This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8FepQtAJBUuZU2C5koskbCikyZY.roa File: 8FepQtAJBUuZU2C5koskbCikyZY.roa (raw, json) Hash identifier: NnXPtykIeQ4dxZWPjPG8CVFvxybiw4u2LvXxROf3phQ= Subject key identifier: F0:57:A9:42:D0:09:05:4B:99:53:60:B9:92:8B:24:6C:28:A4:C9:96 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84AD9B4938F7459182B774B895A1D4 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8FepQtAJBUuZU2C5koskbCikyZY.roa Signing time: Fri 02 Jan 2026 16:22:40 +0000 ROA not before: Fri 02 Jan 2026 16:22:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211881 IP address blocks: 94.183.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ad:9b:49:38:f7:45:91:82:b7:74:b8:95:a1:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f057a942d009054b995360b9928b246c28a4c996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:07:7a:6b:d9:62:48:4f:ac:c5:62:00:e1:5c: a9:05:f2:b9:1d:80:55:de:64:df:49:c6:d4:bf:72: ec:92:f4:d7:11:96:9f:93:4a:fa:d4:f4:75:2a:06: d8:6d:b3:8d:73:67:3b:f8:d8:24:3b:8b:f1:b0:b5: 1f:5c:41:d5:b5:9a:5e:09:b4:a5:5b:7f:26:dd:f4: 83:35:73:39:52:b7:ba:38:7f:3a:82:12:39:20:90: a5:3e:83:4f:06:c2:6f:a5:dc:8b:d9:99:38:5d:b8: cc:da:16:e8:64:33:2f:c1:3e:e1:d9:4f:da:7c:63: 91:a8:22:f6:13:28:1c:45:7c:c2:43:80:03:76:74: 3f:c2:60:55:c0:06:72:62:77:37:a2:f8:66:ed:86: 95:14:4f:9d:1e:43:2a:92:86:28:55:9d:1a:8f:63: a5:e6:a6:5b:ed:c4:01:1c:e2:d8:fb:33:0e:10:2a: d1:bb:7f:43:bf:e4:dd:b7:a1:64:1b:20:86:9d:62: af:3a:fa:75:78:27:e9:bb:45:1e:59:e7:ea:67:9d: c0:b1:ab:cf:13:67:a3:20:14:14:7b:20:21:3d:5b: 0d:25:6e:37:21:55:7c:2c:d2:76:fe:3a:d9:16:d5: 10:22:95:3f:a7:11:5c:cd:a9:bd:12:6a:98:7e:48: f9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:57:A9:42:D0:09:05:4B:99:53:60:B9:92:8B:24:6C:28:A4:C9:96 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8FepQtAJBUuZU2C5koskbCikyZY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.183.149.0/24 Signature Algorithm: sha256WithRSAEncryption 17:99:bd:69:c4:44:0f:56:9b:3c:3c:63:7c:94:61:56:ab:db: 27:47:4f:e3:b6:36:da:16:d8:f1:90:38:f1:c5:55:4e:7b:75: a7:94:6d:80:aa:7d:ba:95:dc:7d:8b:b2:2a:4d:5a:3f:d7:93: 20:e0:dd:da:0a:57:b4:b9:6c:0d:13:d8:8b:3a:9d:2e:be:19: 67:b4:02:12:26:6e:4c:0a:7c:e9:e5:86:b2:b5:fc:1e:48:a4: 05:de:5b:5f:f9:2a:36:80:dd:ae:40:b8:f8:1f:cc:1d:41:35: c3:f7:d3:92:5b:8b:bb:ff:a2:33:a5:e1:77:f0:98:d9:e7:d3: 3a:91:a5:cd:25:12:c9:10:33:59:84:b8:86:ec:96:ed:15:5f: a3:7a:17:70:7c:97:23:f5:f4:f5:d9:5d:32:6a:a7:53:75:cb: 66:16:0b:e4:bb:81:3a:ec:4f:f7:cf:46:79:ad:71:10:cb:5c: 42:34:e8:46:f0:9f:b0:ba:55:b9:3b:86:d0:de:b3:35:e7:e4: 71:32:7d:98:89:1b:87:93:cf:02:ee:1a:f1:0c:b8:da:20:f0: dc:bb:fe:72:9b:eb:87:72:e7:c6:17:32:30:b7:82:b0:0f:a5: 79:ae:59:2d:86:96:d7:26:8b:ad:73:ff:95:ad:9e:cc:21:32: 7d:30:98:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hK2bSTj3RZGCt3S4laHUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDU3YTk0MmQwMDkwNTRiOTk1MzYwYjk5MjhiMjQ2YzI4YTRjOTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gd6a9liSE+sxWIA4VypBfK5HYBV 3mTfScbUv3LskvTXEZafk0r61PR1KgbYbbONc2c7+NgkO4vxsLUfXEHVtZpeCbSl W38m3fSDNXM5Ure6OH86ghI5IJClPoNPBsJvpdyL2Zk4XbjM2hboZDMvwT7h2U/a fGORqCL2EygcRXzCQ4ADdnQ/wmBVwAZyYnc3ovhm7YaVFE+dHkMqkoYoVZ0aj2Ol 5qZb7cQBHOLY+zMOECrRu39Dv+Tdt6FkGyCGnWKvOvp1eCfpu0UeWefqZ53AsavP E2ejIBQUeyAhPVsNJW43IVV8LNJ2/jrZFtUQIpU/pxFczam9EmqYfkj5PQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPBXqULQCQVLmVNguZKLJGwopMmWMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvOEZlcFF0QUpCVXVaVTJDNWtvc2tiQ2lreVpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXreVMA0G CSqGSIb3DQEBCwUAA4IBAQAXmb1pxEQPVps8PGN8lGFWq9snR0/jtjbaFtjxkDjx xVVOe3WnlG2Aqn26ldx9i7IqTVo/15Mg4N3aCle0uWwNE9iLOp0uvhlntAISJm5M Cnzp5YaytfweSKQF3ltf+So2gN2uQLj4H8wdQTXD99OSW4u7/6IzpeF38JjZ59M6 kaXNJRLJEDNZhLiG7JbtFV+jehdwfJcj9fT12V0yaqdTdctmFgvku4E67E/3z0Z5 rXEQy1xCNOhG8J+wulW5O4bQ3rM15+RxMn2YiRuHk88C7hrxDLjaIPDcu/5ym+uH cufGFzIwt4KwD6V5rlkthpbXJoutc/+VrZ7MITJ9MJh3 -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:41 2026 by rpki-client