This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/8SAch57AMOQRbiAz1pknxEq8_AE.roa File: 8SAch57AMOQRbiAz1pknxEq8_AE.roa (raw, json) Hash identifier: dOCl4oMRadim0zorBGeK3Z3XhSzd3Cim0jIw4uxvw28= Subject key identifier: F1:20:1C:87:9E:C0:30:E4:11:6E:20:33:D6:99:27:C4:4A:BC:FC:01 Certificate issuer: /CN=0f784ebe35e41b610be154473bc219d0ad25278f Certificate serial: 019B78350214CCD6ACB021771DBA5B30ECDC Authority key identifier: 0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/8SAch57AMOQRbiAz1pknxEq8_AE.roa Signing time: Thu 01 Jan 2026 06:18:18 +0000 ROA not before: Thu 01 Jan 2026 06:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215252 IP address blocks: 194.62.44.0/24 maxlen: 24 2001:67c:13a8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:02:14:cc:d6:ac:b0:21:77:1d:ba:5b:30:ec:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f784ebe35e41b610be154473bc219d0ad25278f Validity Not Before: Jan 1 06:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1201c879ec030e4116e2033d69927c44abcfc01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:01:e6:2c:e5:4d:dc:d7:b3:5c:bd:3a:c5:52: 15:35:ee:42:8a:04:45:c6:04:b4:bc:cf:f2:63:f7: 4f:4b:8f:10:fb:dd:97:ad:ff:c9:22:09:12:31:8f: 08:a5:ff:4d:97:e1:50:9a:31:a6:13:b2:a2:e9:af: 8a:31:6b:4b:dc:15:7d:08:f0:0b:60:c2:af:68:69: 1a:07:26:33:83:3f:7b:9f:b1:dc:48:13:e1:9c:65: cf:59:9a:15:bb:fe:aa:17:a3:16:ea:60:5d:ab:02: a2:a9:2c:74:ec:a3:bb:4d:9c:5f:51:97:08:ba:c3: f8:1e:df:ff:f3:a8:48:13:b5:74:06:e2:cf:49:48: af:84:dc:89:cb:47:28:e9:e7:33:e0:3d:f7:09:6f: 4b:68:66:81:f7:cf:69:2c:ed:4a:2f:f6:7b:51:8e: da:12:2a:9d:c2:13:2f:b7:8b:69:fe:5c:94:6c:21: 54:d9:36:a1:6d:5f:5a:23:9e:d5:26:2f:8f:82:b3: ad:39:7d:51:ce:c0:61:d7:47:2f:ad:b2:0d:db:f3: a6:4b:8d:8c:87:79:c7:be:21:4d:e0:9d:8d:71:82: 46:50:83:e4:62:be:b9:c8:7e:32:fa:a7:87:eb:93: be:8b:d5:a7:dd:89:32:9b:17:dc:2a:1d:f3:d7:f4: 39:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:20:1C:87:9E:C0:30:E4:11:6E:20:33:D6:99:27:C4:4A:BC:FC:01 X509v3 Authority Key Identifier: keyid:0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/8SAch57AMOQRbiAz1pknxEq8_AE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.62.44.0/24 IPv6: 2001:67c:13a8::/48 Signature Algorithm: sha256WithRSAEncryption 3d:65:0a:60:c9:3d:24:ab:0e:9c:6d:a9:b5:fb:1a:1a:bc:92: 22:ec:fd:07:fc:17:fc:a8:88:b4:f9:64:7e:43:4f:71:62:35: 70:3d:bb:77:8b:f7:2b:d2:88:63:bf:d9:f5:d5:a9:80:cc:9c: 5b:b1:76:09:21:52:6f:15:2d:66:04:2c:aa:6b:da:dd:a1:3c: e0:e0:cd:19:2b:55:4f:01:ea:3b:5d:e5:88:23:7a:1e:f9:0d: 16:93:3e:fb:c1:27:cc:5d:59:bb:10:f0:e9:a9:f6:c3:02:7e: d7:39:3e:64:a5:bb:c0:c5:f2:db:65:a2:4e:9a:64:70:74:5d: 09:50:12:ab:fb:67:10:10:10:e3:30:f3:4d:6f:30:b2:6d:8b: ec:b2:8e:9e:b2:dc:ef:eb:61:bb:c1:5f:33:49:34:1a:d3:20: 02:03:0d:2a:c8:98:86:e9:55:0d:92:db:33:02:97:b5:b0:ad: 36:a6:f2:8c:7a:ce:44:e8:61:82:ba:e8:4f:e6:3b:75:cd:90: 39:de:c6:ae:ca:25:79:f7:1c:b2:96:58:62:ad:4f:a7:44:fc: f2:b9:27:b3:1c:be:7d:0e:14:51:b6:07:6c:68:80:fc:43:11: bc:eb:60:03:f7:f6:a2:19:5c:e0:dc:20:f2:09:6e:72:f3:35: 72:58:cd:8c -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4NQIUzNassCF3HbpbMOzcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNzg0ZWJlMzVlNDFiNjEwYmUxNTQ0NzNiYzIxOWQwYWQy NTI3OGYwHhcNMjYwMTAxMDYxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTIwMWM4NzllYzAzMGU0MTE2ZTIwMzNkNjk5MjdjNDRhYmNmYzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gHmLOVN3NezXL06xVIVNe5CigRF xgS0vM/yY/dPS48Q+92Xrf/JIgkSMY8Ipf9Nl+FQmjGmE7Ki6a+KMWtL3BV9CPAL YMKvaGkaByYzgz97n7HcSBPhnGXPWZoVu/6qF6MW6mBdqwKiqSx07KO7TZxfUZcI usP4Ht//86hIE7V0BuLPSUivhNyJy0co6ecz4D33CW9LaGaB989pLO1KL/Z7UY7a EiqdwhMvt4tp/lyUbCFU2TahbV9aI57VJi+PgrOtOX1RzsBh10cvrbIN2/OmS42M h3nHviFN4J2NcYJGUIPkYr65yH4y+qeH65O+i9Wn3YkymxfcKh3z1/Q5YQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFPEgHIeewDDkEW4gM9aZJ8RKvPwBMB8GA1UdIwQY MBaAFA94Tr415BthC+FURzvCGdCtJSePMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wODhhMjEtNjIxNC00OWZhLWE4Zjct OTEyZTc4YzJmMmViLzEvOFNBY2g1N0FNT1FSYmlBejFwa254RXE4X0FFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8wODhhMjEtNjIxNC00OWZhLWE4ZjctOTEyZTc4YzJmMmVi LzEvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwj4sMA8E AgACMAkDBwAgAQZ8E6gwDQYJKoZIhvcNAQELBQADggEBAD1lCmDJPSSrDpxtqbX7 Ghq8kiLs/Qf8F/yoiLT5ZH5DT3FiNXA9u3eL9yvSiGO/2fXVqYDMnFuxdgkhUm8V LWYELKpr2t2hPODgzRkrVU8B6jtd5Ygjeh75DRaTPvvBJ8xdWbsQ8Omp9sMCftc5 PmSlu8DF8ttlok6aZHB0XQlQEqv7ZxAQEOMw801vMLJti+yyjp6y3O/rYbvBXzNJ NBrTIAIDDSrImIbpVQ2S2zMCl7WwrTam8ox6zkToYYK66E/mO3XNkDnexq7KJXn3 HLKWWGKtT6dE/PK5J7Mcvn0OFFG2B2xogPxDEbzrYAP39qIZXODcIPIJbnLzNXJY zYw= -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:32 2026 by rpki-client