This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/gOb9Za9DKkZTCd4SDzhZzSG1jN8.roa File: gOb9Za9DKkZTCd4SDzhZzSG1jN8.roa (raw, json) Hash identifier: Hgp5BhkZ1R5EgXib6KjQEGqRGTYiApeWX+wRLpcWukM= Subject key identifier: 80:E6:FD:65:AF:43:2A:46:53:09:DE:12:0F:38:59:CD:21:B5:8C:DF Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Certificate serial: 019B7D5D22C4B2076C2D9675E04AABA3DBD8 Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/gOb9Za9DKkZTCd4SDzhZzSG1jN8.roa Signing time: Fri 02 Jan 2026 06:20:14 +0000 ROA not before: Fri 02 Jan 2026 06:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202738 IP address blocks: 194.88.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:22:c4:b2:07:6c:2d:96:75:e0:4a:ab:a3:db:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Validity Not Before: Jan 2 06:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80e6fd65af432a465309de120f3859cd21b58cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:42:6b:bd:22:65:e0:78:f0:b2:f9:a3:5f:ad: 26:6b:5c:c1:08:ed:36:e7:dd:41:c9:2c:3f:4d:b7: 30:c5:77:e6:59:e7:79:a1:84:33:e0:1d:b1:aa:5e: 58:b7:f2:44:5f:d6:f7:e1:10:5d:cb:c1:16:20:db: 2b:58:d3:3c:23:11:55:cc:c9:a1:0c:5d:ad:02:9e: 59:78:6b:70:fa:5d:bd:3c:03:63:b5:11:9a:bc:f0: e0:14:80:19:38:fd:74:dd:3f:9d:05:74:54:04:8c: a0:a3:11:8a:9b:63:ed:6a:c1:9d:c7:e3:1c:17:5f: f1:62:84:1f:25:bf:c3:8f:65:52:53:0a:49:a3:10: 6b:7e:73:e2:f7:d9:48:cf:f6:07:c3:88:eb:17:ce: f8:5f:f3:9d:b9:71:ac:3c:8f:dd:dd:f3:d5:4f:cf: 1b:b9:20:f3:d4:af:ee:dd:2b:02:45:cb:8d:b5:6f: 12:7c:5d:08:dc:14:42:6b:16:9c:3d:6f:20:09:24: f8:fb:23:9e:ad:c8:88:80:94:e6:61:23:28:e0:9f: 66:83:1e:da:a3:e0:1c:a0:1b:77:1b:01:89:da:1f: b6:f7:f9:9d:f0:3b:0d:32:6a:17:af:b2:24:f7:00: 1a:8d:99:76:03:c0:89:7c:35:33:65:fa:b2:88:87: e5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E6:FD:65:AF:43:2A:46:53:09:DE:12:0F:38:59:CD:21:B5:8C:DF X509v3 Authority Key Identifier: keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/gOb9Za9DKkZTCd4SDzhZzSG1jN8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.88.34.0/24 Signature Algorithm: sha256WithRSAEncryption 79:9a:f4:9c:84:bb:37:85:31:84:52:53:65:29:11:2c:65:ab: 81:b0:17:70:51:64:14:dc:0a:7f:2d:bd:62:c3:2c:06:b3:8e: 1e:5b:27:80:cc:9c:31:76:38:46:87:2b:af:52:09:45:83:de: 99:bd:53:39:da:0f:f9:0b:fc:fe:ca:3c:04:4c:44:88:2c:db: f1:43:9b:06:0d:5b:23:ed:84:cb:67:79:00:f5:11:07:c2:9a: 67:71:88:51:20:32:1e:59:a1:d2:cb:d9:36:0f:3c:18:73:44: c8:e1:9b:c4:de:04:59:5b:86:88:5c:9b:d6:05:1d:bc:0a:cf: 63:29:0a:b9:c3:0f:fa:2f:a3:a5:6e:44:e8:a1:20:93:32:be: ca:b3:04:c5:4a:4a:ce:5b:11:93:b4:e9:fe:c3:09:64:20:3c: 9d:f6:2b:50:06:86:51:02:10:50:f3:7b:60:21:c7:86:1b:a4: 40:b9:4d:20:0d:f9:9e:62:bc:32:e6:24:92:e5:12:9f:7e:18: e8:63:28:da:4c:b6:8b:59:e0:46:77:e7:25:c4:76:6a:b5:32: 80:e0:b9:cd:4a:42:9a:e4:b6:a5:db:41:94:a9:89:ab:48:ca: 45:06:3a:0e:23:d5:96:14:55:f2:e4:55:2c:d9:21:83:de:37: f5:24:a7:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XSLEsgdsLZZ14Eqro9vYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4 YWFlN2IwHhcNMjYwMTAyMDYyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGU2ZmQ2NWFmNDMyYTQ2NTMwOWRlMTIwZjM4NTljZDIxYjU4Y2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0JrvSJl4HjwsvmjX60ma1zBCO02 591BySw/TbcwxXfmWed5oYQz4B2xql5Yt/JEX9b34RBdy8EWINsrWNM8IxFVzMmh DF2tAp5ZeGtw+l29PANjtRGavPDgFIAZOP103T+dBXRUBIygoxGKm2PtasGdx+Mc F1/xYoQfJb/Dj2VSUwpJoxBrfnPi99lIz/YHw4jrF874X/OduXGsPI/d3fPVT88b uSDz1K/u3SsCRcuNtW8SfF0I3BRCaxacPW8gCST4+yOerciIgJTmYSMo4J9mgx7a o+AcoBt3GwGJ2h+29/md8DsNMmoXr7Ik9wAajZl2A8CJfDUzZfqyiIflzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIDm/WWvQypGUwneEg84Wc0htYzfMB8GA1UdIwQY MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt MjkyYWU0NmU2MzAyLzEvZ09iOVphOURLa1pUQ2Q0U0R6aFp6U0cxak44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwlgiMA0G CSqGSIb3DQEBCwUAA4IBAQB5mvSchLs3hTGEUlNlKREsZauBsBdwUWQU3Ap/Lb1i wywGs44eWyeAzJwxdjhGhyuvUglFg96ZvVM52g/5C/z+yjwETESILNvxQ5sGDVsj 7YTLZ3kA9REHwppncYhRIDIeWaHSy9k2DzwYc0TI4ZvE3gRZW4aIXJvWBR28Cs9j KQq5ww/6L6OlbkTooSCTMr7KswTFSkrOWxGTtOn+wwlkIDyd9itQBoZRAhBQ83tg IceGG6RAuU0gDfmeYrwy5iSS5RKffhjoYyjaTLaLWeBGd+clxHZqtTKA4LnNSkKa 5Lal20GUqYmrSMpFBjoOI9WWFFXy5FUs2SGD3jf1JKcE -----END CERTIFICATE-----Generated at Sun Jan 25 15:29:01 2026 by rpki-client