This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/e8Z8NXoRn89z8xMoswHq7U1GfcI.roa File: e8Z8NXoRn89z8xMoswHq7U1GfcI.roa (raw, json) Hash identifier: ZQm2tG9VlJlgcfZg3NzWPxPtuvmFGw5gv1sbrxp3RIs= Subject key identifier: 7B:C6:7C:35:7A:11:9F:CF:73:F3:13:28:B3:01:EA:ED:4D:46:7D:C2 Certificate issuer: /CN=9dde45e9367801d18ef0fb0a9fe513beb0e4a54a Certificate serial: 019B7B361C8526BC10C2796B60DEE7F656B0 Authority key identifier: 9D:DE:45:E9:36:78:01:D1:8E:F0:FB:0A:9F:E5:13:BE:B0:E4:A5:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/e8Z8NXoRn89z8xMoswHq7U1GfcI.roa Signing time: Thu 01 Jan 2026 20:18:22 +0000 ROA not before: Thu 01 Jan 2026 20:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50848 IP address blocks: 194.247.18.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft rsync://rpki.ripe.net/repository/DEFAULT/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:1c:85:26:bc:10:c2:79:6b:60:de:e7:f6:56:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dde45e9367801d18ef0fb0a9fe513beb0e4a54a Validity Not Before: Jan 1 20:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7bc67c357a119fcf73f31328b301eaed4d467dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e7:66:4c:cc:72:fe:50:6b:82:9a:e9:4d:d9: 4a:61:87:a9:dd:73:c2:c8:c2:4d:bb:2b:87:8d:ce: 65:7e:3e:f6:89:74:89:2c:36:b7:e3:d6:b3:4d:de: 6e:56:9d:e4:06:76:31:39:5d:40:07:1f:fa:3f:c4: f3:c0:b5:8b:b1:27:9e:3b:7b:f2:d1:bf:28:c2:50: f9:cd:98:96:22:19:20:6c:30:8f:e2:59:97:6f:fd: f2:74:14:75:ee:e0:1c:27:4a:4f:5a:51:db:5f:51: 5a:0f:9d:fc:eb:d3:64:d3:a2:5b:bd:94:a8:4f:e4: af:77:31:d3:6e:5a:09:b7:26:77:61:37:77:61:12: c5:66:d3:b8:0d:04:f4:16:a9:b0:8a:bf:fc:8a:80: df:06:92:8b:c0:d1:0b:d7:84:87:d5:4f:a7:4a:5b: 14:23:03:89:4e:c9:ef:3f:4f:78:41:bc:5d:7e:2d: cc:45:c7:87:f7:4d:7b:6f:55:48:4a:88:ee:e6:47: 3d:d6:98:9e:65:89:0e:27:60:c8:09:00:7d:21:92: 39:42:8d:1c:ce:a4:92:07:de:04:28:b0:99:6b:20: 50:66:68:f8:16:c7:6e:7e:fa:b2:3e:aa:02:ef:63: 77:8c:e2:44:fd:62:65:4d:58:b6:17:70:6d:f4:ec: b3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C6:7C:35:7A:11:9F:CF:73:F3:13:28:B3:01:EA:ED:4D:46:7D:C2 X509v3 Authority Key Identifier: keyid:9D:DE:45:E9:36:78:01:D1:8E:F0:FB:0A:9F:E5:13:BE:B0:E4:A5:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/e8Z8NXoRn89z8xMoswHq7U1GfcI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.247.18.0/23 Signature Algorithm: sha256WithRSAEncryption 17:f7:40:b3:f5:83:4a:d0:11:bc:56:90:5f:5b:d0:1d:8a:e2: b2:1d:03:89:8d:e7:87:c1:5b:76:ad:e8:b9:60:13:34:f7:39: 86:a5:20:02:05:20:81:56:3f:e3:c9:52:0d:ae:a6:19:80:27: 76:b5:a9:91:7a:a8:26:f5:4f:28:84:4a:63:e2:a0:d6:8a:3b: 42:50:19:8c:9f:0e:75:cf:e9:51:5e:26:7e:86:5b:dd:98:25: de:b6:6a:20:61:28:78:96:3e:a8:7e:5f:c9:06:19:b1:03:1b: 31:1b:43:c6:8f:68:20:86:f3:63:16:02:d1:2c:48:c9:8f:6b: ce:86:6e:db:25:4a:1e:e7:4f:3f:45:41:01:0a:c6:c8:8d:d9: 92:97:52:a9:4f:8d:ee:05:b8:50:2f:09:c5:55:70:1a:89:49: 7a:04:18:ee:13:7b:93:a1:fb:66:e1:5c:98:de:15:ad:67:8c: ac:b2:83:ee:c7:3d:ce:43:87:ec:94:69:66:93:f9:6c:59:4d: cb:d8:9c:01:79:5c:ba:09:09:a3:a8:42:12:e2:e7:c3:cb:68: db:e5:ec:47:15:34:f2:23:3a:49:4a:81:81:f3:b6:e1:52:c5: 04:03:b6:8e:d6:7c:4b:70:b3:3f:c7:4f:47:f6:43:e0:f9:44: 29:7d:74:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NhyFJrwQwnlrYN7n9lawMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkZGU0NWU5MzY3ODAxZDE4ZWYwZmIwYTlmZTUxM2JlYjBl NGE1NGEwHhcNMjYwMTAxMjAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmM2N2MzNTdhMTE5ZmNmNzNmMzEzMjhiMzAxZWFlZDRkNDY3ZGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+dmTMxy/lBrgprpTdlKYYep3XPC yMJNuyuHjc5lfj72iXSJLDa349azTd5uVp3kBnYxOV1ABx/6P8TzwLWLsSeeO3vy 0b8owlD5zZiWIhkgbDCP4lmXb/3ydBR17uAcJ0pPWlHbX1FaD53869Nk06JbvZSo T+SvdzHTbloJtyZ3YTd3YRLFZtO4DQT0Fqmwir/8ioDfBpKLwNEL14SH1U+nSlsU IwOJTsnvP094Qbxdfi3MRceH9017b1VISoju5kc91pieZYkOJ2DICQB9IZI5Qo0c zqSSB94EKLCZayBQZmj4FsdufvqyPqoC72N3jOJE/WJlTVi2F3Bt9OyzsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHvGfDV6EZ/Pc/MTKLMB6u1NRn3CMB8GA1UdIwQY MBaAFJ3eRek2eAHRjvD7Cp/lE76w5KVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmQ1RjZUWjRBZEdPOFBzS24tVVR2ckRrcFVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9kNzg3ZDctNDI1Zi00ZWI0LWIxODIt MDNlNWNkMzVlMmIwLzEvZThaOE5Yb1JuODl6OHhNb3N3SHE3VTFHZmNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC9kNzg3ZDctNDI1Zi00ZWI0LWIxODItMDNlNWNkMzVlMmIw LzEvbmQ1RjZUWjRBZEdPOFBzS24tVVR2ckRrcFVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwvcSMA0G CSqGSIb3DQEBCwUAA4IBAQAX90Cz9YNK0BG8VpBfW9AdiuKyHQOJjeeHwVt2rei5 YBM09zmGpSACBSCBVj/jyVINrqYZgCd2tamReqgm9U8ohEpj4qDWijtCUBmMnw51 z+lRXiZ+hlvdmCXetmogYSh4lj6ofl/JBhmxAxsxG0PGj2gghvNjFgLRLEjJj2vO hm7bJUoe508/RUEBCsbIjdmSl1KpT43uBbhQLwnFVXAaiUl6BBjuE3uToftm4VyY 3hWtZ4yssoPuxz3OQ4fslGlmk/lsWU3L2JwBeVy6CQmjqEIS4ufDy2jb5exHFTTy IzpJSoGB87bhUsUEA7aO1nxLcLM/x09H9kPg+UQpfXRw -----END CERTIFICATE-----Generated at Tue Feb 10 07:29:48 2026 by rpki-client