This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/N8_jgVETZSZgMZuy7Nmx901ELco.roa File: N8_jgVETZSZgMZuy7Nmx901ELco.roa (raw, json) Hash identifier: +zMjL/+nyqUTVAJWqSLmseSeJa4kcd3Eto/YmX3LSA0= Subject key identifier: 37:CF:E3:81:51:13:65:26:60:31:9B:B2:EC:D9:B1:F7:4D:44:2D:CA Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c Certificate serial: 019B7DCB28C6FB087FF45DF0633E99651996 Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/N8_jgVETZSZgMZuy7Nmx901ELco.roa Signing time: Fri 02 Jan 2026 08:20:24 +0000 ROA not before: Fri 02 Jan 2026 08:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31477 IP address blocks: 82.150.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:28:c6:fb:08:7f:f4:5d:f0:63:3e:99:65:19:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c Validity Not Before: Jan 2 08:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37cfe3815113652660319bb2ecd9b1f74d442dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:07:56:ff:5a:64:b9:04:0b:74:4b:38:a4:60: 00:61:c8:df:d9:c0:14:b0:1f:10:fd:4c:c0:77:ac: 7f:74:ff:aa:1c:f2:b9:0f:60:c4:20:08:44:37:5e: 52:20:11:5f:f9:27:73:41:7e:e8:45:ec:d2:70:4f: fa:06:e0:84:e9:85:5c:aa:0b:aa:d4:75:7c:f7:b6: 2a:22:22:fd:0a:ac:d3:9b:f3:06:89:69:8b:c8:9d: 2c:b7:30:58:bf:61:bd:4a:da:04:bb:ec:62:8d:38: e3:84:0c:cc:30:22:d7:78:4f:7e:c6:c8:a5:15:49: 38:4b:77:00:6c:ad:d1:2f:b7:82:c7:ec:37:fe:9c: 97:8c:b5:dc:18:ad:1c:dd:1d:b5:7e:09:dd:ce:b8: 78:3c:93:e9:6c:6a:b8:cc:23:c0:c8:33:b2:72:52: f4:25:23:12:56:52:1b:82:b7:d0:d2:d3:27:ca:35: bb:97:f5:9c:19:2a:cc:06:06:21:55:2f:74:7e:9c: 3c:69:ec:f7:75:71:ff:e2:ca:f8:62:38:36:b8:af: 89:26:10:5c:70:6e:b2:27:d9:e6:8f:1f:df:51:e1: 4c:ae:1f:fb:8b:3b:43:3e:39:3e:b5:34:e1:c1:05: 5e:bc:77:f0:21:81:05:90:be:60:45:a9:5c:52:43: bb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CF:E3:81:51:13:65:26:60:31:9B:B2:EC:D9:B1:F7:4D:44:2D:CA X509v3 Authority Key Identifier: keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/N8_jgVETZSZgMZuy7Nmx901ELco.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.150.139.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:8c:2f:75:38:c3:b1:d7:50:3c:23:89:61:33:b4:02:66:f0: b6:f2:cc:09:52:6a:e7:eb:4b:ba:a6:6a:b7:e5:46:a5:df:f8: 38:a7:82:15:a9:28:67:7b:98:47:7a:9f:a2:df:f1:20:78:f2: 89:a2:57:24:85:2f:f9:e2:79:0e:09:86:6b:cb:23:40:e2:ee: 9a:ca:2a:76:08:49:d6:7a:33:5f:40:52:30:ba:c4:ce:30:14: 89:18:99:ad:77:17:5a:ea:84:d4:8f:5c:6c:a3:78:21:2e:db: 0d:b4:76:70:85:ce:2f:f0:f5:8f:db:aa:f1:df:de:ab:6a:39: c4:ae:7e:35:8a:5d:d2:27:e4:b4:8f:0a:01:70:f6:89:3b:4b: 3f:ac:14:87:0c:51:63:6d:f0:80:02:43:8a:00:5f:8b:a3:80: 17:73:4c:ef:a4:29:61:b7:7f:00:a7:47:54:c8:45:e0:37:ca: 3f:fa:be:b9:8d:99:03:da:c8:22:02:e7:3c:3b:bc:d1:cb:56: 23:3a:39:1a:dd:5c:25:ea:a3:d0:be:a3:3e:dd:97:08:3b:ac: 55:8f:80:a8:b8:71:24:42:f3:e1:e2:ee:5f:53:0c:87:b8:3b: 11:ae:33:4c:c6:01:30:5e:74:2a:2b:59:8c:b6:b5:af:a9:24: bd:12:ce:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yyjG+wh/9F3wYz6ZZRmWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMWZlMzBmYzZiNGIwZDBmNmRiNGUxYmZiYmQ1MDE5NWRj YTU3NWMwHhcNMjYwMTAyMDgyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2NmZTM4MTUxMTM2NTI2NjAzMTliYjJlY2Q5YjFmNzRkNDQyZGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gdW/1pkuQQLdEs4pGAAYcjf2cAU sB8Q/UzAd6x/dP+qHPK5D2DEIAhEN15SIBFf+SdzQX7oRezScE/6BuCE6YVcqguq 1HV897YqIiL9CqzTm/MGiWmLyJ0stzBYv2G9StoEu+xijTjjhAzMMCLXeE9+xsil FUk4S3cAbK3RL7eCx+w3/pyXjLXcGK0c3R21fgndzrh4PJPpbGq4zCPAyDOyclL0 JSMSVlIbgrfQ0tMnyjW7l/WcGSrMBgYhVS90fpw8aez3dXH/4sr4Yjg2uK+JJhBc cG6yJ9nmjx/fUeFMrh/7iztDPjk+tTThwQVevHfwIYEFkL5gRalcUkO77QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDfP44FRE2UmYDGbsuzZsfdNRC3KMB8GA1UdIwQY MBaAFCAf4w/GtLDQ9ttOG/u9UBldyldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYt ZmMxMjFjODAwYjMwLzEvTjhfamdWRVRaU1pnTVp1eTdObXg5MDFFTGNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYtZmMxMjFjODAwYjMw LzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpaLMA0G CSqGSIb3DQEBCwUAA4IBAQAcjC91OMOx11A8I4lhM7QCZvC28swJUmrn60u6pmq3 5Ual3/g4p4IVqShne5hHep+i3/EgePKJolckhS/54nkOCYZryyNA4u6ayip2CEnW ejNfQFIwusTOMBSJGJmtdxda6oTUj1xso3ghLtsNtHZwhc4v8PWP26rx396rajnE rn41il3SJ+S0jwoBcPaJO0s/rBSHDFFjbfCAAkOKAF+Lo4AXc0zvpClht38Ap0dU yEXgN8o/+r65jZkD2sgiAuc8O7zRy1YjOjka3Vwl6qPQvqM+3ZcIO6xVj4CouHEk QvPh4u5fUwyHuDsRrjNMxgEwXnQqK1mMtrWvqSS9Es7x -----END CERTIFICATE-----Generated at Mon Jan 26 00:17:01 2026 by rpki-client