This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/wBlQV8roNYOAgb5G0Nj_HH5ZUbY.roa File: wBlQV8roNYOAgb5G0Nj_HH5ZUbY.roa (raw, json) Hash identifier: KZkndcTrNEzitWfaZ4uzKEh3xzfx2DJf1eZMDvFa5Fg= Subject key identifier: C0:19:50:57:CA:E8:35:83:80:81:BE:46:D0:D8:FF:1C:7E:59:51:B6 Certificate issuer: /CN=8ac4731a3ee3942d258d0663570b894e8e1a9233 Certificate serial: 019B7A5A1085357D46DF49AA58F32BC9C7BD Authority key identifier: 8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/wBlQV8roNYOAgb5G0Nj_HH5ZUbY.roa Signing time: Thu 01 Jan 2026 16:18:01 +0000 ROA not before: Thu 01 Jan 2026 16:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30781 IP address blocks: 194.242.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:10:85:35:7d:46:df:49:aa:58:f3:2b:c9:c7:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ac4731a3ee3942d258d0663570b894e8e1a9233 Validity Not Before: Jan 1 16:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0195057cae835838081be46d0d8ff1c7e5951b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3b:06:ac:a0:c4:74:5c:d6:58:c2:d0:e6:ad: 95:96:ee:fd:c5:dc:80:f6:fb:c4:64:c7:a1:73:90: 51:fa:31:86:45:7c:a9:bb:53:9d:2c:82:ee:ef:78: 13:6c:5a:f5:f6:e9:81:70:1d:50:e3:09:9e:44:33: 39:5e:8f:04:6f:d6:d2:2d:77:65:2b:6e:de:ee:9c: a9:be:8e:65:3d:40:c0:d1:c7:a8:cb:d8:69:da:ea: 33:c2:90:30:bb:94:2c:be:ec:56:b2:45:fb:f1:3f: bc:17:75:2b:ca:09:c6:2c:fd:49:d9:95:b9:da:f0: c2:e1:ae:19:2a:78:35:cb:87:9f:f7:bd:c5:af:69: 59:e0:47:83:0f:40:bb:60:bb:c1:c7:e1:9c:70:8a: 21:1b:fb:84:07:36:c5:a2:91:c0:b0:32:98:03:22: 3f:21:ab:06:e5:eb:41:6c:03:b2:6a:84:7c:c7:c8: 7e:eb:66:b6:28:98:39:00:46:4b:9d:08:94:e4:cc: 4f:f9:7c:e0:75:91:f8:fd:d5:2e:af:fd:79:e8:64: aa:ff:15:f7:3b:f4:17:e8:b6:34:98:71:1e:e3:b2: 9f:3d:0f:67:33:e0:0b:14:05:60:06:4e:e4:42:bd: a3:77:22:fb:48:e4:d4:59:68:23:c9:65:5e:f4:e4: 59:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:19:50:57:CA:E8:35:83:80:81:BE:46:D0:D8:FF:1C:7E:59:51:B6 X509v3 Authority Key Identifier: keyid:8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/wBlQV8roNYOAgb5G0Nj_HH5ZUbY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.242.44.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:e3:a3:48:f6:86:44:8e:03:0a:38:51:ed:c6:12:b9:54:76: eb:57:9d:9f:b5:12:53:9b:f8:96:1c:c5:8a:8c:7f:89:00:80: 36:c1:41:9c:e7:7e:f0:e5:96:a5:8c:c2:3c:48:2e:65:d5:37: 26:28:65:38:e4:b9:67:8b:34:08:61:17:69:78:e2:53:1a:b3: 55:a3:d0:b8:60:2a:b1:e1:a8:ea:40:29:cc:6b:13:bf:aa:ef: 6b:a1:fb:47:eb:bc:1f:0f:8b:4d:5a:45:88:d4:d3:02:ed:96: 2f:a6:a5:4e:0d:e9:69:b4:5a:fb:96:cc:5f:4a:fc:91:b9:73: 32:75:88:e7:de:5e:cb:25:e2:39:cd:79:6a:77:c2:41:ba:49: ba:ee:74:d3:f1:a6:3d:c3:eb:69:70:d6:27:59:84:64:58:85: 9d:32:d8:7e:40:f0:77:83:ad:1a:bb:5c:63:f5:92:a9:53:b2: 83:43:f1:73:a1:24:ce:b3:d0:02:17:66:54:23:55:8e:cf:da: cc:b9:6e:45:1d:34:7a:f6:68:c5:3a:04:ba:8b:09:30:f4:b3: 00:bd:6d:49:72:04:b4:89:6f:68:85:c4:cd:98:c1:e6:43:a6: 11:a2:4e:02:30:fa:4a:fb:15:04:57:c5:7a:5e:9b:b0:81:51: 9f:66:c2:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WhCFNX1G30mqWPMryce9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYzQ3MzFhM2VlMzk0MmQyNThkMDY2MzU3MGI4OTRlOGUx YTkyMzMwHhcNMjYwMTAxMTYxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDE5NTA1N2NhZTgzNTgzODA4MWJlNDZkMGQ4ZmYxYzdlNTk1MWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTsGrKDEdFzWWMLQ5q2Vlu79xdyA 9vvEZMehc5BR+jGGRXypu1OdLILu73gTbFr19umBcB1Q4wmeRDM5Xo8Eb9bSLXdl K27e7pypvo5lPUDA0ceoy9hp2uozwpAwu5QsvuxWskX78T+8F3UrygnGLP1J2ZW5 2vDC4a4ZKng1y4ef973Fr2lZ4EeDD0C7YLvBx+GccIohG/uEBzbFopHAsDKYAyI/ IasG5etBbAOyaoR8x8h+62a2KJg5AEZLnQiU5MxP+XzgdZH4/dUur/156GSq/xX3 O/QX6LY0mHEe47KfPQ9nM+ALFAVgBk7kQr2jdyL7SOTUWWgjyWVe9ORZzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMAZUFfK6DWDgIG+RtDY/xx+WVG2MB8GA1UdIwQY MBaAFIrEcxo+45QtJY0GY1cLiU6OGpIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9mMDgwNWYtMzM0ZS00NzA0LThiMjgt NWFkZmUzMGZmZGE1LzEvd0JsUVY4cm9OWU9BZ2I1RzBOal9ISDVaVWJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9mMDgwNWYtMzM0ZS00NzA0LThiMjgtNWFkZmUzMGZmZGE1 LzEvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwvIsMA0G CSqGSIb3DQEBCwUAA4IBAQBO46NI9oZEjgMKOFHtxhK5VHbrV52ftRJTm/iWHMWK jH+JAIA2wUGc537w5ZaljMI8SC5l1TcmKGU45LlnizQIYRdpeOJTGrNVo9C4YCqx 4ajqQCnMaxO/qu9roftH67wfD4tNWkWI1NMC7ZYvpqVODelptFr7lsxfSvyRuXMy dYjn3l7LJeI5zXlqd8JBukm67nTT8aY9w+tpcNYnWYRkWIWdMth+QPB3g60au1xj 9ZKpU7KDQ/FzoSTOs9ACF2ZUI1WOz9rMuW5FHTR69mjFOgS6iwkw9LMAvW1JcgS0 iW9ohcTNmMHmQ6YRok4CMPpK+xUEV8V6XpuwgVGfZsJ9 -----END CERTIFICATE-----Generated at Sun Jan 25 16:37:48 2026 by rpki-client