This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/8NE1-3z8cpWiJs_YbnkhEqqDhN0.roa File: 8NE1-3z8cpWiJs_YbnkhEqqDhN0.roa (raw, json) Hash identifier: ttWqo0QPt2O+G4kXYg4psvgGnzH9ejZI8/1sGnCeawM= Subject key identifier: F0:D1:35:FB:7C:FC:72:95:A2:26:CF:D8:6E:79:21:12:AA:83:84:DD Certificate issuer: /CN=011bf02928cccb516b719fe558884842f19c0877 Certificate serial: 019B7B3689A9FCD021F083D93C9B6218FD4C Authority key identifier: 01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/8NE1-3z8cpWiJs_YbnkhEqqDhN0.roa Signing time: Thu 01 Jan 2026 20:18:50 +0000 ROA not before: Thu 01 Jan 2026 20:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2830 IP address blocks: 194.33.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:89:a9:fc:d0:21:f0:83:d9:3c:9b:62:18:fd:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=011bf02928cccb516b719fe558884842f19c0877 Validity Not Before: Jan 1 20:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0d135fb7cfc7295a226cfd86e792112aa8384dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:be:0f:0e:14:11:38:5d:4b:1a:05:db:34:b4: 68:8e:b0:af:b4:4c:b4:7d:cb:49:be:4d:8a:c2:e0: fd:c1:75:40:06:63:c3:e2:e9:a9:d4:85:6b:af:b2: 20:50:70:76:e7:04:e6:d8:86:35:26:e8:e0:bd:d4: 50:b1:b7:4f:4b:d5:c2:2e:5d:6f:e8:90:33:f1:93: 41:b3:d6:6d:ff:36:9e:11:cb:c4:41:af:07:70:d5: 5a:33:2d:ce:25:61:18:5b:c6:c3:e4:35:b7:3e:53: 82:04:14:8e:f2:da:ed:1e:d0:f9:63:dc:ca:7a:09: 21:3f:ed:ff:0f:99:29:9d:e3:7e:e4:e7:df:0c:fc: 76:22:ef:17:ea:d1:70:e7:13:41:ca:f0:8c:e0:9f: dd:96:d1:cc:ed:2d:de:96:18:83:57:fd:ea:f5:18: 39:54:af:e2:fe:04:33:c9:24:4a:1f:43:6d:1f:d9: 6a:1d:c1:ad:50:00:e1:50:86:ec:20:bd:0a:ea:c5: b4:b1:83:3d:23:d4:d2:b6:0f:b6:39:14:36:90:32: 55:97:f0:27:0e:67:5b:88:16:59:a8:17:9d:63:25: 03:14:64:a3:24:fe:c7:c3:4f:3b:c9:bf:9f:24:d6: 6b:27:3f:73:b9:fc:18:af:ea:7b:ab:c9:cb:e9:d9: d2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D1:35:FB:7C:FC:72:95:A2:26:CF:D8:6E:79:21:12:AA:83:84:DD X509v3 Authority Key Identifier: keyid:01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/8NE1-3z8cpWiJs_YbnkhEqqDhN0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.33.183.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:5d:12:1c:44:bb:d8:1a:a0:b8:cf:6b:56:81:e5:71:4f:90: f2:25:bc:59:44:4d:7d:1d:f3:5f:e4:70:62:ad:18:92:4d:87: eb:9d:08:9c:f7:0d:98:98:e6:2b:aa:50:4b:de:28:35:cf:92: e8:b4:89:cf:bb:46:56:1c:5a:fb:8c:2a:ff:24:98:fe:ff:bd: 41:28:bd:14:28:d5:21:00:32:8b:cc:55:03:b6:71:bd:80:2d: 89:bc:dc:23:e1:0a:1c:b2:9b:83:01:e1:3e:c7:3e:ac:4a:5f: d1:53:99:22:79:3f:de:f3:da:9f:c8:71:94:c3:25:a8:b7:85: e5:db:d8:a1:b5:f5:70:76:c3:24:a0:f9:80:c5:cc:9a:eb:6a: c5:f3:a1:77:d6:a7:89:27:2e:6a:3b:bd:3d:73:17:fd:01:34: 4a:2d:67:8b:01:e8:e2:20:8f:3c:3e:94:c2:02:92:50:23:dc: 0d:23:e1:f8:2f:32:89:01:a1:d3:42:b2:00:1d:1d:66:95:9d: 62:09:27:1a:70:de:64:af:f7:e9:a4:88:c0:26:1e:92:33:e8: f2:68:d3:75:42:42:7e:7d:5c:e8:ee:ef:9b:71:6f:96:8f:88: 04:96:53:fd:e7:97:ef:63:26:7b:fc:20:36:a5:ca:1b:2e:e5: bf:d5:7c:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nomp/NAh8IPZPJtiGP1MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxMWJmMDI5MjhjY2NiNTE2YjcxOWZlNTU4ODg0ODQyZjE5 YzA4NzcwHhcNMjYwMTAxMjAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGQxMzVmYjdjZmM3Mjk1YTIyNmNmZDg2ZTc5MjExMmFhODM4NGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyL4PDhQROF1LGgXbNLRojrCvtEy0 fctJvk2KwuD9wXVABmPD4ump1IVrr7IgUHB25wTm2IY1JujgvdRQsbdPS9XCLl1v 6JAz8ZNBs9Zt/zaeEcvEQa8HcNVaMy3OJWEYW8bD5DW3PlOCBBSO8trtHtD5Y9zK egkhP+3/D5kpneN+5OffDPx2Iu8X6tFw5xNByvCM4J/dltHM7S3elhiDV/3q9Rg5 VK/i/gQzySRKH0NtH9lqHcGtUADhUIbsIL0K6sW0sYM9I9TStg+2ORQ2kDJVl/An DmdbiBZZqBedYyUDFGSjJP7Hw087yb+fJNZrJz9zufwYr+p7q8nL6dnSpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPDRNft8/HKVoibP2G55IRKqg4TdMB8GA1UdIwQY MBaAFAEb8CkozMtRa3Gf5ViISELxnAh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVJ2d0tTak15MUZyY1pfbFdJaElRdkdjQ0hjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9mZTA1YjQtMDg3My00ZjFmLWJhMWYt N2U5YzBiMDIyNDhlLzEvOE5FMS0zejhjcFdpSnNfWWJua2hFcXFEaE4wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9mZTA1YjQtMDg3My00ZjFmLWJhMWYtN2U5YzBiMDIyNDhl LzEvQVJ2d0tTak15MUZyY1pfbFdJaElRdkdjQ0hjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiG3MA0G CSqGSIb3DQEBCwUAA4IBAQBrXRIcRLvYGqC4z2tWgeVxT5DyJbxZRE19HfNf5HBi rRiSTYfrnQic9w2YmOYrqlBL3ig1z5LotInPu0ZWHFr7jCr/JJj+/71BKL0UKNUh ADKLzFUDtnG9gC2JvNwj4QocspuDAeE+xz6sSl/RU5kieT/e89qfyHGUwyWot4Xl 29ihtfVwdsMkoPmAxcya62rF86F31qeJJy5qO709cxf9ATRKLWeLAejiII88PpTC ApJQI9wNI+H4LzKJAaHTQrIAHR1mlZ1iCScacN5kr/fppIjAJh6SM+jyaNN1QkJ+ fVzo7u+bcW+Wj4gEllP955fvYyZ7/CA2pcobLuW/1XyS -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:11 2026 by rpki-client