9:11:a6:d6:3c:b2:c3:85:57:5c:d0:f7:37:6f:ed: 6f:e1:8a:66:60:72:5c:f6:f1:6e:c4:10:ef:ea:f5:f0:cd:65: 3b:0c:ea:00:89:ca:10:a9:0e:5f:ab:82:04:86:af:b6:79:06: 61:8d:86:1c:f1:76:6b:09:57:c1:9b:de:12:0e:16:ab:70:c9: ff:46:1d:f8:7e:9d:27:d0:55:f4:f1:d1:69:bb:dc:86:1e:b5: ff:99:77:44:be:3c:b0:ea:7f:8b:bc:e5:81:e1:ad:fb:3c:8d: 05:37:a5:16:cf:55:96:82:21:7c:d5:3c:14:b6:d2:20:e7:b6: a6:ef:ce:09:36:ea:03:f6:24:bd:5c:b8:fe:5a:6d:e4:e9:7c: e4:ee:aa:62:46:2c:fd:a9:47:2e:a5:a4:e6:e6:a0:09:45:90: ce:45:d2:2f:66:ea:93:38:7c:71:f1:69:b1:a1:3d:c7:f0:de: b1:f0:b6:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvbjMknVdqBjx4Mu9QI3B/YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExN2Y5ZDU1ODI2YjQyNDg2ZGZjODRkMzVjMWE2M2E1Y2U4 NzUwN2MwHhcNMjYwMTIwMTMxNjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2MxNmY4MWQ2YzczNTExZWM0NWQwZjI2MWI0OTlmMDI5MmRjN2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hxpb2AqZGNUohfCIlZhWYLPGSJU c/qBHYlYjSzK+TVnpiRNlKSQdvXYcWDAfwlvS7rcA8oiFPTgX3kFFruaggPCclHZ ksZ2ye21Xe84+stvjWmshn5Xgq9i0YLQdURnJ41s92eh9WjALiyUX0SF8VZI8MqX 4e2N3qG55CUFyvwiWkkW6WEMg6ey5RMpNTR801ho8mcBLI6UeVGxmxpLv2S4OQXf 5QT132jwXgLm1K/fQuepQKDFjSxIS4aV7KRlIH8QBTsafU7FFXIcJSho+d8a7A56 odVP5/+DVYDSGHZeOOaaTD2387eteYcwiqFyaFeP/h8tVh8Krj7vVzVlSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAPBb4HWxzUR7EXQ8mG0mfApLcewMB8GA1UdIwQY MBaAFBF/nVWCa0JIbfyE01waY6XOh1B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMt M2ZiYmJhOTI0OWNkLzEvQThGdmdkYkhOUkhzUmREeVliU1o4Q2t0eDdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMtM2ZiYmJhOTI0OWNk LzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsuzzMA0G CSqGSIb3DQEBCwUAA4IBAQBmvAD6pDQHc96XtCXsl5KmcOhB+hHaw6/QW3f4L35Z MPPP07zwDQyDjJ5C2SV/OEmzpCr7+n4Urg+2RTJOE6ZiV3RDGkf2lXhmu9mpEabW PLLDhVdc0Pc3b+1v4YpmYHJc9vFuxBDv6vXwzWU7DOoAicoQqQ5fq4IEhq+2eQZh jYYc8XZrCVfBm94SDharcMn/Rh34fp0n0FX08dFpu9yGHrX/mXdEvjyw6n+LvOWB 4a37PI0FN6UWz1WWgiF81TwUttIg57am784JNuoD9iS9XLj+Wm3k6Xzk7qpiRiz9 qUcupaTm5qAJRZDORdIvZuqTOHxx8WmxoT3H8N6x8Lbt -----END CERTIFICATE-----Generated at Wed Jan 21 19:42:41 2026 by rpki-client