This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/H8jNWlhdfl7nRCwiQ_yYCw9IePk.roa File: H8jNWlhdfl7nRCwiQ_yYCw9IePk.roa (raw, json) Hash identifier: QUSltaSgdTXR2x5Kqx3Kj2QU9KF/OL830wGX48az1XI= Subject key identifier: 1F:C8:CD:5A:58:5D:7E:5E:E7:44:2C:22:43:FC:98:0B:0F:48:78:F9 Certificate issuer: /CN=1102fc0d9ff86fe65c14469d55046e2053bfe5ca Certificate serial: 019B7E38EAE10B9616329ADA4F19D9A017DF Authority key identifier: 11:02:FC:0D:9F:F8:6F:E6:5C:14:46:9D:55:04:6E:20:53:BF:E5:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/H8jNWlhdfl7nRCwiQ_yYCw9IePk.roa Signing time: Fri 02 Jan 2026 10:20:17 +0000 ROA not before: Fri 02 Jan 2026 10:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12795 IP address blocks: 194.246.110.0/24 maxlen: 24 194.246.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ea:e1:0b:96:16:32:9a:da:4f:19:d9:a0:17:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1102fc0d9ff86fe65c14469d55046e2053bfe5ca Validity Not Before: Jan 2 10:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fc8cd5a585d7e5ee7442c2243fc980b0f4878f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:73:8d:2d:c6:5c:81:dd:6f:3e:a5:36:00:81: 69:5d:aa:f9:40:21:b2:eb:e3:cd:3e:b0:1c:4f:52: df:05:c3:24:50:bf:d3:bf:a5:47:0c:68:a2:42:fd: 15:e8:65:b8:e7:0e:f7:24:0f:55:ef:a5:9f:71:e8: 25:9a:32:9e:39:37:53:02:c1:7f:a3:fd:ba:10:38: a8:1c:9b:b5:37:2e:56:76:33:01:2a:30:0e:69:b6: d5:33:9e:d6:51:3c:fc:ce:da:ac:8e:93:f4:aa:7b: 1c:43:63:b7:cc:43:ff:df:96:2e:5f:a2:86:90:d7: c4:9d:68:24:a1:28:c7:29:53:f5:7f:be:1f:8c:da: 9b:22:89:68:be:e3:0c:cb:be:65:a5:24:9d:a3:3b: 49:cf:26:d5:cf:dd:23:63:5c:a4:c5:ed:57:4a:42: 79:b6:59:c5:57:ee:c2:e9:c3:eb:6b:76:d3:81:0e: 2d:d8:a2:f0:04:bc:a2:12:2a:3f:bb:52:4c:f0:c5: b5:fb:c0:5e:10:00:e5:41:d5:e1:5f:ad:fc:a3:d2: 54:a6:75:81:ea:6f:f4:e3:9e:40:01:9c:64:76:b6: e2:62:30:dc:d8:cf:9c:67:01:f3:20:25:ce:48:3a: e8:d9:13:00:7e:1d:22:39:7c:95:ee:82:7c:53:36: 75:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C8:CD:5A:58:5D:7E:5E:E7:44:2C:22:43:FC:98:0B:0F:48:78:F9 X509v3 Authority Key Identifier: keyid:11:02:FC:0D:9F:F8:6F:E6:5C:14:46:9D:55:04:6E:20:53:BF:E5:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/H8jNWlhdfl7nRCwiQ_yYCw9IePk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.246.110.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:b9:c5:62:c3:dd:5f:29:72:ce:00:91:28:ba:b6:27:6b:39: a3:22:dc:34:96:47:e3:8b:16:27:03:da:64:91:75:3b:61:a6: 47:3b:7b:46:ac:b5:af:a5:94:1b:9f:87:08:fa:c5:52:e1:07: 7b:50:72:6a:13:28:1b:8b:9b:4a:68:2e:9a:49:61:b4:44:f0: ba:a8:ec:91:98:7b:9d:73:96:8e:d7:4e:4c:6e:77:71:82:aa: 72:7d:57:52:f8:05:9e:77:fa:0c:5c:d5:78:c1:4a:9a:af:9f: f7:9f:9b:88:b1:b5:d4:75:36:f7:4c:7e:2a:53:96:48:10:ed: a6:a1:22:1a:0c:bd:d1:a8:aa:be:f7:da:5a:49:b9:46:f3:cc: d8:fc:47:9f:91:ff:1d:2c:38:e6:ff:9e:bb:2c:6f:e4:d2:be: 5d:ec:f4:c0:55:0b:1a:ce:de:ef:ac:1d:df:be:0d:e6:ec:9b: 55:3a:c5:02:fc:ae:70:f3:ae:bb:7c:73:63:dd:50:c6:3d:12: fd:4e:bd:2e:f8:66:64:de:3e:a2:ee:0c:f9:58:58:c8:1e:a7: 6a:d2:ef:2d:ab:d7:aa:af:ec:2d:50:a4:de:87:a4:84:c4:74: 78:7b:4a:36:77:7b:5e:c6:15:3a:53:8a:45:f6:06:bd:dd:18: 94:48:d4:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OOrhC5YWMpraTxnZoBffMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMDJmYzBkOWZmODZmZTY1YzE0NDY5ZDU1MDQ2ZTIwNTNi ZmU1Y2EwHhcNMjYwMTAyMTAyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmM4Y2Q1YTU4NWQ3ZTVlZTc0NDJjMjI0M2ZjOTgwYjBmNDg3OGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHONLcZcgd1vPqU2AIFpXar5QCGy 6+PNPrAcT1LfBcMkUL/Tv6VHDGiiQv0V6GW45w73JA9V76WfceglmjKeOTdTAsF/ o/26EDioHJu1Ny5WdjMBKjAOabbVM57WUTz8ztqsjpP0qnscQ2O3zEP/35YuX6KG kNfEnWgkoSjHKVP1f74fjNqbIolovuMMy75lpSSdoztJzybVz90jY1ykxe1XSkJ5 tlnFV+7C6cPra3bTgQ4t2KLwBLyiEio/u1JM8MW1+8BeEADlQdXhX638o9JUpnWB 6m/0455AAZxkdrbiYjDc2M+cZwHzICXOSDro2RMAfh0iOXyV7oJ8UzZ1CwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB/IzVpYXX5e50QsIkP8mAsPSHj5MB8GA1UdIwQY MBaAFBEC/A2f+G/mXBRGnVUEbiBTv+XKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVFMOERaXzRiLVpjRkVhZFZRUnVJRk9fNWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zMDlkNTctZWM4Mi00YjUzLWJlZTQt MzQwM2NkYWQyYzY3LzEvSDhqTldsaGRmbDduUkN3aVFfeVlDdzlJZVBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8zMDlkNTctZWM4Mi00YjUzLWJlZTQtMzQwM2NkYWQyYzY3 LzEvRVFMOERaXzRiLVpjRkVhZFZRUnVJRk9fNWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwvZuMA0G CSqGSIb3DQEBCwUAA4IBAQBsucViw91fKXLOAJEourYnazmjItw0lkfjixYnA9pk kXU7YaZHO3tGrLWvpZQbn4cI+sVS4Qd7UHJqEygbi5tKaC6aSWG0RPC6qOyRmHud c5aO105MbndxgqpyfVdS+AWed/oMXNV4wUqar5/3n5uIsbXUdTb3TH4qU5ZIEO2m oSIaDL3RqKq+99paSblG88zY/Eefkf8dLDjm/567LG/k0r5d7PTAVQsazt7vrB3f vg3m7JtVOsUC/K5w8667fHNj3VDGPRL9Tr0u+GZk3j6i7gz5WFjIHqdq0u8tq9eq r+wtUKTeh6SExHR4e0o2d3texhU6U4pF9ga93RiUSNRl -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:31 2026 by rpki-client