This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/8VOA2YhS3WrhrM6W11eIGS-ipNc.roa File: 8VOA2YhS3WrhrM6W11eIGS-ipNc.roa (raw, json) Hash identifier: Edz1/VvneD0VK2UVfN0LHbQ5A4jh8J2frJDH2r94tLY= Subject key identifier: F1:53:80:D9:88:52:DD:6A:E1:AC:CE:96:D7:57:88:19:2F:A2:A4:D7 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B783461505CCF21E388A2985E97D0987F Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/8VOA2YhS3WrhrM6W11eIGS-ipNc.roa Signing time: Thu 01 Jan 2026 06:17:37 +0000 ROA not before: Thu 01 Jan 2026 06:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44803 IP address blocks: 193.180.208.0/21 maxlen: 24 193.181.208.0/20 maxlen: 24 193.182.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:61:50:5c:cf:21:e3:88:a2:98:5e:97:d0:98:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f15380d98852dd6ae1acce96d75788192fa2a4d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ce:88:ee:54:ea:83:c3:48:4f:86:26:4b:23: 23:a7:ae:e8:a3:07:19:7e:77:2c:ea:eb:aa:8f:61: 72:9e:6a:23:b5:4f:66:46:09:38:8e:6f:b3:7a:9e: 34:29:1a:24:74:50:6a:55:7b:da:cc:19:45:48:ef: 4b:c9:ee:e3:49:5c:a6:f0:04:08:bd:56:6b:09:9f: a0:e9:5a:25:f3:bf:d9:d4:68:0f:1d:64:bf:0b:ff: e9:af:a0:7e:d8:ed:cb:cb:b0:71:ed:47:45:f3:cb: f6:ff:aa:92:1e:dc:23:f7:ad:16:ca:a3:91:a1:30: 40:65:c3:5c:5b:2d:df:fa:a3:06:c5:ec:ed:b6:5d: fa:d1:c1:97:15:0e:0d:0a:32:93:fe:c4:37:45:73: 22:c6:13:9a:3d:64:6f:d1:a9:56:04:98:20:7f:27: 7b:7c:c5:9f:42:cf:89:f3:a2:2c:c2:a7:41:55:80: 7b:7d:06:c0:e7:8c:06:77:29:d1:55:de:92:07:2a: aa:be:49:80:df:7e:60:56:1a:e6:04:ba:db:2c:8c: c0:b4:41:c1:0f:45:3a:63:9b:c4:59:e5:3d:0b:28: dd:e4:7a:ff:a2:6d:27:5a:8e:9e:60:58:a0:0f:e3: c8:e9:a0:d5:15:18:ef:2a:cf:8f:4b:f9:f4:64:b7: 3c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:53:80:D9:88:52:DD:6A:E1:AC:CE:96:D7:57:88:19:2F:A2:A4:D7 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/8VOA2YhS3WrhrM6W11eIGS-ipNc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.180.208.0/21 193.181.208.0/20 193.182.128.0/20 Signature Algorithm: sha256WithRSAEncryption 4e:65:66:bc:5c:2b:ac:f5:69:24:84:60:38:6b:2d:91:47:4f: ff:10:ac:0e:a1:3f:20:3b:e1:fb:de:4f:63:72:ae:0a:07:7f: 8f:a0:f1:03:d6:61:e4:6a:56:10:b7:e7:80:05:d2:a1:06:4b: 01:b4:31:89:c7:a8:d2:06:3a:12:8e:07:55:e2:1c:8a:9e:45: 37:b5:52:4f:a6:72:c7:8d:f9:6d:f6:c6:9d:fb:05:2b:53:83: 28:1c:82:78:36:76:5c:de:a6:02:75:da:f2:ba:0c:ed:04:a9: f6:24:82:04:88:bf:5b:cd:db:c7:9f:9a:8a:11:09:79:b4:c5: 6d:cb:ae:23:d5:93:47:68:ad:a3:06:a3:5b:8e:d1:9c:76:5f: d2:78:ba:69:4a:e6:43:85:ed:c0:8a:25:aa:40:01:ef:ba:84: f9:91:f8:62:b6:ab:f6:06:49:85:e7:09:ec:9f:ce:46:67:dd: 5a:ce:f2:00:ab:d9:c2:a5:4b:e7:06:d7:4c:f3:01:65:71:05: a5:dc:91:2f:66:74:c9:b1:a5:30:75:38:2f:67:43:ad:4b:70: 16:42:32:20:27:d0:55:d2:05:b0:22:32:b9:89:2e:c3:43:75: e7:19:55:cd:b8:f2:fd:7a:3b:c1:17:46:b3:d0:ec:d5:da:dc: 8a:86:17:fb -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4NGFQXM8h44iimF6X0Jh/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTUzODBkOTg4NTJkZDZhZTFhY2NlOTZkNzU3ODgxOTJmYTJhNGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos6I7lTqg8NIT4YmSyMjp67oowcZ fncs6uuqj2FynmojtU9mRgk4jm+zep40KRokdFBqVXvazBlFSO9Lye7jSVym8AQI vVZrCZ+g6Vol87/Z1GgPHWS/C//pr6B+2O3Ly7Bx7UdF88v2/6qSHtwj960WyqOR oTBAZcNcWy3f+qMGxezttl360cGXFQ4NCjKT/sQ3RXMixhOaPWRv0alWBJggfyd7 fMWfQs+J86IswqdBVYB7fQbA54wGdynRVd6SByqqvkmA335gVhrmBLrbLIzAtEHB D0U6Y5vEWeU9Cyjd5Hr/om0nWo6eYFigD+PI6aDVFRjvKs+PS/n0ZLc8IwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPFTgNmIUt1q4azOltdXiBkvoqTXMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvOFZPQTJZaFMzV3Jock02VzExZUlHUy1pcE5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDwbTQAwQE wbXQAwQEwbaAMA0GCSqGSIb3DQEBCwUAA4IBAQBOZWa8XCus9WkkhGA4ay2RR0// EKwOoT8gO+H73k9jcq4KB3+PoPED1mHkalYQt+eABdKhBksBtDGJx6jSBjoSjgdV 4hyKnkU3tVJPpnLHjflt9sad+wUrU4MoHIJ4NnZc3qYCddryugztBKn2JIIEiL9b zdvHn5qKEQl5tMVty64j1ZNHaK2jBqNbjtGcdl/SeLppSuZDhe3AiiWqQAHvuoT5 kfhitqv2BkmF5wnsn85GZ91azvIAq9nCpUvnBtdM8wFlcQWl3JEvZnTJsaUwdTgv Z0OtS3AWQjIgJ9BV0gWwIjK5iS7DQ3XnGVXNuPL9ejvBF0az0OzV2tyKhhf7 -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:27 2026 by rpki-client