This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/8eUjrNm6imMBEiASLOUuqltQoVs.roa File: 8eUjrNm6imMBEiASLOUuqltQoVs.roa (raw, json) Hash identifier: ZfpOTqbTAn2CuRX0LoEyNNAQ5rM0VLzFBNYb2IBiGIE= Subject key identifier: F1:E5:23:AC:D9:BA:8A:63:01:12:20:12:2C:E5:2E:AA:5B:50:A1:5B Certificate issuer: /CN=1534838bb317b8186699f0a4485db6d9da1908d2 Certificate serial: 019B7E384F9075972DD4B75AC49954DF9E5A Authority key identifier: 15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/8eUjrNm6imMBEiASLOUuqltQoVs.roa Signing time: Fri 02 Jan 2026 10:19:38 +0000 ROA not before: Fri 02 Jan 2026 10:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42 IP address blocks: 194.0.42.0/24 maxlen: 24 2001:678:60::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:4f:90:75:97:2d:d4:b7:5a:c4:99:54:df:9e:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1534838bb317b8186699f0a4485db6d9da1908d2 Validity Not Before: Jan 2 10:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1e523acd9ba8a63011220122ce52eaa5b50a15b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:52:12:d9:fd:9d:5d:db:4e:e1:c4:43:9b:8f: 33:77:10:48:86:9c:8b:cb:b8:2d:45:33:0f:ae:e1: 99:92:14:0b:b6:70:5b:fe:b1:6f:69:88:1d:6d:75: 8c:b9:1c:f7:cc:34:cb:c7:76:03:03:a5:8c:29:55: 9c:bc:e4:5d:2d:c2:7a:5c:f5:91:7b:b7:d5:bc:64: 9e:91:4c:4d:e5:1a:89:ee:8c:e1:a1:3e:1f:39:91: 6a:ee:e5:82:44:0b:4b:b0:65:1f:7a:ee:37:97:67: bf:cf:e9:07:e1:21:fd:fd:ad:10:bf:f9:8d:c7:36: a7:fe:65:91:90:57:cc:c1:05:ae:31:13:dc:c0:f0: a4:b8:0c:0e:dd:21:dc:ca:5d:d5:21:ca:89:ba:ce: 47:4d:f5:2b:62:37:a8:70:fe:78:79:48:63:8e:44: 72:36:ea:3e:47:3b:40:4c:fe:ef:dd:67:4c:5a:95: c5:2f:cf:64:60:fc:45:6b:63:42:ba:87:50:1a:9c: 9b:f5:30:6a:c0:8f:d8:41:d0:f2:9e:4a:b4:92:16: 2b:b5:a1:0a:c8:9e:5b:a3:b3:18:63:f3:c1:c4:3a: c2:4f:41:28:c6:d9:1b:1a:cb:ec:21:18:7d:52:62: 8d:b2:41:0d:8d:d7:a3:6e:e1:aa:77:4d:cc:68:d2: 08:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E5:23:AC:D9:BA:8A:63:01:12:20:12:2C:E5:2E:AA:5B:50:A1:5B X509v3 Authority Key Identifier: keyid:15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/8eUjrNm6imMBEiASLOUuqltQoVs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.42.0/24 IPv6: 2001:678:60::/48 Signature Algorithm: sha256WithRSAEncryption 76:55:9d:81:d0:54:5a:8c:23:b6:4e:78:5b:4a:1f:a7:84:d2: dd:93:59:dc:f6:39:43:a8:43:44:46:3d:c1:30:92:1d:b8:52: 37:47:64:2a:b0:f1:d1:99:70:d3:af:cf:c3:45:58:1a:36:97: a4:1c:c0:cb:07:5c:de:56:7b:23:c4:0f:39:11:8d:eb:ce:69: f6:45:dd:d6:8c:4f:5f:a6:0e:b9:28:d0:b9:d3:d4:e0:ce:2b: 20:03:8a:ea:8c:7c:1f:6d:22:73:2b:ee:c2:1d:5f:ac:53:ed: cf:60:19:ea:36:86:4d:b9:dd:d1:51:85:de:a8:f4:70:e8:cb: 7e:ff:b7:e6:a2:f2:58:0a:ff:7b:19:c3:1d:38:cc:0f:28:2b: 40:35:00:bf:e0:34:89:c2:f2:7e:8e:40:80:ea:6b:21:39:41: 20:e0:6b:4d:42:20:f4:df:4d:cd:9e:27:a3:c4:77:96:2d:7b: 9b:08:f1:ed:99:a6:f0:47:9a:a9:15:bd:d7:77:ac:cb:b6:5a: 9e:c1:fd:99:22:e6:8e:35:83:35:a3:d0:9d:1f:89:a7:4b:04: ee:e3:08:41:9e:59:e7:9c:31:11:3c:ab:39:fb:bb:fe:d7:3e: 76:dd:d6:e8:3d:45:a1:83:a4:cb:8f:75:8f:1a:d2:62:1c:f8: ff:9f:82:e7 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+OE+QdZct1LdaxJlU355aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MzQ4MzhiYjMxN2I4MTg2Njk5ZjBhNDQ4NWRiNmQ5ZGEx OTA4ZDIwHhcNMjYwMTAyMTAxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWU1MjNhY2Q5YmE4YTYzMDExMjIwMTIyY2U1MmVhYTViNTBhMTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVIS2f2dXdtO4cRDm48zdxBIhpyL y7gtRTMPruGZkhQLtnBb/rFvaYgdbXWMuRz3zDTLx3YDA6WMKVWcvORdLcJ6XPWR e7fVvGSekUxN5RqJ7ozhoT4fOZFq7uWCRAtLsGUfeu43l2e/z+kH4SH9/a0Qv/mN xzan/mWRkFfMwQWuMRPcwPCkuAwO3SHcyl3VIcqJus5HTfUrYjeocP54eUhjjkRy Nuo+RztATP7v3WdMWpXFL89kYPxFa2NCuodQGpyb9TBqwI/YQdDynkq0khYrtaEK yJ5bo7MYY/PBxDrCT0EoxtkbGsvsIRh9UmKNskENjdejbuGqd03MaNIIlQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFPHlI6zZuopjARIgEizlLqpbUKFbMB8GA1UdIwQY MBaAFBU0g4uzF7gYZpnwpEhdttnaGQjSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlRTRGk3TVh1QmhtbWZDa1NGMjIyZG9aQ05JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xNGMxY2EtMTg3NC00N2FjLWExOGUt M2ExNDRjNzBlMGIwLzEvOGVVanJObTZpbU1CRWlBU0xPVXVxbHRRb1ZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8xNGMxY2EtMTg3NC00N2FjLWExOGUtM2ExNDRjNzBlMGIw LzEvRlRTRGk3TVh1QmhtbWZDa1NGMjIyZG9aQ05JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwgAqMA8E AgACMAkDBwAgAQZ4AGAwDQYJKoZIhvcNAQELBQADggEBAHZVnYHQVFqMI7ZOeFtK H6eE0t2TWdz2OUOoQ0RGPcEwkh24UjdHZCqw8dGZcNOvz8NFWBo2l6QcwMsHXN5W eyPEDzkRjevOafZF3daMT1+mDrko0LnT1ODOKyADiuqMfB9tInMr7sIdX6xT7c9g Geo2hk253dFRhd6o9HDoy37/t+ai8lgK/3sZwx04zA8oK0A1AL/gNInC8n6OQIDq ayE5QSDga01CIPTfTc2eJ6PEd5Yte5sI8e2ZpvBHmqkVvdd3rMu2Wp7B/Zki5o41 gzWj0J0fiadLBO7jCEGeWeecMRE8qzn7u/7XPnbd1ug9RaGDpMuPdY8a0mIc+P+f guc= -----END CERTIFICATE-----Generated at Sun Jan 25 09:18:33 2026 by rpki-client