This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/KCQ8GDa27tYuPWgP1nRKXBTk1Ww.roa File: KCQ8GDa27tYuPWgP1nRKXBTk1Ww.roa (raw, json) Hash identifier: hgvJkxvKTNR1g+ybNwe4M29US6Kg0T9+/9USB1UVBJc= Subject key identifier: 28:24:3C:18:36:B6:EE:D6:2E:3D:68:0F:D6:74:4A:5C:14:E4:D5:6C Certificate issuer: /CN=8e5dc732ca2834973547c780e1c3a5ab47805be0 Certificate serial: 019B7F854A475D06D09E7D6B2C388135E829 Authority key identifier: 8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/KCQ8GDa27tYuPWgP1nRKXBTk1Ww.roa Signing time: Fri 02 Jan 2026 16:23:19 +0000 ROA not before: Fri 02 Jan 2026 16:23:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207492 IP address blocks: 94.231.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:4a:47:5d:06:d0:9e:7d:6b:2c:38:81:35:e8:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5dc732ca2834973547c780e1c3a5ab47805be0 Validity Not Before: Jan 2 16:23:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=28243c1836b6eed62e3d680fd6744a5c14e4d56c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:75:27:e2:2e:bf:ba:31:c3:17:95:a6:48:8e: 61:e7:c9:7c:a0:74:c0:af:8b:ef:1b:ea:26:7c:59: 86:3f:bf:d0:04:80:8a:6f:59:bb:55:c6:15:e1:fb: d2:ef:07:8a:42:dd:69:9d:f0:9b:4c:d4:1f:4b:d5: 55:33:0d:30:19:76:c5:b0:36:8f:08:00:c3:5d:ce: 23:71:25:66:e0:4f:cc:18:84:39:39:60:39:eb:b2: 63:a0:f8:ab:62:57:be:40:f1:9d:67:ca:dd:8b:b8: 87:79:14:e7:71:8d:7c:4b:2c:ae:0a:bb:16:6e:25: 7f:af:3b:91:1b:5c:0c:b4:22:e8:17:55:12:e2:fc: e6:18:77:49:c6:e5:44:c4:c0:b4:0f:11:02:2f:34: b2:45:cc:9c:4f:cf:07:81:a5:34:fe:bf:c9:c1:ce: 13:f0:f5:cc:dc:3c:51:ff:6d:28:63:fe:0c:8a:ab: bf:50:1b:93:e1:61:5d:4c:91:08:ae:09:d0:15:4c: 2b:a0:53:25:b4:53:09:3b:65:c5:6b:62:08:88:46: 5f:51:ed:6b:e4:69:f3:b4:3b:fb:ae:0d:56:3c:5d: 00:dd:96:a9:7c:a7:ba:2b:c4:f4:79:d9:17:57:c6: fe:49:c0:b2:21:96:9f:da:4e:81:68:01:a7:73:2d: 15:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:24:3C:18:36:B6:EE:D6:2E:3D:68:0F:D6:74:4A:5C:14:E4:D5:6C X509v3 Authority Key Identifier: keyid:8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/KCQ8GDa27tYuPWgP1nRKXBTk1Ww.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.231.194.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:07:66:0a:af:ff:59:63:a3:a0:7a:a7:14:08:54:fd:59:95: 15:1f:f8:a5:a6:69:7c:ab:26:e8:f7:21:99:74:97:f9:ab:fb: 30:f0:57:c2:af:c8:af:6c:aa:e6:d8:20:ff:d3:de:26:d4:96: 6e:0b:1d:88:84:4d:2f:c8:d5:8a:19:8f:d2:76:13:af:e8:61: d9:28:16:7a:1a:f5:dc:e8:e3:01:85:ae:23:24:d4:80:42:9e: d4:7e:d6:e3:01:31:36:3b:b8:a5:47:7c:74:9b:69:c9:cc:e2: c3:b1:a2:e7:e6:1c:d1:c6:0b:a9:7f:55:5a:23:b0:d9:af:3a: 5b:d7:49:b4:a4:ec:0b:e6:cb:33:bd:82:12:49:0b:32:0e:f5: 5c:45:23:1f:30:0b:8e:17:7c:4a:2c:f3:07:f2:1e:03:e6:1e: 09:a7:0f:7a:ec:44:3c:a2:4d:65:86:8c:64:24:b5:41:d9:a4: bd:fc:38:6d:56:70:d4:f4:4e:59:eb:c2:7d:37:e2:55:5f:57: 0d:78:5d:8a:f1:59:e5:63:3e:0b:3b:7f:64:58:77:b4:c2:60: 17:ad:7c:a8:70:8d:ec:e4:2f:d4:65:43:f3:82:9d:e4:1e:cc: 3a:2e:36:09:35:51:c9:d1:29:dc:75:e7:c4:fe:97:62:4b:29: c4:56:40:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hUpHXQbQnn1rLDiBNegpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNWRjNzMyY2EyODM0OTczNTQ3Yzc4MGUxYzNhNWFiNDc4 MDViZTAwHhcNMjYwMTAyMTYyMzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODI0M2MxODM2YjZlZWQ2MmUzZDY4MGZkNjc0NGE1YzE0ZTRkNTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XUn4i6/ujHDF5WmSI5h58l8oHTA r4vvG+omfFmGP7/QBICKb1m7VcYV4fvS7weKQt1pnfCbTNQfS9VVMw0wGXbFsDaP CADDXc4jcSVm4E/MGIQ5OWA567JjoPirYle+QPGdZ8rdi7iHeRTncY18SyyuCrsW biV/rzuRG1wMtCLoF1US4vzmGHdJxuVExMC0DxECLzSyRcycT88HgaU0/r/Jwc4T 8PXM3DxR/20oY/4Miqu/UBuT4WFdTJEIrgnQFUwroFMltFMJO2XFa2IIiEZfUe1r 5GnztDv7rg1WPF0A3ZapfKe6K8T0edkXV8b+ScCyIZaf2k6BaAGncy0VxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCgkPBg2tu7WLj1oD9Z0SlwU5NVsMB8GA1UdIwQY MBaAFI5dxzLKKDSXNUfHgOHDpatHgFvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamwzSE1zb29OSmMxUjhlQTRjT2xxMGVBVy1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy82ZWYxNDYtZGFjNi00ZWE1LWJlNTgt NGVlNjlhNzc3YmJlLzEvS0NROEdEYTI3dFl1UFdnUDFuUktYQlRrMVd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy82ZWYxNDYtZGFjNi00ZWE1LWJlNTgtNGVlNjlhNzc3YmJl LzEvamwzSE1zb29OSmMxUjhlQTRjT2xxMGVBVy1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXufCMA0G CSqGSIb3DQEBCwUAA4IBAQBOB2YKr/9ZY6OgeqcUCFT9WZUVH/ilpml8qybo9yGZ dJf5q/sw8FfCr8ivbKrm2CD/094m1JZuCx2IhE0vyNWKGY/SdhOv6GHZKBZ6GvXc 6OMBha4jJNSAQp7UftbjATE2O7ilR3x0m2nJzOLDsaLn5hzRxgupf1VaI7DZrzpb 10m0pOwL5sszvYISSQsyDvVcRSMfMAuOF3xKLPMH8h4D5h4Jpw967EQ8ok1lhoxk JLVB2aS9/DhtVnDU9E5Z68J9N+JVX1cNeF2K8VnlYz4LO39kWHe0wmAXrXyocI3s 5C/UZUPzgp3kHsw6LjYJNVHJ0SncdefE/pdiSynEVkDo -----END CERTIFICATE-----Generated at Sun Jan 25 23:49:50 2026 by rpki-client