This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/8dx6CDeeDv1yQZPzxZW_CCsiWuI.roa File: 8dx6CDeeDv1yQZPzxZW_CCsiWuI.roa (raw, json) Hash identifier: d7H5FvAS5k9Xu18WJ58VOwYw00U/ixBu9RyNPrcPus0= Subject key identifier: F1:DC:7A:08:37:9E:0E:FD:72:41:93:F3:C5:95:BF:08:2B:22:5A:E2 Certificate issuer: /CN=a833b0801d40d05849072e2fc81213b025d2a2bc Certificate serial: 019B7AC95265336534608CBD1FEAA536B5BE Authority key identifier: A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/8dx6CDeeDv1yQZPzxZW_CCsiWuI.roa Signing time: Thu 01 Jan 2026 18:19:32 +0000 ROA not before: Thu 01 Jan 2026 18:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42464 IP address blocks: 194.1.207.0/24 maxlen: 24 194.76.102.0/23 maxlen: 23 194.76.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:52:65:33:65:34:60:8c:bd:1f:ea:a5:36:b5:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a833b0801d40d05849072e2fc81213b025d2a2bc Validity Not Before: Jan 1 18:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1dc7a08379e0efd724193f3c595bf082b225ae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0b:50:fc:7b:cf:ef:f3:0d:64:91:1a:19:79: 45:c3:b8:87:cf:84:ad:88:95:c1:d4:a9:76:cb:f0: 09:12:3b:b3:2d:ea:13:76:4c:de:fb:d6:47:7e:09: 18:99:54:60:a9:ff:66:ae:e3:af:ee:f4:b1:34:6c: 88:54:5f:28:5e:3d:77:40:3e:f3:c4:45:a8:2e:d8: ff:17:ed:ee:8d:e9:11:f8:3f:4a:4c:ac:8b:f7:aa: 30:0b:5c:eb:e5:98:bc:5f:17:26:65:ee:30:2d:55: 7c:95:60:ba:5f:2c:cb:dc:7d:c3:c1:f3:a1:10:3a: 14:a9:77:85:06:d0:9a:3f:8a:3c:bb:26:6d:a2:0d: 2f:7d:7c:59:3d:3a:9a:20:d7:31:c2:15:a2:9c:43: bb:92:72:df:d9:8c:91:63:88:fe:2b:a7:f5:10:13: e5:97:4c:9e:2b:55:70:ae:eb:a3:4d:06:80:2e:b0: fa:f6:57:99:b7:4e:7a:6b:2a:af:b4:a3:ad:b9:17: 40:03:c5:63:aa:5a:e2:6e:32:b6:29:db:33:2c:36: 68:8c:67:f9:d2:4b:6f:5f:da:2d:cd:f2:8c:89:f8: a4:f3:0e:e6:80:10:e1:32:45:b9:00:2a:1b:95:25: 60:ac:6e:c8:74:c2:c9:83:d7:8d:d9:85:a7:98:f4: dd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DC:7A:08:37:9E:0E:FD:72:41:93:F3:C5:95:BF:08:2B:22:5A:E2 X509v3 Authority Key Identifier: keyid:A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/8dx6CDeeDv1yQZPzxZW_CCsiWuI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.1.207.0/24 194.76.102.0/23 Signature Algorithm: sha256WithRSAEncryption 92:59:15:5d:8a:37:1f:41:4a:60:38:d7:51:a1:df:e0:f5:32: 53:19:bc:d9:d3:f7:f0:8e:00:04:81:2b:24:e2:37:4f:8b:72: 78:c6:02:8a:42:ba:95:f0:fb:ac:96:d8:c5:a6:28:ec:e0:96: 78:22:89:9e:b1:0b:ed:96:c4:2a:7e:44:bc:a6:00:f0:a9:48: 6d:74:ee:ce:99:c7:fd:13:3c:df:9c:e3:36:16:0c:00:76:6d: a9:4d:24:b5:f4:4b:24:66:92:ee:13:a8:df:04:87:34:92:74: ef:c7:85:50:7b:ed:30:ec:78:3f:cc:a4:e9:cb:4c:b6:77:6f: 54:0c:3c:27:59:3c:ec:2e:97:fb:74:a0:d9:82:b6:8a:5a:47: f3:cd:b0:12:2d:c4:ec:ff:23:3c:e1:25:65:7f:6d:ad:d0:2e: 78:e8:2c:59:70:09:1e:f4:de:c4:55:62:0c:ea:83:f2:40:51: 05:c9:b5:ac:89:7d:b9:c6:98:3e:9c:c5:93:87:dc:8d:85:df: b5:86:e7:41:f6:9a:73:38:93:21:da:66:d1:68:67:51:88:72: 74:cb:89:12:8d:ca:33:bc:e4:79:dc:8a:de:9c:8a:ab:f8:53: 28:43:9d:6e:d1:b7:7c:41:9d:21:aa:12:a1:2b:4f:19:10:28: 40:8c:75:5c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yVJlM2U0YIy9H+qlNrW+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MzNiMDgwMWQ0MGQwNTg0OTA3MmUyZmM4MTIxM2IwMjVk MmEyYmMwHhcNMjYwMTAxMTgxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWRjN2EwODM3OWUwZWZkNzI0MTkzZjNjNTk1YmYwODJiMjI1YWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQtQ/HvP7/MNZJEaGXlFw7iHz4St iJXB1Kl2y/AJEjuzLeoTdkze+9ZHfgkYmVRgqf9mruOv7vSxNGyIVF8oXj13QD7z xEWoLtj/F+3ujekR+D9KTKyL96owC1zr5Zi8XxcmZe4wLVV8lWC6XyzL3H3DwfOh EDoUqXeFBtCaP4o8uyZtog0vfXxZPTqaINcxwhWinEO7knLf2YyRY4j+K6f1EBPl l0yeK1VwruujTQaALrD69leZt056ayqvtKOtuRdAA8VjqlribjK2KdszLDZojGf5 0ktvX9otzfKMifik8w7mgBDhMkW5ACoblSVgrG7IdMLJg9eN2YWnmPTdZwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPHcegg3ng79ckGT88WVvwgrIlriMB8GA1UdIwQY MBaAFKgzsIAdQNBYSQcuL8gSE7Al0qK8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcURPd2dCMUEwRmhKQnk0dnlCSVRzQ1hTb3J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9mNDJhYjEtMTA4OS00YjE0LWIyZjkt MTdiZjA2NmRhNGM1LzEvOGR4NkNEZWVEdjF5UVpQenhaV19DQ3NpV3VJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9mNDJhYjEtMTA4OS00YjE0LWIyZjktMTdiZjA2NmRhNGM1 LzEvcURPd2dCMUEwRmhKQnk0dnlCSVRzQ1hTb3J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwgHPAwQB wkxmMA0GCSqGSIb3DQEBCwUAA4IBAQCSWRVdijcfQUpgONdRod/g9TJTGbzZ0/fw jgAEgSsk4jdPi3J4xgKKQrqV8PusltjFpijs4JZ4IomesQvtlsQqfkS8pgDwqUht dO7Omcf9EzzfnOM2FgwAdm2pTSS19EskZpLuE6jfBIc0knTvx4VQe+0w7Hg/zKTp y0y2d29UDDwnWTzsLpf7dKDZgraKWkfzzbASLcTs/yM84SVlf22t0C546CxZcAke 9N7EVWIM6oPyQFEFybWsiX25xpg+nMWTh9yNhd+1hudB9ppzOJMh2mbRaGdRiHJ0 y4kSjcozvOR53IrenIqr+FMoQ51u0bd8QZ0hqhKhK08ZEChAjHVc -----END CERTIFICATE-----Generated at Sun Jan 25 20:28:49 2026 by rpki-client