This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/8rKgBAJA8MJvfJn7wlRXaLSOltg.roa File: 8rKgBAJA8MJvfJn7wlRXaLSOltg.roa (raw, json) Hash identifier: vKik0l+/uPuH0Z6X6US0ts7buVtMAj4tzTB6bbsDKWw= Subject key identifier: F2:B2:A0:04:02:40:F0:C2:6F:7C:99:FB:C2:54:57:68:B4:8E:96:D8 Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 019B9CF4997AF571A1EFA4898437DC6EDD29 Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/8rKgBAJA8MJvfJn7wlRXaLSOltg.roa Signing time: Thu 08 Jan 2026 09:33:54 +0000 ROA not before: Thu 08 Jan 2026 09:33:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 194.116.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9c:f4:99:7a:f5:71:a1:ef:a4:89:84:37:dc:6e:dd:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Jan 8 09:33:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2b2a0040240f0c26f7c99fbc2545768b48e96d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d3:90:a0:43:22:c1:80:fa:be:82:1e:fc:31: 39:2a:47:af:1f:e6:41:24:d7:2b:1b:d8:df:d5:92: b9:41:e5:7e:7e:2b:46:d3:5e:cc:8e:ff:f1:ec:b8: 49:2a:41:40:5c:56:e2:49:94:f2:ab:e7:fe:b2:bd: 38:f5:4c:c6:f7:d4:a3:9f:38:9f:bb:78:b9:79:54: 27:f2:7a:48:8f:49:08:12:11:27:0f:36:71:d4:43: f3:36:15:20:15:67:3f:52:d8:51:2d:76:51:b1:1c: 7d:71:30:13:26:1a:de:91:39:00:46:de:dc:0c:84: 66:b6:f3:e7:9c:c4:aa:0f:0b:3c:bc:79:f7:d3:35: 6b:4a:81:d1:89:74:35:59:29:8c:22:3e:f0:55:b8: 13:96:f5:49:5b:6f:39:a4:7c:c4:c9:62:8c:33:47: 9f:ef:6d:61:7d:b2:5b:d1:4f:a9:fe:03:99:ed:a8: fd:3b:49:20:1f:b6:89:df:27:fa:3d:17:98:0d:9b: 9c:ad:eb:7b:9f:1a:ce:3c:b4:7c:7e:36:64:1e:e8: 1b:53:ce:69:b0:0b:1d:fe:d3:7a:e1:6a:59:0c:b0: 07:08:40:fa:f1:98:99:57:5f:9f:3c:2a:f3:25:5b: 3f:ff:56:01:4d:f1:c9:3e:85:bc:f8:be:50:cc:38: 2f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B2:A0:04:02:40:F0:C2:6F:7C:99:FB:C2:54:57:68:B4:8E:96:D8 X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/8rKgBAJA8MJvfJn7wlRXaLSOltg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.116.235.0/24 Signature Algorithm: sha256WithRSAEncryption 13:1f:ff:01:ca:96:ef:9c:f7:77:8e:57:21:80:db:4d:6f:f5: e6:d1:26:d7:57:89:50:0c:1c:fd:40:3a:47:a5:4a:6c:af:44: bd:cc:25:69:d5:16:11:e8:cb:2f:5b:9d:89:49:e8:ba:0e:c9: f5:5c:4f:c0:fe:f8:01:17:e9:54:cd:f6:51:b1:f4:41:5c:fd: 42:03:5c:f1:37:e5:44:e5:01:e8:f3:fb:11:b8:52:cf:dc:68: ec:f5:93:c5:6d:48:5a:ee:c9:fe:37:88:e4:94:43:1a:af:5d: 70:9c:c4:4a:9a:19:10:58:b1:f4:1a:11:ff:47:88:cf:66:42: f2:33:53:c2:8b:ef:d2:89:79:7b:08:d1:60:a2:41:88:ea:2a: f6:50:d8:bb:7c:21:02:f7:e3:38:6e:b4:cc:d2:1d:2f:59:21: 3e:f3:1a:de:73:70:3f:47:e8:2b:e3:bd:0c:63:c8:93:6d:71: 0e:d6:21:9c:bd:c2:db:a3:11:2a:8d:83:48:a5:91:29:10:a5: fb:60:83:c1:cb:c8:f9:6b:28:bd:ce:22:e6:16:83:48:98:a7: 97:88:f9:61:a1:3e:b8:aa:04:3d:e5:4d:ab:df:d4:21:c2:6d: 38:4f:08:f6:26:a2:73:1d:0d:4f:ba:5c:4d:17:bd:5c:2a:1f: 57:bd:f7:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuc9Jl69XGh76SJhDfcbt0pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjYwMTA4MDkzMzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmIyYTAwNDAyNDBmMGMyNmY3Yzk5ZmJjMjU0NTc2OGI0OGU5NmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdOQoEMiwYD6voIe/DE5KkevH+ZB JNcrG9jf1ZK5QeV+fitG017Mjv/x7LhJKkFAXFbiSZTyq+f+sr049UzG99Sjnzif u3i5eVQn8npIj0kIEhEnDzZx1EPzNhUgFWc/UthRLXZRsRx9cTATJhrekTkARt7c DIRmtvPnnMSqDws8vHn30zVrSoHRiXQ1WSmMIj7wVbgTlvVJW285pHzEyWKMM0ef 721hfbJb0U+p/gOZ7aj9O0kgH7aJ3yf6PReYDZucret7nxrOPLR8fjZkHugbU85p sAsd/tN64WpZDLAHCED68ZiZV1+fPCrzJVs//1YBTfHJPoW8+L5QzDgvPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPKyoAQCQPDCb3yZ+8JUV2i0jpbYMB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvOHJLZ0JBSkE4TUp2ZkpuN3dsUlhhTFNPbHRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnTrMA0G CSqGSIb3DQEBCwUAA4IBAQATH/8BypbvnPd3jlchgNtNb/Xm0SbXV4lQDBz9QDpH pUpsr0S9zCVp1RYR6MsvW52JSei6Dsn1XE/A/vgBF+lUzfZRsfRBXP1CA1zxN+VE 5QHo8/sRuFLP3Gjs9ZPFbUha7sn+N4jklEMar11wnMRKmhkQWLH0GhH/R4jPZkLy M1PCi+/SiXl7CNFgokGI6ir2UNi7fCEC9+M4brTM0h0vWSE+8xrec3A/R+gr470M Y8iTbXEO1iGcvcLboxEqjYNIpZEpEKX7YIPBy8j5ayi9ziLmFoNImKeXiPlhoT64 qgQ95U2r39Qhwm04Twj2JqJzHQ1PulxNF71cKh9Xvfe6 -----END CERTIFICATE-----Generated at Mon Jan 19 16:52:07 2026 by rpki-client