This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/8ve1ZwkPQyjGHgzFJYDwI3qTkDY.roa File: 8ve1ZwkPQyjGHgzFJYDwI3qTkDY.roa (raw, json) Hash identifier: 9D4g3MP76lApBe8OVcxLGqylBt64iPMUOF/fmcYsTdU= Subject key identifier: F2:F7:B5:67:09:0F:43:28:C6:1E:0C:C5:25:80:F0:23:7A:93:90:36 Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551 Certificate serial: 019C1FAF56430A88C49C87F4B7703EF6D605 Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/8ve1ZwkPQyjGHgzFJYDwI3qTkDY.roa Signing time: Mon 02 Feb 2026 18:48:30 +0000 ROA not before: Mon 02 Feb 2026 18:48:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 217.113.197.0/24 maxlen: 24 217.113.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1f:af:56:43:0a:88:c4:9c:87:f4:b7:70:3e:f6:d6:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551 Validity Not Before: Feb 2 18:48:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2f7b567090f4328c61e0cc52580f0237a939036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c3:c8:d5:2a:e6:a1:a4:d8:9c:57:99:06:ae: 30:15:0f:39:42:a8:92:62:a5:45:7e:7f:ab:99:49: 47:49:12:65:ef:cc:3c:26:c9:cf:e1:b9:c6:61:4a: 53:97:b1:7d:0a:51:2c:3b:70:aa:c0:ad:19:16:77: 42:89:6f:cc:16:4f:c0:4e:ee:e7:27:9f:d6:eb:f6: 02:68:c5:38:3d:95:ff:c5:41:49:02:aa:31:30:eb: 20:c2:71:0b:f6:8f:38:d6:0d:0c:ac:c8:b0:57:ab: 44:27:a3:91:47:5a:1f:fa:b5:4f:f2:cf:7c:e6:08: b5:fa:fa:6c:a7:d0:a2:1e:7d:b1:51:b5:38:fc:d5: 22:71:75:c2:3f:43:1c:39:55:95:14:60:b7:96:93: c2:f7:b0:90:10:6c:06:5f:19:65:c2:97:4c:27:55: b3:b1:81:a5:d0:a1:c8:78:3e:eb:8a:d4:62:60:41: fa:56:31:b1:80:e7:f1:89:03:5e:0e:ba:7b:f8:d0: 14:e4:61:67:1e:a7:5d:79:5e:b4:29:71:1d:0b:77: 33:50:b7:71:51:ce:5f:5d:73:cf:79:22:94:41:5d: 02:0f:00:19:cb:0c:7f:3f:4e:dc:a0:07:06:95:b6: ab:da:d0:1f:ce:88:d5:6e:24:71:bc:6b:1b:87:89: 17:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F7:B5:67:09:0F:43:28:C6:1E:0C:C5:25:80:F0:23:7A:93:90:36 X509v3 Authority Key Identifier: keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/8ve1ZwkPQyjGHgzFJYDwI3qTkDY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.113.197.0-217.113.198.255 Signature Algorithm: sha256WithRSAEncryption 6f:1e:91:94:95:d3:10:43:c9:2d:c5:72:83:aa:cc:b2:01:5e: 4e:53:86:6a:4e:ca:f9:ef:37:6e:5e:27:08:10:ca:76:87:3e: 60:5d:7f:59:11:4c:11:68:23:69:53:a4:83:b2:c7:dc:af:c3: 30:27:a1:e5:f8:41:8b:53:b7:d4:36:ed:be:4e:51:d5:ad:5c: 19:91:57:44:2a:c8:d3:bc:fe:79:31:1f:fb:1f:b2:60:d9:20: 05:10:5b:d9:30:93:36:19:20:c7:68:17:d9:16:21:9d:ff:72: 57:dc:ed:39:f8:1c:d7:a4:c0:18:6a:fd:e5:27:68:bc:a5:3e: 0d:2f:5e:5b:e8:f9:ae:3b:bb:4a:59:c3:65:ca:78:6b:86:91: 88:d6:56:18:60:05:51:7a:46:af:43:91:fc:ef:7c:92:e2:3f: be:cb:e2:65:4f:d2:55:69:5a:27:38:8f:63:0c:f2:b8:71:3d: 23:8c:8b:f8:62:60:48:5b:06:c1:4b:df:9a:b7:8c:06:8d:a6: a6:80:c6:03:53:e9:98:19:b5:58:93:8c:3e:3b:17:2b:8a:8d: 19:a6:04:3d:64:2d:7f:14:51:88:0e:23:96:49:37:7a:d2:91: b0:a3:1d:14:a5:09:03:3e:f8:b1:10:86:76:59:80:96:e7:7a: 75:0f:f9:93 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZwfr1ZDCojEnIf0t3A+9tYFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYTBhOWViNDdkODI0YjUxZjE1NDQ0MjQ4MWEyNTcxNjgz OTQ1NTEwHhcNMjYwMjAyMTg0ODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmY3YjU2NzA5MGY0MzI4YzYxZTBjYzUyNTgwZjAyMzdhOTM5MDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucPI1SrmoaTYnFeZBq4wFQ85QqiS YqVFfn+rmUlHSRJl78w8JsnP4bnGYUpTl7F9ClEsO3CqwK0ZFndCiW/MFk/ATu7n J5/W6/YCaMU4PZX/xUFJAqoxMOsgwnEL9o841g0MrMiwV6tEJ6ORR1of+rVP8s98 5gi1+vpsp9CiHn2xUbU4/NUicXXCP0McOVWVFGC3lpPC97CQEGwGXxllwpdMJ1Wz sYGl0KHIeD7ritRiYEH6VjGxgOfxiQNeDrp7+NAU5GFnHqddeV60KXEdC3czULdx Uc5fXXPPeSKUQV0CDwAZywx/P07coAcGlbar2tAfzojVbiRxvGsbh4kXMwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFPL3tWcJD0Moxh4MxSWA8CN6k5A2MB8GA1UdIwQY MBaAFB6gqetH2CS1HxVEQkgaJXFoOUVRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHFDcDYwZllKTFVmRlVSQ1NCb2xjV2c1UlZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8zMDMzYzYtY2NlOC00NTBkLWEwYzkt ODQxOGE5NmY2Nzk1LzEvOHZlMVp3a1BReWpHSGd6RkpZRHdJM3FUa0RZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8zMDMzYzYtY2NlOC00NTBkLWEwYzktODQxOGE5NmY2Nzk1 LzEvSHFDcDYwZllKTFVmRlVSQ1NCb2xjV2c1UlZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADZccUD BADZccYwDQYJKoZIhvcNAQELBQADggEBAG8ekZSV0xBDyS3FcoOqzLIBXk5ThmpO yvnvN25eJwgQynaHPmBdf1kRTBFoI2lTpIOyx9yvwzAnoeX4QYtTt9Q27b5OUdWt XBmRV0QqyNO8/nkxH/sfsmDZIAUQW9kwkzYZIMdoF9kWIZ3/clfc7Tn4HNekwBhq /eUnaLylPg0vXlvo+a47u0pZw2XKeGuGkYjWVhhgBVF6Rq9DkfzvfJLiP77L4mVP 0lVpWic4j2MM8rhxPSOMi/hiYEhbBsFL35q3jAaNpqaAxgNT6ZgZtViTjD47FyuK jRmmBD1kLX8UUYgOI5ZJN3rSkbCjHRSlCQM++LEQhnZZgJbnenUP+ZM= -----END CERTIFICATE-----Generated at Tue Feb 10 01:23:39 2026 by rpki-client