This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/8fhYtKpVakt0uV4ZHUTjU4fIbFw.roa File: 8fhYtKpVakt0uV4ZHUTjU4fIbFw.roa (raw, json) Hash identifier: BUVZIDRFer90z5xzSe7ir9WDKqZ/aWAGvB26nEQK32A= Subject key identifier: F1:F8:58:B4:AA:55:6A:4B:74:B9:5E:19:1D:44:E3:53:87:C8:6C:5C Certificate issuer: /CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8 Certificate serial: 019B7910436983BF045A2D08F85FD2F28E29 Authority key identifier: 44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/8fhYtKpVakt0uV4ZHUTjU4fIbFw.roa Signing time: Thu 01 Jan 2026 10:17:47 +0000 ROA not before: Thu 01 Jan 2026 10:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49969 IP address blocks: 195.211.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:43:69:83:bf:04:5a:2d:08:f8:5f:d2:f2:8e:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8 Validity Not Before: Jan 1 10:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1f858b4aa556a4b74b95e191d44e35387c86c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dd:9f:ca:43:b9:36:c6:f7:ce:ed:12:77:88: 60:3c:f7:5a:1d:f2:27:81:63:a6:5f:9c:e8:62:5b: 74:7f:5a:21:8a:ca:c9:5f:a7:72:92:84:5d:7c:7f: 9a:fd:36:a0:d6:61:c0:e5:b1:bd:0a:ca:8f:de:b6: a7:4b:92:02:3a:25:68:09:58:c8:2c:d1:a4:b0:d2: fb:ec:dc:93:94:bd:00:cf:09:c1:f2:a6:d0:09:4d: 19:ea:8b:15:ca:d1:3f:bf:58:67:36:6b:3d:6d:5b: 7c:3b:9a:7e:7e:89:14:31:cc:29:97:10:f6:5e:02: 68:28:90:0b:ee:72:ab:97:21:c2:f5:98:6d:40:39: 72:37:c8:51:2e:c1:f9:85:6e:7c:05:84:9f:aa:89: 03:d7:8e:5b:70:50:7e:24:92:84:74:1d:30:d1:78: e5:18:ac:b4:17:e8:c9:84:a5:17:1b:1a:08:26:ac: 4d:57:3f:42:71:61:01:b8:14:88:13:16:4a:96:d0: e1:35:ee:0a:79:20:42:3f:63:d6:90:dd:07:18:3f: e6:7b:9f:c2:5d:81:26:ab:56:72:93:ec:53:d0:15: a5:d1:cd:aa:b8:48:54:e0:bc:6d:e2:4d:ef:47:aa: 1a:8f:f2:06:00:f6:8e:ba:c4:55:fe:0e:ba:43:c6: 2b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F8:58:B4:AA:55:6A:4B:74:B9:5E:19:1D:44:E3:53:87:C8:6C:5C X509v3 Authority Key Identifier: keyid:44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/8fhYtKpVakt0uV4ZHUTjU4fIbFw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.211.132.0/22 Signature Algorithm: sha256WithRSAEncryption 82:85:7e:9b:52:6d:0c:e1:27:fb:88:d4:34:99:db:20:c0:fa: 77:68:06:59:43:e3:a7:a0:04:da:d1:03:af:2f:79:49:c9:b2: 19:cd:6c:95:df:71:b3:fe:c9:14:41:1d:94:c1:2e:29:12:a3: fb:fe:aa:60:8a:81:31:a6:55:ef:cf:3d:12:8c:12:3d:d8:a0: 65:23:a8:57:ee:c1:88:f3:7f:87:fc:b8:36:2a:2a:21:e7:56: 49:f6:d6:46:19:48:fd:02:84:a9:6c:c2:2d:c4:88:23:0e:19: 06:e1:a3:79:71:1a:58:99:59:88:d8:1f:7c:f3:e1:40:2b:3b: 42:7d:57:ae:ef:54:96:2e:02:a5:f3:90:54:d2:c6:e7:1e:39: 24:31:35:a3:43:e3:9f:1d:f2:33:25:80:9a:29:cd:48:51:0e: d3:06:c0:f5:ab:a9:f4:f1:32:2a:18:e9:aa:9e:04:ba:8d:fc: 49:8d:ba:3b:cb:78:97:c2:d5:6f:50:90:55:eb:d2:96:6d:49: 90:ef:e1:a2:04:d7:2e:42:d0:e9:e2:e7:ac:2d:45:fa:f8:ac: 37:26:8d:4a:ad:d5:bb:51:99:ee:83:7e:25:a6:ce:56:f2:1d: 37:96:20:1f:d5:26:c8:e7:76:a5:be:47:0e:a5:ad:67:61:46: 79:27:c4:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EENpg78EWi0I+F/S8o4pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YTdlNWEzM2Q5YzVhOTY1ZDlmYmZkZWVjZGM4NzFhZjBh NWQ0ZjgwHhcNMjYwMTAxMTAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWY4NThiNGFhNTU2YTRiNzRiOTVlMTkxZDQ0ZTM1Mzg3Yzg2YzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr92fykO5Nsb3zu0Sd4hgPPdaHfIn gWOmX5zoYlt0f1ohisrJX6dykoRdfH+a/Tag1mHA5bG9CsqP3ranS5ICOiVoCVjI LNGksNL77NyTlL0AzwnB8qbQCU0Z6osVytE/v1hnNms9bVt8O5p+fokUMcwplxD2 XgJoKJAL7nKrlyHC9ZhtQDlyN8hRLsH5hW58BYSfqokD145bcFB+JJKEdB0w0Xjl GKy0F+jJhKUXGxoIJqxNVz9CcWEBuBSIExZKltDhNe4KeSBCP2PWkN0HGD/me5/C XYEmq1Zyk+xT0BWl0c2quEhU4Lxt4k3vR6oaj/IGAPaOusRV/g66Q8Yr/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPH4WLSqVWpLdLleGR1E41OHyGxcMB8GA1UdIwQY MBaAFESn5aM9nFqWXZ+/3uzchxrwpdT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUktmbG96MmNXcFpkbjdfZTdOeUhHdkNsMVBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wZDgwODgtZWE5My00YWJiLTg5OTYt MjFjZjU2Y2JjZTEyLzEvOGZoWXRLcFZha3QwdVY0WkhVVGpVNGZJYkZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8wZDgwODgtZWE5My00YWJiLTg5OTYtMjFjZjU2Y2JjZTEy LzEvUktmbG96MmNXcFpkbjdfZTdOeUhHdkNsMVBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw9OEMA0G CSqGSIb3DQEBCwUAA4IBAQCChX6bUm0M4Sf7iNQ0mdsgwPp3aAZZQ+OnoATa0QOv L3lJybIZzWyV33Gz/skUQR2UwS4pEqP7/qpgioExplXvzz0SjBI92KBlI6hX7sGI 83+H/Lg2Kioh51ZJ9tZGGUj9AoSpbMItxIgjDhkG4aN5cRpYmVmI2B988+FAKztC fVeu71SWLgKl85BU0sbnHjkkMTWjQ+OfHfIzJYCaKc1IUQ7TBsD1q6n08TIqGOmq ngS6jfxJjbo7y3iXwtVvUJBV69KWbUmQ7+GiBNcuQtDp4uesLUX6+Kw3Jo1KrdW7 UZnug34lps5W8h03liAf1SbI53alvkcOpa1nYUZ5J8R7 -----END CERTIFICATE-----Generated at Sun Jan 25 14:37:38 2026 by rpki-client