This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/do8SOe-ERpHxMjDsw45T1qLXF5s.roa File: do8SOe-ERpHxMjDsw45T1qLXF5s.roa (raw, json) Hash identifier: r8j5u9eIygVJJMrAiUaqnzsEWnLw7mdb+0WkkpHgFnk= Subject key identifier: 76:8F:12:39:EF:84:46:91:F1:32:30:EC:C3:8E:53:D6:A2:D7:17:9B Certificate issuer: /CN=278901c061a355a3fdaace0c80b967ad1cd3717a Certificate serial: 019B7F1362C979B9049DD1752BC4A52741FF Authority key identifier: 27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/do8SOe-ERpHxMjDsw45T1qLXF5s.roa Signing time: Fri 02 Jan 2026 14:18:55 +0000 ROA not before: Fri 02 Jan 2026 14:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207799 IP address blocks: 194.49.71.0/24 maxlen: 24 194.49.76.0/24 maxlen: 24 194.49.84.0/24 maxlen: 24 194.49.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:62:c9:79:b9:04:9d:d1:75:2b:c4:a5:27:41:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=278901c061a355a3fdaace0c80b967ad1cd3717a Validity Not Before: Jan 2 14:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=768f1239ef844691f13230ecc38e53d6a2d7179b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2c:49:a9:ae:00:bf:35:1a:6b:3f:41:96:14: 45:58:b5:88:a5:16:8a:da:29:7d:58:df:bd:1e:ff: d7:c0:41:fc:9c:39:1f:d5:5a:4d:0c:30:8a:fb:e4: b5:1c:4f:82:37:dd:d0:b3:e3:e0:dc:02:4b:35:1f: 6a:a2:4b:ed:04:69:4b:66:73:de:3b:a0:bf:ee:32: 8e:81:a1:df:44:24:9f:77:97:20:87:e7:5d:52:c0: 17:8b:d3:01:bd:cc:21:be:f2:9c:5b:6e:2e:cc:f0: 75:46:3c:09:e2:e1:f3:f9:5a:c9:0b:0e:de:cc:18: 91:16:03:86:ac:da:9e:ba:21:02:36:fa:90:37:60: 30:49:04:b3:c4:0e:0a:c2:b7:2e:d2:13:3c:30:20: 49:1f:51:37:60:18:34:59:c0:fe:49:73:21:d9:dd: 01:4a:a4:62:2a:79:96:92:77:76:8c:17:55:ed:0d: f0:26:49:a8:c0:b6:22:35:30:de:72:d9:de:43:c4: 90:6b:04:f5:3e:bf:50:9e:d5:14:7d:6e:c0:e5:1f: 42:97:81:2c:de:40:37:4a:a9:5d:7a:fb:cd:84:dc: 2b:80:f2:45:34:aa:a8:8b:cf:27:aa:ff:29:10:64: cb:69:ff:b7:5f:13:1c:bb:78:e2:b0:fd:c3:41:e3: e9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:8F:12:39:EF:84:46:91:F1:32:30:EC:C3:8E:53:D6:A2:D7:17:9B X509v3 Authority Key Identifier: keyid:27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/do8SOe-ERpHxMjDsw45T1qLXF5s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.49.71.0/24 194.49.76.0/24 194.49.84.0/24 194.49.93.0/24 Signature Algorithm: sha256WithRSAEncryption 89:7d:ad:51:bd:6e:3b:7b:a5:e1:e3:78:74:bc:a9:d6:da:b4: 6f:bf:b9:59:5e:c4:64:ae:e3:31:b0:b1:60:ed:7c:14:71:f7: 03:8c:da:e7:5a:85:a4:fb:9b:c6:8f:e6:a8:cb:4f:d9:34:96: e2:3e:0b:8a:87:33:0c:5a:bc:59:1e:d2:5e:4f:41:e2:1a:c8: 84:9d:19:44:97:cb:fa:c4:50:37:49:b0:f1:71:00:63:37:e8: 28:0e:45:c1:19:9b:e5:a8:4a:5c:55:25:4f:3e:5c:96:62:ef: d9:ef:41:75:8e:32:7e:23:ba:ef:5e:8d:a1:83:8b:bd:21:01: e3:fb:42:5e:a6:f5:fb:d7:d7:fe:dd:7a:84:1e:0b:95:ac:c3: 48:91:df:34:eb:ad:ad:12:cb:4f:4e:c7:b2:58:c7:50:ee:b1: 8e:07:e5:16:22:16:15:66:9d:2e:55:df:f3:9f:f8:b3:28:67: 9d:d8:ac:1c:a7:b7:8b:7c:73:e6:d2:00:be:8a:5b:da:78:12: 52:b3:0b:c7:84:00:b2:f9:1a:a2:c7:40:51:13:2f:6a:92:e2: ed:a4:29:ba:1a:26:27:04:64:87:38:ad:60:d3:72:09:19:7f: 4c:62:04:ff:d1:3b:59:ca:ae:81:4d:7b:41:48:f6:f9:de:96: 22:a6:1e:23 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/E2LJebkEndF1K8SlJ0H/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ODkwMWMwNjFhMzU1YTNmZGFhY2UwYzgwYjk2N2FkMWNk MzcxN2EwHhcNMjYwMTAyMTQxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjhmMTIzOWVmODQ0NjkxZjEzMjMwZWNjMzhlNTNkNmEyZDcxNzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCxJqa4AvzUaaz9BlhRFWLWIpRaK 2il9WN+9Hv/XwEH8nDkf1VpNDDCK++S1HE+CN93Qs+Pg3AJLNR9qokvtBGlLZnPe O6C/7jKOgaHfRCSfd5cgh+ddUsAXi9MBvcwhvvKcW24uzPB1RjwJ4uHz+VrJCw7e zBiRFgOGrNqeuiECNvqQN2AwSQSzxA4Kwrcu0hM8MCBJH1E3YBg0WcD+SXMh2d0B SqRiKnmWknd2jBdV7Q3wJkmowLYiNTDectneQ8SQawT1Pr9QntUUfW7A5R9Cl4Es 3kA3SqldevvNhNwrgPJFNKqoi88nqv8pEGTLaf+3XxMcu3jisP3DQePpgwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHaPEjnvhEaR8TIw7MOOU9ai1xebMB8GA1UdIwQY MBaAFCeJAcBho1Wj/arODIC5Z60c03F6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjRrQndHR2pWYVA5cXM0TWdMbG5yUnpUY1hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85MDI1OTktNDhkNi00YTg5LTg3MjQt OWM3YTdiY2FhZjM2LzEvZG84U09lLUVScEh4TWpEc3c0NVQxcUxYRjVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC85MDI1OTktNDhkNi00YTg5LTg3MjQtOWM3YTdiY2FhZjM2 LzEvSjRrQndHR2pWYVA5cXM0TWdMbG5yUnpUY1hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwjFHAwQA wjFMAwQAwjFUAwQAwjFdMA0GCSqGSIb3DQEBCwUAA4IBAQCJfa1RvW47e6Xh43h0 vKnW2rRvv7lZXsRkruMxsLFg7XwUcfcDjNrnWoWk+5vGj+aoy0/ZNJbiPguKhzMM WrxZHtJeT0HiGsiEnRlEl8v6xFA3SbDxcQBjN+goDkXBGZvlqEpcVSVPPlyWYu/Z 70F1jjJ+I7rvXo2hg4u9IQHj+0JepvX719f+3XqEHguVrMNIkd80662tEstPTsey WMdQ7rGOB+UWIhYVZp0uVd/zn/izKGed2Kwcp7eLfHPm0gC+ilvaeBJSswvHhACy +Rqix0BREy9qkuLtpCm6GiYnBGSHOK1g03IJGX9MYgT/0TtZyq6BTXtBSPb53pYi ph4j -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:58 2026 by rpki-client