This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/i8iYm_0FW8CEhhGEtap9i1HCpbU.roa File: i8iYm_0FW8CEhhGEtap9i1HCpbU.roa (raw, json) Hash identifier: S62F8bLmRb8I4/DcdbRM8zS7BP7h1o24+JuRtSpKmdc= Subject key identifier: 8B:C8:98:9B:FD:05:5B:C0:84:86:11:84:B5:AA:7D:8B:51:C2:A5:B5 Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46 Certificate serial: 019B79109813BAAA494397BA1161358C4F49 Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/i8iYm_0FW8CEhhGEtap9i1HCpbU.roa Signing time: Thu 01 Jan 2026 10:18:09 +0000 ROA not before: Thu 01 Jan 2026 10:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48156 IP address blocks: 194.137.237.0/24 maxlen: 24 195.165.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:98:13:ba:aa:49:43:97:ba:11:61:35:8c:4f:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46 Validity Not Before: Jan 1 10:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bc8989bfd055bc084861184b5aa7d8b51c2a5b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2a:07:0a:cc:23:5b:e0:e0:cb:24:c2:2d:6e: ec:1f:de:aa:6f:39:ba:ac:f7:db:c5:2f:26:17:c3: 78:bc:07:d9:bd:60:b9:8c:7a:07:3a:9b:fa:5a:44: 08:0b:c5:9f:09:c1:26:b4:6b:b5:a5:a9:53:1b:f7: 80:ca:ab:0d:8f:09:09:12:19:16:23:e2:ad:89:00: 5e:df:4d:81:34:16:c7:f2:8d:18:73:f6:cc:df:d5: 72:d0:6a:17:67:b5:c0:f3:b5:ec:3c:b5:53:99:a9: 38:c6:c9:2c:3b:f4:b7:29:3b:e7:f8:23:88:e0:eb: f1:68:3b:0d:b1:da:2d:62:2f:49:91:4b:50:b4:0d: 59:48:2b:03:ae:c0:fa:98:1f:22:33:6c:00:93:e3: b7:8f:2f:cf:c3:4c:91:d8:34:75:57:14:74:38:70: b5:ef:98:ce:f5:21:d4:58:b9:dc:d9:40:5e:d2:ee: f4:c7:b8:ed:d1:87:2c:6e:5d:33:6d:72:0e:90:a8: ab:67:6e:9f:dc:05:aa:d6:43:3d:59:4d:c4:28:35: b8:37:12:38:d9:8d:4f:96:ba:f2:2d:02:03:31:72: 53:3a:95:50:c3:93:ff:a4:16:66:d0:af:8a:cb:c2: 4e:73:09:63:d0:4b:01:f0:ad:7a:83:71:65:bd:25: 39:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C8:98:9B:FD:05:5B:C0:84:86:11:84:B5:AA:7D:8B:51:C2:A5:B5 X509v3 Authority Key Identifier: keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/i8iYm_0FW8CEhhGEtap9i1HCpbU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.137.237.0/24 195.165.77.0/24 Signature Algorithm: sha256WithRSAEncryption 27:5e:5d:f1:2c:5c:19:6e:5d:2e:96:07:8d:b0:4c:8e:1c:8c: 3f:7b:25:c7:39:35:09:bc:b9:07:e3:7e:dc:ed:a9:61:95:dd: db:e1:5c:b6:18:c8:40:59:48:90:8a:d0:be:8f:b2:49:52:ce: 9f:3c:af:19:41:d7:6d:e7:b0:11:f7:19:54:21:d3:53:6f:ea: b6:ca:7a:0a:b6:a2:f9:19:79:91:85:16:86:e0:30:94:47:d6: 48:7c:37:24:ee:fb:2a:83:21:82:a7:d4:48:5b:9b:98:e3:af: 8f:25:cd:b7:c3:83:b8:a9:f2:eb:34:d3:56:d5:36:1d:d2:50: 46:c6:dd:02:93:0d:e9:b2:7f:1b:00:5b:20:25:24:26:4c:2e: 34:89:3e:b2:09:c7:97:0a:53:97:e3:06:19:98:2a:d8:3e:b7: 13:5c:75:00:7d:69:52:05:dd:b5:08:97:e6:d3:e3:cd:62:25: c5:1b:81:9d:76:c6:0f:bd:1e:bd:16:41:ff:69:c0:5b:83:ca: fe:6d:12:7f:f3:0b:18:7b:ef:0d:6b:73:74:66:91:03:c0:ee: 3d:23:84:9e:d3:2a:ca:af:1e:4e:db:e0:ed:38:a5:9a:54:0b: f6:84:6f:7d:d2:c7:e0:17:d4:11:c2:38:7a:43:02:e3:4d:25: 19:70:0c:aa -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EJgTuqpJQ5e6EWE1jE9JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYTE0MGU4MDI4ZTZkNTM3NjAwZTA4ODhhOWFmNWE5NzFj NWRiNDYwHhcNMjYwMTAxMTAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmM4OTg5YmZkMDU1YmMwODQ4NjExODRiNWFhN2Q4YjUxYzJhNWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSoHCswjW+DgyyTCLW7sH96qbzm6 rPfbxS8mF8N4vAfZvWC5jHoHOpv6WkQIC8WfCcEmtGu1palTG/eAyqsNjwkJEhkW I+KtiQBe302BNBbH8o0Yc/bM39Vy0GoXZ7XA87XsPLVTmak4xsksO/S3KTvn+COI 4OvxaDsNsdotYi9JkUtQtA1ZSCsDrsD6mB8iM2wAk+O3jy/Pw0yR2DR1VxR0OHC1 75jO9SHUWLnc2UBe0u70x7jt0Ycsbl0zbXIOkKirZ26f3AWq1kM9WU3EKDW4NxI4 2Y1PlrryLQIDMXJTOpVQw5P/pBZm0K+Ky8JOcwlj0EsB8K16g3FlvSU5qwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIvImJv9BVvAhIYRhLWqfYtRwqW1MB8GA1UdIwQY MBaAFJ2hQOgCjm1TdgDgiIqa9alxxdtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgt YTRjYThiOWMyMDViLzEvaThpWW1fMEZXOENFaGhHRXRhcDlpMUhDcGJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgtYTRjYThiOWMyMDVi LzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwontAwQA w6VNMA0GCSqGSIb3DQEBCwUAA4IBAQAnXl3xLFwZbl0ulgeNsEyOHIw/eyXHOTUJ vLkH437c7alhld3b4Vy2GMhAWUiQitC+j7JJUs6fPK8ZQddt57AR9xlUIdNTb+q2 ynoKtqL5GXmRhRaG4DCUR9ZIfDck7vsqgyGCp9RIW5uY46+PJc23w4O4qfLrNNNW 1TYd0lBGxt0Ckw3psn8bAFsgJSQmTC40iT6yCceXClOX4wYZmCrYPrcTXHUAfWlS Bd21CJfm0+PNYiXFG4GddsYPvR69FkH/acBbg8r+bRJ/8wsYe+8Na3N0ZpEDwO49 I4Se0yrKrx5O2+DtOKWaVAv2hG990sfgF9QRwjh6QwLjTSUZcAyq -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:41 2026 by rpki-client