This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/8k0J8ZawZ0QaVbmwbqXyjkHdbp0.roa File: 8k0J8ZawZ0QaVbmwbqXyjkHdbp0.roa (raw, json) Hash identifier: qjo2XQhlUpcTFQYk1pT4XcjJ3LBYMkU4WLGqBPqO4mU= Subject key identifier: F2:4D:09:F1:96:B0:67:44:1A:55:B9:B0:6E:A5:F2:8E:41:DD:6E:9D Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Certificate serial: 019B797EA1E4989F61575869F1DA6FE8D9E6 Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/8k0J8ZawZ0QaVbmwbqXyjkHdbp0.roa Signing time: Thu 01 Jan 2026 12:18:20 +0000 ROA not before: Thu 01 Jan 2026 12:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7474 IP address blocks: 159.151.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a1:e4:98:9f:61:57:58:69:f1:da:6f:e8:d9:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Validity Not Before: Jan 1 12:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f24d09f196b067441a55b9b06ea5f28e41dd6e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9a:de:b8:a5:6d:d9:54:38:4e:5f:49:e9:1f: ef:75:ff:a7:5f:43:67:68:25:29:31:de:ac:ae:4b: 00:4d:44:7d:74:a5:dc:6b:27:3e:41:8e:19:0a:5e: f3:3c:a2:7a:fe:d7:63:e8:fe:2c:63:67:b3:5b:ca: 90:3b:14:df:c7:4b:c0:bb:0a:53:b2:9d:57:a4:3b: ba:e9:bf:0d:4a:60:a5:f7:29:1c:51:0d:33:ad:fc: 50:eb:f5:4b:a9:35:b6:3c:35:05:9b:b9:fe:b0:3c: ee:6c:04:e5:d9:fc:0b:80:2d:32:53:e1:17:3f:b5: 30:1a:a0:67:33:55:db:2c:5a:f4:8f:8f:73:2d:8f: 87:c1:f6:ce:0e:61:20:d8:e3:8c:10:ac:c3:95:b2: 34:75:93:0e:cf:56:d1:c3:9a:0e:e1:1b:c5:68:f9: d8:e2:dc:1c:e3:bc:7d:a2:58:28:65:ac:02:cc:40: 14:3f:c3:0b:41:74:b1:30:ad:24:49:e5:7d:8f:a4: 6e:1d:aa:69:91:a4:b7:8d:3d:e5:a2:ab:26:71:23: 8e:f0:9b:b2:48:89:f4:25:53:84:34:00:3a:9c:50: f3:c5:09:b4:c5:44:cf:f5:b4:67:05:fa:c2:c4:1a: 5a:a1:38:90:90:2d:53:d5:29:bf:20:d0:d6:85:72: 10:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:4D:09:F1:96:B0:67:44:1A:55:B9:B0:6E:A5:F2:8E:41:DD:6E:9D X509v3 Authority Key Identifier: keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/8k0J8ZawZ0QaVbmwbqXyjkHdbp0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.151.192.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:ee:2f:f9:e1:43:0c:35:ca:c0:7b:25:14:5e:74:09:52:6c: 4f:30:fb:7e:3b:aa:f3:56:20:4b:9b:09:f7:7e:9f:df:d7:08: 92:69:0c:07:0e:b2:ae:5f:92:93:45:43:1a:c9:d1:ea:dc:88: cf:35:78:ba:58:27:59:1b:0a:11:ef:04:30:ce:cb:ba:25:9e: 1c:45:23:e5:f0:9d:01:1e:0a:b4:9c:ac:71:ce:88:68:ee:e1: 33:64:64:1f:9d:3c:3f:15:db:07:25:3f:28:16:f7:e7:79:59: dc:aa:e8:96:76:e3:e5:a3:ac:10:84:2f:30:48:1f:59:bb:61: 0a:5a:84:f3:e5:34:ac:ff:43:cf:5f:bd:d4:bb:9d:d9:c4:48: cc:b6:34:fe:48:1b:43:92:b5:b8:49:95:61:8f:1d:77:0b:d1: c1:bb:b0:93:55:ad:95:01:7e:42:c2:7e:b7:fd:2a:09:13:f7: 28:95:33:5e:7e:a0:01:db:7a:17:06:ea:36:ff:a8:bd:c5:83: 2b:c1:27:b6:7d:91:c8:41:80:a5:1f:5e:6d:40:65:c3:f6:60: 40:45:4e:91:2a:37:92:47:6c:d0:30:c3:6f:33:7f:07:84:56: a4:95:a5:1c:e4:33:b4:0d:18:bf:eb:0b:51:44:59:d6:56:a7: 19:47:21:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fqHkmJ9hV1hp8dpv6NnmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzdkODA3ZDRmN2NkZDNlMGFmZTRhYmM4ZWU1YTg4MGM2 MDkwZjEwHhcNMjYwMTAxMTIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjRkMDlmMTk2YjA2NzQ0MWE1NWI5YjA2ZWE1ZjI4ZTQxZGQ2ZTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJreuKVt2VQ4Tl9J6R/vdf+nX0Nn aCUpMd6srksATUR9dKXcayc+QY4ZCl7zPKJ6/tdj6P4sY2ezW8qQOxTfx0vAuwpT sp1XpDu66b8NSmCl9ykcUQ0zrfxQ6/VLqTW2PDUFm7n+sDzubATl2fwLgC0yU+EX P7UwGqBnM1XbLFr0j49zLY+HwfbODmEg2OOMEKzDlbI0dZMOz1bRw5oO4RvFaPnY 4twc47x9olgoZawCzEAUP8MLQXSxMK0kSeV9j6RuHappkaS3jT3loqsmcSOO8Juy SIn0JVOENAA6nFDzxQm0xUTP9bRnBfrCxBpaoTiQkC1T1Sm/INDWhXIQqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPJNCfGWsGdEGlW5sG6l8o5B3W6dMB8GA1UdIwQY MBaAFAo32AfU983T4K/kq8juWogMYJDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjkt ODAwZWRhMmNmYjM2LzEvOGswSjhaYXdaMFFhVmJtd2JxWHlqa0hkYnAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjktODAwZWRhMmNmYjM2 LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn5fAMA0G CSqGSIb3DQEBCwUAA4IBAQA+7i/54UMMNcrAeyUUXnQJUmxPMPt+O6rzViBLmwn3 fp/f1wiSaQwHDrKuX5KTRUMaydHq3IjPNXi6WCdZGwoR7wQwzsu6JZ4cRSPl8J0B Hgq0nKxxzoho7uEzZGQfnTw/FdsHJT8oFvfneVncquiWduPlo6wQhC8wSB9Zu2EK WoTz5TSs/0PPX73Uu53ZxEjMtjT+SBtDkrW4SZVhjx13C9HBu7CTVa2VAX5Cwn63 /SoJE/colTNefqAB23oXBuo2/6i9xYMrwSe2fZHIQYClH15tQGXD9mBARU6RKjeS R2zQMMNvM38HhFaklaUc5DO0DRi/6wtRRFnWVqcZRyEc -----END CERTIFICATE-----Generated at Wed Jan 21 20:27:33 2026 by rpki-client