This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/8pV9FFO-tES_JuUHxRKhch63PEo.roa File: 8pV9FFO-tES_JuUHxRKhch63PEo.roa (raw, json) Hash identifier: 540XzD9mn0yvC46UKHgIPXJPTkeY5N8Mqtv1H6BSjos= Subject key identifier: F2:95:7D:14:53:BE:B4:44:BF:26:E5:07:C5:12:A1:72:1E:B7:3C:4A Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Certificate serial: 019B77C7247D34E7ED013F6A684A615E36BB Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/8pV9FFO-tES_JuUHxRKhch63PEo.roa Signing time: Thu 01 Jan 2026 04:18:18 +0000 ROA not before: Thu 01 Jan 2026 04:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34471 IP address blocks: 194.104.231.0/24 maxlen: 24 217.119.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:24:7d:34:e7:ed:01:3f:6a:68:4a:61:5e:36:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Validity Not Before: Jan 1 04:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2957d1453beb444bf26e507c512a1721eb73c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:34:e0:34:f5:4e:9d:fa:58:d2:79:a1:ed:12: e7:b8:84:76:e9:ef:99:43:c0:30:54:32:a3:eb:3b: 8b:93:f1:ba:ce:94:8e:76:62:eb:3e:73:c2:62:44: 4d:9c:e6:c6:39:f8:7c:0a:ad:bd:74:8a:ef:fa:3d: 91:65:12:17:bb:97:e7:d8:52:ea:cb:df:2a:55:9a: 51:8d:d7:51:b5:d5:a8:87:85:b3:9e:fd:5f:98:31: e3:fb:6b:df:13:4e:bb:1e:cb:17:cb:92:d3:48:a8: 45:e4:05:8b:bd:04:35:0c:a7:cf:bc:9a:26:f0:5d: 97:89:52:6e:a6:0f:00:ec:98:30:18:6e:4e:d0:a5: 9a:48:a9:9d:b4:42:cc:77:a9:0a:da:11:ed:e3:95: 90:e0:ab:75:e9:93:58:b9:ce:ec:d0:be:87:f1:23: 41:a3:4b:e0:5b:3f:87:52:73:79:b5:53:53:28:36: 4e:3b:34:d0:76:45:c7:9a:eb:32:b2:2f:3d:11:e1: e4:17:80:e2:30:75:31:64:97:fa:f3:96:a2:e6:df: 7b:3b:6a:e0:b3:b2:10:a1:02:2d:45:02:70:24:0f: e9:15:f2:19:b5:f8:1c:08:1f:25:13:b0:10:3e:c1: 22:12:e4:d5:21:ac:2b:64:3d:bd:e9:67:65:72:95: e0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:95:7D:14:53:BE:B4:44:BF:26:E5:07:C5:12:A1:72:1E:B7:3C:4A X509v3 Authority Key Identifier: keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/8pV9FFO-tES_JuUHxRKhch63PEo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.104.231.0/24 217.119.141.0/24 Signature Algorithm: sha256WithRSAEncryption 06:72:a6:f1:d1:ce:ed:12:bc:9e:cc:24:82:c7:44:6c:37:73: 9b:57:66:a8:2d:3d:da:72:39:e1:21:93:c3:f1:39:ab:46:d7: f6:55:16:93:7e:d4:e8:c8:30:68:a3:36:a5:ab:0e:ea:c8:c1: 4c:45:5c:6a:8d:af:af:e5:ab:73:63:f5:bf:ee:2b:97:ab:6b: cf:8c:44:14:68:eb:30:ef:c4:7c:df:ee:eb:59:a2:91:fa:60: f1:30:01:59:c4:9e:66:12:a2:e7:17:bc:d4:33:c1:56:1e:f0: dd:af:db:38:a2:ea:a8:c8:8b:2d:25:26:d8:7d:da:1d:3b:cc: f9:a9:4e:ab:da:a5:3f:0d:3d:90:cd:e0:6d:8e:c5:64:3d:d0: 23:81:df:88:2b:fb:39:e7:02:a2:42:49:3a:d0:2d:7f:2b:e1: e3:09:43:8f:ed:df:d1:69:59:d4:5a:db:a0:c5:8f:c5:8c:d3: 5f:1d:79:ee:7c:02:dc:b5:66:cf:e6:39:63:5b:3f:27:d0:26: 35:a7:32:66:31:b9:55:32:1e:18:f5:49:f3:1a:64:81:ae:d5: e5:31:62:7e:66:89:6b:40:55:ac:24:34:90:a2:f0:4b:37:62: fa:83:d8:27:4d:b1:af:2c:0c:ae:59:d8:6b:a1:a5:1a:30:42: 2c:0c:fd:98 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xyR9NOftAT9qaEphXja7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw ZWY5MDMwHhcNMjYwMTAxMDQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjk1N2QxNDUzYmViNDQ0YmYyNmU1MDdjNTEyYTE3MjFlYjczYzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzTgNPVOnfpY0nmh7RLnuIR26e+Z Q8AwVDKj6zuLk/G6zpSOdmLrPnPCYkRNnObGOfh8Cq29dIrv+j2RZRIXu5fn2FLq y98qVZpRjddRtdWoh4Wznv1fmDHj+2vfE067HssXy5LTSKhF5AWLvQQ1DKfPvJom 8F2XiVJupg8A7JgwGG5O0KWaSKmdtELMd6kK2hHt45WQ4Kt16ZNYuc7s0L6H8SNB o0vgWz+HUnN5tVNTKDZOOzTQdkXHmusysi89EeHkF4DiMHUxZJf685ai5t97O2rg s7IQoQItRQJwJA/pFfIZtfgcCB8lE7AQPsEiEuTVIawrZD296WdlcpXgJQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPKVfRRTvrREvyblB8USoXIetzxKMB8GA1UdIwQY MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt ZmRmNjYzOGQyYzA0LzEvOHBWOUZGTy10RVNfSnVVSHhSS2hjaDYzUEVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0 LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwmjnAwQA 2XeNMA0GCSqGSIb3DQEBCwUAA4IBAQAGcqbx0c7tEryezCSCx0RsN3ObV2aoLT3a cjnhIZPD8TmrRtf2VRaTftToyDBoozalqw7qyMFMRVxqja+v5atzY/W/7iuXq2vP jEQUaOsw78R83+7rWaKR+mDxMAFZxJ5mEqLnF7zUM8FWHvDdr9s4ouqoyIstJSbY fdodO8z5qU6r2qU/DT2QzeBtjsVkPdAjgd+IK/s55wKiQkk60C1/K+HjCUOP7d/R aVnUWtugxY/FjNNfHXnufALctWbP5jljWz8n0CY1pzJmMblVMh4Y9UnzGmSBrtXl MWJ+ZolrQFWsJDSQovBLN2L6g9gnTbGvLAyuWdhroaUaMEIsDP2Y -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:45 2026 by rpki-client