This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/O8zrLW8AWIVEs9iiDW4s5TO_x9A.roa File: O8zrLW8AWIVEs9iiDW4s5TO_x9A.roa (raw, json) Hash identifier: x7HRiC6WoAyrY0ICRLQbw3hJY8kiQ6r/ahn5rm3lXqw= Subject key identifier: 3B:CC:EB:2D:6F:00:58:85:44:B3:D8:A2:0D:6E:2C:E5:33:BF:C7:D0 Certificate issuer: /CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca Certificate serial: 019B7EA6D85052877B3ED347CFC5A84ABB84 Authority key identifier: 42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/O8zrLW8AWIVEs9iiDW4s5TO_x9A.roa Signing time: Fri 02 Jan 2026 12:20:22 +0000 ROA not before: Fri 02 Jan 2026 12:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 193.8.58.0/23 maxlen: 23 193.8.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d8:50:52:87:7b:3e:d3:47:cf:c5:a8:4a:bb:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca Validity Not Before: Jan 2 12:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bcceb2d6f00588544b3d8a20d6e2ce533bfc7d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f7:ed:91:b7:b4:6a:af:56:64:6c:d5:b5:54: b0:17:d3:61:e5:bd:cc:e4:01:da:9c:77:38:cc:e6: 4c:f1:1d:e0:cf:f9:f8:51:18:40:7d:00:24:b3:70: 60:68:c6:cf:38:3e:80:42:ca:08:99:3f:69:86:b9: 7e:c6:9a:e0:a7:b7:20:ac:14:3d:33:c5:ed:81:f2: d0:cd:e0:ee:a0:87:a5:cc:f7:da:83:44:35:d0:ca: ec:30:30:4b:9a:58:cc:76:d8:e8:bf:e7:13:fc:b0: b3:d8:69:ad:e2:75:42:13:d3:c8:14:16:cb:be:71: 92:d6:a3:dd:8e:4c:41:30:14:88:59:ce:a5:3e:6f: 94:c8:b2:3c:ba:96:11:1e:f6:15:8c:b8:bb:7d:cb: a2:2f:ec:3d:2f:f2:91:a0:79:51:91:63:ec:2c:1a: 06:c0:62:8e:7e:dd:12:d1:3a:79:23:4c:c9:2d:1a: b8:51:e8:4e:74:43:ba:43:11:d5:4f:ec:d8:c1:84: 32:95:57:61:d6:4b:83:fb:a2:62:ee:86:2e:90:cb: eb:13:09:05:15:c7:d9:5d:2b:e1:ed:c3:e1:f2:0d: 25:db:06:d7:a2:df:44:18:f1:2d:87:f8:33:d4:5a: b5:59:16:3c:fa:0d:79:2d:8d:ef:72:80:b1:0e:0a: 09:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:CC:EB:2D:6F:00:58:85:44:B3:D8:A2:0D:6E:2C:E5:33:BF:C7:D0 X509v3 Authority Key Identifier: keyid:42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/O8zrLW8AWIVEs9iiDW4s5TO_x9A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.8.58.0-193.8.60.255 Signature Algorithm: sha256WithRSAEncryption 04:46:b5:3b:6b:a2:5f:85:98:29:6c:7d:ef:25:75:89:64:ee: 1c:0d:8d:a7:4a:b5:5d:b7:23:d8:47:51:da:4f:2c:9f:23:1a: eb:b1:31:f3:69:77:65:a3:e4:46:12:22:9e:f7:14:af:75:0c: 82:f3:84:a0:58:e4:b2:78:32:36:95:ac:e3:30:2f:4b:c7:32: 95:1d:6b:62:ce:8a:a6:cc:dd:40:1b:14:bd:db:d5:93:95:5f: f6:7b:4a:83:73:fa:25:84:b9:74:7d:0c:de:29:01:9d:6a:10: cf:0e:17:3d:a4:e7:a1:83:8e:5f:20:2d:ad:86:7f:ec:29:4b: cd:d2:85:78:13:dc:0a:06:0b:ac:77:d6:da:8f:e0:23:5e:28: 23:c5:f1:13:11:6e:c5:10:e9:ad:4c:42:7d:76:89:17:a9:d5: 2c:41:02:e5:df:d4:ab:13:01:45:2d:74:ed:96:44:6b:64:27: 06:57:64:3a:92:d6:16:92:38:6d:76:ef:01:61:44:1c:ef:95: d2:e7:28:6a:ca:09:b7:df:2a:78:5c:8f:bf:87:b8:c5:e9:e2: 66:85:a0:47:d2:c7:07:cb:e9:68:c2:c9:85:f8:ab:86:42:e0: 40:92:d5:98:18:a0:93:55:c4:5e:96:2c:d9:55:37:85:71:61: 93:4a:30:6d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+pthQUod7PtNHz8WoSruEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMjY3ZjVhNmNmNDliYzQzZjIzMDRkZTAwZjc3MDVlYzVi NzlmY2EwHhcNMjYwMTAyMTIyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmNjZWIyZDZmMDA1ODg1NDRiM2Q4YTIwZDZlMmNlNTMzYmZjN2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vftkbe0aq9WZGzVtVSwF9Nh5b3M 5AHanHc4zOZM8R3gz/n4URhAfQAks3BgaMbPOD6AQsoImT9phrl+xprgp7cgrBQ9 M8XtgfLQzeDuoIelzPfag0Q10MrsMDBLmljMdtjov+cT/LCz2Gmt4nVCE9PIFBbL vnGS1qPdjkxBMBSIWc6lPm+UyLI8upYRHvYVjLi7fcuiL+w9L/KRoHlRkWPsLBoG wGKOft0S0Tp5I0zJLRq4UehOdEO6QxHVT+zYwYQylVdh1kuD+6Ji7oYukMvrEwkF FcfZXSvh7cPh8g0l2wbXot9EGPEth/gz1Fq1WRY8+g15LY3vcoCxDgoJSQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDvM6y1vAFiFRLPYog1uLOUzv8fQMB8GA1UdIwQY MBaAFEImf1ps9JvEPyME3gD3cF7Ft5/KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81ZmUwZGYtYjAwOC00ZTk0LTk5YzYt YjIyNjk1YzcwM2E5LzEvTzh6ckxXOEFXSVZFczlpaURXNHM1VE9feDlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC81ZmUwZGYtYjAwOC00ZTk0LTk5YzYtYjIyNjk1YzcwM2E5 LzEvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHBCDoD BADBCDwwDQYJKoZIhvcNAQELBQADggEBAARGtTtrol+FmClsfe8ldYlk7hwNjadK tV23I9hHUdpPLJ8jGuuxMfNpd2Wj5EYSIp73FK91DILzhKBY5LJ4MjaVrOMwL0vH MpUda2LOiqbM3UAbFL3b1ZOVX/Z7SoNz+iWEuXR9DN4pAZ1qEM8OFz2k56GDjl8g La2Gf+wpS83ShXgT3AoGC6x31tqP4CNeKCPF8RMRbsUQ6a1MQn12iRep1SxBAuXf 1KsTAUUtdO2WRGtkJwZXZDqS1haSOG127wFhRBzvldLnKGrKCbffKnhcj7+HuMXp 4maFoEfSxwfL6WjCyYX4q4ZC4ECS1ZgYoJNVxF6WLNlVN4VxYZNKMG0= -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:34 2026 by rpki-client