This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/8sE9vfnxVkhmpv_cPv6lSgophbw.roa File: 8sE9vfnxVkhmpv_cPv6lSgophbw.roa (raw, json) Hash identifier: pgSz+be35K3IsVHSxBC7rLqa8AF08GPc30TZx1/DC/o= Subject key identifier: F2:C1:3D:BD:F9:F1:56:48:66:A6:FF:DC:3E:FE:A5:4A:0A:29:85:BC Certificate issuer: /CN=e2110acce33ac85011ca8c22d2001666e45b9377 Certificate serial: 019B7CEE462C82219727BD0D39601B977494 Authority key identifier: E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/8sE9vfnxVkhmpv_cPv6lSgophbw.roa Signing time: Fri 02 Jan 2026 04:19:08 +0000 ROA not before: Fri 02 Jan 2026 04:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9150 IP address blocks: 194.165.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:46:2c:82:21:97:27:bd:0d:39:60:1b:97:74:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2110acce33ac85011ca8c22d2001666e45b9377 Validity Not Before: Jan 2 04:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2c13dbdf9f1564866a6ffdc3efea54a0a2985bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5c:b5:94:26:d3:01:39:ad:1a:9f:b9:4d:6f: 05:9d:51:73:75:64:8e:67:f1:83:e4:ed:fb:f6:d4: df:84:61:33:98:02:1d:8a:e5:92:d7:1d:82:b8:9b: 09:f6:f0:01:9a:01:fd:2e:e5:4b:d4:25:73:d5:a3: 56:9b:73:92:2c:28:63:db:73:3c:65:f6:84:7f:71: f1:69:57:ef:7b:77:e8:84:dd:45:07:f1:9e:a6:ca: 35:c3:5d:8d:c1:6a:f8:81:04:12:01:95:81:b7:b0: 8e:bf:55:78:97:7d:72:91:6b:91:90:cd:2d:19:f9: 8c:28:3c:5f:5d:7f:73:b9:b6:9c:5e:26:b5:bc:30: 14:f7:13:85:ad:0f:a7:c4:eb:7d:c8:e5:9b:6c:07: b2:99:c6:4a:f0:1e:a2:1e:92:7c:14:13:76:9e:e8: b5:f3:f6:21:d4:f0:7c:67:dc:9f:42:65:44:84:e1: a4:1b:aa:12:1a:7f:ec:d0:a6:2a:97:0f:26:d0:0e: d4:cf:15:ed:a2:87:01:a2:04:db:1b:94:54:0b:b1: ab:eb:66:09:29:01:af:f8:eb:a5:3e:5a:b9:b7:e5: e0:b1:56:68:2f:59:44:97:28:d9:20:6d:cd:da:3b: fe:0c:b0:35:eb:b7:b6:a4:00:35:b9:75:85:4c:79: e4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C1:3D:BD:F9:F1:56:48:66:A6:FF:DC:3E:FE:A5:4A:0A:29:85:BC X509v3 Authority Key Identifier: keyid:E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/8sE9vfnxVkhmpv_cPv6lSgophbw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.165.51.0/24 Signature Algorithm: sha256WithRSAEncryption 26:37:57:b2:f5:98:7d:f9:89:a1:e3:f5:94:da:63:d3:da:d1: 3b:c2:6c:55:cf:17:19:35:02:82:54:07:50:a2:3c:da:2a:6c: bc:77:24:6c:3a:e5:3f:c1:9f:ca:6b:8e:20:62:a7:3a:34:10: 28:e0:0f:0b:c6:01:05:b0:36:73:ab:a2:72:2a:0a:e3:68:4c: e9:5b:40:7e:17:40:4b:0d:bb:8a:2f:41:2e:b3:85:59:ce:34: 3b:ca:39:23:a3:ff:a1:c1:05:f5:8e:ed:d9:ab:4a:c5:0e:24: 09:80:77:f0:80:ee:35:48:f6:01:8d:c6:47:26:97:5c:56:20: 19:51:34:27:ae:61:7e:4a:e5:cd:85:69:4c:5c:e0:e4:71:ad: 31:b1:9d:a3:42:8b:39:b2:d7:a8:8c:24:7b:c9:2a:b9:73:1d: 61:ff:bb:b8:b3:35:7a:18:0a:11:ad:2f:e5:84:4e:f5:c4:6c: 32:ad:3d:70:33:bc:ed:03:06:00:b0:03:95:8a:bc:38:37:bf: 84:bd:e2:77:b5:e7:3d:7f:f8:05:15:38:67:30:25:4f:55:37: f5:ee:cf:25:a9:e8:84:74:29:b0:bc:f5:02:26:66:c5:59:f4: 6b:b6:96:78:2c:43:19:43:87:b9:e9:26:04:23:42:af:be:ff: e0:b0:95:68 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87kYsgiGXJ70NOWAbl3SUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMTEwYWNjZTMzYWM4NTAxMWNhOGMyMmQyMDAxNjY2ZTQ1 YjkzNzcwHhcNMjYwMTAyMDQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmMxM2RiZGY5ZjE1NjQ4NjZhNmZmZGMzZWZlYTU0YTBhMjk4NWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1y1lCbTATmtGp+5TW8FnVFzdWSO Z/GD5O379tTfhGEzmAIdiuWS1x2CuJsJ9vABmgH9LuVL1CVz1aNWm3OSLChj23M8 ZfaEf3HxaVfve3fohN1FB/Gepso1w12NwWr4gQQSAZWBt7COv1V4l31ykWuRkM0t GfmMKDxfXX9zubacXia1vDAU9xOFrQ+nxOt9yOWbbAeymcZK8B6iHpJ8FBN2nui1 8/Yh1PB8Z9yfQmVEhOGkG6oSGn/s0KYqlw8m0A7UzxXtoocBogTbG5RUC7Gr62YJ KQGv+OulPlq5t+XgsVZoL1lElyjZIG3N2jv+DLA167e2pAA1uXWFTHnk4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPLBPb358VZIZqb/3D7+pUoKKYW8MB8GA1UdIwQY MBaAFOIRCszjOshQEcqMItIAFmbkW5N3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGhFS3pPTTZ5RkFSeW93aTBnQVdadVJiazNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8wNTEwMzUtMjAwZC00MWU4LWFkZjEt ZDMzZjA4ZjNhNDhkLzEvOHNFOXZmbnhWa2htcHZfY1B2NmxTZ29waGJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8wNTEwMzUtMjAwZC00MWU4LWFkZjEtZDMzZjA4ZjNhNDhk LzEvNGhFS3pPTTZ5RkFSeW93aTBnQVdadVJiazNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwqUzMA0G CSqGSIb3DQEBCwUAA4IBAQAmN1ey9Zh9+Ymh4/WU2mPT2tE7wmxVzxcZNQKCVAdQ ojzaKmy8dyRsOuU/wZ/Ka44gYqc6NBAo4A8LxgEFsDZzq6JyKgrjaEzpW0B+F0BL DbuKL0Eus4VZzjQ7yjkjo/+hwQX1ju3Zq0rFDiQJgHfwgO41SPYBjcZHJpdcViAZ UTQnrmF+SuXNhWlMXODkca0xsZ2jQos5steojCR7ySq5cx1h/7u4szV6GAoRrS/l hE71xGwyrT1wM7ztAwYAsAOVirw4N7+EveJ3tec9f/gFFThnMCVPVTf17s8lqeiE dCmwvPUCJmbFWfRrtpZ4LEMZQ4e56SYEI0Kvvv/gsJVo -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:37 2026 by rpki-client