This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/o8MqcHzucQsFFcM064UV8vGpwI8.roa File: o8MqcHzucQsFFcM064UV8vGpwI8.roa (raw, json) Hash identifier: 7pKszhiXxG9eq/C8SaAv1aRWIQRMOmuuO6Lbmdi5cKo= Subject key identifier: A3:C3:2A:70:7C:EE:71:0B:05:15:C3:34:EB:85:15:F2:F1:A9:C0:8F Certificate issuer: /CN=f0d323ad48f5a45bbca9e879883fae9314b58e9d Certificate serial: 019B7B36858F334BB0C0FB9DC715802DD4DA Authority key identifier: F0:D3:23:AD:48:F5:A4:5B:BC:A9:E8:79:88:3F:AE:93:14:B5:8E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/o8MqcHzucQsFFcM064UV8vGpwI8.roa Signing time: Thu 01 Jan 2026 20:18:49 +0000 ROA not before: Thu 01 Jan 2026 20:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215657 IP address blocks: 195.184.230.0/23 maxlen: 24 195.184.230.0/24 maxlen: 24 195.184.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:85:8f:33:4b:b0:c0:fb:9d:c7:15:80:2d:d4:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0d323ad48f5a45bbca9e879883fae9314b58e9d Validity Not Before: Jan 1 20:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3c32a707cee710b0515c334eb8515f2f1a9c08f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2c:17:cf:2c:d7:1e:27:d8:87:a1:8d:74:a6: be:00:29:2a:30:ff:48:27:9a:b8:89:e0:87:b9:73: 66:3d:21:28:1b:9f:21:84:53:3d:cc:4a:cd:d3:5d: c8:8d:85:aa:53:15:35:b5:8a:04:d8:f5:7a:ec:e1: a8:1a:90:28:fd:31:1d:a1:36:0c:c4:e3:6d:d9:c2: 4a:4a:a6:d2:b9:0a:90:0a:a2:41:ef:ed:e9:11:1c: 45:09:97:1e:90:3c:91:c0:f2:48:ee:86:b5:00:5f: e4:5d:67:c5:e4:4e:d3:48:c4:86:c2:17:26:ce:38: 0f:9f:c8:60:5f:15:c4:e4:7c:24:66:58:af:e2:ab: 2d:de:ec:fa:8c:c7:0f:c9:19:38:6b:eb:7c:25:8d: 2c:50:be:db:6f:64:2b:a3:25:86:60:c4:07:a2:5b: bc:9b:0c:dc:76:6e:ab:56:9e:19:ba:c2:25:67:20: b8:d9:11:08:33:8c:ec:29:c3:9e:13:22:07:bb:cd: 46:4c:e8:75:75:c6:08:c8:41:a1:9d:a6:19:d6:91: 6c:1b:bc:a0:86:20:79:57:4b:74:8e:45:14:ad:84: 47:47:dc:8e:45:1d:2e:a4:37:fc:5c:6d:18:e5:a4: 06:f0:f3:ad:7f:a2:77:67:77:1d:84:73:14:76:31: 6f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C3:2A:70:7C:EE:71:0B:05:15:C3:34:EB:85:15:F2:F1:A9:C0:8F X509v3 Authority Key Identifier: keyid:F0:D3:23:AD:48:F5:A4:5B:BC:A9:E8:79:88:3F:AE:93:14:B5:8E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/o8MqcHzucQsFFcM064UV8vGpwI8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.184.230.0/23 Signature Algorithm: sha256WithRSAEncryption 07:77:8f:d6:53:c3:ea:c6:b0:53:82:aa:cd:23:a1:ab:af:e5: 32:e0:b0:74:aa:ea:5b:e2:c6:72:d8:58:72:af:63:0c:e0:03: 7b:fe:d2:17:44:50:dc:ed:d1:8d:0b:a8:cb:be:08:40:c6:c6: c2:5f:7e:22:d7:7c:54:c1:0d:36:6e:f7:f4:49:f5:6f:b6:d2: 04:7f:16:99:02:75:4d:08:2d:85:1a:46:a2:81:0f:cb:ba:15: 31:3c:74:d3:e1:6f:80:d0:b9:44:42:e9:fc:e7:17:6d:8d:f3: d8:3a:a6:ee:e5:b1:68:57:46:d4:b0:8e:de:98:0c:f7:04:be: 1c:52:22:2a:b4:07:c0:68:c7:26:b6:fc:e6:b2:26:ab:a6:05: 19:ab:31:b8:ff:8a:6f:31:97:8e:1a:90:2b:b9:b0:b7:0e:eb: 8c:03:eb:c4:f1:78:eb:9f:3f:50:93:65:ca:4b:d7:7c:68:1e: d3:8d:0d:a1:ed:72:64:ff:e5:8d:ed:de:f5:fd:ae:20:cd:9d: 39:bd:2b:9f:c3:49:33:2f:74:d5:8b:45:36:d2:3a:b7:fa:7e: 95:88:b9:34:33:26:89:52:18:32:68:aa:ac:cc:af:d1:cd:1d: 83:53:5e:71:fd:7d:01:ba:b8:3c:17:df:81:53:c0:31:38:fb: 7c:37:41:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NoWPM0uwwPudxxWALdTaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZDMyM2FkNDhmNWE0NWJiY2E5ZTg3OTg4M2ZhZTkzMTRi NThlOWQwHhcNMjYwMTAxMjAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2MzMmE3MDdjZWU3MTBiMDUxNWMzMzRlYjg1MTVmMmYxYTljMDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSwXzyzXHifYh6GNdKa+ACkqMP9I J5q4ieCHuXNmPSEoG58hhFM9zErN013IjYWqUxU1tYoE2PV67OGoGpAo/TEdoTYM xONt2cJKSqbSuQqQCqJB7+3pERxFCZcekDyRwPJI7oa1AF/kXWfF5E7TSMSGwhcm zjgPn8hgXxXE5HwkZliv4qst3uz6jMcPyRk4a+t8JY0sUL7bb2QroyWGYMQHolu8 mwzcdm6rVp4ZusIlZyC42REIM4zsKcOeEyIHu81GTOh1dcYIyEGhnaYZ1pFsG7yg hiB5V0t0jkUUrYRHR9yORR0upDf8XG0Y5aQG8POtf6J3Z3cdhHMUdjFvpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKPDKnB87nELBRXDNOuFFfLxqcCPMB8GA1UdIwQY MBaAFPDTI61I9aRbvKnoeYg/rpMUtY6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE5NanJVajFwRnU4cWVoNWlELXVreFMxanAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy83ZGUyZGYtMTBkYi00YmJlLTkwNTIt NWZhYmQ2ZGM1ZjkzLzEvbzhNcWNIenVjUXNGRmNNMDY0VVY4dkdwd0k4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy83ZGUyZGYtMTBkYi00YmJlLTkwNTItNWZhYmQ2ZGM1Zjkz LzEvOE5NanJVajFwRnU4cWVoNWlELXVreFMxanAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw7jmMA0G CSqGSIb3DQEBCwUAA4IBAQAHd4/WU8PqxrBTgqrNI6Grr+Uy4LB0qupb4sZy2Fhy r2MM4AN7/tIXRFDc7dGNC6jLvghAxsbCX34i13xUwQ02bvf0SfVvttIEfxaZAnVN CC2FGkaigQ/LuhUxPHTT4W+A0LlEQun85xdtjfPYOqbu5bFoV0bUsI7emAz3BL4c UiIqtAfAaMcmtvzmsiarpgUZqzG4/4pvMZeOGpArubC3DuuMA+vE8Xjrnz9Qk2XK S9d8aB7TjQ2h7XJk/+WN7d71/a4gzZ05vSufw0kzL3TVi0U20jq3+n6ViLk0MyaJ UhgyaKqszK/RzR2DU15x/X0Burg8F9+BU8AxOPt8N0Fx -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:39 2026 by rpki-client