This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/8Ti8O8lVR1z6D8YFUZiTqMGP4jk.roa File: 8Ti8O8lVR1z6D8YFUZiTqMGP4jk.roa (raw, json) Hash identifier: 5ViJvHucQBKZG/meXecoUTIz7C+9h3b9BWMnp7Pd6ck= Subject key identifier: F1:38:BC:3B:C9:55:47:5C:FA:0F:C6:05:51:98:93:A8:C1:8F:E2:39 Certificate issuer: /CN=16b51e9036ca6e756a0163c3877820cd5fce11ae Certificate serial: 019B7DCA36AE2DF37D4232A46A386E58C2E2 Authority key identifier: 16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/8Ti8O8lVR1z6D8YFUZiTqMGP4jk.roa Signing time: Fri 02 Jan 2026 08:19:22 +0000 ROA not before: Fri 02 Jan 2026 08:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42324 IP address blocks: 194.0.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:36:ae:2d:f3:7d:42:32:a4:6a:38:6e:58:c2:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16b51e9036ca6e756a0163c3877820cd5fce11ae Validity Not Before: Jan 2 08:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f138bc3bc955475cfa0fc605519893a8c18fe239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9d:42:df:66:38:a1:14:a4:95:85:5d:b7:ec: 86:b9:fc:86:2e:34:bb:f6:56:03:67:24:55:95:b3: c7:bf:04:dc:2c:80:1b:4a:bd:92:dd:ee:f7:63:40: 0d:ce:75:4b:ed:a4:34:27:f9:20:08:4f:d6:21:cc: 77:1d:83:de:22:b3:2c:dc:78:d6:2d:42:21:bf:57: 4e:ea:4e:c7:d5:8a:cd:2c:b0:e0:2d:be:4c:b9:ef: 87:03:0f:0c:83:ea:10:61:c0:6a:58:eb:80:a0:d5: 35:07:ff:bd:a4:8b:46:f0:47:be:76:82:56:ea:eb: 12:53:7f:40:c3:5d:14:af:5b:6d:ba:03:83:95:8b: 8c:13:26:56:63:63:b4:92:82:a3:76:e0:7b:9a:5b: e3:cb:4b:84:b7:fe:e3:9a:75:31:52:b7:51:5a:6b: 75:59:dd:12:bc:d3:22:ab:54:53:48:62:5b:06:7e: a7:e6:95:f7:cf:dc:14:0e:11:67:47:24:d1:06:7d: be:7f:19:fd:c4:c5:fe:07:f1:f1:7d:41:ab:5f:67: 6d:c0:78:c5:db:ac:73:a9:8b:a9:23:3e:e6:4d:ed: 77:9a:fe:ff:e8:62:4d:b4:7d:c5:25:8d:61:6c:6e: 9f:b8:17:9f:31:07:b6:c2:8c:77:24:9c:3c:d3:d8: c1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:38:BC:3B:C9:55:47:5C:FA:0F:C6:05:51:98:93:A8:C1:8F:E2:39 X509v3 Authority Key Identifier: keyid:16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/8Ti8O8lVR1z6D8YFUZiTqMGP4jk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.204.0/24 Signature Algorithm: sha256WithRSAEncryption 87:b3:98:99:79:7b:06:8a:b4:de:34:9d:db:ee:4d:d8:8b:4b: a9:51:a3:74:4a:23:ec:22:56:1c:9b:b2:f6:11:c8:71:37:74: d0:ef:40:5e:23:00:c4:86:9c:63:09:cd:c1:1e:d7:1d:3a:42: cc:fd:96:71:82:46:06:bd:9d:a0:0d:91:25:26:28:14:cb:f6: 31:7d:2d:13:e4:93:57:3c:49:87:72:0a:42:c4:5c:e1:83:21: e3:db:61:76:02:94:e3:3d:53:1b:f0:d5:d9:bf:ac:99:3e:15: 12:c5:f1:83:c9:bc:34:af:db:09:b7:62:6b:1e:a5:38:c2:23: f5:f2:c9:ae:ac:39:9b:2a:03:89:66:29:35:3c:5d:5d:c6:b6: 29:57:7a:80:77:e1:86:2b:45:0f:2f:2a:45:08:17:02:93:e1: 46:04:5a:81:0c:29:86:62:ad:4f:45:b5:4b:67:13:29:75:86: 87:e1:bb:43:9e:68:aa:f2:8c:47:ee:87:45:9f:eb:ca:3f:e5: ec:20:bd:1e:22:ee:cb:a2:ed:8b:74:0a:8b:04:2b:ee:8d:31: 24:23:49:96:d5:24:5a:c5:34:08:b1:43:9d:a6:1a:5d:4f:61: 04:cd:aa:2a:50:c7:03:71:dd:45:4f:77:91:ea:09:24:da:31: 0b:41:8f:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yjauLfN9QjKkajhuWMLiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2YjUxZTkwMzZjYTZlNzU2YTAxNjNjMzg3NzgyMGNkNWZj ZTExYWUwHhcNMjYwMTAyMDgxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTM4YmMzYmM5NTU0NzVjZmEwZmM2MDU1MTk4OTNhOGMxOGZlMjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ1C32Y4oRSklYVdt+yGufyGLjS7 9lYDZyRVlbPHvwTcLIAbSr2S3e73Y0ANznVL7aQ0J/kgCE/WIcx3HYPeIrMs3HjW LUIhv1dO6k7H1YrNLLDgLb5Mue+HAw8Mg+oQYcBqWOuAoNU1B/+9pItG8Ee+doJW 6usSU39Aw10Ur1ttugODlYuMEyZWY2O0koKjduB7mlvjy0uEt/7jmnUxUrdRWmt1 Wd0SvNMiq1RTSGJbBn6n5pX3z9wUDhFnRyTRBn2+fxn9xMX+B/HxfUGrX2dtwHjF 26xzqYupIz7mTe13mv7/6GJNtH3FJY1hbG6fuBefMQe2wox3JJw809jBKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPE4vDvJVUdc+g/GBVGYk6jBj+I5MB8GA1UdIwQY MBaAFBa1HpA2ym51agFjw4d4IM1fzhGuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnJVZWtEYktiblZxQVdQRGgzZ2d6Vl9PRWE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85NDE5MTctYTY4OC00MmNkLWE4Yzgt MmVjNDEyNGRkNDA5LzEvOFRpOE84bFZSMXo2RDhZRlVaaVRxTUdQNGprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS85NDE5MTctYTY4OC00MmNkLWE4YzgtMmVjNDEyNGRkNDA5 LzEvRnJVZWtEYktiblZxQVdQRGgzZ2d6Vl9PRWE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgDMMA0G CSqGSIb3DQEBCwUAA4IBAQCHs5iZeXsGirTeNJ3b7k3Yi0upUaN0SiPsIlYcm7L2 EchxN3TQ70BeIwDEhpxjCc3BHtcdOkLM/ZZxgkYGvZ2gDZElJigUy/YxfS0T5JNX PEmHcgpCxFzhgyHj22F2ApTjPVMb8NXZv6yZPhUSxfGDybw0r9sJt2JrHqU4wiP1 8smurDmbKgOJZik1PF1dxrYpV3qAd+GGK0UPLypFCBcCk+FGBFqBDCmGYq1PRbVL ZxMpdYaH4btDnmiq8oxH7odFn+vKP+XsIL0eIu7Lou2LdAqLBCvujTEkI0mW1SRa xTQIsUOdphpdT2EEzaoqUMcDcd1FT3eR6gkk2jELQY9x -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:49 2026 by rpki-client