This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/f8crMnaCvVJR24y4HZK4aF4ON_Y.roa File: f8crMnaCvVJR24y4HZK4aF4ON_Y.roa (raw, json) Hash identifier: a4LuuWR1pCU4Uin5c2uaOnWKPPk90YN8aUWR2m/vZDQ= Subject key identifier: 7F:C7:2B:32:76:82:BD:52:51:DB:8C:B8:1D:92:B8:68:5E:0E:37:F6 Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d Certificate serial: 019B77C7438869F9A0A913A37665D221114D Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/f8crMnaCvVJR24y4HZK4aF4ON_Y.roa Signing time: Thu 01 Jan 2026 04:18:26 +0000 ROA not before: Thu 01 Jan 2026 04:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214208 IP address blocks: 188.95.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:43:88:69:f9:a0:a9:13:a3:76:65:d2:21:11:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad734cf90c773428806b968209515b914831a9d Validity Not Before: Jan 1 04:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fc72b327682bd5251db8cb81d92b8685e0e37f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2b:30:52:52:d1:32:ad:aa:5b:f4:c4:4e:d8: d6:70:3e:28:1e:55:c7:38:b0:88:e1:3f:07:d5:38: f4:e6:a1:7a:b9:1e:96:cb:c9:07:fb:ee:5d:f0:3e: 22:10:26:c4:45:cd:97:c6:10:37:f5:e2:8b:10:e8: c5:69:e2:05:e9:aa:72:c0:d9:73:a2:f1:f7:4d:c7: d8:e5:17:83:0f:b3:0f:7c:e3:12:c5:bb:0c:60:ef: 2b:96:82:f1:d3:ea:ea:7d:1d:c5:67:a5:49:08:eb: b6:8b:5f:46:3f:a4:6b:85:ed:83:c2:2e:ef:cc:b0: 24:2a:4d:7d:a5:85:14:a3:e2:53:21:66:45:a6:7c: 6e:6a:53:2e:a9:5e:95:94:fb:85:a8:c4:5e:9d:bd: c5:91:d4:e1:3e:e3:0b:a8:10:ce:74:8b:c6:3c:2c: 41:3e:44:8c:09:1c:f0:f2:26:79:5d:f9:92:1e:fa: 1c:4f:94:c2:10:19:9c:57:9c:3a:e6:77:1b:2a:50: cd:41:1e:94:17:ed:d7:96:0e:b8:00:22:83:96:22: 73:4e:1e:4d:c3:7a:39:00:2c:4f:7d:57:e2:64:60: 7c:8d:28:cc:0b:35:3d:f7:fe:82:b1:36:0b:16:9a: d2:6f:13:63:93:15:98:03:9a:a2:bb:3d:36:13:a6: 0b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C7:2B:32:76:82:BD:52:51:DB:8C:B8:1D:92:B8:68:5E:0E:37:F6 X509v3 Authority Key Identifier: keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/f8crMnaCvVJR24y4HZK4aF4ON_Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.95.69.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:21:c8:f3:be:ef:94:6e:c2:49:f1:82:42:f3:43:1b:5f:3b: a9:4c:55:02:74:ea:dc:f8:81:1e:9d:8e:63:e7:98:6e:d0:2f: d7:09:69:95:4b:96:b2:94:42:f2:8d:0a:7d:1c:51:a4:21:6c: f0:d1:05:24:76:10:af:a8:6a:9f:af:e5:aa:8b:81:2d:ba:bf: 81:a8:38:f5:0f:ac:d3:92:1a:42:95:b7:9f:52:5f:3e:4c:30: ce:ce:35:d8:84:1b:96:97:57:11:3c:16:b3:58:c9:d0:03:8e: d0:6c:1c:ed:f4:3c:4f:a7:1a:bb:cd:9a:48:b1:8f:3b:90:b4: 74:82:34:45:ce:e6:79:f4:81:8e:60:bd:ab:7e:16:81:86:c7: 04:10:f3:d2:00:49:11:08:71:31:3c:4e:8e:d9:cf:fb:57:a8: 56:29:8b:6e:fe:d2:24:e5:16:00:7a:4b:30:37:10:e9:06:06: 89:de:dc:af:07:bb:8a:d2:ac:ba:15:9f:bd:3d:12:43:9c:ce: fc:8a:88:09:63:18:59:32:53:b5:d2:f3:94:dd:fd:35:59:4d: a5:e2:bb:b7:07:a8:cd:58:f2:97:b1:6c:b5:e1:a9:e3:af:65: fd:a1:1a:44:2e:f3:f6:c3:eb:5d:16:90:93:10:ab:9c:4f:da: a1:76:f1:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x0OIafmgqROjdmXSIRFNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4 MzFhOWQwHhcNMjYwMTAxMDQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmM3MmIzMjc2ODJiZDUyNTFkYjhjYjgxZDkyYjg2ODVlMGUzN2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyswUlLRMq2qW/TETtjWcD4oHlXH OLCI4T8H1Tj05qF6uR6Wy8kH++5d8D4iECbERc2XxhA39eKLEOjFaeIF6apywNlz ovH3TcfY5ReDD7MPfOMSxbsMYO8rloLx0+rqfR3FZ6VJCOu2i19GP6Rrhe2Dwi7v zLAkKk19pYUUo+JTIWZFpnxualMuqV6VlPuFqMRenb3FkdThPuMLqBDOdIvGPCxB PkSMCRzw8iZ5XfmSHvocT5TCEBmcV5w65ncbKlDNQR6UF+3Xlg64ACKDliJzTh5N w3o5ACxPfVfiZGB8jSjMCzU99/6CsTYLFprSbxNjkxWYA5qiuz02E6YLxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH/HKzJ2gr1SUduMuB2SuGheDjf2MB8GA1UdIwQY MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt NzZhMWQ0ZDgzMTk3LzEvZjhjck1uYUN2VkpSMjR5NEhaSzRhRjRPTl9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3 LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvF9FMA0G CSqGSIb3DQEBCwUAA4IBAQArIcjzvu+UbsJJ8YJC80MbXzupTFUCdOrc+IEenY5j 55hu0C/XCWmVS5aylELyjQp9HFGkIWzw0QUkdhCvqGqfr+Wqi4Etur+BqDj1D6zT khpClbefUl8+TDDOzjXYhBuWl1cRPBazWMnQA47QbBzt9DxPpxq7zZpIsY87kLR0 gjRFzuZ59IGOYL2rfhaBhscEEPPSAEkRCHExPE6O2c/7V6hWKYtu/tIk5RYAeksw NxDpBgaJ3tyvB7uK0qy6FZ+9PRJDnM78iogJYxhZMlO10vOU3f01WU2l4ru3B6jN WPKXsWy14anjr2X9oRpELvP2w+tdFpCTEKucT9qhdvEr -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:05 2026 by rpki-client