This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/8N34BaOhCoqWV6oqyyGnFC-M71k.roa File: 8N34BaOhCoqWV6oqyyGnFC-M71k.roa (raw, json) Hash identifier: iUxBbVztuFkPmYPKyF2deLjAauBd8PuICTkelG44e04= Subject key identifier: F0:DD:F8:05:A3:A1:0A:8A:96:57:AA:2A:CB:21:A7:14:2F:8C:EF:59 Certificate issuer: /CN=673b3a71cf772755a3df8ced5d73516f871c0a11 Certificate serial: 019B7E3877EB45C9872933590C8243A9DD20 Authority key identifier: 67:3B:3A:71:CF:77:27:55:A3:DF:8C:ED:5D:73:51:6F:87:1C:0A:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/8N34BaOhCoqWV6oqyyGnFC-M71k.roa Signing time: Fri 02 Jan 2026 10:19:48 +0000 ROA not before: Fri 02 Jan 2026 10:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3301 IP address blocks: 170.102.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.crl rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.mft rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:77:eb:45:c9:87:29:33:59:0c:82:43:a9:dd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=673b3a71cf772755a3df8ced5d73516f871c0a11 Validity Not Before: Jan 2 10:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0ddf805a3a10a8a9657aa2acb21a7142f8cef59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c9:d1:d5:b6:5f:12:01:8b:c2:1f:ec:ac:fd: 27:17:52:43:b4:69:f3:ab:56:19:3a:b0:ba:68:43: 08:04:f7:37:61:2c:fa:6d:e3:c8:27:74:03:02:3a: cc:28:02:55:18:23:11:a9:53:62:ca:39:d9:18:b8: bb:2d:6c:fc:4a:ec:a7:60:d6:35:37:ee:17:ea:a3: 7f:73:5d:3e:b5:74:d4:5e:29:ea:e5:b4:52:ca:f8: 50:3d:f1:8a:df:88:9c:c5:b4:47:d5:5a:50:24:29: 70:46:bc:16:5d:2e:26:f1:df:9c:0b:30:08:86:ef: 73:83:57:0c:70:45:61:22:c0:34:04:23:7f:a1:55: 19:88:c0:97:15:96:11:73:04:dd:3f:a5:0b:dd:57: ac:53:e9:5f:cc:ec:28:4a:cf:10:b4:14:62:ee:fe: eb:2f:1f:cc:ae:73:0e:a3:a9:fc:2d:54:01:db:10: 48:89:4e:07:fa:70:86:89:ca:b4:6c:82:ca:64:36: 28:0d:51:c5:39:99:be:1c:69:57:dd:c7:4b:cb:6e: 55:22:70:ff:3a:0b:0d:d3:8e:aa:b4:83:33:51:37: ad:a5:4f:19:08:e5:d3:74:f4:c8:55:3b:2a:85:d5: b6:7e:8a:18:bd:64:8f:40:07:55:92:2b:82:0a:c0: c1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DD:F8:05:A3:A1:0A:8A:96:57:AA:2A:CB:21:A7:14:2F:8C:EF:59 X509v3 Authority Key Identifier: keyid:67:3B:3A:71:CF:77:27:55:A3:DF:8C:ED:5D:73:51:6F:87:1C:0A:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/8N34BaOhCoqWV6oqyyGnFC-M71k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.102.196.0/24 Signature Algorithm: sha256WithRSAEncryption 21:36:e3:fa:e6:6d:a2:ee:e0:b6:92:dd:09:7f:f6:74:0e:13: af:46:e6:97:fc:13:6a:ac:85:e0:ab:cc:dd:85:ca:17:06:04: 6e:24:75:fd:15:57:10:67:4c:6b:68:ab:bf:26:f3:9a:30:50: b3:35:ad:fe:dc:8c:7f:68:d5:d9:51:59:36:7b:56:5a:2c:eb: 0a:89:c2:54:0d:4b:99:6f:af:94:65:2d:45:84:22:93:08:3a: 02:aa:bc:b8:32:8e:85:13:62:6e:54:3a:86:15:ab:47:d1:54: 4b:f6:26:d5:21:7a:49:97:07:e7:ac:ff:dc:16:11:8d:e4:12: 9e:cf:18:6b:fc:33:8d:ab:fd:2d:bf:b9:33:06:39:8e:e7:92: 01:7a:8c:9e:d9:ad:1a:5c:45:2b:5f:d9:00:9f:3e:00:da:1a: cc:9d:ec:b5:7d:30:83:c4:f1:da:bc:86:05:92:12:a6:bd:b4: af:ef:af:90:e6:20:64:5a:5a:2c:5b:c6:cc:28:99:a0:b2:02: fd:d4:bd:46:a8:91:59:32:78:6e:91:70:bc:d6:e9:67:76:9d: 63:71:52:c9:cc:82:00:73:a3:d3:44:c9:da:52:38:40:79:ca: 3d:26:02:81:1a:f9:26:18:10:b8:1b:56:a5:7f:c0:09:68:80: 03:ea:f6:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OHfrRcmHKTNZDIJDqd0gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3M2IzYTcxY2Y3NzI3NTVhM2RmOGNlZDVkNzM1MTZmODcx YzBhMTEwHhcNMjYwMTAyMTAxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGRkZjgwNWEzYTEwYThhOTY1N2FhMmFjYjIxYTcxNDJmOGNlZjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48nR1bZfEgGLwh/srP0nF1JDtGnz q1YZOrC6aEMIBPc3YSz6bePIJ3QDAjrMKAJVGCMRqVNiyjnZGLi7LWz8SuynYNY1 N+4X6qN/c10+tXTUXinq5bRSyvhQPfGK34icxbRH1VpQJClwRrwWXS4m8d+cCzAI hu9zg1cMcEVhIsA0BCN/oVUZiMCXFZYRcwTdP6UL3VesU+lfzOwoSs8QtBRi7v7r Lx/MrnMOo6n8LVQB2xBIiU4H+nCGicq0bILKZDYoDVHFOZm+HGlX3cdLy25VInD/ OgsN046qtIMzUTetpU8ZCOXTdPTIVTsqhdW2fooYvWSPQAdVkiuCCsDB9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPDd+AWjoQqKlleqKsshpxQvjO9ZMB8GA1UdIwQY MBaAFGc7OnHPdydVo9+M7V1zUW+HHAoRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnpzNmNjOTNKMVdqMzR6dFhYTlJiNGNjQ2hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jOTQ4NTUtNWIxYS00Zjk2LWI3YTEt NmZlMWYyOTRlNjI3LzEvOE4zNEJhT2hDb3FXVjZvcXl5R25GQy1NNzFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9jOTQ4NTUtNWIxYS00Zjk2LWI3YTEtNmZlMWYyOTRlNjI3 LzEvWnpzNmNjOTNKMVdqMzR6dFhYTlJiNGNjQ2hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqmbEMA0G CSqGSIb3DQEBCwUAA4IBAQAhNuP65m2i7uC2kt0Jf/Z0DhOvRuaX/BNqrIXgq8zd hcoXBgRuJHX9FVcQZ0xraKu/JvOaMFCzNa3+3Ix/aNXZUVk2e1ZaLOsKicJUDUuZ b6+UZS1FhCKTCDoCqry4Mo6FE2JuVDqGFatH0VRL9ibVIXpJlwfnrP/cFhGN5BKe zxhr/DONq/0tv7kzBjmO55IBeoye2a0aXEUrX9kAnz4A2hrMney1fTCDxPHavIYF khKmvbSv76+Q5iBkWlosW8bMKJmgsgL91L1GqJFZMnhukXC81ulndp1jcVLJzIIA c6PTRMnaUjhAeco9JgKBGvkmGBC4G1alf8AJaIAD6vYM -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:03 2026 by rpki-client