This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/8MHx6pFnKDbOJZCL45Uqeu0OuEw.roa File: 8MHx6pFnKDbOJZCL45Uqeu0OuEw.roa (raw, json) Hash identifier: WqOpKbFAaR3JLKnMgyYQifvHuuro/dU0rsdqEF+6ZxA= Subject key identifier: F0:C1:F1:EA:91:67:28:36:CE:25:90:8B:E3:95:2A:7A:ED:0E:B8:4C Certificate issuer: /CN=5070dc5204decf7abea5070d75fa058c8ac013d5 Certificate serial: 019B78A2F1A7F3796DC657CCC20818911FC3 Authority key identifier: 50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/8MHx6pFnKDbOJZCL45Uqeu0OuEw.roa Signing time: Thu 01 Jan 2026 08:18:23 +0000 ROA not before: Thu 01 Jan 2026 08:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34984 IP address blocks: 94.142.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f1:a7:f3:79:6d:c6:57:cc:c2:08:18:91:1f:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5070dc5204decf7abea5070d75fa058c8ac013d5 Validity Not Before: Jan 1 08:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0c1f1ea91672836ce25908be3952a7aed0eb84c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:38:2d:f0:af:05:0a:0d:d7:5b:a0:23:9f:d0: 6b:30:09:a0:42:b0:95:ca:1e:88:c1:20:02:74:36: 7a:d8:0e:15:e2:c0:d0:ed:73:20:de:5a:01:a7:a8: b8:c8:1b:39:f6:ec:41:9d:ba:39:be:70:68:13:2c: 18:43:45:61:9f:10:c1:1c:68:d6:8f:f0:ae:da:ab: 99:00:db:61:c1:fd:84:c4:f2:8d:95:d9:99:9e:15: 97:ab:1c:0d:f8:84:ab:4b:05:0e:0f:41:9b:a1:9f: bf:6b:c1:f4:9d:60:db:55:f1:98:64:a5:5c:a9:20: 9c:12:c4:bb:2e:d7:38:fa:e9:07:f3:ae:ad:6c:7f: 5d:3e:07:74:bc:5c:77:eb:4e:56:c3:e5:3c:9f:90: 2b:e5:82:6e:e6:0b:58:8d:aa:31:ff:9d:dc:0c:ba: d5:71:9f:e7:4d:88:77:73:f0:d7:a2:97:e5:30:70: 63:12:1a:12:1d:ff:69:b1:d8:ac:1e:ee:44:98:85: 67:bc:82:b1:8f:fe:08:df:d2:d9:6b:df:d3:a5:7d: 33:7e:77:12:14:1e:d8:6a:a3:d7:c4:18:b1:04:7c: 80:3c:32:2f:30:e5:1a:38:a3:e8:05:3a:45:a6:5a: 06:a7:f1:7d:7d:53:0a:89:99:ec:1c:e4:27:a0:cf: ce:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C1:F1:EA:91:67:28:36:CE:25:90:8B:E3:95:2A:7A:ED:0E:B8:4C X509v3 Authority Key Identifier: keyid:50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/8MHx6pFnKDbOJZCL45Uqeu0OuEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.142.131.0/24 Signature Algorithm: sha256WithRSAEncryption 32:3c:9f:5e:20:19:da:e4:f9:e4:44:86:cb:d5:63:58:be:f1: ee:62:0e:47:64:79:97:dc:b4:5a:36:aa:e0:d8:82:fe:81:9d: ca:97:ab:4e:f3:15:eb:9a:b0:51:77:94:9c:96:1a:f3:ac:b4: fc:9f:31:52:bb:00:9d:2e:ca:0c:1b:2a:46:c1:3e:c9:5f:46: 6c:cc:aa:4b:ef:77:d8:ba:b9:b4:95:38:87:dc:43:8f:71:1a: 93:fd:e9:ea:94:78:d9:9b:1f:67:7f:1a:e3:fd:1b:56:89:c8: e3:c6:98:f2:56:d9:6d:ce:3b:32:d4:3f:15:bd:66:23:ab:c0: 95:7b:24:d3:3d:2e:9a:89:71:49:ca:36:2b:75:fc:78:e5:18: 3b:37:b8:3a:5b:2a:dd:dc:91:5c:58:9a:bc:1d:2f:ce:49:9f: c7:b2:03:92:f5:15:2f:0f:ab:19:ec:ac:81:ab:ec:d8:78:b7: a7:d6:dd:b2:0e:f9:35:a4:bc:14:84:c9:e0:62:f7:2e:14:86: f5:75:11:49:74:66:70:7c:8a:75:a0:82:d4:dd:9e:bc:c2:b8: 77:3b:18:b2:d2:55:b9:b8:96:15:62:f8:1a:66:11:da:7e:90: 3c:05:3f:2b:90:cc:36:40:3c:cf:8a:12:57:31:93:95:1a:44: 5e:ff:d9:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ovGn83ltxlfMwggYkR/DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNzBkYzUyMDRkZWNmN2FiZWE1MDcwZDc1ZmEwNThjOGFj MDEzZDUwHhcNMjYwMTAxMDgxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGMxZjFlYTkxNjcyODM2Y2UyNTkwOGJlMzk1MmE3YWVkMGViODRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Dgt8K8FCg3XW6Ajn9BrMAmgQrCV yh6IwSACdDZ62A4V4sDQ7XMg3loBp6i4yBs59uxBnbo5vnBoEywYQ0VhnxDBHGjW j/Cu2quZANthwf2ExPKNldmZnhWXqxwN+ISrSwUOD0GboZ+/a8H0nWDbVfGYZKVc qSCcEsS7Ltc4+ukH866tbH9dPgd0vFx3605Ww+U8n5Ar5YJu5gtYjaox/53cDLrV cZ/nTYh3c/DXopflMHBjEhoSHf9psdisHu5EmIVnvIKxj/4I39LZa9/TpX0zfncS FB7YaqPXxBixBHyAPDIvMOUaOKPoBTpFploGp/F9fVMKiZnsHOQnoM/OeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPDB8eqRZyg2ziWQi+OVKnrtDrhMMB8GA1UdIwQY MBaAFFBw3FIE3s96vqUHDXX6BYyKwBPVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUhEY1VnVGV6M3EtcFFjTmRmb0ZqSXJBRTlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9hMjhiNWMtODhkNy00YWQ0LTllMWQt OGFjMTdlOWM0MGRiLzEvOE1IeDZwRm5LRGJPSlpDTDQ1VXFldTBPdUV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9hMjhiNWMtODhkNy00YWQ0LTllMWQtOGFjMTdlOWM0MGRi LzEvVUhEY1VnVGV6M3EtcFFjTmRmb0ZqSXJBRTlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXo6DMA0G CSqGSIb3DQEBCwUAA4IBAQAyPJ9eIBna5PnkRIbL1WNYvvHuYg5HZHmX3LRaNqrg 2IL+gZ3Kl6tO8xXrmrBRd5SclhrzrLT8nzFSuwCdLsoMGypGwT7JX0ZszKpL73fY urm0lTiH3EOPcRqT/enqlHjZmx9nfxrj/RtWicjjxpjyVtltzjsy1D8VvWYjq8CV eyTTPS6aiXFJyjYrdfx45Rg7N7g6Wyrd3JFcWJq8HS/OSZ/HsgOS9RUvD6sZ7KyB q+zYeLen1t2yDvk1pLwUhMngYvcuFIb1dRFJdGZwfIp1oILU3Z68wrh3Oxiy0lW5 uJYVYvgaZhHafpA8BT8rkMw2QDzPihJXMZOVGkRe/9nd -----END CERTIFICATE-----Generated at Mon Jan 26 05:30:29 2026 by rpki-client