This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/8n1cP-EeM_0aPON8tQRs5t94Tcw.roa File: 8n1cP-EeM_0aPON8tQRs5t94Tcw.roa (raw, json) Hash identifier: oWMSKnzC7MzhiIiFzW+fvutsE0+XNV6RpmpSUYLiCP0= Subject key identifier: F2:7D:5C:3F:E1:1E:33:FD:1A:3C:E3:7C:B5:04:6C:E6:DF:78:4D:CC Certificate issuer: /CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5 Certificate serial: 019B7B363A7715E0965E8CD790218DD3F52E Authority key identifier: E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/8n1cP-EeM_0aPON8tQRs5t94Tcw.roa Signing time: Thu 01 Jan 2026 20:18:30 +0000 ROA not before: Thu 01 Jan 2026 20:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33823 IP address blocks: 193.25.110.0/23 maxlen: 24 195.12.52.0/22 maxlen: 24 195.28.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:3a:77:15:e0:96:5e:8c:d7:90:21:8d:d3:f5:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5 Validity Not Before: Jan 1 20:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f27d5c3fe11e33fd1a3ce37cb5046ce6df784dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:97:0d:ab:13:e8:60:7b:be:6d:7d:55:f7:5b: 72:10:0b:38:5b:4b:04:a0:23:34:5b:63:7f:df:71: 85:f0:2a:ae:1e:98:f9:d6:33:e6:90:da:8f:1e:c0: b9:73:cf:f7:91:57:0d:02:69:5a:7e:9e:91:38:8e: b7:a4:78:f5:4a:bc:4c:e4:51:c4:ec:ec:72:b2:fa: b5:ea:d9:79:29:24:42:f7:a7:a8:44:7f:a6:f9:7f: ee:2c:89:c8:95:ee:cd:20:f6:65:c9:c0:5b:96:69: 36:8f:6c:ce:40:85:68:6e:97:28:af:bd:33:50:a2: 22:07:a3:80:81:46:79:ee:b2:d1:c9:4d:70:6e:7b: 00:bc:53:cc:2c:f2:59:67:e5:7c:13:2a:6d:c3:4d: 14:91:4d:e1:b6:ec:9d:8d:96:ac:7a:1b:27:3e:e2: ef:35:32:cc:84:8d:aa:21:c3:3b:7e:bb:e7:f7:6b: 9b:88:83:ef:67:dd:3c:e0:ef:ff:ad:9a:52:a2:c1: 15:81:54:8f:a4:d4:e5:d4:2e:79:60:b3:5c:f2:cc: d6:cb:19:89:04:c9:e3:1a:d4:a7:a1:27:03:e9:c2: 34:fa:3c:cc:72:76:2b:41:82:fe:fd:71:08:c1:4a: 62:e5:41:a2:19:59:59:c1:15:58:f4:89:32:9c:46: 15:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:7D:5C:3F:E1:1E:33:FD:1A:3C:E3:7C:B5:04:6C:E6:DF:78:4D:CC X509v3 Authority Key Identifier: keyid:E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/8n1cP-EeM_0aPON8tQRs5t94Tcw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.25.110.0/23 195.12.52.0/22 195.28.184.0/23 Signature Algorithm: sha256WithRSAEncryption 74:02:aa:d5:c3:c5:2d:11:a1:76:5d:fc:ef:1f:0f:40:4e:b8: 5b:53:32:5d:6d:61:7a:16:4b:50:e7:cf:c4:f7:c8:88:9b:f5: f7:5f:9a:e8:6a:47:dd:ae:cf:b3:50:3d:a7:7f:b8:40:61:68: 0f:8e:03:a9:16:35:fd:f3:1a:a8:ee:14:8b:2b:66:0c:5b:23: 5b:b3:fa:3d:9a:40:9b:63:b8:4b:ee:28:c4:c7:40:f3:85:bc: 83:18:3b:1e:16:61:cf:c1:dd:4d:e6:f7:7c:df:0b:bd:7d:ff: ea:12:9a:e9:8a:fa:40:52:85:06:74:27:dd:72:1a:9e:9f:bc: c9:ee:9c:2f:4f:67:8c:9d:67:55:27:47:d9:5e:af:10:72:77: 80:81:2f:02:8f:59:d0:4c:6d:a4:76:a2:8d:5c:7c:03:7e:29: 2c:40:6a:4a:73:b8:74:2c:41:b1:2e:e3:14:c2:f2:70:e9:1e: 14:63:f3:4e:fd:18:39:7a:0e:4a:68:a0:4d:78:3b:04:27:1c: 73:bd:4c:b4:fd:1b:31:b5:e6:34:09:37:24:51:2f:e4:72:f8: 42:51:01:ab:71:46:61:54:0d:d4:c6:3f:c5:00:fb:80:3b:20: 24:a7:cb:62:c8:36:cb:17:49:ce:8f:a9:b6:1f:33:eb:86:a6: 8f:61:82:d3 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7Njp3FeCWXozXkCGN0/UuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YjRjNTNhZjY1ZjBiODM5NmI5NWI0ZDA3ZDRlYzRlN2Jl Mjc3ZTUwHhcNMjYwMTAxMjAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjdkNWMzZmUxMWUzM2ZkMWEzY2UzN2NiNTA0NmNlNmRmNzg0ZGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZcNqxPoYHu+bX1V91tyEAs4W0sE oCM0W2N/33GF8CquHpj51jPmkNqPHsC5c8/3kVcNAmlafp6ROI63pHj1SrxM5FHE 7Oxysvq16tl5KSRC96eoRH+m+X/uLInIle7NIPZlycBblmk2j2zOQIVobpcor70z UKIiB6OAgUZ57rLRyU1wbnsAvFPMLPJZZ+V8Eyptw00UkU3htuydjZasehsnPuLv NTLMhI2qIcM7frvn92ubiIPvZ9084O//rZpSosEVgVSPpNTl1C55YLNc8szWyxmJ BMnjGtSnoScD6cI0+jzMcnYrQYL+/XEIwUpi5UGiGVlZwRVY9IkynEYVSwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPJ9XD/hHjP9GjzjfLUEbObfeE3MMB8GA1UdIwQY MBaAFOS0xTr2XwuDlrlbTQfU7E574nflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUxURk92WmZDNE9XdVZ0TkI5VHNUbnZpZC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi80NmFhYmYtZGFkMC00ZDc2LWE1YjUt ODhkYjAxMjVhNmI4LzEvOG4xY1AtRWVNXzBhUE9OOHRRUnM1dDk0VGN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi80NmFhYmYtZGFkMC00ZDc2LWE1YjUtODhkYjAxMjVhNmI4 LzEvNUxURk92WmZDNE9XdVZ0TkI5VHNUbnZpZC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBwRluAwQC www0AwQBwxy4MA0GCSqGSIb3DQEBCwUAA4IBAQB0AqrVw8UtEaF2XfzvHw9ATrhb UzJdbWF6FktQ58/E98iIm/X3X5roakfdrs+zUD2nf7hAYWgPjgOpFjX98xqo7hSL K2YMWyNbs/o9mkCbY7hL7ijEx0DzhbyDGDseFmHPwd1N5vd83wu9ff/qEprpivpA UoUGdCfdchqen7zJ7pwvT2eMnWdVJ0fZXq8QcneAgS8Cj1nQTG2kdqKNXHwDfiks QGpKc7h0LEGxLuMUwvJw6R4UY/NO/Rg5eg5KaKBNeDsEJxxzvUy0/RsxteY0CTck US/kcvhCUQGrcUZhVA3Uxj/FAPuAOyAkp8tiyDbLF0nOj6m2HzPrhqaPYYLT -----END CERTIFICATE-----Generated at Sun Jan 25 16:12:39 2026 by rpki-client