This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/8GCiWcx8mqq89-eKSSRHyEp78Jk.roa File: 8GCiWcx8mqq89-eKSSRHyEp78Jk.roa (raw, json) Hash identifier: 1VoDgs3kjOrw6G1rdHG1fmbKleZRoSt+eF4wHzGq/bs= Subject key identifier: F0:60:A2:59:CC:7C:9A:AA:BC:F7:E7:8A:49:24:47:C8:4A:7B:F0:99 Certificate issuer: /CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d Certificate serial: 019B76EB8A07A1BB13B541BC3F2D838438F2 Authority key identifier: 6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/8GCiWcx8mqq89-eKSSRHyEp78Jk.roa Signing time: Thu 01 Jan 2026 00:18:26 +0000 ROA not before: Thu 01 Jan 2026 00:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29317 IP address blocks: 195.137.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8a:07:a1:bb:13:b5:41:bc:3f:2d:83:84:38:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d Validity Not Before: Jan 1 00:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f060a259cc7c9aaabcf7e78a492447c84a7bf099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a7:39:88:a1:22:44:c8:5f:cd:69:cf:52:f6: b7:58:37:1f:bc:01:58:3d:c2:0a:fb:93:f2:fd:d8: 57:58:15:17:6a:41:9b:c4:96:fc:b0:fb:07:79:f8: 45:35:b6:22:63:c3:70:83:94:4d:2c:46:0d:94:e9: 6d:85:48:fe:44:94:be:4a:53:68:1c:56:90:ec:75: 3a:a6:f6:16:ca:2e:01:15:19:38:8e:77:e0:d0:8e: 95:7a:5c:b9:5a:41:5e:3d:54:fa:0a:dd:c2:6c:6d: 96:b4:44:88:cc:71:53:02:ff:01:eb:81:a2:30:b8: 34:21:fe:a8:27:ae:6e:01:18:4a:99:00:49:eb:1b: d5:0b:e7:2a:4a:5c:e1:e2:15:74:da:43:c8:97:d1: 31:d9:e4:67:d2:58:28:b0:9d:77:ca:7a:6a:ad:46: d1:50:05:a3:37:b6:e8:be:aa:b5:8c:a1:4b:45:d5: b8:31:59:3c:82:f3:da:e9:7a:94:3d:15:1e:86:99: 73:2d:54:7a:c8:cc:da:67:dd:0f:8f:2f:be:02:86: 3d:34:c1:f2:47:e5:b0:47:ed:7f:ec:3d:4d:32:43: 60:3a:b6:ae:e4:77:17:67:21:f1:4e:53:df:5f:67: 1b:66:f8:c1:78:b7:42:ec:6b:91:70:ac:5e:8b:82: 44:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:60:A2:59:CC:7C:9A:AA:BC:F7:E7:8A:49:24:47:C8:4A:7B:F0:99 X509v3 Authority Key Identifier: keyid:6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/8GCiWcx8mqq89-eKSSRHyEp78Jk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.137.210.0/23 Signature Algorithm: sha256WithRSAEncryption 44:7a:fe:6e:e8:d8:76:93:70:56:0c:db:3d:58:31:1d:8d:b5: 8d:da:ae:65:fa:c1:c9:8c:d1:9c:2a:c5:e2:9f:76:a8:50:51: 61:38:8f:b9:91:4e:59:3d:54:f0:57:c3:ba:23:fb:f3:d0:02: 3e:e0:a1:dd:71:ab:2f:70:7f:61:3c:62:d1:9b:cf:7e:19:79: fa:9d:75:e9:00:de:47:d8:0d:bd:e2:d9:f3:6c:fd:bd:1d:18: 59:1f:4c:5b:12:cb:ce:19:c0:4a:04:d1:4b:d3:95:41:dc:fb: 4e:80:66:38:f3:56:1c:5c:2e:f3:18:2e:87:d0:0f:c5:4a:ef: ec:8e:14:f1:11:35:fb:52:0d:d5:17:cd:9e:33:c8:d9:00:e0: 57:7c:b2:41:58:3d:e6:cb:0e:95:ed:fe:d6:7f:ec:db:b6:09: 0a:72:48:94:10:02:d4:85:54:46:69:d9:46:b1:d9:63:fa:7a: 9a:82:eb:d3:67:fa:9c:86:64:9f:7c:08:a1:b9:75:50:d5:44: ea:d8:a5:2d:8d:87:02:90:fb:a4:c5:b9:2e:6d:6d:7c:63:68: 9b:7d:e4:5e:7b:08:62:6e:11:27:7c:d3:ec:19:7a:fc:30:6b: 6e:4d:31:41:2c:a9:f0:33:e4:6c:da:52:a4:bb:6b:dc:b6:18: 79:ae:d1:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264oHobsTtUG8Py2DhDjyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZmYzZDg5OWUyNmZjODRmYjQzNzlmYjMyNWYxNzRiNTA3 NWNlMGQwHhcNMjYwMTAxMDAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDYwYTI1OWNjN2M5YWFhYmNmN2U3OGE0OTI0NDdjODRhN2JmMDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhac5iKEiRMhfzWnPUva3WDcfvAFY PcIK+5Py/dhXWBUXakGbxJb8sPsHefhFNbYiY8Nwg5RNLEYNlOlthUj+RJS+SlNo HFaQ7HU6pvYWyi4BFRk4jnfg0I6Vely5WkFePVT6Ct3CbG2WtESIzHFTAv8B64Gi MLg0If6oJ65uARhKmQBJ6xvVC+cqSlzh4hV02kPIl9Ex2eRn0lgosJ13ynpqrUbR UAWjN7bovqq1jKFLRdW4MVk8gvPa6XqUPRUehplzLVR6yMzaZ90Pjy++AoY9NMHy R+WwR+1/7D1NMkNgOrau5HcXZyHxTlPfX2cbZvjBeLdC7GuRcKxei4JE6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPBgolnMfJqqvPfnikkkR8hKe/CZMB8GA1UdIwQY MBaAFGz/PYmeJvyE+0N5+zJfF0tQdc4NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlA4OWlaNG1fSVQ3UTNuN01sOFhTMUIxemcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iMGM4NzUtMjRlMS00NDRkLWIwMWQt NTQwOGY4ZDlkZmIxLzEvOEdDaVdjeDhtcXE4OS1lS1NTUkh5RXA3OEprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9iMGM4NzUtMjRlMS00NDRkLWIwMWQtNTQwOGY4ZDlkZmIx LzEvYlA4OWlaNG1fSVQ3UTNuN01sOFhTMUIxemcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw4nSMA0G CSqGSIb3DQEBCwUAA4IBAQBEev5u6Nh2k3BWDNs9WDEdjbWN2q5l+sHJjNGcKsXi n3aoUFFhOI+5kU5ZPVTwV8O6I/vz0AI+4KHdcasvcH9hPGLRm89+GXn6nXXpAN5H 2A294tnzbP29HRhZH0xbEsvOGcBKBNFL05VB3PtOgGY481YcXC7zGC6H0A/FSu/s jhTxETX7Ug3VF82eM8jZAOBXfLJBWD3myw6V7f7Wf+zbtgkKckiUEALUhVRGadlG sdlj+nqaguvTZ/qchmSffAihuXVQ1UTq2KUtjYcCkPukxbkubW18Y2ibfeReewhi bhEnfNPsGXr8MGtuTTFBLKnwM+Rs2lKku2vcthh5rtG4 -----END CERTIFICATE-----Generated at Tue Jan 27 00:30:48 2026 by rpki-client