This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/8P-jAkBcMOaRIUETkZOwY2giLXE.roa File: 8P-jAkBcMOaRIUETkZOwY2giLXE.roa (raw, json) Hash identifier: JFv+n+pyR4z+68wZuOFM0scuNRmrUJ1Wb5COfkBUH5E= Subject key identifier: F0:FF:A3:02:40:5C:30:E6:91:21:41:13:91:93:B0:63:68:22:2D:71 Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733 Certificate serial: 019B79102F41C914407ECE4678999F4C5A52 Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/8P-jAkBcMOaRIUETkZOwY2giLXE.roa Signing time: Thu 01 Jan 2026 10:17:42 +0000 ROA not before: Thu 01 Jan 2026 10:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200017 IP address blocks: 80.246.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:2f:41:c9:14:40:7e:ce:46:78:99:9f:4c:5a:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733 Validity Not Before: Jan 1 10:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0ffa302405c30e6912141139193b06368222d71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9a:9f:d4:3a:35:4b:95:43:59:82:a1:5f:09: d5:c0:c3:39:2e:77:4a:a5:f9:f7:00:20:2e:58:7f: c1:69:bd:9c:24:ec:df:75:f0:9b:fc:00:8b:2d:e5: e7:a9:a7:01:f6:98:b9:2b:ec:9b:84:3c:86:3e:b2: 6f:a1:43:c1:e1:a0:a9:0d:d3:c3:35:05:ec:11:63: b0:c7:6a:70:47:39:46:2b:0d:6a:9d:cd:dd:d3:bc: 5b:9b:80:eb:e9:14:e1:fe:94:03:8a:f9:39:1d:78: d2:41:a5:ce:d0:e7:7e:89:3e:d4:69:6d:6c:5a:97: 56:c2:89:21:41:14:7f:f9:ce:4a:f2:77:d5:ab:2e: 55:ef:f9:e9:6e:ec:4c:37:2e:6e:b6:58:f7:27:0c: db:9a:b4:d1:6c:0d:bf:a3:ae:aa:d4:91:aa:31:c6: 33:c0:1a:82:f5:5f:7d:42:9f:d8:79:d1:39:13:83: c8:49:e7:0a:f9:6c:15:54:a1:d3:df:fa:b7:00:6b: 3f:7b:26:ec:3e:47:ac:fa:37:38:72:7e:8e:19:1a: 7f:28:8b:8e:97:81:1c:c2:d6:13:29:33:66:60:c5: f7:62:2a:18:11:61:59:09:67:53:ca:5a:2d:11:78: 56:5f:4e:d8:e1:c2:ea:b1:71:5e:0c:c9:58:dc:40: 10:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FF:A3:02:40:5C:30:E6:91:21:41:13:91:93:B0:63:68:22:2D:71 X509v3 Authority Key Identifier: keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/8P-jAkBcMOaRIUETkZOwY2giLXE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.246.230.0/24 Signature Algorithm: sha256WithRSAEncryption 04:ee:b6:ea:da:3d:63:d2:cd:45:84:60:24:cc:b2:e3:b7:dc: 16:a5:4e:61:b0:c7:a4:85:07:5d:a0:23:c7:61:c0:e2:61:b2: 3f:b5:16:43:f1:ce:06:3e:ac:5a:5f:2b:f8:35:f9:c7:ba:f5: 41:9d:52:19:de:5f:ab:f1:ef:ec:eb:6f:73:82:bf:21:97:92: 17:c8:d2:19:1e:32:7b:c0:a8:06:d6:1f:09:0f:2d:61:23:7b: dc:65:51:12:cb:b8:b9:58:22:c7:02:25:d9:d7:12:f4:af:c5: 8e:42:54:c7:21:0e:94:2b:7c:a6:a7:15:c9:64:c2:9f:a8:17: 4f:2b:17:78:e5:8e:00:34:cc:a7:aa:03:df:b9:fc:b3:a5:d9: 27:4d:a5:cf:7a:20:84:b1:c0:5b:53:c4:b4:91:d1:5a:29:53: 8b:95:af:87:08:40:6a:08:9d:e2:db:66:96:a9:49:f0:36:fa: d0:60:ad:2c:f7:35:54:6c:ee:e6:dc:25:55:17:66:63:b8:3a: 9b:88:ba:a0:e9:fd:da:28:44:80:20:d8:a5:8c:0e:84:0e:92: 5d:84:f1:2d:fa:e0:89:dc:f9:0b:68:88:8e:a1:a6:5d:c1:0e: bf:a3:05:9d:e2:1b:30:b5:43:d3:77:20:2b:b7:9a:ee:18:7e: 41:bc:f4:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EC9ByRRAfs5GeJmfTFpSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2 Y2Q3MzMwHhcNMjYwMTAxMTAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGZmYTMwMjQwNWMzMGU2OTEyMTQxMTM5MTkzYjA2MzY4MjIyZDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpqf1Do1S5VDWYKhXwnVwMM5LndK pfn3ACAuWH/Bab2cJOzfdfCb/ACLLeXnqacB9pi5K+ybhDyGPrJvoUPB4aCpDdPD NQXsEWOwx2pwRzlGKw1qnc3d07xbm4Dr6RTh/pQDivk5HXjSQaXO0Od+iT7UaW1s WpdWwokhQRR/+c5K8nfVqy5V7/npbuxMNy5utlj3JwzbmrTRbA2/o66q1JGqMcYz wBqC9V99Qp/YedE5E4PISecK+WwVVKHT3/q3AGs/eybsPkes+jc4cn6OGRp/KIuO l4EcwtYTKTNmYMX3YioYEWFZCWdTylotEXhWX07Y4cLqsXFeDMlY3EAQdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPD/owJAXDDmkSFBE5GTsGNoIi1xMB8GA1UdIwQY MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt YWRlYWRlMjg2NWMxLzEvOFAtakFrQmNNT2FSSVVFVGtaT3dZMmdpTFhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPbmMA0G CSqGSIb3DQEBCwUAA4IBAQAE7rbq2j1j0s1FhGAkzLLjt9wWpU5hsMekhQddoCPH YcDiYbI/tRZD8c4GPqxaXyv4NfnHuvVBnVIZ3l+r8e/s629zgr8hl5IXyNIZHjJ7 wKgG1h8JDy1hI3vcZVESy7i5WCLHAiXZ1xL0r8WOQlTHIQ6UK3ympxXJZMKfqBdP Kxd45Y4ANMynqgPfufyzpdknTaXPeiCEscBbU8S0kdFaKVOLla+HCEBqCJ3i22aW qUnwNvrQYK0s9zVUbO7m3CVVF2ZjuDqbiLqg6f3aKESAINiljA6EDpJdhPEt+uCJ 3PkLaIiOoaZdwQ6/owWd4hswtUPTdyArt5ruGH5BvPTw -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:48 2026 by rpki-client