This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/8jiMmtjBP-Nl5CilvW2gvoNo4Kk.roa File: 8jiMmtjBP-Nl5CilvW2gvoNo4Kk.roa (raw, json) Hash identifier: wwioWnWaBsWC9aXvqkrOolVE9wvD6iqSMIbgZIUy8Z0= Subject key identifier: F2:38:8C:9A:D8:C1:3F:E3:65:E4:28:A5:BD:6D:A0:BE:83:68:E0:A9 Certificate issuer: /CN=7e1167886da81524431bbf2efb0572914b686ebc Certificate serial: 019B7DCAD27ADB996034A723C8E16E7E45CB Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/8jiMmtjBP-Nl5CilvW2gvoNo4Kk.roa Signing time: Fri 02 Jan 2026 08:20:02 +0000 ROA not before: Fri 02 Jan 2026 08:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202 IP address blocks: 195.160.148.0/24 maxlen: 24 195.160.149.0/24 maxlen: 24 212.39.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:d2:7a:db:99:60:34:a7:23:c8:e1:6e:7e:45:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc Validity Not Before: Jan 2 08:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2388c9ad8c13fe365e428a5bd6da0be8368e0a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e7:0d:80:36:f5:d7:d1:c0:68:ab:80:6a:1b: 7b:d8:3a:ae:76:50:a8:d5:0c:ff:cb:26:66:06:eb: 9e:16:dd:3c:c0:51:c5:54:6a:8d:dc:e6:cc:38:33: 44:61:e5:6e:e3:5d:dd:0d:61:41:4c:ba:c0:ef:f5: c6:29:f7:ce:79:c6:80:4b:24:e2:54:fa:34:71:ba: 1d:1c:a8:64:52:64:55:6a:19:1a:b3:be:3a:53:06: 22:04:ee:d8:68:77:40:7a:94:da:d7:d7:ea:35:5b: 59:08:57:71:b0:5f:bc:e7:02:21:99:ef:22:c7:d4: e7:09:5c:ed:a4:c0:21:10:9b:96:f6:d0:55:82:dc: 41:11:0b:d3:98:be:8b:1b:ff:4c:1b:95:26:bc:b0: 79:04:1f:11:b4:e6:43:61:0a:bf:53:ea:d3:b2:39: ad:f6:8e:d0:eb:d2:ab:b6:3f:83:58:c5:16:ba:8c: da:de:73:ec:93:fa:b0:0e:d2:86:ad:5f:33:40:d2: 0e:12:fe:a7:0f:e2:93:10:01:f9:97:a6:af:02:e8: 49:74:b7:da:b6:ad:56:5a:8c:f4:89:55:ae:26:90: b2:6b:ec:2c:c1:76:fe:fb:1b:59:3c:96:f2:5f:6a: 67:91:19:1c:01:cb:d8:16:48:f1:67:ff:4e:b2:e0: 54:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:38:8C:9A:D8:C1:3F:E3:65:E4:28:A5:BD:6D:A0:BE:83:68:E0:A9 X509v3 Authority Key Identifier: keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/8jiMmtjBP-Nl5CilvW2gvoNo4Kk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.160.148.0/23 212.39.229.0/24 Signature Algorithm: sha256WithRSAEncryption 84:65:44:68:d4:cd:96:fc:d8:c2:5b:59:dc:05:7f:77:f5:a7: a4:93:d4:73:69:99:d2:b6:b2:0c:a6:75:69:8e:e4:c9:b7:b9: 37:30:3f:15:85:32:5a:78:99:59:43:85:aa:7e:d8:f0:85:cf: aa:73:37:d4:4e:89:95:97:b0:30:58:01:96:3c:a9:29:65:ac: 4a:cb:69:a2:a7:a7:d7:be:0b:0d:cf:b6:2d:cf:bf:5f:21:4f: dc:44:6a:4c:03:0b:53:04:68:34:0c:73:e3:71:6a:a5:5d:ac: c8:d1:03:82:ce:b4:d8:df:28:d2:06:0b:70:b3:c7:2e:c9:3f: fd:0c:77:07:98:9b:79:47:8e:11:a6:72:94:c1:9c:98:ce:76: 09:61:65:a0:ad:49:59:35:6a:e5:cc:c6:8d:c9:9a:a2:65:86: 5a:3c:db:4e:b7:70:80:0c:01:d9:64:83:92:7f:53:56:9a:f0: 53:49:52:cd:39:6f:fa:ef:d0:72:68:48:25:26:4f:a1:a4:6d: 4d:be:17:2e:a4:ba:97:c2:94:7b:33:43:db:2f:8c:25:54:cf: cc:e7:87:93:ca:cf:68:78:9a:9c:1f:97:c9:f0:78:8f:c8:e6: 64:e8:62:d1:02:96:ce:bf:81:b1:ff:49:b6:4a:a6:7d:25:32: f9:c6:e4:e3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9ytJ625lgNKcjyOFufkXLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMTE2Nzg4NmRhODE1MjQ0MzFiYmYyZWZiMDU3MjkxNGI2 ODZlYmMwHhcNMjYwMTAyMDgyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjM4OGM5YWQ4YzEzZmUzNjVlNDI4YTViZDZkYTBiZTgzNjhlMGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqucNgDb119HAaKuAaht72DqudlCo 1Qz/yyZmBuueFt08wFHFVGqN3ObMODNEYeVu413dDWFBTLrA7/XGKffOecaASyTi VPo0cbodHKhkUmRVahkas746UwYiBO7YaHdAepTa19fqNVtZCFdxsF+85wIhme8i x9TnCVztpMAhEJuW9tBVgtxBEQvTmL6LG/9MG5UmvLB5BB8RtOZDYQq/U+rTsjmt 9o7Q69Krtj+DWMUWuoza3nPsk/qwDtKGrV8zQNIOEv6nD+KTEAH5l6avAuhJdLfa tq1WWoz0iVWuJpCya+wswXb++xtZPJbyX2pnkRkcAcvYFkjxZ/9OsuBUeQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPI4jJrYwT/jZeQopb1toL6DaOCpMB8GA1UdIwQY MBaAFH4RZ4htqBUkQxu/LvsFcpFLaG68MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmhGbmlHMm9GU1JERzc4dS13VnlrVXRvYnJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mOTJjZDctNjQ2Yy00NDFiLWFlNDYt OWIyODJjNjQzMjU2LzEvOGppTW10akJQLU5sNUNpbHZXMmd2b05vNEtrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9mOTJjZDctNjQ2Yy00NDFiLWFlNDYtOWIyODJjNjQzMjU2 LzEvZmhGbmlHMm9GU1JERzc4dS13VnlrVXRvYnJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBw6CUAwQA 1CflMA0GCSqGSIb3DQEBCwUAA4IBAQCEZURo1M2W/NjCW1ncBX939aekk9RzaZnS trIMpnVpjuTJt7k3MD8VhTJaeJlZQ4Wqftjwhc+qczfUTomVl7AwWAGWPKkpZaxK y2mip6fXvgsNz7Ytz79fIU/cRGpMAwtTBGg0DHPjcWqlXazI0QOCzrTY3yjSBgtw s8cuyT/9DHcHmJt5R44RpnKUwZyYznYJYWWgrUlZNWrlzMaNyZqiZYZaPNtOt3CA DAHZZIOSf1NWmvBTSVLNOW/679ByaEglJk+hpG1NvhcupLqXwpR7M0PbL4wlVM/M 54eTys9oeJqcH5fJ8HiPyOZk6GLRApbOv4Gx/0m2SqZ9JTL5xuTj -----END CERTIFICATE-----Generated at Tue Jan 20 23:14:23 2026 by rpki-client