This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/ff8nxFEwNiU35BIrYX2EMq7wgM8.roa File: ff8nxFEwNiU35BIrYX2EMq7wgM8.roa (raw, json) Hash identifier: JLFff/Q61v4Z6LU+Tog+UuL94G1mvJmCoeYQCLB2v0Y= Subject key identifier: 7D:FF:27:C4:51:30:36:25:37:E4:12:2B:61:7D:84:32:AE:F0:80:CF Certificate issuer: /CN=dfd046af5edc11964096dc20f6af1de55d9c9030 Certificate serial: 019B7758C73CFE5813BC77F9F2B7B03141A0 Authority key identifier: DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/ff8nxFEwNiU35BIrYX2EMq7wgM8.roa Signing time: Thu 01 Jan 2026 02:17:45 +0000 ROA not before: Thu 01 Jan 2026 02:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200040 IP address blocks: 195.18.8.0/24 maxlen: 24 2a14:10c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c7:3c:fe:58:13:bc:77:f9:f2:b7:b0:31:41:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfd046af5edc11964096dc20f6af1de55d9c9030 Validity Not Before: Jan 1 02:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7dff27c45130362537e4122b617d8432aef080cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ee:4d:3d:aa:be:fc:05:f7:25:e2:56:ed:f1: 0f:27:93:a1:ac:81:26:d7:9b:b2:78:2d:7d:ce:97: ef:49:4f:4c:5c:dc:7b:2e:c2:da:24:ed:68:93:a2: 1d:dd:9c:c4:af:7a:aa:2c:58:c5:b9:26:e9:8a:2d: 3b:12:06:ef:41:be:f2:a9:c8:40:3d:54:ac:fd:fb: 00:ad:25:58:ba:65:fc:79:6a:99:d9:09:70:e9:d7: 9b:f6:8d:6c:c3:d2:96:aa:f6:c9:64:d2:f1:e2:93: 64:18:e8:dd:54:a3:2f:53:7c:5c:b0:b5:57:d8:f5: fa:15:ff:33:5b:89:9d:95:c1:9d:02:68:eb:c7:0d: 3b:b2:b4:97:b6:0b:6d:75:10:fb:d4:b6:30:60:88: e6:92:da:f0:9b:ef:04:2e:a3:2c:ad:26:aa:69:ea: 38:37:06:a5:1d:40:0d:1c:e0:75:65:3d:af:44:a1: 35:20:42:b3:74:ff:2d:c3:fb:b8:7e:58:09:a0:31: fe:1a:ad:68:e0:66:b4:e9:e5:e2:d2:b7:d6:f7:c2: 6d:4c:04:64:6d:31:92:f9:6d:c0:e5:95:31:5a:cf: b1:f9:c6:9c:7f:e7:03:7a:9a:5b:3e:01:6a:57:8f: 78:c1:2e:68:23:f0:c8:ca:87:5f:ed:f2:ec:be:e2: d7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:FF:27:C4:51:30:36:25:37:E4:12:2B:61:7D:84:32:AE:F0:80:CF X509v3 Authority Key Identifier: keyid:DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/ff8nxFEwNiU35BIrYX2EMq7wgM8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.18.8.0/24 IPv6: 2a14:10c0::/29 Signature Algorithm: sha256WithRSAEncryption 57:92:47:2e:00:f8:ab:20:e6:2a:c0:73:26:19:2c:ce:85:fe: 09:ee:ee:2c:6e:9f:5f:bb:b4:05:98:a1:2e:e1:e0:3e:b5:c8: 5d:12:6d:7b:6d:7a:75:9a:7c:af:af:79:12:a8:f4:52:50:ec: 96:a8:69:87:8f:75:d0:8f:48:a0:04:55:e4:30:88:fe:58:19: f7:c5:2e:09:fe:7e:50:a0:4a:b0:8b:f5:44:85:9c:5f:fb:4b: 11:3d:d7:61:80:10:3b:5a:32:e2:81:1c:50:df:bc:bc:1c:10: 43:d0:62:91:02:55:58:83:5f:15:8a:e8:23:72:cb:5a:e9:e7: 29:4d:64:73:e4:6f:b5:8d:6b:b3:24:66:bf:c8:12:ee:7b:65: 1f:97:e1:95:f4:35:fe:12:b1:af:b4:06:9f:9c:cf:b7:0e:c8: 55:ea:59:0e:87:b3:bb:1e:0e:2b:c0:da:d0:4e:19:86:89:9f: 19:37:6e:e1:73:4f:71:3f:ef:98:48:e0:aa:d1:5c:85:a1:aa: 1a:7f:43:ac:fd:47:a3:02:29:00:c9:1e:fb:d0:ba:54:4d:6d: ba:de:6e:94:fc:84:7e:3a:d5:09:8e:ad:5b:bf:81:e5:b1:f1: f9:78:83:c2:f8:55:84:33:f0:2e:91:3f:2d:5b:e6:ce:6a:b1: ed:31:80:17 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WMc8/lgTvHf58rewMUGgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZDA0NmFmNWVkYzExOTY0MDk2ZGMyMGY2YWYxZGU1NWQ5 YzkwMzAwHhcNMjYwMTAxMDIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGZmMjdjNDUxMzAzNjI1MzdlNDEyMmI2MTdkODQzMmFlZjA4MGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse5NPaq+/AX3JeJW7fEPJ5OhrIEm 15uyeC19zpfvSU9MXNx7LsLaJO1ok6Id3ZzEr3qqLFjFuSbpii07EgbvQb7yqchA PVSs/fsArSVYumX8eWqZ2Qlw6deb9o1sw9KWqvbJZNLx4pNkGOjdVKMvU3xcsLVX 2PX6Ff8zW4mdlcGdAmjrxw07srSXtgttdRD71LYwYIjmktrwm+8ELqMsrSaqaeo4 NwalHUANHOB1ZT2vRKE1IEKzdP8tw/u4flgJoDH+Gq1o4Ga06eXi0rfW98JtTARk bTGS+W3A5ZUxWs+x+cacf+cDeppbPgFqV494wS5oI/DIyodf7fLsvuLXmwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFH3/J8RRMDYlN+QSK2F9hDKu8IDPMB8GA1UdIwQY MBaAFN/QRq9e3BGWQJbcIPavHeVdnJAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzlCR3IxN2NFWlpBbHR3ZzlxOGQ1VjJja0RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iZmQwZmYtODQ1ZS00ZTEyLWFjN2Mt NTg4ZTBkOTIzYzE1LzEvZmY4bnhGRXdOaVUzNUJJcllYMkVNcTd3Z004LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iZmQwZmYtODQ1ZS00ZTEyLWFjN2MtNTg4ZTBkOTIzYzE1 LzEvMzlCR3IxN2NFWlpBbHR3ZzlxOGQ1VjJja0RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwxIIMA0E AgACMAcDBQMqFBDAMA0GCSqGSIb3DQEBCwUAA4IBAQBXkkcuAPirIOYqwHMmGSzO hf4J7u4sbp9fu7QFmKEu4eA+tchdEm17bXp1mnyvr3kSqPRSUOyWqGmHj3XQj0ig BFXkMIj+WBn3xS4J/n5QoEqwi/VEhZxf+0sRPddhgBA7WjLigRxQ37y8HBBD0GKR AlVYg18Viugjcsta6ecpTWRz5G+1jWuzJGa/yBLue2Ufl+GV9DX+ErGvtAafnM+3 DshV6lkOh7O7Hg4rwNrQThmGiZ8ZN27hc09xP++YSOCq0VyFoaoaf0Os/UejAikA yR770LpUTW263m6U/IR+OtUJjq1bv4HlsfH5eIPC+FWEM/AukT8tW+bOarHtMYAX -----END CERTIFICATE-----Generated at Sun Jan 25 21:05:07 2026 by rpki-client