This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/8KwJ-R4Fe_7j5Oz3vGnqE6iEHnA.roa File: 8KwJ-R4Fe_7j5Oz3vGnqE6iEHnA.roa (raw, json) Hash identifier: 6IT2bitXdYXnzdvwuMwMeIP3FhOJLz+jccpQmwAQHas= Subject key identifier: F0:AC:09:F9:1E:05:7B:FE:E3:E4:EC:F7:BC:69:EA:13:A8:84:1E:70 Certificate issuer: /CN=321ec194107843848cd36330232b5f6a43791db4 Certificate serial: 019B7AC948B9DCC4970AF105CEC041814888 Authority key identifier: 32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/8KwJ-R4Fe_7j5Oz3vGnqE6iEHnA.roa Signing time: Thu 01 Jan 2026 18:19:30 +0000 ROA not before: Thu 01 Jan 2026 18:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43519 IP address blocks: 194.227.193.0/24 maxlen: 24 194.227.194.0/24 maxlen: 24 194.227.195.0/24 maxlen: 24 212.148.211.0/24 maxlen: 24 212.148.212.0/24 maxlen: 24 212.148.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:48:b9:dc:c4:97:0a:f1:05:ce:c0:41:81:48:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=321ec194107843848cd36330232b5f6a43791db4 Validity Not Before: Jan 1 18:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0ac09f91e057bfee3e4ecf7bc69ea13a8841e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:95:f6:9f:0c:f3:bc:d4:33:04:54:68:6c:66: a0:9a:86:5d:3b:30:b5:e4:be:5e:9f:66:d8:e1:cb: 45:d3:80:b8:e3:0e:15:05:b7:ba:f1:52:91:fe:e3: 0e:a1:3c:8b:46:a4:ca:69:fc:4c:b4:d1:90:d9:f7: 14:6b:3d:e9:cf:66:3f:87:a3:90:23:db:e6:91:4b: ca:20:58:5c:7e:87:82:1a:c0:f2:d2:bd:05:09:4e: ec:b2:9a:22:fc:99:70:b9:ae:3d:08:f7:47:88:15: f5:dc:4e:f5:6d:fa:d0:e3:df:1e:21:6f:fe:7a:68: dc:b9:61:03:6f:4f:4f:69:0d:6e:ee:31:39:92:d6: 34:a2:ae:ea:9a:d0:1e:79:47:47:8b:a9:7c:7a:3d: 7a:29:2e:1f:26:ef:61:b9:d4:9d:14:ed:08:d4:02: 48:38:0b:63:20:18:ab:c6:8a:d7:b2:86:82:c0:7e: 0a:da:fa:62:0e:a5:32:5b:7c:b2:68:9c:23:43:c9: 1d:20:be:b2:d6:0f:7a:2c:45:ba:b4:7f:5e:cb:ae: f7:36:bd:7b:02:3f:62:fc:b0:6b:b9:b8:49:da:04: 23:d9:cb:da:7d:ab:1c:a3:4b:d0:b5:c8:47:73:30: ac:99:4a:4c:cd:64:a2:bb:97:9c:77:13:0e:c2:34: f6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:AC:09:F9:1E:05:7B:FE:E3:E4:EC:F7:BC:69:EA:13:A8:84:1E:70 X509v3 Authority Key Identifier: keyid:32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/8KwJ-R4Fe_7j5Oz3vGnqE6iEHnA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.227.193.0-194.227.195.255 212.148.211.0-212.148.213.255 Signature Algorithm: sha256WithRSAEncryption 85:b3:6d:d0:42:b6:75:73:8f:f8:42:b7:fb:26:1b:8e:5a:97: 8c:88:c7:1c:14:06:a3:20:19:35:e4:19:bf:b0:27:19:2b:31: e5:46:2a:c3:1b:ae:b6:df:0b:4b:b7:6b:05:2a:e8:f0:b1:a6: e5:50:ba:b0:01:58:bd:75:af:80:c8:4a:5f:da:32:9d:c3:ed: 39:66:b9:0a:ab:05:88:b4:d0:a8:a9:43:a6:be:db:6c:4f:e0: 97:76:1a:67:1a:07:e4:38:42:c8:f2:1a:44:12:a1:af:cf:f4: fa:af:dd:3f:9e:6b:69:78:25:02:1e:03:de:74:1a:54:5c:fb: f9:a3:3a:cd:22:fc:31:f9:38:81:43:6e:2a:23:42:f2:49:f8: 0c:ac:c2:de:f2:3d:5d:8c:df:1f:8d:ad:b5:15:61:4e:dd:93: c2:7e:38:85:67:e3:e2:da:15:4b:4a:af:2e:93:f2:7d:c0:20: 2f:93:2f:c9:e8:24:92:2d:5a:5b:01:a3:23:d2:6c:73:ff:d1: 15:15:17:4f:d5:3a:82:f5:e1:77:7f:3d:60:30:79:51:e1:02: 12:b3:20:64:a1:84:d9:90:97:9e:44:ce:c9:8a:e7:53:7d:23: 87:df:23:22:18:7d:51:77:87:b8:be:2e:31:0f:3e:14:3b:2e: 53:2e:6c:ab -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt6yUi53MSXCvEFzsBBgUiIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMWVjMTk0MTA3ODQzODQ4Y2QzNjMzMDIzMmI1ZjZhNDM3 OTFkYjQwHhcNMjYwMTAxMTgxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGFjMDlmOTFlMDU3YmZlZTNlNGVjZjdiYzY5ZWExM2E4ODQxZTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5X2nwzzvNQzBFRobGagmoZdOzC1 5L5en2bY4ctF04C44w4VBbe68VKR/uMOoTyLRqTKafxMtNGQ2fcUaz3pz2Y/h6OQ I9vmkUvKIFhcfoeCGsDy0r0FCU7sspoi/Jlwua49CPdHiBX13E71bfrQ498eIW/+ emjcuWEDb09PaQ1u7jE5ktY0oq7qmtAeeUdHi6l8ej16KS4fJu9hudSdFO0I1AJI OAtjIBirxorXsoaCwH4K2vpiDqUyW3yyaJwjQ8kdIL6y1g96LEW6tH9ey673Nr17 Aj9i/LBrubhJ2gQj2cvafasco0vQtchHczCsmUpMzWSiu5ecdxMOwjT2qwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFPCsCfkeBXv+4+Ts97xp6hOohB5wMB8GA1UdIwQY MBaAFDIewZQQeEOEjNNjMCMrX2pDeR20MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWg3QmxCQjRRNFNNMDJNd0l5dGZha041SGJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9mMTQ1OGYtYmRjMy00ZTRiLTlmNjgt M2E2MTFjMDkzYTJjLzEvOEt3Si1SNEZlXzdqNU96M3ZHbnFFNmlFSG5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9mMTQ1OGYtYmRjMy00ZTRiLTlmNjgtM2E2MTFjMDkzYTJj LzEvTWg3QmxCQjRRNFNNMDJNd0l5dGZha041SGJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBADC48ED BALC48AwDAMEANSU0wMEAdSU1DANBgkqhkiG9w0BAQsFAAOCAQEAhbNt0EK2dXOP +EK3+yYbjlqXjIjHHBQGoyAZNeQZv7AnGSsx5UYqwxuutt8LS7drBSro8LGm5VC6 sAFYvXWvgMhKX9oyncPtOWa5CqsFiLTQqKlDpr7bbE/gl3YaZxoH5DhCyPIaRBKh r8/0+q/dP55raXglAh4D3nQaVFz7+aM6zSL8Mfk4gUNuKiNC8kn4DKzC3vI9XYzf H42ttRVhTt2Twn44hWfj4toVS0qvLpPyfcAgL5Mvyegkki1aWwGjI9Jsc//RFRUX T9U6gvXhd389YDB5UeECErMgZKGE2ZCXnkTOyYrnU30jh98jIhh9UXeHuL4uMQ8+ FDsuUy5sqw== -----END CERTIFICATE-----Generated at Sun Jan 25 13:29:11 2026 by rpki-client