This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/8C0-ccpIqHmAeIjDW496VrjvKOE.roa File: 8C0-ccpIqHmAeIjDW496VrjvKOE.roa (raw, json) Hash identifier: MxDBkMG/iI6Rw/citiI0TMMCR7WPdW1yRCJFeLdpPMQ= Subject key identifier: F0:2D:3E:71:CA:48:A8:79:80:78:88:C3:5B:8F:7A:56:B8:EF:28:E1 Certificate issuer: /CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec Certificate serial: 019B791011FD0D3A0DC12D2233D95F0C9009 Authority key identifier: 93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/8C0-ccpIqHmAeIjDW496VrjvKOE.roa Signing time: Thu 01 Jan 2026 10:17:34 +0000 ROA not before: Thu 01 Jan 2026 10:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215065 IP address blocks: 194.34.170.0/24 maxlen: 24 2a0c:bac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:11:fd:0d:3a:0d:c1:2d:22:33:d9:5f:0c:90:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec Validity Not Before: Jan 1 10:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f02d3e71ca48a879807888c35b8f7a56b8ef28e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:69:e0:80:c4:45:4b:de:0f:62:dc:4a:61:e1: 66:53:52:8d:5d:67:11:1d:91:c4:17:6a:a8:cc:ed: 1d:e2:c4:6a:62:09:f1:b7:c6:d2:d1:83:a9:e9:f6: 8d:a5:d1:d3:84:01:81:c4:c9:21:85:8f:90:aa:88: f6:d1:19:8e:0b:bb:be:bb:ea:01:ce:18:3f:b5:85: 70:a5:4f:be:4c:3e:31:a6:e5:3e:89:87:67:c2:83: b1:7e:58:7d:e5:f8:01:58:7f:2b:86:4e:f0:ec:a4: a5:0e:3f:11:0c:95:d2:b9:00:ce:5c:eb:dc:f4:6c: 6e:ef:47:08:c9:33:dd:b7:81:56:b7:ec:18:bc:86: 30:06:4d:e4:68:15:17:d1:49:d4:4a:60:bf:55:22: 05:f0:0b:30:6f:f3:e8:d2:31:3b:8e:25:51:6b:4a: 5b:b1:96:64:ac:46:66:45:37:8e:23:bb:27:fb:29: 6b:26:ee:76:29:da:47:34:a4:9c:1c:21:37:a4:07: cd:f3:48:1d:61:1c:64:13:1f:14:28:48:67:a3:f8: 02:19:64:ed:36:15:38:d0:ec:ee:7c:94:bb:2c:4d: 14:8c:e6:34:65:46:b8:5d:c6:46:24:c1:3c:46:41: db:c0:77:fb:21:4f:96:4a:dd:12:c5:60:df:44:1b: 65:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:2D:3E:71:CA:48:A8:79:80:78:88:C3:5B:8F:7A:56:B8:EF:28:E1 X509v3 Authority Key Identifier: keyid:93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/8C0-ccpIqHmAeIjDW496VrjvKOE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.34.170.0/24 IPv6: 2a0c:bac0::/48 Signature Algorithm: sha256WithRSAEncryption 12:0c:e9:e7:1e:27:2a:5d:dd:c7:a6:c2:01:49:16:41:0d:94: 0f:7a:9d:df:11:41:13:bd:1e:8c:6e:a0:e0:9b:d8:64:40:0d: 0d:cd:c3:05:39:5a:62:94:09:dd:d3:3a:ca:42:bb:1b:bc:2c: 51:d8:cd:77:2c:9d:b0:fc:04:ad:9a:b3:4f:63:68:b9:06:df: de:ab:9c:f0:2e:54:41:06:ec:74:ac:d5:18:aa:76:e2:06:0b: 2e:81:d8:30:18:2d:62:1a:22:c3:bf:30:a8:a2:38:70:6f:29: 23:b8:9b:95:2c:00:40:52:e1:6a:a1:0e:45:22:65:ae:36:13: 61:8c:29:6c:3a:89:95:e0:07:2f:f2:c2:fc:dc:13:4a:bb:11: 0b:67:1e:77:23:65:a7:50:70:93:25:ee:ab:df:45:e4:f6:ff: 22:5e:5a:5f:30:40:c0:4e:10:73:ab:ef:f9:a6:64:33:a0:e5: db:44:22:fc:3a:ae:ca:34:ea:ea:8c:1b:eb:27:a9:a3:e4:8f: a4:b2:de:f0:92:df:38:ba:b8:97:0e:90:03:bf:a0:16:c1:38: e1:62:36:4f:cc:20:36:75:b0:23:09:0e:5a:7d:b6:a4:58:dd: 2b:89:b4:0d:fc:13:b4:d5:0c:4e:47:6f:2c:04:f0:69:55:c2: 1f:09:c6:ba -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5EBH9DToNwS0iM9lfDJAJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNGU3ZDUxNWRkZTlhMDNjMmRjODczODlhMmZjYTRlN2Q1 OGM0ZWMwHhcNMjYwMTAxMTAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDJkM2U3MWNhNDhhODc5ODA3ODg4YzM1YjhmN2E1NmI4ZWYyOGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGnggMRFS94PYtxKYeFmU1KNXWcR HZHEF2qozO0d4sRqYgnxt8bS0YOp6faNpdHThAGBxMkhhY+Qqoj20RmOC7u+u+oB zhg/tYVwpU++TD4xpuU+iYdnwoOxflh95fgBWH8rhk7w7KSlDj8RDJXSuQDOXOvc 9Gxu70cIyTPdt4FWt+wYvIYwBk3kaBUX0UnUSmC/VSIF8Aswb/Po0jE7jiVRa0pb sZZkrEZmRTeOI7sn+ylrJu52KdpHNKScHCE3pAfN80gdYRxkEx8UKEhno/gCGWTt NhU40OzufJS7LE0UjOY0ZUa4XcZGJME8RkHbwHf7IU+WSt0SxWDfRBtlpwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFPAtPnHKSKh5gHiIw1uPela47yjhMB8GA1UdIwQY MBaAFJNOfVFd3poDwtyHOJovyk59WMTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazA1OVVWM2VtZ1BDM0ljNG1pX0tUbjFZeE93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83NTkzMjctY2M5Zi00ZDZkLWFjNzkt OWNiOGQwMjNjYzBiLzEvOEMwLWNjcElxSG1BZUlqRFc0OTZWcmp2S09FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi83NTkzMjctY2M5Zi00ZDZkLWFjNzktOWNiOGQwMjNjYzBi LzEvazA1OVVWM2VtZ1BDM0ljNG1pX0tUbjFZeE93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwiKqMA8E AgACMAkDBwAqDLrAAAAwDQYJKoZIhvcNAQELBQADggEBABIM6eceJypd3cemwgFJ FkENlA96nd8RQRO9HoxuoOCb2GRADQ3NwwU5WmKUCd3TOspCuxu8LFHYzXcsnbD8 BK2as09jaLkG396rnPAuVEEG7HSs1RiqduIGCy6B2DAYLWIaIsO/MKiiOHBvKSO4 m5UsAEBS4WqhDkUiZa42E2GMKWw6iZXgBy/ywvzcE0q7EQtnHncjZadQcJMl7qvf ReT2/yJeWl8wQMBOEHOr7/mmZDOg5dtEIvw6rso06uqMG+snqaPkj6Sy3vCS3zi6 uJcOkAO/oBbBOOFiNk/MIDZ1sCMJDlp9tqRY3SuJtA38E7TVDE5HbywE8GlVwh8J xro= -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:29 2026 by rpki-client