This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/8ZpfJeIrVDzsn80EhfTAQYuyWJ0.roa File: 8ZpfJeIrVDzsn80EhfTAQYuyWJ0.roa (raw, json) Hash identifier: Dqp4TUGjySbwuRx7Gm8p9zQiCkfikYnsg1NWXjq33+I= Subject key identifier: F1:9A:5F:25:E2:2B:54:3C:EC:9F:CD:04:85:F4:C0:41:8B:B2:58:9D Certificate issuer: /CN=710ab286dae8d8cb5f6fc4eec3f323814c87f5be Certificate serial: 019B7FF05A7786C7AD11A56C14975C51AFED Authority key identifier: 71:0A:B2:86:DA:E8:D8:CB:5F:6F:C4:EE:C3:F3:23:81:4C:87:F5:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/8ZpfJeIrVDzsn80EhfTAQYuyWJ0.roa Signing time: Fri 02 Jan 2026 18:20:16 +0000 ROA not before: Fri 02 Jan 2026 18:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42783 IP address blocks: 194.0.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f0:5a:77:86:c7:ad:11:a5:6c:14:97:5c:51:af:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=710ab286dae8d8cb5f6fc4eec3f323814c87f5be Validity Not Before: Jan 2 18:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f19a5f25e22b543cec9fcd0485f4c0418bb2589d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a7:ae:96:02:32:bf:04:15:0a:b9:2c:51:ff: dc:2d:63:f3:b2:58:35:48:21:55:d2:18:bf:69:1b: 75:a3:86:57:ab:fe:ad:02:f9:c3:30:bb:5b:21:04: b3:c9:74:74:4c:ad:08:11:2e:86:4f:d5:9a:d6:59: 81:89:0a:fb:0e:28:a0:c8:79:f3:0e:59:e7:96:1b: 62:61:b2:3b:81:7c:1f:83:0e:38:39:fa:b8:2f:24: e8:39:b2:e3:b2:eb:2f:88:6f:6c:52:ae:db:b4:12: ab:c7:d4:b0:44:47:3e:2f:4d:49:8a:63:49:85:38: cd:51:33:09:6b:1a:9d:df:87:18:90:05:f7:89:79: 3e:31:79:92:28:78:f0:ab:a1:24:87:b6:7f:d6:c3: 13:d8:8b:26:b6:d6:91:46:5b:54:d6:1f:89:c1:0a: a8:43:05:39:47:b6:33:ce:79:77:12:08:93:a8:23: f9:c8:b8:24:b2:50:c2:dd:72:cd:ce:67:2a:25:51: eb:c3:b8:7a:39:5f:e2:b1:a1:f6:9b:67:86:95:50: 81:82:7e:dd:7c:d2:fa:8a:3d:57:79:1b:db:35:93: 81:75:0f:b2:d5:dc:db:51:c4:ce:ae:b9:7a:b7:3b: bf:96:16:79:96:ee:c0:17:2e:e6:76:fe:5c:f2:65: ab:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:9A:5F:25:E2:2B:54:3C:EC:9F:CD:04:85:F4:C0:41:8B:B2:58:9D X509v3 Authority Key Identifier: keyid:71:0A:B2:86:DA:E8:D8:CB:5F:6F:C4:EE:C3:F3:23:81:4C:87:F5:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/8ZpfJeIrVDzsn80EhfTAQYuyWJ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.230.0/24 Signature Algorithm: sha256WithRSAEncryption 00:9a:be:3a:b1:90:af:96:0e:b5:1b:bb:48:9e:77:89:e0:cb: 95:14:a6:48:2e:df:93:0d:26:a5:45:ed:3e:e2:4a:cd:6c:eb: 50:6f:35:5e:a1:7b:88:e8:13:06:66:63:b8:9b:da:b3:e1:a8: 70:52:d5:d4:c3:f2:18:00:3a:10:56:40:67:bf:6f:8e:b4:ec: 6b:32:a5:0e:15:3f:55:ce:52:b8:ea:b8:9d:d0:df:e1:72:02: 36:af:0f:50:0c:25:34:7d:a3:6f:98:66:af:ba:c1:c4:58:f6: 8f:71:df:b7:be:68:42:27:ee:a8:5d:21:cd:49:79:c2:6e:f3: 36:5c:5a:4a:38:d6:9d:67:39:e4:a3:ca:87:65:de:8c:2b:6f: 67:55:d0:a8:a2:e9:d0:06:a3:1b:8b:fc:75:60:45:6c:e4:0e: 8e:d2:ef:89:a0:a1:2d:19:b2:6a:d9:28:68:69:be:6d:82:64: b2:6e:a9:bc:bb:0a:bd:d7:2b:33:cd:72:c2:96:2b:ae:7d:d8: c9:5b:8c:3c:7c:3f:c2:bc:68:33:3e:34:64:e9:3f:0f:e9:7d: b2:43:f2:d5:d8:ae:2e:84:f1:4e:f0:3c:cb:71:d4:db:a3:7f: 5f:9f:9d:42:78:78:db:81:ef:d3:9b:f3:57:27:f3:ec:8a:a6: 91:6f:0c:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8Fp3hsetEaVsFJdcUa/tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMGFiMjg2ZGFlOGQ4Y2I1ZjZmYzRlZWMzZjMyMzgxNGM4 N2Y1YmUwHhcNMjYwMTAyMTgyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTlhNWYyNWUyMmI1NDNjZWM5ZmNkMDQ4NWY0YzA0MThiYjI1ODlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KeulgIyvwQVCrksUf/cLWPzslg1 SCFV0hi/aRt1o4ZXq/6tAvnDMLtbIQSzyXR0TK0IES6GT9Wa1lmBiQr7DiigyHnz DlnnlhtiYbI7gXwfgw44Ofq4LyToObLjsusviG9sUq7btBKrx9SwREc+L01JimNJ hTjNUTMJaxqd34cYkAX3iXk+MXmSKHjwq6Ekh7Z/1sMT2IsmttaRRltU1h+JwQqo QwU5R7Yzznl3EgiTqCP5yLgkslDC3XLNzmcqJVHrw7h6OV/isaH2m2eGlVCBgn7d fNL6ij1XeRvbNZOBdQ+y1dzbUcTOrrl6tzu/lhZ5lu7AFy7mdv5c8mWr6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPGaXyXiK1Q87J/NBIX0wEGLslidMB8GA1UdIwQY MBaAFHEKsoba6NjLX2/E7sPzI4FMh/W+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1FxeWh0cm8yTXRmYjhUdXdfTWpnVXlIOWI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mMTJlNmItN2YwNi00MDQwLTg2Yjkt N2JmOTY4MzJlMWVhLzEvOFpwZkplSXJWRHpzbjgwRWhmVEFRWXV5V0owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9mMTJlNmItN2YwNi00MDQwLTg2YjktN2JmOTY4MzJlMWVh LzEvY1FxeWh0cm8yTXRmYjhUdXdfTWpnVXlIOWI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgDmMA0G CSqGSIb3DQEBCwUAA4IBAQAAmr46sZCvlg61G7tInneJ4MuVFKZILt+TDSalRe0+ 4krNbOtQbzVeoXuI6BMGZmO4m9qz4ahwUtXUw/IYADoQVkBnv2+OtOxrMqUOFT9V zlK46rid0N/hcgI2rw9QDCU0faNvmGavusHEWPaPcd+3vmhCJ+6oXSHNSXnCbvM2 XFpKONadZznko8qHZd6MK29nVdCoounQBqMbi/x1YEVs5A6O0u+JoKEtGbJq2Sho ab5tgmSybqm8uwq91yszzXLCliuufdjJW4w8fD/CvGgzPjRk6T8P6X2yQ/LV2K4u hPFO8DzLcdTbo39fn51CeHjbge/Tm/NXJ/PsiqaRbwzv -----END CERTIFICATE-----Generated at Mon Feb 9 23:44:51 2026 by rpki-client