This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/b4o7k3ZfFNoPsl0uhtdCY4YGDJ0.roa File: b4o7k3ZfFNoPsl0uhtdCY4YGDJ0.roa (raw, json) Hash identifier: FcUiatrGqQsxVpgGRcTbSSEMrQzJpNf+p+3PlDk628I= Subject key identifier: 6F:8A:3B:93:76:5F:14:DA:0F:B2:5D:2E:86:D7:42:63:86:06:0C:9D Certificate issuer: /CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6 Certificate serial: 019B7A5B4E6231B0D2B61CE715404395F16C Authority key identifier: A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/b4o7k3ZfFNoPsl0uhtdCY4YGDJ0.roa Signing time: Thu 01 Jan 2026 16:19:22 +0000 ROA not before: Thu 01 Jan 2026 16:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215329 IP address blocks: 194.56.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:4e:62:31:b0:d2:b6:1c:e7:15:40:43:95:f1:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6 Validity Not Before: Jan 1 16:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f8a3b93765f14da0fb25d2e86d7426386060c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:10:b8:63:bb:f0:d5:a9:e8:c2:79:72:5d:fa: 9a:d2:e2:8e:71:0f:a5:66:1f:29:d3:c3:57:ea:82: ee:b9:05:64:b6:59:c2:7a:63:b4:78:4e:03:5a:bd: 4f:69:c9:1a:d4:9a:95:a6:e0:69:f4:24:31:70:be: 9e:7f:9a:0b:1c:97:ae:05:b0:b4:23:aa:23:1e:0c: 8c:8a:16:f7:a2:0c:1c:5e:ef:4f:ac:a9:aa:58:1c: d5:2e:09:cc:67:90:25:37:cc:d5:30:9a:01:88:0c: d4:2b:aa:ae:c1:ed:e4:91:55:6d:42:5a:1b:08:c8: 40:bb:25:ba:0f:fb:ac:ea:ae:ba:9a:4e:8b:91:d8: cc:37:cc:7d:bb:2e:87:19:67:bd:6a:75:28:8f:e8: 88:4d:1d:ed:87:c4:b8:77:b1:62:12:ed:e6:fb:9c: fe:d0:a3:d3:1d:5f:52:3a:ff:90:ef:fa:36:4b:c6: 06:9c:82:4b:53:12:d2:4d:45:9b:ef:a5:50:56:b4: 14:f4:68:16:81:df:c7:fe:c3:cd:fc:8c:b5:ad:97: 65:2d:53:0c:3f:96:63:3c:d1:87:09:5e:4e:16:95: 4b:a5:b0:2b:bc:d2:9f:22:8d:2e:43:d9:49:7f:4d: 7b:97:8f:14:d1:cd:33:f9:bb:3e:d6:dd:18:d0:89: 5f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:8A:3B:93:76:5F:14:DA:0F:B2:5D:2E:86:D7:42:63:86:06:0C:9D X509v3 Authority Key Identifier: keyid:A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/b4o7k3ZfFNoPsl0uhtdCY4YGDJ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.56.212.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:c0:13:cd:c8:d0:a1:a5:51:b9:63:c8:65:52:fd:29:a7:f7: 07:e1:e4:1e:6b:bc:76:3f:bf:5b:ab:96:f7:2e:d1:83:0c:88: 90:71:4d:d6:4b:5b:f5:ba:a0:f3:12:47:61:8a:68:07:ce:53: 06:0a:30:0c:12:c4:10:ae:79:61:2e:27:a4:da:2d:84:2a:85: 8a:16:33:38:b4:fd:f6:ec:69:1c:16:d6:0a:ce:1a:13:02:c7: 9d:2f:8f:84:1f:10:eb:3f:01:6b:0a:13:e7:3b:59:c3:a6:3a: d2:32:3a:ec:d6:7d:34:b4:cb:80:c6:89:4c:2c:bc:6a:ab:ca: 24:5a:24:37:d4:b3:57:da:ad:b3:3e:f2:af:cb:4e:45:0a:ca: ab:e8:45:99:9e:35:de:ff:6b:29:f3:8f:1f:6c:e9:e0:74:43: c5:f5:d8:ce:38:ff:34:3b:63:60:d7:f0:44:83:b1:70:5e:9d: 05:0a:df:d3:c3:d2:10:ee:be:d1:93:ae:62:4a:75:95:c9:30: 12:30:f4:22:3b:a3:42:47:e9:a0:3f:f5:3d:0a:fe:3e:05:77: 35:f8:ba:6a:99:99:de:88:5c:0d:86:f6:72:7d:a7:8d:a2:10: 9e:19:ba:e9:d1:1e:eb:69:81:da:9a:d5:9c:db:1d:a8:10:4e: 0e:d3:43:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W05iMbDSthznFUBDlfFsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YjNlYjQ0M2MwNmEzZGNjMDg4ZTJjYWEwNWNlMDljZjhk NGU3YTYwHhcNMjYwMTAxMTYxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjhhM2I5Mzc2NWYxNGRhMGZiMjVkMmU4NmQ3NDI2Mzg2MDYwYzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RC4Y7vw1anownlyXfqa0uKOcQ+l Zh8p08NX6oLuuQVktlnCemO0eE4DWr1Packa1JqVpuBp9CQxcL6ef5oLHJeuBbC0 I6ojHgyMihb3ogwcXu9PrKmqWBzVLgnMZ5AlN8zVMJoBiAzUK6quwe3kkVVtQlob CMhAuyW6D/us6q66mk6LkdjMN8x9uy6HGWe9anUoj+iITR3th8S4d7FiEu3m+5z+ 0KPTHV9SOv+Q7/o2S8YGnIJLUxLSTUWb76VQVrQU9GgWgd/H/sPN/Iy1rZdlLVMM P5ZjPNGHCV5OFpVLpbArvNKfIo0uQ9lJf017l48U0c0z+bs+1t0Y0IlfDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG+KO5N2XxTaD7JdLobXQmOGBgydMB8GA1UdIwQY MBaAFKiz60Q8BqPcwIjiyqBc4Jz41OemMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUxQclJEd0dvOXpBaU9MS29GemduUGpVNTZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS82YmRhODItYTJlMS00NWM5LWExODEt MzEzZGU0ODkyYjhkLzEvYjRvN2szWmZGTm9Qc2wwdWh0ZENZNFlHREowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS82YmRhODItYTJlMS00NWM5LWExODEtMzEzZGU0ODkyYjhk LzEvcUxQclJEd0dvOXpBaU9MS29GemduUGpVNTZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjjUMA0G CSqGSIb3DQEBCwUAA4IBAQCewBPNyNChpVG5Y8hlUv0pp/cH4eQea7x2P79bq5b3 LtGDDIiQcU3WS1v1uqDzEkdhimgHzlMGCjAMEsQQrnlhLiek2i2EKoWKFjM4tP32 7GkcFtYKzhoTAsedL4+EHxDrPwFrChPnO1nDpjrSMjrs1n00tMuAxolMLLxqq8ok WiQ31LNX2q2zPvKvy05FCsqr6EWZnjXe/2sp848fbOngdEPF9djOOP80O2Ng1/BE g7FwXp0FCt/Tw9IQ7r7Rk65iSnWVyTASMPQiO6NCR+mgP/U9Cv4+BXc1+LpqmZne iFwNhvZyfaeNohCeGbrp0R7raYHamtWc2x2oEE4O00OW -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:25 2026 by rpki-client