This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/f8pXdTunsFienw12OWOwkjd9_Sg.roa File: f8pXdTunsFienw12OWOwkjd9_Sg.roa (raw, json) Hash identifier: D84B6IFhxTwUljKKeuMD7kN/I53xCeCr1djjSkG38Ek= Subject key identifier: 7F:CA:57:75:3B:A7:B0:58:9E:9F:0D:76:39:63:B0:92:37:7D:FD:28 Certificate issuer: /CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce Certificate serial: 019B77C6744A0E8B6390C603B3263547EAAE Authority key identifier: CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/f8pXdTunsFienw12OWOwkjd9_Sg.roa Signing time: Thu 01 Jan 2026 04:17:33 +0000 ROA not before: Thu 01 Jan 2026 04:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15943 IP address blocks: 194.55.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:74:4a:0e:8b:63:90:c6:03:b3:26:35:47:ea:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce Validity Not Before: Jan 1 04:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fca57753ba7b0589e9f0d763963b092377dfd28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:73:64:bb:1a:b8:b8:e1:29:f8:a3:7e:85:59: 5a:e5:f5:b3:03:9a:3a:9e:f5:68:86:6a:3e:06:e7: b3:35:c7:4a:9c:11:45:b6:45:51:37:f2:a3:49:a2: 34:37:39:13:09:b5:33:c8:1a:5c:79:e4:e7:51:53: be:9b:f0:e7:59:cd:52:81:a1:4c:0c:db:70:ff:ad: 01:2c:98:fc:69:72:b3:21:0b:62:91:86:29:03:49: b1:91:c6:3e:e6:e8:93:e9:41:24:8a:ca:ac:aa:43: b4:af:0c:80:e4:62:68:59:85:3a:86:54:ef:03:24: 02:5b:5b:77:9a:12:ef:ee:f0:e6:b7:e1:43:ce:4f: 7d:a1:f0:0d:91:06:70:81:55:54:20:ae:b3:73:28: 42:c4:9e:40:91:c4:41:18:ac:32:2c:31:26:c6:7c: 75:46:6b:46:b2:3d:d4:47:66:c6:c0:20:25:60:d4: d4:eb:59:e2:c7:e2:cb:28:db:3f:a8:0e:98:7e:5f: 11:d0:9d:a0:34:1c:5b:c7:2e:46:50:cb:53:1f:27: cc:53:c4:69:d3:5b:f8:d6:11:3e:5a:08:ff:1a:e8: fc:0b:1a:7d:39:3c:c1:f3:57:a6:b1:ae:41:c1:8c: c6:b8:e9:c5:aa:45:47:79:d6:02:86:39:b0:00:8c: d6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:CA:57:75:3B:A7:B0:58:9E:9F:0D:76:39:63:B0:92:37:7D:FD:28 X509v3 Authority Key Identifier: keyid:CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/f8pXdTunsFienw12OWOwkjd9_Sg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.55.144.0/22 Signature Algorithm: sha256WithRSAEncryption 14:00:a0:77:ca:db:29:2d:28:1f:a1:36:6b:94:69:dd:a5:3d: 50:b8:3f:58:e8:4a:aa:29:f2:b8:a1:53:d0:c3:4d:d9:a7:a8: 9e:d4:a0:d3:79:3f:af:a4:05:a7:41:41:07:b5:f6:9a:38:0d: ae:19:5c:38:ac:f1:a1:e4:e7:4d:f5:e7:71:7b:01:ad:8a:b7: 33:65:51:b0:bc:69:bf:80:81:13:8b:4c:de:13:e6:44:79:ec: 7f:67:df:ec:bd:b5:b8:7f:72:41:d3:ac:a9:cc:93:b4:a5:48: 32:c8:0a:c1:2f:17:6b:ad:93:c7:03:2e:21:ce:48:ed:b8:c8: 90:b3:4a:65:67:12:9b:f9:fb:d9:c1:7d:3f:a4:f4:77:4b:1a: d6:c9:d3:1f:89:2d:cf:31:5a:1c:30:6d:f5:f6:49:be:74:16: da:5b:9e:36:61:3b:62:1d:24:d6:62:38:0a:5f:bc:45:e5:23: 2b:83:02:5b:42:0d:80:f2:b2:67:f6:02:5a:9f:26:ee:95:93: c5:76:13:aa:f7:36:bd:98:2b:10:dd:78:72:23:52:06:c3:18: cf:af:fd:e2:84:7c:b7:d6:71:d2:c9:57:b3:ba:30:aa:80:ce: 01:28:38:3a:b5:a7:b8:af:d9:93:3a:03:7f:9d:65:d8:3a:10: 1a:48:86:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xnRKDotjkMYDsyY1R+quMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmODk3NTc0NmNiZjFmZjc1ZGRlYzZjZGI4MGFjYzg1MjE4 MTg0Y2UwHhcNMjYwMTAxMDQxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmNhNTc3NTNiYTdiMDU4OWU5ZjBkNzYzOTYzYjA5MjM3N2RmZDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3Nkuxq4uOEp+KN+hVla5fWzA5o6 nvVohmo+BuezNcdKnBFFtkVRN/KjSaI0NzkTCbUzyBpceeTnUVO+m/DnWc1SgaFM DNtw/60BLJj8aXKzIQtikYYpA0mxkcY+5uiT6UEkisqsqkO0rwyA5GJoWYU6hlTv AyQCW1t3mhLv7vDmt+FDzk99ofANkQZwgVVUIK6zcyhCxJ5AkcRBGKwyLDEmxnx1 RmtGsj3UR2bGwCAlYNTU61nix+LLKNs/qA6Yfl8R0J2gNBxbxy5GUMtTHyfMU8Rp 01v41hE+Wgj/Guj8Cxp9OTzB81emsa5BwYzGuOnFqkVHedYChjmwAIzWrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH/KV3U7p7BYnp8NdjljsJI3ff0oMB8GA1UdIwQY MBaAFM+JdXRsvx/3Xd7GzbgKzIUhgYTOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejRsMWRHeV9IX2RkM3NiTnVBck1oU0dCaE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hMWNkOWMtYzMxZS00YWJmLWIwODkt OWU3OTJiNmYyMzVkLzEvZjhwWGRUdW5zRmllbncxMk9XT3dramQ5X1NnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9hMWNkOWMtYzMxZS00YWJmLWIwODktOWU3OTJiNmYyMzVk LzEvejRsMWRHeV9IX2RkM3NiTnVBck1oU0dCaE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwjeQMA0G CSqGSIb3DQEBCwUAA4IBAQAUAKB3ytspLSgfoTZrlGndpT1QuD9Y6EqqKfK4oVPQ w03Zp6ie1KDTeT+vpAWnQUEHtfaaOA2uGVw4rPGh5OdN9edxewGtirczZVGwvGm/ gIETi0zeE+ZEeex/Z9/svbW4f3JB06ypzJO0pUgyyArBLxdrrZPHAy4hzkjtuMiQ s0plZxKb+fvZwX0/pPR3SxrWydMfiS3PMVocMG319km+dBbaW542YTtiHSTWYjgK X7xF5SMrgwJbQg2A8rJn9gJanybulZPFdhOq9za9mCsQ3XhyI1IGwxjPr/3ihHy3 1nHSyVezujCqgM4BKDg6tae4r9mTOgN/nWXYOhAaSIZM -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:11 2026 by rpki-client