This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/_8o003HukJtANidMUuNfF8h2iro.roa File: _8o003HukJtANidMUuNfF8h2iro.roa (raw, json) Hash identifier: RD6ivkH2YAIVnq+oPiaSNKTUKGIT1SfwklfHbiuRs50= Subject key identifier: FF:CA:34:D3:71:EE:90:9B:40:36:27:4C:52:E3:5F:17:C8:76:8A:BA Certificate issuer: /CN=ae83f7879c2c74a11652b5e08af64aac90800b04 Certificate serial: 019B77C7283C59CBAD889A13904747FDCC5A Authority key identifier: AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/_8o003HukJtANidMUuNfF8h2iro.roa Signing time: Thu 01 Jan 2026 04:18:19 +0000 ROA not before: Thu 01 Jan 2026 04:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1213 IP address blocks: 136.206.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:28:3c:59:cb:ad:88:9a:13:90:47:47:fd:cc:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae83f7879c2c74a11652b5e08af64aac90800b04 Validity Not Before: Jan 1 04:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffca34d371ee909b4036274c52e35f17c8768aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:66:13:ad:b7:7c:8c:f4:d9:6c:57:d6:e4:02: 3c:63:cb:db:d2:78:2a:62:07:b1:54:fd:e1:99:48: de:8d:76:19:b8:7e:95:b2:9d:9d:b4:7f:f7:84:ef: 65:a0:db:57:a7:57:e4:75:d9:d7:6f:f0:f0:35:bb: f3:ba:2f:2a:28:44:8a:cc:44:5a:e7:35:b3:59:40: ca:46:d8:3a:e4:f1:e7:e7:ef:3f:46:98:6d:65:57: 1b:16:04:e2:af:fc:59:20:3c:26:8f:6f:73:cc:c4: f1:b6:e9:19:52:93:9e:74:52:bc:ea:47:18:8b:be: 3a:ae:9e:91:de:02:8b:e1:55:7a:b7:a9:1b:a9:c5: b9:1c:50:3c:85:71:c8:f8:8f:14:aa:98:45:76:44: fe:9c:db:24:ec:69:46:b4:d0:c1:b4:46:14:1d:70: 87:b0:05:35:a8:31:c3:b6:63:dd:4b:5a:75:44:a6: 94:f1:e8:0e:a1:c4:72:d2:08:5f:f6:c1:e6:6b:78: 39:0f:ac:08:7f:1a:8f:55:c4:6d:5c:97:c9:97:f9: eb:8f:73:b2:f4:83:ea:18:2a:35:9b:a3:d6:62:e3: 33:03:86:28:41:e3:ea:23:49:20:2d:53:3f:f9:c2: 08:ff:12:eb:75:99:6b:a7:59:2e:4f:69:19:e8:6b: f5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:CA:34:D3:71:EE:90:9B:40:36:27:4C:52:E3:5F:17:C8:76:8A:BA X509v3 Authority Key Identifier: keyid:AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/_8o003HukJtANidMUuNfF8h2iro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.206.0.0/16 Signature Algorithm: sha256WithRSAEncryption a0:a9:40:1b:21:59:de:6a:e8:9a:9b:54:1f:93:34:ba:44:8a: bf:be:95:63:97:9a:dd:0c:64:05:81:ec:39:ae:e9:b2:fe:28: 2e:16:95:61:d2:44:55:3d:44:9f:31:e6:24:b4:f9:36:be:dd: 3b:3b:9a:7b:0a:2a:08:0b:a5:2a:fc:7c:47:2f:c3:a3:33:45: 7f:43:b6:dc:a4:6c:db:26:10:68:90:6b:c1:6b:63:ed:76:14: 06:f4:a2:54:fb:7f:a5:b6:20:ca:5f:1d:9e:f6:80:b5:74:94: 04:7a:26:1e:ef:1d:53:16:59:82:cf:7d:d8:99:f6:cb:a8:c9: 6d:b0:e8:52:1b:47:8d:df:fb:0b:7e:bd:1e:4e:51:9a:92:5a: 60:98:5c:aa:db:e9:d2:43:bd:b9:e2:ba:e8:11:20:9a:a3:70: c0:7f:10:1c:6c:d4:f3:91:3d:be:b4:73:cb:16:b0:b2:89:34: 8c:45:08:ce:80:f9:20:7d:b5:aa:ea:d1:cc:51:78:b8:07:45: e0:86:69:4c:13:38:6c:24:47:ff:90:2f:a6:f6:69:28:99:85: cb:ad:d1:fc:73:a5:46:2f:8a:7c:86:fb:5d:e4:99:6c:56:7f: 02:34:44:da:1c:de:c3:75:b4:43:da:1e:3b:35:17:a4:3b:3d: 98:b7:ae:18 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt3xyg8WcutiJoTkEdH/cxaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlODNmNzg3OWMyYzc0YTExNjUyYjVlMDhhZjY0YWFjOTA4 MDBiMDQwHhcNMjYwMTAxMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmNhMzRkMzcxZWU5MDliNDAzNjI3NGM1MmUzNWYxN2M4NzY4YWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGYTrbd8jPTZbFfW5AI8Y8vb0ngq YgexVP3hmUjejXYZuH6Vsp2dtH/3hO9loNtXp1fkddnXb/DwNbvzui8qKESKzERa 5zWzWUDKRtg65PHn5+8/RphtZVcbFgTir/xZIDwmj29zzMTxtukZUpOedFK86kcY i746rp6R3gKL4VV6t6kbqcW5HFA8hXHI+I8UqphFdkT+nNsk7GlGtNDBtEYUHXCH sAU1qDHDtmPdS1p1RKaU8egOocRy0ghf9sHma3g5D6wIfxqPVcRtXJfJl/nrj3Oy 9IPqGCo1m6PWYuMzA4YoQePqI0kgLVM/+cII/xLrdZlrp1kuT2kZ6Gv12QIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFP/KNNNx7pCbQDYnTFLjXxfIdoq6MB8GA1UdIwQY MBaAFK6D94ecLHShFlK14Ir2SqyQgAsEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm9QM2g1d3NkS0VXVXJYZ2l2WktySkNBQ3dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84NGQwMjYtMTdlNC00Nzg3LWE0Mzkt NDczZDc0YTVlMjBmLzEvXzhvMDAzSHVrSnRBTmlkTVV1TmZGOGgyaXJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC84NGQwMjYtMTdlNC00Nzg3LWE0MzktNDczZDc0YTVlMjBm LzEvcm9QM2g1d3NkS0VXVXJYZ2l2WktySkNBQ3dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiM4wDQYJ KoZIhvcNAQELBQADggEBAKCpQBshWd5q6JqbVB+TNLpEir++lWOXmt0MZAWB7Dmu 6bL+KC4WlWHSRFU9RJ8x5iS0+Ta+3Ts7mnsKKggLpSr8fEcvw6MzRX9DttykbNsm EGiQa8FrY+12FAb0olT7f6W2IMpfHZ72gLV0lAR6Jh7vHVMWWYLPfdiZ9suoyW2w 6FIbR43f+wt+vR5OUZqSWmCYXKrb6dJDvbniuugRIJqjcMB/EBxs1PORPb60c8sW sLKJNIxFCM6A+SB9tarq0cxReLgHReCGaUwTOGwkR/+QL6b2aSiZhcut0fxzpUYv inyG+13kmWxWfwI0RNoc3sN1tEPaHjs1F6Q7PZi3rhg= -----END CERTIFICATE-----Generated at Mon Jan 26 10:24:45 2026 by rpki-client