This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/8YHYJKejClzJHQyWmQyoXfMGo7c.roa File: 8YHYJKejClzJHQyWmQyoXfMGo7c.roa (raw, json) Hash identifier: hjyF8It1A4EPMePr0TlEaEGlDpxI1/XUazn11vRCxOU= Subject key identifier: F1:81:D8:24:A7:A3:0A:5C:C9:1D:0C:96:99:0C:A8:5D:F3:06:A3:B7 Certificate issuer: /CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf Certificate serial: 019B7834D8217CC0A761CC1540FE632DEA01 Authority key identifier: 33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/8YHYJKejClzJHQyWmQyoXfMGo7c.roa Signing time: Thu 01 Jan 2026 06:18:07 +0000 ROA not before: Thu 01 Jan 2026 06:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201921 IP address blocks: 194.33.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:d8:21:7c:c0:a7:61:cc:15:40:fe:63:2d:ea:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf Validity Not Before: Jan 1 06:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f181d824a7a30a5cc91d0c96990ca85df306a3b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d2:9c:f4:06:50:4a:69:5c:fe:3f:34:ca:33: f4:82:5f:7b:ce:1f:be:75:ac:f7:ee:0e:fe:8e:f6: 9d:70:84:06:0a:86:81:2f:6c:1e:9d:1c:5e:da:64: 36:4e:b4:fd:cb:22:f8:e7:3a:c3:9a:c2:20:1a:81: f1:89:bb:30:dc:a9:4e:ec:61:95:2a:53:32:04:bf: 8c:66:ba:c8:01:d6:7e:37:38:f6:b3:fc:5f:23:dc: 08:d4:16:8d:87:7a:d3:4b:1f:5a:4e:3a:89:d5:0b: 65:57:4d:73:e8:ac:88:f5:9d:17:db:2b:df:0f:6f: 60:20:56:31:c5:3d:b4:79:e7:82:67:f0:d9:6c:98: 2e:7a:22:65:c4:66:22:4d:0a:13:4c:fe:f8:e7:59: a1:dc:b5:e9:c3:4d:50:5f:08:ee:f2:16:26:a7:4f: c0:9f:0b:96:11:20:d0:b7:ea:22:f5:45:23:22:bc: 83:c3:21:79:7e:83:8b:a4:c6:11:e9:f9:db:43:67: 48:33:60:ad:5f:36:ea:15:e6:2f:e4:11:94:90:89: 22:11:98:15:6f:5c:34:b3:f3:f2:ef:ea:4d:8f:2f: cc:69:31:fc:42:0b:9b:0b:46:05:5d:6e:02:2b:56: ae:22:75:e4:d7:9b:89:68:98:e1:10:ac:53:fc:56: 16:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:81:D8:24:A7:A3:0A:5C:C9:1D:0C:96:99:0C:A8:5D:F3:06:A3:B7 X509v3 Authority Key Identifier: keyid:33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/8YHYJKejClzJHQyWmQyoXfMGo7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.33.82.0/24 Signature Algorithm: sha256WithRSAEncryption 72:c5:45:5d:59:40:57:cf:61:2e:af:59:84:a4:12:e8:d4:46: 08:f7:a7:88:ce:8d:b9:78:d7:fb:7f:5a:5c:a5:66:50:04:33: be:00:0e:48:91:84:59:c6:56:3d:51:09:7b:d3:7d:44:a5:63: a7:37:fa:4f:e6:d6:bc:58:1f:07:a9:23:e9:be:a0:cc:f2:9b: 58:5d:e8:56:2a:4e:cf:fd:01:d1:ed:d1:87:1c:45:11:40:dc: d1:fb:ba:05:29:18:44:07:2f:55:b3:90:3c:f2:67:91:23:19: 0a:eb:48:fe:2f:db:c8:be:27:e1:e2:94:e6:93:25:36:44:b3: 8b:c2:fa:5f:22:99:40:d9:87:81:3a:51:a9:21:2b:87:a9:19: 0f:78:e8:0d:d7:f4:f7:ee:58:e4:d3:21:30:d9:62:23:62:24: 26:df:30:2b:3a:24:d9:cf:d5:95:3e:b1:84:57:6d:cd:94:69: a1:0f:24:3f:46:55:4b:7f:b6:17:1c:66:82:4e:1c:03:86:4f: 96:3b:92:d1:69:2c:b0:ab:6e:74:a2:0b:23:90:73:85:ff:80: 4c:3d:94:5f:84:c2:71:9e:da:11:9d:66:a1:fc:2b:9b:a8:57: fe:4b:c9:5b:5e:1d:31:0c:41:76:61:3f:38:a3:6f:78:94:dd: 96:7c:a1:8a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NNghfMCnYcwVQP5jLeoBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMWVkM2Q3YmE1MTFjYTYwMDJkODQ1YjNjMGFhODExMWEz NTU5Y2YwHhcNMjYwMTAxMDYxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTgxZDgyNGE3YTMwYTVjYzkxZDBjOTY5OTBjYTg1ZGYzMDZhM2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NKc9AZQSmlc/j80yjP0gl97zh++ daz37g7+jvadcIQGCoaBL2wenRxe2mQ2TrT9yyL45zrDmsIgGoHxibsw3KlO7GGV KlMyBL+MZrrIAdZ+Nzj2s/xfI9wI1BaNh3rTSx9aTjqJ1QtlV01z6KyI9Z0X2yvf D29gIFYxxT20eeeCZ/DZbJgueiJlxGYiTQoTTP7451mh3LXpw01QXwju8hYmp0/A nwuWESDQt+oi9UUjIryDwyF5foOLpMYR6fnbQ2dIM2CtXzbqFeYv5BGUkIkiEZgV b1w0s/Py7+pNjy/MaTH8QgubC0YFXW4CK1auInXk15uJaJjhEKxT/FYW4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPGB2CSnowpcyR0MlpkMqF3zBqO3MB8GA1UdIwQY MBaAFDMe09e6URymAC2EWzwKqBEaNVnPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXg3VDE3cFJIS1lBTFlSYlBBcW9FUm8xV2M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mZWFhMWItYjdjMS00YjQ4LTk1OTQt YmFmMjRkZDU4MzlmLzEvOFlIWUpLZWpDbHpKSFF5V21ReW9YZk1HbzdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9mZWFhMWItYjdjMS00YjQ4LTk1OTQtYmFmMjRkZDU4Mzlm LzEvTXg3VDE3cFJIS1lBTFlSYlBBcW9FUm8xV2M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiFSMA0G CSqGSIb3DQEBCwUAA4IBAQByxUVdWUBXz2Eur1mEpBLo1EYI96eIzo25eNf7f1pc pWZQBDO+AA5IkYRZxlY9UQl7031EpWOnN/pP5ta8WB8HqSPpvqDM8ptYXehWKk7P /QHR7dGHHEURQNzR+7oFKRhEBy9Vs5A88meRIxkK60j+L9vIvifh4pTmkyU2RLOL wvpfIplA2YeBOlGpISuHqRkPeOgN1/T37ljk0yEw2WIjYiQm3zArOiTZz9WVPrGE V23NlGmhDyQ/RlVLf7YXHGaCThwDhk+WO5LRaSywq250ogsjkHOF/4BMPZRfhMJx ntoRnWah/CubqFf+S8lbXh0xDEF2YT84o294lN2WfKGK -----END CERTIFICATE-----Generated at Sun Jan 25 13:46:59 2026 by rpki-client