This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/S8MWOlW-Vjb8leJbaZMsDUN87Ss.roa File: S8MWOlW-Vjb8leJbaZMsDUN87Ss.roa (raw, json) Hash identifier: wikPp7X61J9BcNvkU05wIEdzT3V8DLeI/IY315exqs4= Subject key identifier: 4B:C3:16:3A:55:BE:56:36:FC:95:E2:5B:69:93:2C:0D:43:7C:ED:2B Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 019B79ECC3F1F2A7DDC214EA7273C0882EEC Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/S8MWOlW-Vjb8leJbaZMsDUN87Ss.roa Signing time: Thu 01 Jan 2026 14:18:38 +0000 ROA not before: Thu 01 Jan 2026 14:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203985 IP address blocks: 94.240.12.0/24 maxlen: 24 94.240.28.0/24 maxlen: 24 94.240.29.0/24 maxlen: 24 94.240.30.0/24 maxlen: 24 94.240.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c3:f1:f2:a7:dd:c2:14:ea:72:73:c0:88:2e:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Jan 1 14:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bc3163a55be5636fc95e25b69932c0d437ced2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:60:de:31:33:ff:7b:22:4b:18:6e:fb:dc:ff: a9:1e:45:fc:94:c9:5b:96:73:00:91:56:c0:38:ec: a9:e3:b0:38:18:53:7f:e0:92:9d:82:16:64:eb:59: 66:f2:b5:da:17:48:5b:6b:91:3f:d5:c8:dc:ca:7b: 3d:1e:0f:3a:47:e1:d2:57:b6:0e:ea:06:bb:81:50: ed:33:d3:21:64:4b:1e:a2:2c:63:cb:ee:67:08:c7: 96:f1:59:8e:46:2b:68:2d:19:f2:8a:83:3f:69:22: 7a:0b:95:63:64:3d:95:50:34:98:06:54:b2:28:87: 46:41:8b:0d:78:b5:df:5a:d5:18:0d:3b:f4:be:af: 75:66:3b:f6:46:9d:33:5b:46:8e:85:03:88:79:b7: 01:79:08:8a:c6:e7:8a:b9:9e:dd:de:17:5e:68:b3: 3f:c1:d6:69:aa:ad:0c:48:01:cb:49:10:40:28:57: e9:a7:91:10:9a:d3:b1:6f:df:c1:dd:6b:10:2b:68: 91:74:02:49:8b:00:33:c4:28:8c:73:75:62:02:fe: 9f:c9:cd:66:90:a5:2f:cc:b8:07:21:a8:dc:69:74: 74:11:f1:ad:fc:9a:20:11:f2:9e:18:27:37:f6:6a: 04:bd:36:4c:fb:4c:0d:ad:5f:ba:2f:41:6f:d1:24: 34:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C3:16:3A:55:BE:56:36:FC:95:E2:5B:69:93:2C:0D:43:7C:ED:2B X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/S8MWOlW-Vjb8leJbaZMsDUN87Ss.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.240.12.0/24 94.240.28.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:23:b6:e2:37:ac:27:de:ae:ae:a4:14:2c:0f:15:58:29:ca: 4c:70:76:fa:dc:f6:31:3f:08:0b:4b:24:ae:d5:5b:22:5c:c9: c4:74:51:1e:03:9d:72:9c:a7:44:7e:46:a4:36:34:16:85:9d: c4:a0:46:3f:35:16:43:1a:00:bf:4b:ce:a0:f4:d2:72:d8:b8: 59:5b:1e:94:62:f7:db:a6:86:6d:34:c2:c5:6e:3b:96:d5:b1: 86:6c:08:26:04:3e:d8:57:98:38:8f:d3:a1:e5:24:24:04:80: 3e:fd:e0:2f:68:83:07:e5:91:29:77:a5:e9:fd:99:cd:f1:6c: 33:99:af:87:cb:37:bc:07:f4:32:e4:9f:bd:76:b1:ca:f5:5b: 3d:b7:07:fd:96:45:d7:eb:11:51:41:e4:29:21:ab:49:66:96: e6:e6:31:12:1c:82:54:93:d7:37:46:03:32:1c:13:19:67:e9: 2d:aa:e3:a2:ec:06:1b:1d:b3:24:e6:5e:89:86:f2:10:ce:26: c7:04:ed:80:0a:a4:d9:d5:83:1e:54:6b:a0:0b:68:99:bf:9a: 71:5e:0a:15:d6:7a:fb:a6:c6:ee:d3:33:4a:29:17:5d:63:31: 3a:47:50:4c:53:57:dc:fb:a4:53:6a:22:2f:29:a4:52:53:3d: b4:39:86:bf -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57MPx8qfdwhTqcnPAiC7sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjYwMTAxMTQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmMzMTYzYTU1YmU1NjM2ZmM5NWUyNWI2OTkzMmMwZDQzN2NlZDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2DeMTP/eyJLGG773P+pHkX8lMlb lnMAkVbAOOyp47A4GFN/4JKdghZk61lm8rXaF0hba5E/1cjcyns9Hg86R+HSV7YO 6ga7gVDtM9MhZEseoixjy+5nCMeW8VmORitoLRnyioM/aSJ6C5VjZD2VUDSYBlSy KIdGQYsNeLXfWtUYDTv0vq91Zjv2Rp0zW0aOhQOIebcBeQiKxueKuZ7d3hdeaLM/ wdZpqq0MSAHLSRBAKFfpp5EQmtOxb9/B3WsQK2iRdAJJiwAzxCiMc3ViAv6fyc1m kKUvzLgHIajcaXR0EfGt/JogEfKeGCc39moEvTZM+0wNrV+6L0Fv0SQ0ywIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEvDFjpVvlY2/JXiW2mTLA1DfO0rMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvUzhNV09sVy1WamI4bGVKYmFaTXNEVU44N1NzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXvAMAwQC XvAcMA0GCSqGSIb3DQEBCwUAA4IBAQB/I7biN6wn3q6upBQsDxVYKcpMcHb63PYx PwgLSySu1VsiXMnEdFEeA51ynKdEfkakNjQWhZ3EoEY/NRZDGgC/S86g9NJy2LhZ Wx6UYvfbpoZtNMLFbjuW1bGGbAgmBD7YV5g4j9Oh5SQkBIA+/eAvaIMH5ZEpd6Xp /ZnN8Wwzma+Hyze8B/Qy5J+9drHK9Vs9twf9lkXX6xFRQeQpIatJZpbm5jESHIJU k9c3RgMyHBMZZ+ktquOi7AYbHbMk5l6JhvIQzibHBO2ACqTZ1YMeVGugC2iZv5px XgoV1nr7psbu0zNKKRddYzE6R1BMU1fc+6RTaiIvKaRSUz20OYa/ -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:56 2026 by rpki-client