This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/h8j2rZi6YE0oBAImebndnjRdDAM.roa File: h8j2rZi6YE0oBAImebndnjRdDAM.roa (raw, json) Hash identifier: y8g6VlOFnaXteE+vwuQSHx1ywVH7Kmooo6Pd73iGin4= Subject key identifier: 87:C8:F6:AD:98:BA:60:4D:28:04:02:26:79:B9:DD:9E:34:5D:0C:03 Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Certificate serial: 019B7D5D1A38DC39DE384298A44ADFCBB1FB Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/h8j2rZi6YE0oBAImebndnjRdDAM.roa Signing time: Fri 02 Jan 2026 06:20:12 +0000 ROA not before: Fri 02 Jan 2026 06:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30917 IP address blocks: 195.56.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:1a:38:dc:39:de:38:42:98:a4:4a:df:cb:b1:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Validity Not Before: Jan 2 06:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87c8f6ad98ba604d2804022679b9dd9e345d0c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:06:8e:df:f8:0c:16:bb:80:e9:da:8b:83:c5: 84:6d:f3:8d:dd:c2:0b:65:3d:81:79:48:b6:0c:ff: db:01:54:dc:af:75:84:09:9c:2d:62:b3:2f:09:7c: 96:c3:ae:c0:4a:60:58:3f:6a:a9:78:e4:05:78:44: 18:11:b2:f0:04:74:7a:93:ab:ec:1e:22:b8:7e:63: 3b:c1:0d:14:05:7f:5f:ce:59:52:0b:14:4a:fa:6a: ba:b9:44:3b:16:00:4e:9b:a0:37:ee:14:c2:70:58: f5:3f:a0:2a:c6:74:b6:2f:4a:a0:5f:18:be:50:a8: 19:2b:2a:93:0f:eb:19:d0:ce:8b:7d:e0:14:12:8e: f8:09:7c:90:6e:0f:91:bc:85:ec:b7:72:a6:35:0b: 4d:e5:a9:e3:93:d8:a0:79:74:63:08:7e:c4:c8:2d: bb:5d:71:2c:05:b3:8f:e9:b6:42:ed:27:60:ad:a6: 0a:80:4f:d1:74:ae:7d:62:c3:e2:3e:2a:2d:8b:57: 8c:0b:b2:0a:f4:08:9b:49:cd:ba:99:eb:f4:a7:94: c3:19:f7:ba:95:0e:68:83:98:5b:71:da:bc:7a:e1: 86:f4:50:c5:cb:46:9a:61:f3:21:d6:d7:f6:62:27: 0b:94:6e:45:ef:7d:81:93:ad:d9:79:72:52:e1:85: 1e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C8:F6:AD:98:BA:60:4D:28:04:02:26:79:B9:DD:9E:34:5D:0C:03 X509v3 Authority Key Identifier: keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/h8j2rZi6YE0oBAImebndnjRdDAM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.56.141.0/24 Signature Algorithm: sha256WithRSAEncryption 23:5a:76:e2:d3:48:62:10:be:95:88:af:36:23:42:4f:bb:17: 94:57:c3:58:14:99:f6:dc:23:19:9a:00:79:73:56:dd:c7:04: a2:08:c8:c0:29:17:b5:9d:40:07:5d:ea:eb:d0:5b:3d:96:2e: ad:96:0b:6e:e4:30:5d:9d:d1:29:aa:58:b3:3b:9f:e0:aa:05: 25:b9:60:5a:1b:45:42:1d:50:03:f3:49:a2:a7:02:bf:a1:f9: 12:b0:04:5a:96:87:29:21:2c:55:c9:a3:f3:cc:ce:10:d4:54: 1c:2f:10:02:5c:85:cd:2b:1d:ce:f5:bf:bc:7a:c5:c5:42:a7: 24:a3:5d:ed:15:c2:0d:bb:64:cc:12:c5:d9:df:cc:af:98:e0: 5b:f1:82:88:b0:8b:18:fe:b3:c4:77:5c:cc:bf:de:eb:0b:a2: 4e:3b:18:56:9a:33:45:7c:69:8b:c5:5a:fe:72:58:3f:97:b8: 7a:2c:c5:e1:d1:f1:cd:c1:9f:a0:6d:27:39:0a:69:87:c2:f9: f2:1a:4b:99:c3:43:1b:86:88:c7:25:d1:93:76:53:f6:0c:fc: 43:e2:75:e5:73:c6:02:0a:19:47:86:82:e5:da:ab:2c:78:8e: 41:79:69:8a:f1:0d:67:43:6b:45:7c:07:1d:00:fb:53:a1:71: 1d:80:b9:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XRo43DneOEKYpErfy7H7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4 YWFlN2IwHhcNMjYwMTAyMDYyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2M4ZjZhZDk4YmE2MDRkMjgwNDAyMjY3OWI5ZGQ5ZTM0NWQwYzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwaO3/gMFruA6dqLg8WEbfON3cIL ZT2BeUi2DP/bAVTcr3WECZwtYrMvCXyWw67ASmBYP2qpeOQFeEQYEbLwBHR6k6vs HiK4fmM7wQ0UBX9fzllSCxRK+mq6uUQ7FgBOm6A37hTCcFj1P6AqxnS2L0qgXxi+ UKgZKyqTD+sZ0M6LfeAUEo74CXyQbg+RvIXst3KmNQtN5anjk9igeXRjCH7EyC27 XXEsBbOP6bZC7SdgraYKgE/RdK59YsPiPioti1eMC7IK9AibSc26mev0p5TDGfe6 lQ5og5hbcdq8euGG9FDFy0aaYfMh1tf2YicLlG5F732Bk63ZeXJS4YUe9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIfI9q2YumBNKAQCJnm53Z40XQwDMB8GA1UdIwQY MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt MjkyYWU0NmU2MzAyLzEvaDhqMnJaaTZZRTBvQkFJbWVibmRualJkREFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwziNMA0G CSqGSIb3DQEBCwUAA4IBAQAjWnbi00hiEL6ViK82I0JPuxeUV8NYFJn23CMZmgB5 c1bdxwSiCMjAKRe1nUAHXerr0Fs9li6tlgtu5DBdndEpqlizO5/gqgUluWBaG0VC HVAD80mipwK/ofkSsARalocpISxVyaPzzM4Q1FQcLxACXIXNKx3O9b+8esXFQqck o13tFcINu2TMEsXZ38yvmOBb8YKIsIsY/rPEd1zMv97rC6JOOxhWmjNFfGmLxVr+ clg/l7h6LMXh0fHNwZ+gbSc5CmmHwvnyGkuZw0MbhojHJdGTdlP2DPxD4nXlc8YC ChlHhoLl2qsseI5BeWmK8Q1nQ2tFfAcdAPtToXEdgLlv -----END CERTIFICATE-----Generated at Sun Jan 25 15:29:08 2026 by rpki-client