This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/O8IeWVoWdsPGIKoKpygT-0Hdiis.roa File: O8IeWVoWdsPGIKoKpygT-0Hdiis.roa (raw, json) Hash identifier: rLYN8mRFFy4t/xSsv5WQega2gQ4e0wWE3nxgW/gKR7E= Subject key identifier: 3B:C2:1E:59:5A:16:76:C3:C6:20:AA:0A:A7:28:13:FB:41:DD:8A:2B Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Certificate serial: 019B7CECF79BBCB3CE1BA12EBC7E5E68AE27 Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/O8IeWVoWdsPGIKoKpygT-0Hdiis.roa Signing time: Fri 02 Jan 2026 04:17:43 +0000 ROA not before: Fri 02 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6867 IP address blocks: 194.177.197.0/24 maxlen: 24 2001:648:2c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:f7:9b:bc:b3:ce:1b:a1:2e:bc:7e:5e:68:ae:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Validity Not Before: Jan 2 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bc21e595a1676c3c620aa0aa72813fb41dd8a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fe:ea:df:6d:df:41:a2:37:0c:10:4c:b3:70: 31:cc:7a:11:b1:b6:0b:99:3a:34:83:46:30:e5:25: d3:83:bb:65:b0:d3:37:94:8b:c6:22:c3:c9:96:b4: df:d2:64:2d:b8:ee:f1:4c:94:5c:26:dc:3b:3c:9a: 8e:7d:33:8a:16:ea:b2:6f:fb:39:8d:90:2a:8d:8b: 6f:65:02:b2:0c:e4:aa:1e:45:c4:e0:7a:b6:6e:6f: 22:c8:05:43:09:7d:00:5c:75:f1:2a:1a:51:75:3d: bb:12:75:7d:b4:5b:57:b0:b4:dc:9d:c2:fc:b3:09: f4:98:af:fe:85:3a:83:9e:25:29:4b:50:54:13:e3: c2:7d:fc:eb:c4:aa:93:ee:7d:c2:10:2b:45:2f:37: 56:1c:6f:52:4e:b9:91:73:19:cc:c7:c3:59:fd:23: b7:6b:fb:8c:50:9c:2e:c3:a7:88:48:bb:b9:c5:68: 3d:fc:04:61:d4:fc:dc:87:4b:e8:02:77:55:17:c0: 7b:4c:eb:0b:f8:9a:2f:ef:d9:dc:45:ea:e3:77:dd: 59:0b:a4:02:4a:f8:7c:ed:7d:dc:48:92:9e:a2:21: ea:21:c0:92:2e:c8:42:02:33:2f:9c:20:9c:8f:69: 70:e5:5c:1a:83:f4:ca:93:e2:6a:73:e1:a7:ed:c7: 27:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C2:1E:59:5A:16:76:C3:C6:20:AA:0A:A7:28:13:FB:41:DD:8A:2B X509v3 Authority Key Identifier: keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/O8IeWVoWdsPGIKoKpygT-0Hdiis.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.177.197.0/24 IPv6: 2001:648:2c00::/48 Signature Algorithm: sha256WithRSAEncryption 62:67:3a:73:a2:a6:2a:ab:9d:e0:b0:13:bd:56:74:4f:32:c9: 89:a2:f5:bc:9a:90:0a:a9:41:60:ea:f2:8d:97:fd:8e:c7:65: 4f:17:b8:76:ec:f2:d1:19:5b:1e:63:d1:53:91:75:98:09:7d: 50:ec:58:d1:27:f8:ea:b8:3c:02:35:b2:cf:53:54:ce:65:16: 41:c0:53:dc:3e:a2:54:3c:07:67:1b:82:0e:3c:d5:b7:f9:f1: 8b:26:3e:19:ca:46:bd:16:86:d0:f5:59:1c:0f:c3:1a:d3:ca: ba:bb:31:62:d5:08:74:f6:e3:df:60:86:72:39:8e:3e:db:60: 8b:f2:f2:95:09:b5:e8:ad:b9:f6:d1:cf:87:5c:9a:25:a0:95: bd:e4:88:28:21:32:91:37:1b:f0:a7:d2:6f:49:7c:7b:af:11: 6c:36:28:5e:41:a2:a8:cc:ec:3f:33:6f:57:83:f2:dd:22:df: b2:0e:fc:6f:0d:5a:c0:f6:22:2f:12:b4:d2:19:e9:08:69:ad: be:dd:0a:3b:04:34:83:11:9e:e6:e1:f4:ec:88:03:4b:a5:e5: 4d:59:54:ba:c8:05:25:f9:c4:9a:24:6c:41:17:bd:b7:45:25: 8c:d0:de:81:ec:ce:b4:02:5a:dc:68:c8:89:3a:35:b8:4f:ec: fe:f4:bf:d9 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt87PebvLPOG6EuvH5eaK4nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1 MjlkYzMwHhcNMjYwMTAyMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmMyMWU1OTVhMTY3NmMzYzYyMGFhMGFhNzI4MTNmYjQxZGQ4YTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP7q323fQaI3DBBMs3AxzHoRsbYL mTo0g0Yw5SXTg7tlsNM3lIvGIsPJlrTf0mQtuO7xTJRcJtw7PJqOfTOKFuqyb/s5 jZAqjYtvZQKyDOSqHkXE4Hq2bm8iyAVDCX0AXHXxKhpRdT27EnV9tFtXsLTcncL8 swn0mK/+hTqDniUpS1BUE+PCffzrxKqT7n3CECtFLzdWHG9STrmRcxnMx8NZ/SO3 a/uMUJwuw6eISLu5xWg9/ARh1Pzch0voAndVF8B7TOsL+Jov79ncRerjd91ZC6QC Svh87X3cSJKeoiHqIcCSLshCAjMvnCCcj2lw5Vwag/TKk+Jqc+Gn7ccnrwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFDvCHllaFnbDxiCqCqcoE/tB3YorMB8GA1UdIwQY MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut YWFhNDU1M2QyYWJkLzEvTzhJZVdWb1dkc1BHSUtvS3B5Z1QtMEhkaWlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwrHFMA8E AgACMAkDBwAgAQZILAAwDQYJKoZIhvcNAQELBQADggEBAGJnOnOipiqrneCwE71W dE8yyYmi9byakAqpQWDq8o2X/Y7HZU8XuHbs8tEZWx5j0VORdZgJfVDsWNEn+Oq4 PAI1ss9TVM5lFkHAU9w+olQ8B2cbgg481bf58YsmPhnKRr0WhtD1WRwPwxrTyrq7 MWLVCHT2499ghnI5jj7bYIvy8pUJteitufbRz4dcmiWglb3kiCghMpE3G/Cn0m9J fHuvEWw2KF5BoqjM7D8zb1eD8t0i37IO/G8NWsD2Ii8StNIZ6Qhprb7dCjsENIMR nubh9OyIA0ul5U1ZVLrIBSX5xJokbEEXvbdFJYzQ3oHszrQCWtxoyIk6NbhP7P70 v9k= -----END CERTIFICATE-----Generated at Mon Feb 2 09:38:46 2026 by rpki-client