This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/8JBVMlgJrEeMkQUmPSoIQ2RUnn4.roa File: 8JBVMlgJrEeMkQUmPSoIQ2RUnn4.roa (raw, json) Hash identifier: VZnlb0yKuhiG0Ts3EoKkO1PeRAsc+rIKQY3PrkAaF7E= Subject key identifier: F0:90:55:32:58:09:AC:47:8C:91:05:26:3D:2A:08:43:64:54:9E:7E Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019BEC1B99F15FA941E490AFE168782DDF4F Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/8JBVMlgJrEeMkQUmPSoIQ2RUnn4.roa Signing time: Fri 23 Jan 2026 18:26:30 +0000 ROA not before: Fri 23 Jan 2026 18:26:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 188.209.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ec:1b:99:f1:5f:a9:41:e4:90:af:e1:68:78:2d:df:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Jan 23 18:26:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f09055325809ac478c9105263d2a084364549e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:af:41:d7:03:25:52:6a:d1:b3:14:02:39:bb: cb:fb:fc:c4:be:4b:64:d0:bd:67:ad:eb:65:6f:fe: 53:10:d3:13:48:1b:5c:bd:07:f9:e3:64:d8:6f:a6: ef:e1:f8:61:95:83:39:49:54:28:2e:b5:8f:0e:4c: a3:98:7e:bc:3d:1b:1b:db:53:82:e6:a5:01:66:54: d1:a6:a9:f1:06:0e:4a:9c:42:a4:22:c1:7e:27:36: 60:2e:3b:fa:dc:0e:6f:0e:6f:91:1f:a7:cf:f9:b8: 3a:5d:0b:e8:49:a5:27:0d:9a:cf:b8:62:c3:fa:a6: 4e:31:00:85:59:50:0b:ca:5e:6a:31:41:c5:86:ae: e8:83:c5:85:58:5a:bc:84:91:8e:47:f3:99:17:8f: ea:c5:9d:49:a8:6e:07:be:1d:6a:be:3c:c0:16:59: 8a:be:5e:2f:68:1c:7f:0b:c9:ec:49:9c:8e:e2:c2: f4:2d:86:fc:ea:98:1d:49:0f:eb:66:4b:89:52:03: 60:21:ac:1b:b5:51:78:05:5e:6f:25:e0:61:fa:f5: b4:10:96:0e:04:e2:92:cc:8a:a7:3a:fe:f1:90:92: 25:d7:80:77:10:1c:88:8b:91:ab:8f:03:12:fe:81: b2:86:13:75:8d:5a:77:a3:ec:dc:58:6e:de:f5:36: a8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:90:55:32:58:09:AC:47:8C:91:05:26:3D:2A:08:43:64:54:9E:7E X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/8JBVMlgJrEeMkQUmPSoIQ2RUnn4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.209.139.0/24 Signature Algorithm: sha256WithRSAEncryption 33:3b:b5:5c:10:8d:2c:cb:d7:6d:6f:97:64:5d:c5:e4:98:f8: 35:6d:83:3f:eb:e9:90:20:84:db:73:7b:69:a2:03:f2:da:8e: ea:6d:26:de:d1:df:d0:77:0c:d9:01:ba:7a:ce:27:d2:c1:c9: 35:7c:6c:93:eb:ec:ee:15:44:c6:1b:4a:dd:37:9f:00:1f:72: a0:3c:42:93:e0:c9:77:af:0a:0c:cc:54:ce:64:0e:ad:56:1e: dd:0c:83:5e:f3:fd:08:91:36:29:37:94:62:1b:c5:ba:3b:92: 13:4b:46:88:35:3d:5c:56:63:b1:08:9d:b0:11:90:35:50:03: 03:de:3a:8c:f2:c4:5e:c0:c5:bf:ea:a1:c4:9a:f2:a8:6f:73: 85:8f:d2:d5:44:84:fd:f2:34:ac:9d:8e:ef:e0:7c:32:4c:7c: a3:f9:eb:dc:17:f6:62:30:5b:dc:4a:a3:35:a5:a1:29:83:a5: 64:7b:e9:2a:ee:8b:7a:80:b8:b9:9e:49:e5:d6:77:3b:0c:76: 6e:20:a0:44:84:93:7f:06:e5:e3:39:21:e0:d5:ed:34:09:4a: 32:93:01:bf:9d:1f:e1:eb:b7:cb:32:4c:d2:d2:85:92:15:e6: 4f:b6:54:7a:20:20:f8:fe:b1:23:16:c9:43:49:c2:69:b3:5a: 78:22:be:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvsG5nxX6lB5JCv4Wh4Ld9PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjYwMTIzMTgyNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDkwNTUzMjU4MDlhYzQ3OGM5MTA1MjYzZDJhMDg0MzY0NTQ5ZTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt69B1wMlUmrRsxQCObvL+/zEvktk 0L1nretlb/5TENMTSBtcvQf542TYb6bv4fhhlYM5SVQoLrWPDkyjmH68PRsb21OC 5qUBZlTRpqnxBg5KnEKkIsF+JzZgLjv63A5vDm+RH6fP+bg6XQvoSaUnDZrPuGLD +qZOMQCFWVALyl5qMUHFhq7og8WFWFq8hJGOR/OZF4/qxZ1JqG4Hvh1qvjzAFlmK vl4vaBx/C8nsSZyO4sL0LYb86pgdSQ/rZkuJUgNgIawbtVF4BV5vJeBh+vW0EJYO BOKSzIqnOv7xkJIl14B3EByIi5GrjwMS/oGyhhN1jVp3o+zcWG7e9TaorQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPCQVTJYCaxHjJEFJj0qCENkVJ5+MB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvOEpCVk1sZ0pyRWVNa1FVbVBTb0lRMlJVbm40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0 LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNGLMA0G CSqGSIb3DQEBCwUAA4IBAQAzO7VcEI0sy9dtb5dkXcXkmPg1bYM/6+mQIITbc3tp ogPy2o7qbSbe0d/QdwzZAbp6zifSwck1fGyT6+zuFUTGG0rdN58AH3KgPEKT4Ml3 rwoMzFTOZA6tVh7dDINe8/0IkTYpN5RiG8W6O5ITS0aINT1cVmOxCJ2wEZA1UAMD 3jqM8sRewMW/6qHEmvKob3OFj9LVRIT98jSsnY7v4HwyTHyj+evcF/ZiMFvcSqM1 paEpg6Vke+kq7ot6gLi5nknl1nc7DHZuIKBEhJN/BuXjOSHg1e00CUoykwG/nR/h 67fLMkzS0oWSFeZPtlR6ICD4/rEjFslDScJps1p4Ir5A -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:24 2026 by rpki-client