This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/8WXQxs7BfgUV2QrBN0b_sOFbe1k.roa File: 8WXQxs7BfgUV2QrBN0b_sOFbe1k.roa (raw, json) Hash identifier: t4kbmcJ+5L6lxyTeqkC36Es5ovqBT600hloF270F10g= Subject key identifier: F1:65:D0:C6:CE:C1:7E:05:15:D9:0A:C1:37:46:FF:B0:E1:5B:7B:59 Certificate issuer: /CN=c185d7243ae986cde48414e6ad81f2229c0a57d8 Certificate serial: 019B7AC825D462778224FE04EAC48E234C8E Authority key identifier: C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/8WXQxs7BfgUV2QrBN0b_sOFbe1k.roa Signing time: Thu 01 Jan 2026 18:18:15 +0000 ROA not before: Thu 01 Jan 2026 18:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15576 IP address blocks: 195.216.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:25:d4:62:77:82:24:fe:04:ea:c4:8e:23:4c:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c185d7243ae986cde48414e6ad81f2229c0a57d8 Validity Not Before: Jan 1 18:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f165d0c6cec17e0515d90ac13746ffb0e15b7b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a0:35:3b:92:d3:4c:0a:73:96:82:09:5a:6f: 8a:5a:f9:32:99:49:da:c9:76:df:88:57:c0:e2:79: 33:de:42:6c:8b:6d:7a:b9:2f:0f:7a:a3:16:10:66: 58:55:8b:ed:77:10:99:12:0a:2c:ac:f5:ce:94:d9: 33:ad:d9:e5:b1:3b:94:0d:37:37:b4:df:81:cb:46: dd:d2:40:7f:df:70:a2:3f:fc:2d:25:f4:7b:c1:03: 7c:f5:4d:e4:d4:3d:6c:ad:44:20:a5:4a:20:7e:37: 6e:0f:14:9b:b3:b2:4f:cc:a3:51:48:3c:c0:48:27: 85:4e:28:9b:cc:cb:b0:7a:05:d4:1e:de:6f:fe:5a: 64:4e:d4:83:e8:e4:87:f0:0b:a2:77:05:4d:20:bd: 70:81:84:0a:69:b3:41:6d:ca:34:ae:7c:b3:5f:56: 23:a7:c2:dc:5f:f5:f0:be:51:8b:80:d5:99:20:01: f0:7c:55:43:68:2d:d8:5d:cb:be:c3:c8:46:98:96: 71:05:e8:44:a5:27:ba:6f:1a:9b:80:0e:9c:40:40: f1:0d:4a:9e:ad:46:87:be:61:e6:23:03:99:5e:0f: cd:30:79:af:00:2a:f5:62:bf:b4:54:d0:e1:3e:8b: 0d:d8:5e:65:67:99:08:53:b8:a1:16:29:74:4b:5b: 2d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:65:D0:C6:CE:C1:7E:05:15:D9:0A:C1:37:46:FF:B0:E1:5B:7B:59 X509v3 Authority Key Identifier: keyid:C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/8WXQxs7BfgUV2QrBN0b_sOFbe1k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.216.227.0/24 Signature Algorithm: sha256WithRSAEncryption 40:8c:43:0f:f7:9a:32:4b:72:c4:48:f5:ab:dc:1f:82:7b:d1: 9b:a2:a7:5f:9e:d9:1f:b0:b1:76:0f:88:97:08:57:6f:96:16: ef:56:93:70:f9:01:bd:b4:bc:b5:e7:08:10:c4:b5:78:49:48: 55:ac:d0:24:c1:ad:4e:f7:ae:8b:42:7f:60:cd:6c:8f:89:f0: 20:67:55:d3:b3:c2:28:d9:50:e6:4f:b2:00:6b:14:a6:a6:02: a4:ac:9e:3d:8c:ad:9c:1b:86:33:64:cb:6d:76:0e:1b:97:2e: 10:5b:d6:50:1a:40:13:83:6c:08:11:da:55:cd:a4:8a:f0:f8: 62:33:85:1f:97:95:f9:61:23:9d:5e:5b:3e:fe:98:4b:3f:61: fe:0e:7f:ce:3d:ba:e5:b7:f8:f7:c2:5f:c4:ed:40:96:c5:b0: 90:d1:1d:ef:98:c5:73:a6:61:c9:2b:52:d3:22:19:c6:29:e2: cf:bc:22:dd:13:df:3d:ea:e5:f6:91:20:99:86:9a:92:eb:e3: 59:d7:3d:d8:41:b0:a6:9e:ab:f7:c2:23:b7:cd:eb:18:82:4c: 97:6b:da:ab:ca:84:3b:a1:d2:88:3b:46:34:37:f5:b7:f4:c8: 03:79:61:97:4a:03:0b:e0:97:bd:60:b9:47:07:06:13:77:63: 2b:0f:f5:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yCXUYneCJP4E6sSOI0yOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxODVkNzI0M2FlOTg2Y2RlNDg0MTRlNmFkODFmMjIyOWMw YTU3ZDgwHhcNMjYwMTAxMTgxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTY1ZDBjNmNlYzE3ZTA1MTVkOTBhYzEzNzQ2ZmZiMGUxNWI3YjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KA1O5LTTApzloIJWm+KWvkymUna yXbfiFfA4nkz3kJsi216uS8PeqMWEGZYVYvtdxCZEgosrPXOlNkzrdnlsTuUDTc3 tN+By0bd0kB/33CiP/wtJfR7wQN89U3k1D1srUQgpUogfjduDxSbs7JPzKNRSDzA SCeFTiibzMuwegXUHt5v/lpkTtSD6OSH8AuidwVNIL1wgYQKabNBbco0rnyzX1Yj p8LcX/XwvlGLgNWZIAHwfFVDaC3YXcu+w8hGmJZxBehEpSe6bxqbgA6cQEDxDUqe rUaHvmHmIwOZXg/NMHmvACr1Yr+0VNDhPosN2F5lZ5kIU7ihFil0S1stjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPFl0MbOwX4FFdkKwTdG/7DhW3tZMB8GA1UdIwQY MBaAFMGF1yQ66YbN5IQU5q2B8iKcClfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1lYWEpEcnBoczNraEJUbXJZSHlJcHdLVjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mYzM5MmEtNmEzZS00ZGE1LWI3Yjkt YTdlZGI3ZDNmNTM3LzEvOFdYUXhzN0JmZ1VWMlFyQk4wYl9zT0ZiZTFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9mYzM5MmEtNmEzZS00ZGE1LWI3YjktYTdlZGI3ZDNmNTM3 LzEvd1lYWEpEcnBoczNraEJUbXJZSHlJcHdLVjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9jjMA0G CSqGSIb3DQEBCwUAA4IBAQBAjEMP95oyS3LESPWr3B+Ce9GboqdfntkfsLF2D4iX CFdvlhbvVpNw+QG9tLy15wgQxLV4SUhVrNAkwa1O966LQn9gzWyPifAgZ1XTs8Io 2VDmT7IAaxSmpgKkrJ49jK2cG4YzZMttdg4bly4QW9ZQGkATg2wIEdpVzaSK8Phi M4Ufl5X5YSOdXls+/phLP2H+Dn/OPbrlt/j3wl/E7UCWxbCQ0R3vmMVzpmHJK1LT IhnGKeLPvCLdE9896uX2kSCZhpqS6+NZ1z3YQbCmnqv3wiO3zesYgkyXa9qryoQ7 odKIO0Y0N/W39MgDeWGXSgML4Je9YLlHBwYTd2MrD/Ww -----END CERTIFICATE-----Generated at Mon Jan 26 19:19:17 2026 by rpki-client