This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/8ZMRwkEAvgLf-7B6O5A6wTZkvko.roa File: 8ZMRwkEAvgLf-7B6O5A6wTZkvko.roa (raw, json) Hash identifier: +hr7aCwMyU++eEfbB0MkOVyBHh1rbHvZF3Q4bAp/McY= Subject key identifier: F1:93:11:C2:41:00:BE:02:DF:FB:B0:7A:3B:90:3A:C1:36:64:BE:4A Certificate issuer: /CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96 Certificate serial: 019B797E5A41A78176EBE562416EA9809B9A Authority key identifier: 35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/8ZMRwkEAvgLf-7B6O5A6wTZkvko.roa Signing time: Thu 01 Jan 2026 12:18:02 +0000 ROA not before: Thu 01 Jan 2026 12:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207416 IP address blocks: 195.62.48.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:5a:41:a7:81:76:eb:e5:62:41:6e:a9:80:9b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96 Validity Not Before: Jan 1 12:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f19311c24100be02dffbb07a3b903ac13664be4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:72:f7:4f:f5:11:27:b1:b3:1d:66:ca:37:76: c7:e4:13:7a:93:bd:d3:52:ce:66:66:92:c2:a3:37: 5a:9f:80:56:3c:de:a7:33:9b:66:09:29:07:cb:0f: ba:ca:9e:28:17:00:54:25:b0:84:23:13:ba:5f:5b: 81:75:19:d4:87:f2:d3:df:1d:cb:df:b6:5d:1f:84: af:f3:e2:ab:79:2d:e6:95:7b:6e:28:ad:65:8c:b9: 5e:f2:43:54:0f:33:fc:32:5b:3a:c9:2e:bb:32:19: 0d:b2:80:e6:63:32:54:65:b8:60:37:16:c2:96:c1: d2:b0:b2:2b:01:52:34:a9:a8:e8:ff:84:a4:cc:eb: 98:21:dd:c5:6d:a4:9c:46:65:6a:9a:a3:36:c6:ba: e0:b3:51:54:f4:f5:d6:72:85:ea:73:ba:22:d5:14: 50:b1:92:ee:0c:5c:fd:d6:a1:6f:66:7b:30:02:41: 86:1c:f4:9e:00:dc:8d:2b:a6:8b:fa:28:97:35:e3: 1f:70:45:70:28:70:a6:a2:4f:c4:a4:8d:52:13:13: 24:64:07:25:61:11:07:2d:71:32:b5:ad:a0:a3:da: 9e:b9:e3:ee:ec:1d:53:27:be:52:ec:d0:5d:ab:6f: 1b:db:50:87:c6:c6:10:a4:f9:3c:5c:05:f1:83:cd: 76:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:93:11:C2:41:00:BE:02:DF:FB:B0:7A:3B:90:3A:C1:36:64:BE:4A X509v3 Authority Key Identifier: keyid:35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/8ZMRwkEAvgLf-7B6O5A6wTZkvko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.62.48.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:0f:f1:48:6e:f2:e7:30:8e:73:af:8f:3c:ca:1b:ce:49:e7: 5c:d3:6a:f5:a6:ec:63:e6:ee:e2:d7:74:2d:d4:90:98:96:6d: c0:52:59:7a:63:6f:5b:c3:21:cd:31:f9:00:ca:19:6a:99:14: 6b:76:ce:39:95:0d:6b:52:eb:33:d5:73:e2:4d:80:b3:43:e8: 22:15:86:9c:ef:26:07:b7:23:ea:14:3f:69:43:24:6f:c0:2d: a5:1a:68:a7:07:10:44:fc:e7:54:55:ee:2e:bf:cb:ee:88:28: 38:bf:5a:6b:11:d7:35:73:33:0e:ed:24:df:bd:fb:d4:d2:2e: 90:2d:f1:f2:83:e9:81:08:df:18:e0:6e:d0:f5:d1:7c:b0:37: 78:d7:c3:97:90:3d:43:fa:25:80:ee:af:ad:65:18:a8:29:b0: b8:16:45:a7:2a:7d:cf:7c:28:b8:c6:a5:a1:98:1a:43:d8:d8: 3e:7f:6e:c0:d4:93:18:f4:43:f3:b9:27:51:91:95:35:14:11: bd:a5:40:fa:54:5c:a0:05:25:5c:9d:a1:0b:91:77:f0:05:da: 98:a7:ad:ca:d6:96:df:51:e8:74:e5:70:f7:23:c8:7a:29:da: 42:ec:b2:c0:a5:f8:a5:29:39:16:89:22:40:89:1c:54:61:07: ce:fc:2e:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5flpBp4F26+ViQW6pgJuaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1Y2VjYmY4NjUxYTU2MjRmMjI4MWRjMzU2YTc3Y2QzNGJk NWJhOTYwHhcNMjYwMTAxMTIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTkzMTFjMjQxMDBiZTAyZGZmYmIwN2EzYjkwM2FjMTM2NjRiZTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3L3T/URJ7GzHWbKN3bH5BN6k73T Us5mZpLCozdan4BWPN6nM5tmCSkHyw+6yp4oFwBUJbCEIxO6X1uBdRnUh/LT3x3L 37ZdH4Sv8+KreS3mlXtuKK1ljLle8kNUDzP8Mls6yS67MhkNsoDmYzJUZbhgNxbC lsHSsLIrAVI0qajo/4SkzOuYId3FbaScRmVqmqM2xrrgs1FU9PXWcoXqc7oi1RRQ sZLuDFz91qFvZnswAkGGHPSeANyNK6aL+iiXNeMfcEVwKHCmok/EpI1SExMkZAcl YREHLXEyta2go9qeuePu7B1TJ75S7NBdq28b21CHxsYQpPk8XAXxg8125QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPGTEcJBAL4C3/uwejuQOsE2ZL5KMB8GA1UdIwQY MBaAFDXOy/hlGlYk8igdw1anfNNL1bqWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmM3TC1HVWFWaVR5S0IzRFZxZDgwMHZWdXBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84NjcxN2YtZmYxZi00Yjk1LWFlODEt NjFhNmQ3MmFjNDljLzEvOFpNUndrRUF2Z0xmLTdCNk81QTZ3VFprdmtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS84NjcxN2YtZmYxZi00Yjk1LWFlODEtNjFhNmQ3MmFjNDlj LzEvTmM3TC1HVWFWaVR5S0IzRFZxZDgwMHZWdXBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwz4wMA0G CSqGSIb3DQEBCwUAA4IBAQBtD/FIbvLnMI5zr488yhvOSedc02r1puxj5u7i13Qt 1JCYlm3AUll6Y29bwyHNMfkAyhlqmRRrds45lQ1rUusz1XPiTYCzQ+giFYac7yYH tyPqFD9pQyRvwC2lGminBxBE/OdUVe4uv8vuiCg4v1prEdc1czMO7STfvfvU0i6Q LfHyg+mBCN8Y4G7Q9dF8sDd418OXkD1D+iWA7q+tZRioKbC4FkWnKn3PfCi4xqWh mBpD2Ng+f27A1JMY9EPzuSdRkZU1FBG9pUD6VFygBSVcnaELkXfwBdqYp63K1pbf Ueh05XD3I8h6KdpC7LLApfilKTkWiSJAiRxUYQfO/C7m -----END CERTIFICATE-----Generated at Sun Jan 25 18:07:38 2026 by rpki-client