This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/8ujYHAx1H4lhOYDDoA3cTzuZ1o0.roa File: 8ujYHAx1H4lhOYDDoA3cTzuZ1o0.roa (raw, json) Hash identifier: IzeovJpSEL6TwVj5FewH6ox1OkLfK9+IYF8XYtp5rMQ= Subject key identifier: F2:E8:D8:1C:0C:75:1F:89:61:39:80:C3:A0:0D:DC:4F:3B:99:D6:8D Certificate issuer: /CN=0241154462e5adcca9d2bcbd1443fcc637879537 Certificate serial: 019B7F15DF5243C990F8C129E0BD2CAD5EE5 Authority key identifier: 02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/8ujYHAx1H4lhOYDDoA3cTzuZ1o0.roa Signing time: Fri 02 Jan 2026 14:21:38 +0000 ROA not before: Fri 02 Jan 2026 14:21:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202391 IP address blocks: 94.199.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:df:52:43:c9:90:f8:c1:29:e0:bd:2c:ad:5e:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0241154462e5adcca9d2bcbd1443fcc637879537 Validity Not Before: Jan 2 14:21:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2e8d81c0c751f89613980c3a00ddc4f3b99d68d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:f3:93:a2:aa:e6:0f:70:e9:86:56:ce:19:57: e8:cb:a4:99:30:65:24:ce:35:5a:5d:08:8f:54:a4: ad:ce:fe:05:fe:6f:5e:de:a3:62:a4:47:0c:74:2c: 36:45:fd:b5:57:a9:36:c7:21:57:31:45:fb:83:2e: d5:e9:a9:7e:f6:f7:15:91:16:4e:19:af:55:10:f6: ab:a4:3b:5f:64:69:e9:d3:b8:f1:ec:dc:50:71:b6: d1:cf:76:be:c6:37:5d:44:69:c4:c7:33:80:93:ac: d5:03:4a:dd:a0:cd:73:0e:8d:d7:4b:c2:fa:b2:fa: d4:03:6b:df:19:93:49:1e:ea:a1:80:60:a9:0c:a9: dd:4b:f7:a7:4f:3b:65:57:5a:f8:b8:e4:d0:cb:22: ec:96:b6:06:98:48:f5:eb:3b:dc:50:be:ac:14:20: d5:a6:27:3f:e1:78:ed:34:14:54:55:1c:00:16:f4: b9:57:28:6f:54:f7:06:0b:17:3f:e1:c8:91:01:bf: 26:1d:53:be:2a:24:ec:d9:3f:91:4d:d1:4f:02:15: 50:4d:b8:9e:00:30:d9:09:8d:db:f8:64:40:f3:c2: bb:5b:de:4e:24:ab:0b:6e:d8:ab:17:ec:a8:6d:bd: dd:0d:21:15:b5:30:6e:bb:39:65:ce:16:cc:10:92: 14:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E8:D8:1C:0C:75:1F:89:61:39:80:C3:A0:0D:DC:4F:3B:99:D6:8D X509v3 Authority Key Identifier: keyid:02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/8ujYHAx1H4lhOYDDoA3cTzuZ1o0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.199.0.0/24 Signature Algorithm: sha256WithRSAEncryption a4:e6:a3:72:a9:d3:e6:3f:50:54:5e:59:8f:f1:ca:3d:5f:90: e2:a5:d6:e4:62:48:6d:7c:4d:5e:86:4e:41:8c:59:6a:34:2d: be:92:03:fc:b0:ed:ab:ba:64:b2:3a:0d:ca:c4:c6:aa:36:28: cc:0d:05:63:9b:07:e0:81:b8:89:04:f6:f4:a4:25:16:39:c8: 4b:0f:4b:2c:b2:4c:66:36:7f:f3:d2:9b:76:c0:26:0c:2f:70: 8f:65:00:a9:1f:fd:94:50:c5:39:dc:60:4a:71:a2:e9:fd:b3: 9b:0c:29:93:a2:9c:52:d4:a5:05:a0:f4:14:ae:c4:8d:26:66: 56:9f:2a:2e:a7:e0:1b:2e:d4:82:a9:00:cd:b6:37:ce:fb:f5: b8:c6:22:a0:95:92:ab:b3:ab:1a:7a:61:35:7c:f8:db:ad:1a: 7a:ed:e3:9a:b2:b2:01:7e:bd:1d:af:a6:b9:5e:a4:19:63:41: fe:2f:cf:a0:56:1a:b6:be:a9:72:00:83:98:c4:98:19:40:29: d5:48:67:ac:66:9e:91:2d:b3:c7:15:f1:0b:ee:10:81:70:0b: 6f:2e:9a:ad:f1:ea:3c:e8:0d:7c:b0:80:08:fc:7a:c4:1f:ea: e5:ef:89:bc:93:c3:de:12:68:d6:6b:e5:07:36:74:36:ae:0b: 95:88:69:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fd9SQ8mQ+MEp4L0srV7lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNDExNTQ0NjJlNWFkY2NhOWQyYmNiZDE0NDNmY2M2Mzc4 Nzk1MzcwHhcNMjYwMTAyMTQyMTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmU4ZDgxYzBjNzUxZjg5NjEzOTgwYzNhMDBkZGM0ZjNiOTlkNjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9vOToqrmD3DphlbOGVfoy6SZMGUk zjVaXQiPVKStzv4F/m9e3qNipEcMdCw2Rf21V6k2xyFXMUX7gy7V6al+9vcVkRZO Ga9VEParpDtfZGnp07jx7NxQcbbRz3a+xjddRGnExzOAk6zVA0rdoM1zDo3XS8L6 svrUA2vfGZNJHuqhgGCpDKndS/enTztlV1r4uOTQyyLslrYGmEj16zvcUL6sFCDV pic/4XjtNBRUVRwAFvS5VyhvVPcGCxc/4ciRAb8mHVO+KiTs2T+RTdFPAhVQTbie ADDZCY3b+GRA88K7W95OJKsLbtirF+yobb3dDSEVtTBuuzllzhbMEJIUNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPLo2BwMdR+JYTmAw6AN3E87mdaNMB8GA1UdIwQY MBaAFAJBFURi5a3MqdK8vRRD/MY3h5U3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWtFVlJHTGxyY3lwMHJ5OUZFUDh4amVIbFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wOTc2MWQtNmU1Yy00NTFiLThlOGEt ZTkyZWU1ZWVkMjI2LzEvOHVqWUhBeDFINGxoT1lERG9BM2NUenVaMW8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8wOTc2MWQtNmU1Yy00NTFiLThlOGEtZTkyZWU1ZWVkMjI2 LzEvQWtFVlJHTGxyY3lwMHJ5OUZFUDh4amVIbFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXscAMA0G CSqGSIb3DQEBCwUAA4IBAQCk5qNyqdPmP1BUXlmP8co9X5DipdbkYkhtfE1ehk5B jFlqNC2+kgP8sO2rumSyOg3KxMaqNijMDQVjmwfggbiJBPb0pCUWOchLD0ssskxm Nn/z0pt2wCYML3CPZQCpH/2UUMU53GBKcaLp/bObDCmTopxS1KUFoPQUrsSNJmZW nyoup+AbLtSCqQDNtjfO+/W4xiKglZKrs6saemE1fPjbrRp67eOasrIBfr0dr6a5 XqQZY0H+L8+gVhq2vqlyAIOYxJgZQCnVSGesZp6RLbPHFfEL7hCBcAtvLpqt8eo8 6A18sIAI/HrEH+rl74m8k8PeEmjWa+UHNnQ2rguViGkM -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:27 2026 by rpki-client