This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/1-cQy_siX062tFLZkeCmyCEUYxQs.roa File: 1-cQy_siX062tFLZkeCmyCEUYxQs.roa (raw, json) Hash identifier: M1tvA2BwBUz9tHkqC8JXVgPLd87OHSLvHcZQsEKJENI= Subject key identifier: F9:C4:32:FE:C8:97:D3:AD:AD:14:B6:64:78:29:B2:08:45:18:C5:0B Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Certificate serial: 019B7F842B63022187DD59552AE3B76F1490 Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/1-cQy_siX062tFLZkeCmyCEUYxQs.roa Signing time: Fri 02 Jan 2026 16:22:06 +0000 ROA not before: Fri 02 Jan 2026 16:22:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24589 IP address blocks: 193.0.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:2b:63:02:21:87:dd:59:55:2a:e3:b7:6f:14:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Validity Not Before: Jan 2 16:22:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9c432fec897d3adad14b6647829b2084518c50b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:be:55:e7:d6:a0:7c:06:b1:97:0d:22:7b:c1: 54:41:99:42:57:5b:2f:be:7b:42:08:7a:39:72:f7: 0e:47:ac:f9:8d:f1:a0:d4:98:01:3c:e3:7d:33:0f: 6b:63:67:34:00:08:bb:e9:8b:25:0b:bd:ed:4d:e7: 77:2e:a7:2e:15:cc:af:4f:98:69:2e:e1:e2:9b:76: a9:07:12:5e:9d:e4:6a:7d:99:1e:a8:03:e7:90:1d: ff:74:38:6b:bb:e1:52:94:be:f9:12:ad:a0:c5:da: 23:f8:0e:de:9a:59:fc:8a:6d:80:bd:21:7f:8f:a6: 09:bb:1e:48:a1:a8:77:7a:f5:6a:1c:fe:94:32:26: 67:2f:58:65:fe:37:29:97:2a:86:a9:54:19:3b:00: c6:6c:73:73:c1:3b:d5:9e:31:41:eb:b0:e9:b9:2d: d5:5f:54:91:1e:a0:bd:56:d9:27:fd:df:e7:29:4c: 66:b3:6b:78:f8:8a:6a:22:21:1c:5a:3e:e3:3e:60: e3:e7:40:c9:89:3b:d2:2d:4c:1b:61:b0:38:ea:db: ae:ae:bd:36:f3:4c:ff:fc:59:61:21:e5:70:00:5e: 70:86:04:9d:3c:ff:2b:67:c4:d9:01:57:ee:74:79: c7:a4:fe:cc:93:18:2b:e1:9c:5c:0f:6c:65:71:7b: 73:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C4:32:FE:C8:97:D3:AD:AD:14:B6:64:78:29:B2:08:45:18:C5:0B X509v3 Authority Key Identifier: keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/1-cQy_siX062tFLZkeCmyCEUYxQs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.239.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:2a:19:5f:e4:c7:f9:e5:2c:a9:b9:76:2c:9c:72:c5:76:27: c1:47:1e:59:8a:c9:c7:4b:cd:c4:45:da:9d:5d:7c:48:d3:2a: 48:14:8a:62:bb:67:c6:88:f4:51:9b:b3:9e:e6:19:8e:51:a6: 33:02:c2:ce:5e:4d:6b:bc:3c:4f:9c:0f:a8:c0:f1:b6:1d:22: b2:b1:46:b3:69:81:8f:9a:bc:fb:96:be:77:d7:d2:9b:5a:d0: a5:f1:1a:50:22:25:c8:70:db:7f:e2:b4:4a:d9:b6:22:70:31: 7b:66:74:81:4c:c3:a4:99:17:f4:0b:5e:3f:a7:d3:5c:03:41: 81:99:ef:d5:ce:a8:4c:33:32:8b:e2:65:9f:08:12:18:a3:d2: 82:39:84:c1:62:f3:1c:1c:09:ed:71:83:9e:58:16:c9:61:2d: bc:d2:6a:bc:12:46:59:69:8b:58:2f:6b:b2:0b:b2:2d:97:d8: da:85:d7:02:aa:38:c6:99:83:dd:a2:a4:06:1f:d4:b6:f0:b0: ae:54:ae:89:29:3a:8c:b1:87:47:0b:1a:b6:93:be:b2:13:b8: c8:92:a2:4c:a6:3d:57:0f:0f:a6:ef:7f:4a:4d:da:29:40:db: 6c:d3:4a:3f:90:26:cc:a2:3d:4d:dc:15:68:e5:68:43:71:7f: 9f:7d:52:7b -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/hCtjAiGH3VlVKuO3bxSQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzhhZDgxNjhlMDljZjkyZDRlMDQ5ODI1N2Y4ZTljZWFi ZjA2OTIwHhcNMjYwMTAyMTYyMjA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWM0MzJmZWM4OTdkM2FkYWQxNGI2NjQ3ODI5YjIwODQ1MThjNTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy75V59agfAaxlw0ie8FUQZlCV1sv vntCCHo5cvcOR6z5jfGg1JgBPON9Mw9rY2c0AAi76YslC73tTed3LqcuFcyvT5hp LuHim3apBxJeneRqfZkeqAPnkB3/dDhru+FSlL75Eq2gxdoj+A7emln8im2AvSF/ j6YJux5Ioah3evVqHP6UMiZnL1hl/jcplyqGqVQZOwDGbHNzwTvVnjFB67DpuS3V X1SRHqC9Vtkn/d/nKUxms2t4+IpqIiEcWj7jPmDj50DJiTvSLUwbYbA46tuurr02 80z//FlhIeVwAF5whgSdPP8rZ8TZAVfudHnHpP7Mkxgr4ZxcD2xlcXtzuQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPnEMv7Il9OtrRS2ZHgpsghFGMULMB8GA1UdIwQY MBaAFId4rYFo4Jz5LU4EmCV/jpzqvwaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAt YWE5ZDY5MTgxMWU3LzEvMS1jUXlfc2lYMDYydEZMWmtlQ215Q0VVWXhRcy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOGIvZjA3ZjhkLTlkZjAtNDljNi1iMmYwLWFhOWQ2OTE4MTFl Ny8xL2gzaXRnV2pnblBrdFRnU1lKWC1Pbk9xX0JwSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEA7zAN BgkqhkiG9w0BAQsFAAOCAQEAWyoZX+TH+eUsqbl2LJxyxXYnwUceWYrJx0vNxEXa nV18SNMqSBSKYrtnxoj0UZuznuYZjlGmMwLCzl5Na7w8T5wPqMDxth0isrFGs2mB j5q8+5a+d9fSm1rQpfEaUCIlyHDbf+K0Stm2InAxe2Z0gUzDpJkX9AteP6fTXANB gZnv1c6oTDMyi+JlnwgSGKPSgjmEwWLzHBwJ7XGDnlgWyWEtvNJqvBJGWWmLWC9r sguyLZfY2oXXAqo4xpmD3aKkBh/UtvCwrlSuiSk6jLGHRwsatpO+shO4yJKiTKY9 Vw8Ppu9/Sk3aKUDbbNNKP5AmzKI9TdwVaOVoQ3F/n31Sew== -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:25 2026 by rpki-client