This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/G8OGJTANN3qV1kv7JX6zy4FVdM4.roa File: G8OGJTANN3qV1kv7JX6zy4FVdM4.roa (raw, json) Hash identifier: bFzkgRJFLCrTAvumUZb4z2jl9zK7iTZ0HUn21c/bwrY= Subject key identifier: 1B:C3:86:25:30:0D:37:7A:95:D6:4B:FB:25:7E:B3:CB:81:55:74:CE Certificate issuer: /CN=c8f258ce203e04a33f4e90651153b259cffa3e88 Certificate serial: 019B7CED3AC73757D5DB521D0751B2EC7669 Authority key identifier: C8:F2:58:CE:20:3E:04:A3:3F:4E:90:65:11:53:B2:59:CF:FA:3E:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/G8OGJTANN3qV1kv7JX6zy4FVdM4.roa Signing time: Fri 02 Jan 2026 04:18:00 +0000 ROA not before: Fri 02 Jan 2026 04:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208101 IP address blocks: 194.5.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.crl rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:3a:c7:37:57:d5:db:52:1d:07:51:b2:ec:76:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8f258ce203e04a33f4e90651153b259cffa3e88 Validity Not Before: Jan 2 04:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bc38625300d377a95d64bfb257eb3cb815574ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a8:5b:0a:c0:a4:f5:50:0e:91:9c:ca:03:77: a5:c2:6d:86:8b:20:44:40:d4:85:b5:f9:7d:14:cc: d2:4f:e4:cb:58:ce:d6:73:ae:03:dc:c7:ed:f9:38: 94:cb:45:aa:6a:42:89:35:c5:76:7f:d1:1b:95:04: 21:7e:33:e9:7d:76:5f:7a:f1:0d:87:fc:4d:99:5e: 28:5b:2d:17:e6:a6:11:e2:a3:61:0e:7d:76:74:6c: e2:14:49:83:67:9f:80:04:86:eb:7d:d2:3e:de:76: e6:b6:b6:a0:91:9f:ca:25:84:08:25:ab:c5:13:f0: 31:2e:ca:69:ab:e0:46:bf:a0:bf:b7:3c:0f:e9:ea: 87:db:8d:d1:b5:1d:de:a5:54:3a:98:60:a7:f7:c1: 4d:1a:7c:6d:6d:73:56:98:e4:39:ad:ac:a5:6a:2a: b4:cd:49:6b:82:60:aa:1a:e7:3c:2a:ef:38:d7:a6: 04:ec:5c:41:a9:fe:de:ff:04:94:79:b0:ef:5d:79: 3e:c0:b5:fc:6a:e1:77:2b:72:fc:ed:a3:cf:36:f0: 3b:d6:ba:1a:3a:11:07:5b:13:83:81:28:ca:97:05: e5:ce:bc:17:a0:d9:8a:37:e7:ae:54:ea:5e:e1:e4: 97:ed:a2:f1:e4:ab:a9:74:d3:fb:c6:a6:fb:75:d9: 14:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C3:86:25:30:0D:37:7A:95:D6:4B:FB:25:7E:B3:CB:81:55:74:CE X509v3 Authority Key Identifier: keyid:C8:F2:58:CE:20:3E:04:A3:3F:4E:90:65:11:53:B2:59:CF:FA:3E:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/G8OGJTANN3qV1kv7JX6zy4FVdM4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.5.101.0/24 Signature Algorithm: sha256WithRSAEncryption db:93:54:ad:29:31:f4:e7:0b:2f:66:09:7c:f9:e7:7c:7e:b6: c0:ff:38:e4:ae:4e:bf:cd:54:b9:71:0e:cc:eb:4b:55:13:70: 6e:95:94:21:2b:3b:7d:6e:ce:93:e5:30:a0:1a:f0:f7:c7:5e: c6:22:b1:d2:6f:f7:02:ce:4c:01:b6:5b:35:c1:0d:0a:23:94: 2d:18:1b:6f:68:ac:4b:8a:d1:f2:38:b8:90:ca:d1:0c:0e:b5: 55:be:5c:e3:67:dd:81:14:30:7a:b5:28:b2:ec:55:3e:71:99: 5c:c1:e0:8a:6a:37:d3:ad:29:59:2a:49:69:c3:cf:ef:92:2a: 06:a9:09:6d:10:76:c4:6e:f5:b6:ac:76:f5:41:37:bb:f0:26: 61:cd:e7:6d:87:c4:92:2e:08:e6:8f:52:82:da:66:60:27:bc: 68:c3:7b:d2:50:f9:5f:e6:2f:04:eb:a8:b8:dc:39:ea:06:bd: f2:ed:af:1b:2d:75:a7:e3:68:f7:2e:a7:1d:42:26:4e:bc:b1: 6a:20:90:e1:90:05:9e:ca:0c:fb:e6:c2:ed:68:10:a9:ab:d7: 82:ab:42:17:07:1a:0a:7a:99:0b:07:8b:86:20:3b:23:08:58: 85:50:a0:39:89:e5:a7:ed:b8:1b:5a:e9:0b:1b:fe:d4:0a:c4: 03:0c:df:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87TrHN1fV21IdB1Gy7HZpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZjI1OGNlMjAzZTA0YTMzZjRlOTA2NTExNTNiMjU5Y2Zm YTNlODgwHhcNMjYwMTAyMDQxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmMzODYyNTMwMGQzNzdhOTVkNjRiZmIyNTdlYjNjYjgxNTU3NGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsahbCsCk9VAOkZzKA3elwm2GiyBE QNSFtfl9FMzST+TLWM7Wc64D3Mft+TiUy0WqakKJNcV2f9EblQQhfjPpfXZfevEN h/xNmV4oWy0X5qYR4qNhDn12dGziFEmDZ5+ABIbrfdI+3nbmtragkZ/KJYQIJavF E/AxLsppq+BGv6C/tzwP6eqH243RtR3epVQ6mGCn98FNGnxtbXNWmOQ5raylaiq0 zUlrgmCqGuc8Ku8416YE7FxBqf7e/wSUebDvXXk+wLX8auF3K3L87aPPNvA71roa OhEHWxODgSjKlwXlzrwXoNmKN+euVOpe4eSX7aLx5KupdNP7xqb7ddkUswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBvDhiUwDTd6ldZL+yV+s8uBVXTOMB8GA1UdIwQY MBaAFMjyWM4gPgSjP06QZRFTslnP+j6IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVBKWXppQS1CS01fVHBCbEVWT3lXY182UG9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8xZjNjNGQtNTllNC00OTM3LWJjMTQt NmM4OGJmYTdiNTVjLzEvRzhPR0pUQU5OM3FWMWt2N0pYNnp5NEZWZE00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8xZjNjNGQtNTllNC00OTM3LWJjMTQtNmM4OGJmYTdiNTVj LzEveVBKWXppQS1CS01fVHBCbEVWT3lXY182UG9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgVlMA0G CSqGSIb3DQEBCwUAA4IBAQDbk1StKTH05wsvZgl8+ed8frbA/zjkrk6/zVS5cQ7M 60tVE3BulZQhKzt9bs6T5TCgGvD3x17GIrHSb/cCzkwBtls1wQ0KI5QtGBtvaKxL itHyOLiQytEMDrVVvlzjZ92BFDB6tSiy7FU+cZlcweCKajfTrSlZKklpw8/vkioG qQltEHbEbvW2rHb1QTe78CZhzedth8SSLgjmj1KC2mZgJ7xow3vSUPlf5i8E66i4 3DnqBr3y7a8bLXWn42j3LqcdQiZOvLFqIJDhkAWeygz75sLtaBCpq9eCq0IXBxoK epkLB4uGIDsjCFiFUKA5ieWn7bgbWukLG/7UCsQDDN8e -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:02 2026 by rpki-client