This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/3fae96-4aae-4544-bef2-c1d521166bec/1/etED6K0Bs3O83m7tnMviEpCCv3s.roa File: etED6K0Bs3O83m7tnMviEpCCv3s.roa (raw, json) Hash identifier: mSfzIWvqw8wBOviQQ25BRfy+WgkAD9TswxPf1xc86M0= Subject key identifier: 7A:D1:03:E8:AD:01:B3:73:BC:DE:6E:ED:9C:CB:E2:12:90:82:BF:7B Certificate issuer: /CN=38b912a1eab18eb729745e8978138b25c4407761 Certificate serial: 019B7BA31EFDAA5FDE5C55B11F1715A8BFCF Authority key identifier: 38:B9:12:A1:EA:B1:8E:B7:29:74:5E:89:78:13:8B:25:C4:40:77:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLkSoeqxjrcpdF6JeBOLJcRAd2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/3fae96-4aae-4544-bef2-c1d521166bec/1/etED6K0Bs3O83m7tnMviEpCCv3s.roa Signing time: Thu 01 Jan 2026 22:17:26 +0000 ROA not before: Thu 01 Jan 2026 22:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44872 IP address blocks: 194.8.60.0/24 maxlen: 24 2001:678:16c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/3fae96-4aae-4544-bef2-c1d521166bec/1/OLkSoeqxjrcpdF6JeBOLJcRAd2E.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/3fae96-4aae-4544-bef2-c1d521166bec/1/OLkSoeqxjrcpdF6JeBOLJcRAd2E.mft rsync://rpki.ripe.net/repository/DEFAULT/OLkSoeqxjrcpdF6JeBOLJcRAd2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:1e:fd:aa:5f:de:5c:55:b1:1f:17:15:a8:bf:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b912a1eab18eb729745e8978138b25c4407761 Validity Not Before: Jan 1 22:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ad103e8ad01b373bcde6eed9ccbe2129082bf7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e9:53:93:09:1f:94:64:42:17:7a:5c:08:9a: 43:08:cf:01:41:65:85:7b:a8:a9:29:10:10:f1:99: 27:93:41:57:d3:f6:37:c4:7b:26:5f:88:eb:90:02: cf:1f:72:7d:ea:dd:33:57:98:93:a0:cd:a9:79:8a: 6c:1f:0d:24:a0:07:84:bd:38:40:1c:f1:41:0c:e6: 0b:65:5e:ea:6b:8c:e4:42:28:77:b5:4e:2e:64:68: 59:b5:27:7c:4b:7f:ab:99:d4:5d:5f:c8:e5:55:36: 17:fc:c4:09:2b:93:f6:55:75:29:ec:0e:57:a3:6c: d1:e5:1a:a5:bc:ee:c1:28:1a:45:14:d0:93:95:32: 98:d0:b4:a2:1a:67:a1:6c:f0:a1:5e:8d:3d:a0:c1: 6f:70:b4:36:fd:3c:cb:1a:24:12:f8:01:3c:e5:c8: 9d:84:3b:88:31:62:2e:1f:e4:a6:68:fd:31:8f:75: 45:79:50:29:90:9b:40:c5:6f:42:c5:38:ea:47:11: d4:9e:54:25:07:ae:9b:ba:eb:64:a1:43:8a:67:c2: 61:ac:05:d2:c8:a2:b7:ef:f7:76:5d:a6:ca:9f:64: 07:fd:79:ae:12:0c:84:5c:17:ed:5b:1e:eb:8e:e8: e1:dd:88:e3:27:08:46:a8:3a:8a:cf:88:4e:8d:c0: 6c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D1:03:E8:AD:01:B3:73:BC:DE:6E:ED:9C:CB:E2:12:90:82:BF:7B X509v3 Authority Key Identifier: keyid:38:B9:12:A1:EA:B1:8E:B7:29:74:5E:89:78:13:8B:25:C4:40:77:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLkSoeqxjrcpdF6JeBOLJcRAd2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3fae96-4aae-4544-bef2-c1d521166bec/1/etED6K0Bs3O83m7tnMviEpCCv3s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3fae96-4aae-4544-bef2-c1d521166bec/1/OLkSoeqxjrcpdF6JeBOLJcRAd2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.8.60.0/24 IPv6: 2001:678:16c::/48 Signature Algorithm: sha256WithRSAEncryption 5b:79:e5:49:7c:88:6f:40:7b:7b:74:5a:8c:18:68:0f:18:ff: c0:af:54:ae:e0:ff:17:59:86:38:81:f0:08:8c:84:cc:70:e8: af:f7:01:08:8f:41:49:70:b3:d2:96:f6:c7:79:2d:d6:ad:c2: 55:14:dc:7e:cb:5f:9b:3c:61:52:a2:41:a1:f1:67:0b:34:21: 0a:ab:24:e2:c8:cd:f0:9a:67:20:1c:ab:26:29:d9:aa:b4:6f: 0d:dd:db:54:d0:d5:03:2c:d3:68:e1:ad:68:87:7d:61:7c:c5: 9b:20:5b:5e:ce:4d:d7:cc:59:45:7f:1a:10:e8:b8:e6:48:d9: a1:80:1e:9d:cc:16:6d:f0:45:9f:2d:b2:13:7e:0d:63:7d:dd: 07:9f:81:9a:b6:1d:26:9b:34:78:34:d0:0e:c1:c7:67:8f:5a: 9c:83:20:b2:ed:65:1e:03:3d:22:66:55:b0:58:f3:4d:e5:76: de:08:a8:5b:2f:30:c0:61:58:cd:f7:a1:74:c7:32:1a:e4:6b: ec:1c:25:1b:84:c9:58:75:da:48:54:49:29:bc:9a:84:85:fb: 9c:b2:68:9c:91:b1:5d:49:4c:92:52:a8:94:7d:4d:0f:59:a6: 34:00:58:9b:af:d1:53:cf:f5:bc:6d:45:15:52:e8:e4:7d:9c: 98:74:66:57 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7ox79ql/eXFWxHxcVqL/PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjkxMmExZWFiMThlYjcyOTc0NWU4OTc4MTM4YjI1YzQ0 MDc3NjEwHhcNMjYwMTAxMjIxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWQxMDNlOGFkMDFiMzczYmNkZTZlZWQ5Y2NiZTIxMjkwODJiZjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+lTkwkflGRCF3pcCJpDCM8BQWWF e6ipKRAQ8Zknk0FX0/Y3xHsmX4jrkALPH3J96t0zV5iToM2peYpsHw0koAeEvThA HPFBDOYLZV7qa4zkQih3tU4uZGhZtSd8S3+rmdRdX8jlVTYX/MQJK5P2VXUp7A5X o2zR5RqlvO7BKBpFFNCTlTKY0LSiGmehbPChXo09oMFvcLQ2/TzLGiQS+AE85cid hDuIMWIuH+SmaP0xj3VFeVApkJtAxW9CxTjqRxHUnlQlB66buutkoUOKZ8JhrAXS yKK37/d2XabKn2QH/XmuEgyEXBftWx7rjujh3YjjJwhGqDqKz4hOjcBsCQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHrRA+itAbNzvN5u7ZzL4hKQgr97MB8GA1UdIwQY MBaAFDi5EqHqsY63KXReiXgTiyXEQHdhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xrU29lcXhqcmNwZEY2SmVCT0xKY1JBZDJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8zZmFlOTYtNGFhZS00NTQ0LWJlZjIt YzFkNTIxMTY2YmVjLzEvZXRFRDZLMEJzM084M203dG5NdmlFcENDdjNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8zZmFlOTYtNGFhZS00NTQ0LWJlZjItYzFkNTIxMTY2YmVj LzEvT0xrU29lcXhqcmNwZEY2SmVCT0xKY1JBZDJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwgg8MA8E AgACMAkDBwAgAQZ4AWwwDQYJKoZIhvcNAQELBQADggEBAFt55Ul8iG9Ae3t0WowY aA8Y/8CvVK7g/xdZhjiB8AiMhMxw6K/3AQiPQUlws9KW9sd5LdatwlUU3H7LX5s8 YVKiQaHxZws0IQqrJOLIzfCaZyAcqyYp2aq0bw3d21TQ1QMs02jhrWiHfWF8xZsg W17OTdfMWUV/GhDouOZI2aGAHp3MFm3wRZ8tshN+DWN93QefgZq2HSabNHg00A7B x2ePWpyDILLtZR4DPSJmVbBY803ldt4IqFsvMMBhWM33oXTHMhrka+wcJRuEyVh1 2khUSSm8moSF+5yyaJyRsV1JTJJSqJR9TQ9ZpjQAWJuv0VPP9bxtRRVS6OR9nJh0 Zlc= -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:54 2026 by rpki-client