This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/o8OOXMpbaFk_8-RmJyQxncgLVFQ.roa File: o8OOXMpbaFk_8-RmJyQxncgLVFQ.roa (raw, json) Hash identifier: jB/RtTqOu46GTbqyk/NL/0jshQ8FkOf7LHzIj9jHQHo= Subject key identifier: A3:C3:8E:5C:CA:5B:68:59:3F:F3:E4:66:27:24:31:9D:C8:0B:54:54 Certificate issuer: /CN=2dfef2b839ad07786833b1bedca8b0b19203e111 Certificate serial: 019B7E39262005ABC16C0D4BCFD49E458C5A Authority key identifier: 2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/o8OOXMpbaFk_8-RmJyQxncgLVFQ.roa Signing time: Fri 02 Jan 2026 10:20:33 +0000 ROA not before: Fri 02 Jan 2026 10:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44335 IP address blocks: 109.234.217.0/24 maxlen: 24 109.234.218.0/24 maxlen: 24 195.93.200.0/23 maxlen: 23 2a00:1c08::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:26:20:05:ab:c1:6c:0d:4b:cf:d4:9e:45:8c:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dfef2b839ad07786833b1bedca8b0b19203e111 Validity Not Before: Jan 2 10:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3c38e5cca5b68593ff3e4662724319dc80b5454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a0:82:84:39:43:72:5e:9d:92:38:d3:d0:d0: f6:e9:b9:8c:fe:58:57:c3:4d:29:2a:60:bc:98:ae: 92:07:24:7d:60:5f:77:a3:3e:f2:90:6f:db:75:cb: d9:9c:2a:d3:ee:ae:23:fd:33:1f:df:d6:f8:e9:21: c3:1d:7b:ff:87:9f:80:6d:99:00:da:43:7e:82:27: 81:61:05:00:c6:8e:3f:0a:3c:08:da:2d:d2:0f:fd: f6:89:be:53:13:8d:e3:20:4c:bf:59:49:ee:f9:7e: 77:77:bb:4a:1e:05:66:89:0b:0b:32:da:1b:4b:4e: d6:24:95:69:64:8c:7b:f1:12:0f:0d:00:1b:6a:00: cb:8d:f5:32:84:dd:e9:16:40:40:c9:02:02:75:b2: 17:9b:00:73:50:97:55:e8:7a:92:d7:2d:cb:a2:51: cf:53:0a:77:25:d3:4e:08:9a:8b:8c:0f:cf:15:63: e6:70:9c:bd:6d:a6:73:27:0f:69:3a:d4:6a:4a:5b: 10:51:4f:a4:c4:15:00:f7:9c:fb:81:0e:46:ff:3d: d5:00:df:f5:aa:04:26:f7:93:2c:55:63:59:d8:76: 71:83:f0:c6:96:81:b8:74:4c:c7:b2:06:bd:b5:2f: 4b:09:15:04:8e:86:71:da:c6:48:21:c7:b8:1d:61: 38:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C3:8E:5C:CA:5B:68:59:3F:F3:E4:66:27:24:31:9D:C8:0B:54:54 X509v3 Authority Key Identifier: keyid:2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/o8OOXMpbaFk_8-RmJyQxncgLVFQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.234.217.0-109.234.218.255 195.93.200.0/23 IPv6: 2a00:1c08::/32 Signature Algorithm: sha256WithRSAEncryption 93:a3:a7:8a:e4:61:8b:13:d4:9f:7e:b6:c6:6a:89:8e:b3:27: 11:97:a3:89:57:ed:d2:c3:fb:a7:41:99:e7:4b:8e:7f:d4:d6: d1:6e:23:09:db:18:37:09:e2:24:66:da:21:ef:0f:a0:90:c3: 5c:41:54:e2:9b:02:6f:b0:4c:24:38:ed:87:d0:68:9f:6f:4e: 70:b7:fc:2d:af:f1:93:08:c7:80:15:85:64:51:f8:64:25:a1: 4d:ce:6e:00:dc:f1:ed:cd:84:3a:4b:c4:40:04:a0:5d:57:26: 92:b8:b0:85:ed:c4:5d:8c:80:3f:10:a0:7d:06:88:6d:e3:9f: 36:d8:1c:ea:92:71:c8:bb:4c:23:94:2b:fa:1a:0e:6e:0d:c7: c9:a5:16:5c:71:9d:97:b4:e3:9d:8e:74:d8:98:e2:8a:7b:42: d5:db:c8:48:dd:01:d2:09:27:4e:93:ef:7e:40:0e:7c:9c:7e: ad:a6:5d:a6:87:c9:20:48:76:5b:9f:a3:57:02:97:33:ad:ee: 93:3a:84:00:44:ff:7e:88:fc:93:04:a1:43:2a:1d:13:7b:63: 47:97:5b:4d:bb:ba:7d:2a:14:5c:cd:c8:fe:2d:ba:50:b1:11: d9:97:ab:ae:e4:f8:ee:6d:b6:8d:03:ac:80:6f:1f:87:0e:71: 92:78:15:6a -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt+OSYgBavBbA1Lz9SeRYxaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZmVmMmI4MzlhZDA3Nzg2ODMzYjFiZWRjYThiMGIxOTIw M2UxMTEwHhcNMjYwMTAyMTAyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2MzOGU1Y2NhNWI2ODU5M2ZmM2U0NjYyNzI0MzE5ZGM4MGI1NDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KCChDlDcl6dkjjT0ND26bmM/lhX w00pKmC8mK6SByR9YF93oz7ykG/bdcvZnCrT7q4j/TMf39b46SHDHXv/h5+AbZkA 2kN+gieBYQUAxo4/CjwI2i3SD/32ib5TE43jIEy/WUnu+X53d7tKHgVmiQsLMtob S07WJJVpZIx78RIPDQAbagDLjfUyhN3pFkBAyQICdbIXmwBzUJdV6HqS1y3LolHP Uwp3JdNOCJqLjA/PFWPmcJy9baZzJw9pOtRqSlsQUU+kxBUA95z7gQ5G/z3VAN/1 qgQm95MsVWNZ2HZxg/DGloG4dEzHsga9tS9LCRUEjoZx2sZIIce4HWE4pwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFKPDjlzKW2hZP/PkZickMZ3IC1RUMB8GA1UdIwQY MBaAFC3+8rg5rQd4aDOxvtyosLGSA+ERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGY3eXVEbXRCM2hvTTdHLTNLaXdzWklENFJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wMzU3ZTgtM2VhMC00OTY4LTllZjkt N2Q3MDUxOWI3NmRhLzEvbzhPT1hNcGJhRmtfOC1SbUp5UXhuY2dMVkZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8wMzU3ZTgtM2VhMC00OTY4LTllZjktN2Q3MDUxOWI3NmRh LzEvTGY3eXVEbXRCM2hvTTdHLTNLaXdzWklENFJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUMAwDBABt6tkD BABt6toDBAHDXcgwDQQCAAIwBwMFACoAHAgwDQYJKoZIhvcNAQELBQADggEBAJOj p4rkYYsT1J9+tsZqiY6zJxGXo4lX7dLD+6dBmedLjn/U1tFuIwnbGDcJ4iRm2iHv D6CQw1xBVOKbAm+wTCQ47YfQaJ9vTnC3/C2v8ZMIx4AVhWRR+GQloU3ObgDc8e3N hDpLxEAEoF1XJpK4sIXtxF2MgD8QoH0GiG3jnzbYHOqScci7TCOUK/oaDm4Nx8ml FlxxnZe0452OdNiY4op7QtXbyEjdAdIJJ06T735ADnycfq2mXaaHySBIdlufo1cC lzOt7pM6hABE/36I/JMEoUMqHRN7Y0eXW027un0qFFzNyP4tulCxEdmXq67k+O5t to0DrIBvH4cOcZJ4FWo= -----END CERTIFICATE-----Generated at Sun Jan 25 08:48:10 2026 by rpki-client