This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/8xpf1H5jnrklNTBoaVn0u85Fw00.roa File: 8xpf1H5jnrklNTBoaVn0u85Fw00.roa (raw, json) Hash identifier: xVZEKXXOjsh0YBdOeRbRNQ2rIeuGE/aopxCQhkfvBRc= Subject key identifier: F3:1A:5F:D4:7E:63:9E:B9:25:35:30:68:69:59:F4:BB:CE:45:C3:4D Certificate issuer: /CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4 Certificate serial: 019B78342FF92FFE9C080AF714A9D060462A Authority key identifier: A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/8xpf1H5jnrklNTBoaVn0u85Fw00.roa Signing time: Thu 01 Jan 2026 06:17:24 +0000 ROA not before: Thu 01 Jan 2026 06:17:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35337 IP address blocks: 194.56.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:2f:f9:2f:fe:9c:08:0a:f7:14:a9:d0:60:46:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4 Validity Not Before: Jan 1 06:17:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f31a5fd47e639eb9253530686959f4bbce45c34d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:68:a6:26:a0:43:00:3a:53:9d:3a:f6:0f:4e: 59:4a:6c:e8:41:f4:c5:98:15:f3:d9:65:0e:a1:72: be:58:98:2b:d7:62:5e:51:d0:63:8d:74:d1:e7:0e: f8:ab:b0:a8:a8:a1:a3:76:bc:e7:ef:39:d7:a1:4b: 09:e9:7f:12:dc:3e:b6:63:92:c1:e3:61:a5:5c:9f: 72:ae:b8:0d:ec:ca:83:e6:7c:c2:fe:94:6d:ea:3c: 5c:87:41:92:69:3d:bc:5a:a0:76:2d:1e:1f:0f:21: ed:5e:66:b5:b9:cc:91:06:f4:88:7e:72:09:63:0d: 4b:18:f0:4c:49:94:03:b2:3d:fa:42:54:9d:e4:65: 3a:5d:2f:14:b1:fa:af:a4:70:2d:38:dc:ef:d3:f3: 76:da:35:d8:86:50:5f:c3:2d:d4:1e:b7:0a:92:b0: 66:e3:30:a8:08:76:5a:0c:0a:91:78:a7:94:cc:eb: db:32:19:02:85:d0:bd:f6:8b:23:01:26:f5:ad:1f: 9a:2f:53:06:1e:ee:11:d9:71:7a:f3:68:32:f0:2b: 50:96:c3:77:63:ad:83:27:12:cc:a5:76:7c:15:80: 73:eb:1b:47:83:52:7b:e7:07:e7:c4:3c:4f:8a:44: a7:87:51:9c:a9:2e:41:5f:ba:dd:82:d2:1b:2d:62: 6e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1A:5F:D4:7E:63:9E:B9:25:35:30:68:69:59:F4:BB:CE:45:C3:4D X509v3 Authority Key Identifier: keyid:A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/8xpf1H5jnrklNTBoaVn0u85Fw00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.56.211.0/24 Signature Algorithm: sha256WithRSAEncryption 41:ba:bb:15:04:58:d6:bb:fb:6c:7a:6c:15:e1:49:19:34:dc: e2:40:f3:c9:51:eb:c3:22:56:af:06:e0:e9:4c:a0:3f:1e:f4: a3:f2:ab:cd:64:a9:79:10:25:38:3c:1c:62:14:d6:c0:a6:a2: 77:0f:d7:96:1a:10:0c:6a:c7:f6:20:05:6a:0f:ff:d1:15:24: 68:b9:63:40:85:04:bb:13:bc:48:77:c4:a8:8e:21:b5:85:a8: 0d:a4:eb:79:24:f1:95:6c:27:74:19:06:cf:6c:9f:3f:da:10: f0:38:d2:eb:fe:8d:0f:68:ed:73:c2:1c:57:95:b3:83:f5:f6: b3:8d:f9:4a:d0:70:e2:8f:ba:39:ed:08:78:29:70:5e:b6:a7: b3:45:54:f1:79:58:aa:20:9b:2d:5e:38:b6:78:92:39:86:75: 28:4b:b4:75:b0:dc:05:d2:01:55:65:d2:d2:c3:4c:1a:e4:2d: 51:fa:67:9c:95:fc:67:05:00:da:95:af:57:61:9d:19:32:96: 82:17:fa:a3:65:e7:25:8f:1c:6b:b9:75:fe:ba:28:0e:30:22: 13:2d:10:0d:b8:09:04:74:1a:e3:8d:32:02:18:55:3b:c4:49: c6:51:d8:54:9d:8f:aa:14:39:32:5d:bd:45:d9:f0:f8:d3:3c: cb:35:c9:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NC/5L/6cCAr3FKnQYEYqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ODg2MDRkMjViODdiODJmZDEyNTlkZmUyOTRjZDhmYjlm ZjQ5YjQwHhcNMjYwMTAxMDYxNzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzFhNWZkNDdlNjM5ZWI5MjUzNTMwNjg2OTU5ZjRiYmNlNDVjMzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGimJqBDADpTnTr2D05ZSmzoQfTF mBXz2WUOoXK+WJgr12JeUdBjjXTR5w74q7CoqKGjdrzn7znXoUsJ6X8S3D62Y5LB 42GlXJ9yrrgN7MqD5nzC/pRt6jxch0GSaT28WqB2LR4fDyHtXma1ucyRBvSIfnIJ Yw1LGPBMSZQDsj36QlSd5GU6XS8UsfqvpHAtONzv0/N22jXYhlBfwy3UHrcKkrBm 4zCoCHZaDAqReKeUzOvbMhkChdC99osjASb1rR+aL1MGHu4R2XF682gy8CtQlsN3 Y62DJxLMpXZ8FYBz6xtHg1J75wfnxDxPikSnh1GcqS5BX7rdgtIbLWJuVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPMaX9R+Y565JTUwaGlZ9LvORcNNMB8GA1UdIwQY MBaAFKWIYE0luHuC/RJZ3+KUzY+5/0m0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81MTBhNGUtNjZlZi00ZGMxLTgwM2It MjBkZGRiYzEyODFkLzEvOHhwZjFINWpucmtsTlRCb2FWbjB1ODVGdzAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC81MTBhNGUtNjZlZi00ZGMxLTgwM2ItMjBkZGRiYzEyODFk LzEvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjjTMA0G CSqGSIb3DQEBCwUAA4IBAQBBursVBFjWu/tsemwV4UkZNNziQPPJUevDIlavBuDp TKA/HvSj8qvNZKl5ECU4PBxiFNbApqJ3D9eWGhAMasf2IAVqD//RFSRouWNAhQS7 E7xId8SojiG1hagNpOt5JPGVbCd0GQbPbJ8/2hDwONLr/o0PaO1zwhxXlbOD9faz jflK0HDij7o57Qh4KXBetqezRVTxeViqIJstXji2eJI5hnUoS7R1sNwF0gFVZdLS w0wa5C1R+meclfxnBQDala9XYZ0ZMpaCF/qjZecljxxruXX+uigOMCITLRANuAkE dBrjjTICGFU7xEnGUdhUnY+qFDkyXb1F2fD40zzLNckx -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:37 2026 by rpki-client