This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/Go8PchMmH9McisfgXlxtAWx-1sM.roa File: Go8PchMmH9McisfgXlxtAWx-1sM.roa (raw, json) Hash identifier: x553Jvx/smgcuhkg3Q3Px6o0g0MKgX3bIXb9nbTnt8A= Subject key identifier: 1A:8F:0F:72:13:26:1F:D3:1C:8A:C7:E0:5E:5C:6D:01:6C:7E:D6:C3 Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1 Certificate serial: 019B7DCB31C89E059CDDD56EBC19BA3E56BC Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/Go8PchMmH9McisfgXlxtAWx-1sM.roa Signing time: Fri 02 Jan 2026 08:20:27 +0000 ROA not before: Fri 02 Jan 2026 08:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22364 IP address blocks: 87.238.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:31:c8:9e:05:9c:dd:d5:6e:bc:19:ba:3e:56:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1 Validity Not Before: Jan 2 08:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a8f0f7213261fd31c8ac7e05e5c6d016c7ed6c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f1:0c:3d:8d:6d:12:6d:54:69:24:ba:a7:4f: bd:5c:e1:d0:e4:8e:97:a2:7d:b8:c2:6c:f2:af:db: 22:d6:3e:2a:eb:65:e6:c8:89:07:57:68:c5:f4:70: f7:be:13:b8:7f:b9:fa:41:2b:a8:d2:02:dc:cd:a9: a9:54:da:e1:9e:a7:8c:4d:f4:70:d2:72:37:8a:08: 50:c4:8e:a2:20:d4:4f:31:f5:2b:ec:9d:a5:85:f5: 36:70:f1:42:d2:92:31:3e:a0:86:c0:7e:e8:56:00: 99:38:35:72:19:eb:dc:d6:e1:b6:24:6b:00:c2:1f: cd:13:a5:6f:fc:1e:60:e2:32:35:11:57:04:2a:07: a5:ab:f3:b2:e1:4e:5f:93:cc:35:36:eb:00:47:25: 48:06:af:3c:e9:91:2d:fe:1b:35:45:2f:3c:6e:98: f4:ff:79:dd:de:e4:d4:81:92:94:07:38:31:c0:6c: fd:18:1f:be:9e:fc:6f:85:62:73:60:7f:67:66:8e: ae:66:ce:aa:f4:dc:94:02:fd:22:2c:42:32:56:3c: 68:92:85:b6:69:4b:b9:66:61:0a:55:a7:08:e8:f6: c8:47:9a:10:47:55:6e:1f:49:23:4b:d5:2f:2d:38: ef:2a:0a:db:e5:27:ed:6c:ba:ee:79:24:8d:57:27: fa:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:8F:0F:72:13:26:1F:D3:1C:8A:C7:E0:5E:5C:6D:01:6C:7E:D6:C3 X509v3 Authority Key Identifier: keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/Go8PchMmH9McisfgXlxtAWx-1sM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.238.243.0/24 Signature Algorithm: sha256WithRSAEncryption c6:29:87:df:ba:01:76:14:0f:19:5b:9b:75:27:b8:e3:f6:a0: 83:40:d6:ec:4e:e1:80:42:f8:5e:b3:e0:ce:48:15:49:0c:99: 04:e3:c2:5a:b5:36:c8:5e:5d:91:f0:99:8f:02:71:64:b2:13: 1b:59:2e:71:0c:4c:0c:e7:ad:c7:92:ab:a0:76:17:68:47:94: 05:af:aa:5e:73:fb:3d:45:63:10:3b:c8:4d:9a:32:52:b5:ef: b9:aa:88:d4:b4:29:96:a3:a7:c6:6e:73:85:ff:9e:33:e3:50: 5c:03:f0:6a:88:ce:70:d3:e1:b9:a2:45:55:02:8f:4c:59:27: dc:b8:fe:b7:03:36:34:2d:9c:86:9d:bc:81:fb:1e:2c:50:6c: 1e:fc:71:2b:a1:23:b4:0d:ce:11:19:32:c7:f7:ba:d1:fa:65: c7:5d:6c:33:b6:c1:07:b3:6b:b2:1e:b9:cc:d4:fb:33:32:36: b5:46:93:52:e8:72:ff:2b:c9:fd:40:fc:59:e6:f5:ab:36:18: 67:15:c1:50:a4:63:6c:67:2e:55:d2:f2:cf:0e:aa:02:e1:5d: af:c1:1e:86:e3:b2:75:8b:5a:8f:a1:83:54:88:b4:24:1a:af: 3b:83:6d:dd:13:8d:3a:0c:d3:22:c1:73:b2:dc:23:8e:28:66: 6b:52:32:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yzHIngWc3dVuvBm6Pla8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNmYxZTlmMDk1MGU0ZjM5YzljNWZlZTNmODY4YTI0ZWIz NjFlZjEwHhcNMjYwMTAyMDgyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYThmMGY3MjEzMjYxZmQzMWM4YWM3ZTA1ZTVjNmQwMTZjN2VkNmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/EMPY1tEm1UaSS6p0+9XOHQ5I6X on24wmzyr9si1j4q62XmyIkHV2jF9HD3vhO4f7n6QSuo0gLczampVNrhnqeMTfRw 0nI3ighQxI6iINRPMfUr7J2lhfU2cPFC0pIxPqCGwH7oVgCZODVyGevc1uG2JGsA wh/NE6Vv/B5g4jI1EVcEKgelq/Oy4U5fk8w1NusARyVIBq886ZEt/hs1RS88bpj0 /3nd3uTUgZKUBzgxwGz9GB++nvxvhWJzYH9nZo6uZs6q9NyUAv0iLEIyVjxokoW2 aUu5ZmEKVacI6PbIR5oQR1VuH0kjS9UvLTjvKgrb5SftbLrueSSNVyf66wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBqPD3ITJh/THIrH4F5cbQFsftbDMB8GA1UdIwQY MBaAFAtvHp8JUOTznJxf7j+GiiTrNh7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzI4ZW53bFE1UE9jbkZfdVA0YUtKT3MySHZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lNjliZDMtMjE1ZS00NDIyLTkxNzAt MDgxYmNiYWM0ZGFmLzEvR284UGNoTW1IOU1jaXNmZ1hseHRBV3gtMXNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lNjliZDMtMjE1ZS00NDIyLTkxNzAtMDgxYmNiYWM0ZGFm LzEvQzI4ZW53bFE1UE9jbkZfdVA0YUtKT3MySHZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+7zMA0G CSqGSIb3DQEBCwUAA4IBAQDGKYffugF2FA8ZW5t1J7jj9qCDQNbsTuGAQvhes+DO SBVJDJkE48JatTbIXl2R8JmPAnFkshMbWS5xDEwM563HkqugdhdoR5QFr6pec/s9 RWMQO8hNmjJSte+5qojUtCmWo6fGbnOF/54z41BcA/BqiM5w0+G5okVVAo9MWSfc uP63AzY0LZyGnbyB+x4sUGwe/HEroSO0Dc4RGTLH97rR+mXHXWwztsEHs2uyHrnM 1PszMja1RpNS6HL/K8n9QPxZ5vWrNhhnFcFQpGNsZy5V0vLPDqoC4V2vwR6G47J1 i1qPoYNUiLQkGq87g23dE406DNMiwXOy3COOKGZrUjKE -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:21 2026 by rpki-client