This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/8SFtp1aCFpYsdLLGD8-X8oWNs5M.roa File: 8SFtp1aCFpYsdLLGD8-X8oWNs5M.roa (raw, json) Hash identifier: vW27EEEHFIjxPNptjKVXW1mndyFG/tHqMAs2SVdYCFw= Subject key identifier: F1:21:6D:A7:56:82:16:96:2C:74:B2:C6:0F:CF:97:F2:85:8D:B3:93 Certificate issuer: /CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97 Certificate serial: 019B7B35B78B7CAA4B810FC6EEE512714BF2 Authority key identifier: CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/8SFtp1aCFpYsdLLGD8-X8oWNs5M.roa Signing time: Thu 01 Jan 2026 20:17:56 +0000 ROA not before: Thu 01 Jan 2026 20:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34309 IP address blocks: 193.141.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:b7:8b:7c:aa:4b:81:0f:c6:ee:e5:12:71:4b:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97 Validity Not Before: Jan 1 20:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1216da7568216962c74b2c60fcf97f2858db393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0b:1d:3e:ef:a8:73:04:32:fe:ed:f1:9a:25: 86:c4:3e:05:a4:27:6c:e5:1f:c1:b7:25:0a:2a:90: 25:6b:d3:d7:f7:46:91:55:6b:ee:b6:f8:67:2e:de: 0a:25:fd:2e:59:be:35:a9:a5:43:7e:f9:47:6b:33: ea:c0:10:87:d2:88:23:73:23:27:cc:f1:79:e3:e9: 52:f3:31:ac:13:27:27:9d:44:0c:cc:5c:3d:f5:cb: 00:2d:6e:49:76:b1:95:69:94:0d:32:90:86:92:f0: 6b:c0:5e:54:c6:fb:29:d9:c5:63:7f:eb:af:3a:fe: 62:6f:ba:9e:c4:fd:ff:22:3b:05:07:d0:2c:82:0d: 64:b4:1a:23:8f:b2:73:f5:25:04:53:7a:df:4d:c7: 29:38:1e:6f:af:82:ed:1b:92:4f:db:a5:64:c5:b9: 8b:0d:9a:20:03:db:49:f2:f6:62:ac:86:d0:30:ee: c5:09:23:19:1b:0c:67:3c:c4:de:fd:4a:a7:36:70: 54:59:ed:1f:8f:05:d6:33:c8:fe:70:3a:d4:d7:18: c6:2e:17:bb:3b:f7:4b:04:ff:09:1a:57:74:be:d0: a9:e8:65:8b:ed:ec:44:cc:41:da:39:a9:1c:3e:5e: 99:b0:32:e5:f4:1f:18:4e:be:0c:df:39:be:1a:27: 39:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:21:6D:A7:56:82:16:96:2C:74:B2:C6:0F:CF:97:F2:85:8D:B3:93 X509v3 Authority Key Identifier: keyid:CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/8SFtp1aCFpYsdLLGD8-X8oWNs5M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.141.96.0/24 Signature Algorithm: sha256WithRSAEncryption b8:75:74:97:c4:41:9a:85:1a:ed:17:94:03:2e:86:ca:11:41: e6:13:e6:ca:12:38:92:80:44:ef:0d:2f:fd:b2:c6:14:7a:16: b6:6d:cf:7f:34:cd:25:b7:7e:64:32:c4:a1:52:e2:25:65:2c: d5:e9:af:a3:17:7d:f8:c2:e5:25:02:6f:54:40:78:75:12:1b: f2:08:77:9a:fe:4b:18:1d:2e:5c:63:53:e6:1b:f9:f2:ce:66: df:4e:38:79:d1:fb:af:42:15:82:89:80:04:b6:4b:b5:56:85: 1e:18:b6:ea:a1:6b:b9:34:38:8c:61:fb:80:86:3d:e0:0d:7c: a4:9d:59:c7:90:51:c8:ed:ef:1e:38:e5:b9:41:7b:5b:84:4a: 80:75:dd:37:1c:f7:75:1e:c0:ad:84:6f:5c:f6:c5:c8:8b:cd: 46:b1:33:81:f7:87:9b:df:ef:34:47:d5:a5:8f:dc:05:de:94: c2:aa:c6:ac:1c:9d:53:70:19:2e:14:59:5f:93:e4:5a:77:88: a6:21:ad:a5:fe:fb:6d:ed:2c:c8:22:be:ac:c6:0c:74:3b:5e: 89:f0:7b:c8:d7:1d:37:ee:69:98:7e:a6:26:c5:ef:8d:e4:21: e6:0e:8f:dd:d9:67:93:a9:03:50:bc:36:e0:bb:d1:9e:6d:03: be:4f:91:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NbeLfKpLgQ/G7uUScUvyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMzg0NzY2NzUxMGY0ZjJlNTliYjFiMzk0YWUyN2U4ZGFk MGRjOTcwHhcNMjYwMTAxMjAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTIxNmRhNzU2ODIxNjk2MmM3NGIyYzYwZmNmOTdmMjg1OGRiMzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgsdPu+ocwQy/u3xmiWGxD4FpCds 5R/BtyUKKpAla9PX90aRVWvutvhnLt4KJf0uWb41qaVDfvlHazPqwBCH0ogjcyMn zPF54+lS8zGsEycnnUQMzFw99csALW5JdrGVaZQNMpCGkvBrwF5Uxvsp2cVjf+uv Ov5ib7qexP3/IjsFB9Asgg1ktBojj7Jz9SUEU3rfTccpOB5vr4LtG5JP26VkxbmL DZogA9tJ8vZirIbQMO7FCSMZGwxnPMTe/UqnNnBUWe0fjwXWM8j+cDrU1xjGLhe7 O/dLBP8JGld0vtCp6GWL7exEzEHaOakcPl6ZsDLl9B8YTr4M3zm+Gic5gQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPEhbadWghaWLHSyxg/Pl/KFjbOTMB8GA1UdIwQY MBaAFM44R2Z1EPTy5Zuxs5SuJ+ja0NyXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvempoSFpuVVE5UExsbTdHemxLNG42TnJRM0pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNGYyYTgtZDNiNy00NDNkLWFjM2It NGJhNDQzNzdiZDg2LzEvOFNGdHAxYUNGcFlzZExMR0Q4LVg4b1dOczVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xNGYyYTgtZDNiNy00NDNkLWFjM2ItNGJhNDQzNzdiZDg2 LzEvempoSFpuVVE5UExsbTdHemxLNG42TnJRM0pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwY1gMA0G CSqGSIb3DQEBCwUAA4IBAQC4dXSXxEGahRrtF5QDLobKEUHmE+bKEjiSgETvDS/9 ssYUeha2bc9/NM0lt35kMsShUuIlZSzV6a+jF334wuUlAm9UQHh1EhvyCHea/ksY HS5cY1PmG/nyzmbfTjh50fuvQhWCiYAEtku1VoUeGLbqoWu5NDiMYfuAhj3gDXyk nVnHkFHI7e8eOOW5QXtbhEqAdd03HPd1HsCthG9c9sXIi81GsTOB94eb3+80R9Wl j9wF3pTCqsasHJ1TcBkuFFlfk+Rad4imIa2l/vtt7SzIIr6sxgx0O16J8HvI1x03 7mmYfqYmxe+N5CHmDo/d2WeTqQNQvDbgu9GebQO+T5En -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:55 2026 by rpki-client