This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/r8_Pkht5LvuIUKkXxWRZPNhds_A.roa File: r8_Pkht5LvuIUKkXxWRZPNhds_A.roa (raw, json) Hash identifier: NBzWUBYoQAPM9L8l3h0b1Ywu4V34+t30OZWBM39xvCY= Subject key identifier: AF:CF:CF:92:1B:79:2E:FB:88:50:A9:17:C5:64:59:3C:D8:5D:B3:F0 Certificate issuer: /CN=aa41c939ea95a21f3b742901dfe05f26a5777581 Certificate serial: 019B7F150BC169F4EAB12D3E5408F3D09667 Authority key identifier: AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/r8_Pkht5LvuIUKkXxWRZPNhds_A.roa Signing time: Fri 02 Jan 2026 14:20:44 +0000 ROA not before: Fri 02 Jan 2026 14:20:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51270 IP address blocks: 194.149.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:0b:c1:69:f4:ea:b1:2d:3e:54:08:f3:d0:96:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa41c939ea95a21f3b742901dfe05f26a5777581 Validity Not Before: Jan 2 14:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afcfcf921b792efb8850a917c564593cd85db3f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0e:89:a5:1c:d1:3b:ed:7c:0b:8d:94:eb:cd: 0e:8e:32:09:42:5a:dd:6a:a0:18:95:50:07:09:55: 70:76:b5:fa:29:de:e0:b6:7b:5d:c8:ab:5e:5f:f6: 62:26:89:07:28:d1:c6:67:e9:4f:b8:20:d2:93:42: f7:8b:ed:b5:ea:e4:b3:18:ad:9f:2d:ec:95:1a:66: b3:42:3d:dd:c9:0b:79:37:f7:55:3a:d9:32:a1:bc: d7:44:2a:9f:56:53:c1:6a:e0:13:c9:70:6c:35:27: 6c:82:4e:15:a0:e5:45:f0:53:bc:e8:8f:3a:f9:ab: 0e:45:a8:84:dd:9f:92:e2:98:e5:d5:77:24:d1:85: 12:0e:5f:e3:5f:fb:f6:69:47:3b:eb:59:37:58:58: db:65:a8:50:9c:09:d1:8a:47:cf:50:77:b9:0b:e5: da:d5:cb:0b:51:c8:fe:ce:20:41:7c:f6:a8:95:75: d0:32:6e:7d:a6:36:e6:c6:7d:de:3b:70:21:28:44: 74:a0:33:cd:06:cc:b4:9e:11:54:8c:7d:6d:a4:a7: a6:46:a8:ee:fd:23:1c:51:cd:e0:34:39:0e:6f:39: 8c:61:b5:88:a7:5b:89:88:70:cd:a2:2f:81:93:08: b9:94:e9:65:b5:b9:05:59:62:00:0d:0d:13:d7:ba: d5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:CF:CF:92:1B:79:2E:FB:88:50:A9:17:C5:64:59:3C:D8:5D:B3:F0 X509v3 Authority Key Identifier: keyid:AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/r8_Pkht5LvuIUKkXxWRZPNhds_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.149.94.0/24 Signature Algorithm: sha256WithRSAEncryption 75:33:98:6b:ca:79:5a:b8:9b:f8:e2:ac:4c:63:c3:72:ef:6b: 74:2f:f9:2c:1c:1f:02:63:d1:8f:8e:8f:43:6e:16:ac:24:34: 83:35:3e:b1:c9:22:8b:74:96:bd:bf:90:c4:d9:4e:09:1b:76: 05:2f:bd:21:ab:09:61:50:c9:3f:7e:ce:47:59:2a:3e:10:5d: 8a:10:eb:8b:da:36:9a:dc:ab:72:5d:9f:e3:26:37:98:25:8c: c8:37:0c:cb:7f:7f:01:0e:9e:c0:69:4e:f9:5c:96:8c:5e:45: bd:16:84:7c:2c:f0:b1:9f:b4:58:bd:64:7a:30:80:24:cb:bb: b5:e2:17:38:3f:e4:dc:0b:9d:9e:09:2e:fd:3b:00:6b:f0:6a: 67:2f:5f:2b:35:ea:20:28:35:7b:ec:5e:85:eb:c1:56:7c:37: d3:a1:6d:05:0d:16:d3:d2:56:02:b3:b1:9b:b9:07:67:f1:a2: 6b:23:1a:db:f1:2b:9d:6b:ce:f8:3c:00:4e:ff:cc:42:1b:97: 6a:1d:3a:25:53:df:d0:fc:66:dd:e1:f5:09:a8:7b:e3:12:8e: f7:f6:da:78:b7:5b:62:31:ae:e7:0c:50:66:1d:53:42:8c:41: 38:8b:58:f7:14:d9:7e:07:35:ac:a1:bf:ba:d6:19:74:3c:ab: 53:f1:7b:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FQvBafTqsS0+VAjz0JZnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNDFjOTM5ZWE5NWEyMWYzYjc0MjkwMWRmZTA1ZjI2YTU3 Nzc1ODEwHhcNMjYwMTAyMTQyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmNmY2Y5MjFiNzkyZWZiODg1MGE5MTdjNTY0NTkzY2Q4NWRiM2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg6JpRzRO+18C42U680OjjIJQlrd aqAYlVAHCVVwdrX6Kd7gtntdyKteX/ZiJokHKNHGZ+lPuCDSk0L3i+216uSzGK2f LeyVGmazQj3dyQt5N/dVOtkyobzXRCqfVlPBauATyXBsNSdsgk4VoOVF8FO86I86 +asORaiE3Z+S4pjl1Xck0YUSDl/jX/v2aUc761k3WFjbZahQnAnRikfPUHe5C+Xa 1csLUcj+ziBBfPaolXXQMm59pjbmxn3eO3AhKER0oDPNBsy0nhFUjH1tpKemRqju /SMcUc3gNDkObzmMYbWIp1uJiHDNoi+Bkwi5lOlltbkFWWIADQ0T17rVVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK/Pz5IbeS77iFCpF8VkWTzYXbPwMB8GA1UdIwQY MBaAFKpByTnqlaIfO3QpAd/gXyald3WBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWtISk9lcVZvaDg3ZENrQjMtQmZKcVYzZFlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy85ODFmYjEtOTA0ZC00OTlhLWI5M2Et NjA3Y2EwMjViOTRmLzEvcjhfUGtodDVMdnVJVUtrWHhXUlpQTmhkc19BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy85ODFmYjEtOTA0ZC00OTlhLWI5M2EtNjA3Y2EwMjViOTRm LzEvcWtISk9lcVZvaDg3ZENrQjMtQmZKcVYzZFlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpVeMA0G CSqGSIb3DQEBCwUAA4IBAQB1M5hrynlauJv44qxMY8Ny72t0L/ksHB8CY9GPjo9D bhasJDSDNT6xySKLdJa9v5DE2U4JG3YFL70hqwlhUMk/fs5HWSo+EF2KEOuL2jaa 3KtyXZ/jJjeYJYzINwzLf38BDp7AaU75XJaMXkW9FoR8LPCxn7RYvWR6MIAky7u1 4hc4P+TcC52eCS79OwBr8GpnL18rNeogKDV77F6F68FWfDfToW0FDRbT0lYCs7Gb uQdn8aJrIxrb8Suda874PABO/8xCG5dqHTolU9/Q/Gbd4fUJqHvjEo739tp4t1ti Ma7nDFBmHVNCjEE4i1j3FNl+BzWsob+61hl0PKtT8XtD -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:54 2026 by rpki-client