This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/m8rYr_2iytyxaBvpY5bmVT_GPA4.roa File: m8rYr_2iytyxaBvpY5bmVT_GPA4.roa (raw, json) Hash identifier: JdvL9p4h+mSTLc+2jMP4AS3ujI2r7wbx0jXR1EyHp+g= Subject key identifier: 9B:CA:D8:AF:FD:A2:CA:DC:B1:68:1B:E9:63:96:E6:55:3F:C6:3C:0E Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Certificate serial: 019B79EC4723FBD63373DBEB018DFDE36C48 Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/m8rYr_2iytyxaBvpY5bmVT_GPA4.roa Signing time: Thu 01 Jan 2026 14:18:06 +0000 ROA not before: Thu 01 Jan 2026 14:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197171 IP address blocks: 195.246.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:47:23:fb:d6:33:73:db:eb:01:8d:fd:e3:6c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Validity Not Before: Jan 1 14:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bcad8affda2cadcb1681be96396e6553fc63c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fe:ad:bc:16:2f:8c:61:b8:8b:60:69:4e:99: 4e:7c:1d:24:f3:6e:fc:58:69:bc:aa:91:5a:2d:9d: 97:22:a4:d6:fa:94:87:ac:1a:a9:a8:52:4d:9c:85: de:2e:6a:f2:d6:cd:d7:41:ad:bf:df:14:76:28:0c: 41:4d:1f:72:76:61:b3:e1:50:db:56:00:30:d7:f0: 14:16:2f:cb:56:19:ee:67:3d:5b:c0:b9:24:9d:f9: e3:38:89:04:d9:20:85:74:cf:a7:3c:2c:bf:20:25: a7:71:6c:32:c9:27:59:c0:90:68:20:1e:28:e5:46: 40:b7:ac:a7:e6:3a:f4:fa:ab:bf:37:50:82:5d:24: 69:a5:a1:91:2e:7b:2a:e5:06:d0:88:02:0b:3c:9b: 71:b0:f5:55:f5:44:be:51:bf:59:d8:33:9e:79:25: 0c:48:25:d2:3c:6a:9e:89:ea:39:c5:ae:89:39:07: 4d:5c:0a:10:de:eb:bb:ba:57:45:84:bd:45:e2:6f: ab:7c:c9:75:5a:1d:3f:f5:b1:e4:d2:f0:bb:1e:7b: aa:5e:8b:32:97:a8:af:f0:3c:4b:cf:62:6d:3a:7a: bf:1b:fc:dd:73:e0:15:91:51:2a:63:ad:c8:1c:43: cf:20:10:5f:f6:db:63:39:87:29:d4:86:a7:42:10: 80:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:CA:D8:AF:FD:A2:CA:DC:B1:68:1B:E9:63:96:E6:55:3F:C6:3C:0E X509v3 Authority Key Identifier: keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/m8rYr_2iytyxaBvpY5bmVT_GPA4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.246.124.0/23 Signature Algorithm: sha256WithRSAEncryption 18:26:ea:1b:85:b0:58:53:34:22:5c:33:d2:09:7a:8c:ee:1b: 7a:16:ba:e7:0c:96:06:c8:ff:57:bc:45:4f:6e:b0:c3:8d:07: e7:6b:01:43:46:05:00:7d:0f:d9:8d:b1:43:87:2a:cd:6b:d6: 8c:54:2b:4b:0d:d8:17:0d:53:71:15:b0:23:c5:0f:32:49:60: af:ed:31:f7:ce:2b:11:cd:e4:53:e9:f4:77:f8:2c:50:28:35: 77:67:de:ca:f4:d9:f6:3c:fa:96:3f:cd:6b:05:8d:00:ed:9c: bb:dd:c2:7c:5d:12:2d:08:f8:f4:d3:b3:a2:a5:b3:26:0c:5f: b9:61:d1:b7:24:ff:29:03:87:60:51:31:35:57:b1:d0:19:e8: 03:ce:98:6e:9b:05:52:2c:71:14:fb:e9:db:f9:c3:a2:e8:28: b4:55:12:c5:79:20:8f:40:cc:17:2a:9f:28:73:58:dc:77:d1: c7:c5:d9:c5:2e:e4:fb:48:51:6d:88:5b:1d:0d:53:94:d0:6c: 6f:f2:f0:ef:8e:e7:9d:2d:0d:bd:42:4a:be:05:50:78:fa:5f: 45:f8:cc:1f:c2:75:e9:0a:ba:1b:17:f1:7c:2e:3d:f2:c6:22: fd:23:e5:b5:3e:fe:3e:c0:76:70:a3:d8:69:fd:5f:bc:93:cb: 35:ae:ce:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Ecj+9Yzc9vrAY3942xIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh ZGZhMDAwHhcNMjYwMTAxMTQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmNhZDhhZmZkYTJjYWRjYjE2ODFiZTk2Mzk2ZTY1NTNmYzYzYzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/6tvBYvjGG4i2BpTplOfB0k8278 WGm8qpFaLZ2XIqTW+pSHrBqpqFJNnIXeLmry1s3XQa2/3xR2KAxBTR9ydmGz4VDb VgAw1/AUFi/LVhnuZz1bwLkknfnjOIkE2SCFdM+nPCy/ICWncWwyySdZwJBoIB4o 5UZAt6yn5jr0+qu/N1CCXSRppaGRLnsq5QbQiAILPJtxsPVV9US+Ub9Z2DOeeSUM SCXSPGqeieo5xa6JOQdNXAoQ3uu7uldFhL1F4m+rfMl1Wh0/9bHk0vC7HnuqXosy l6iv8DxLz2JtOnq/G/zdc+AVkVEqY63IHEPPIBBf9ttjOYcp1IanQhCAHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJvK2K/9osrcsWgb6WOW5lU/xjwOMB8GA1UdIwQY MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt OGRmMzYzMzdlNmJjLzEvbThyWXJfMml5dHl4YUJ2cFk1Ym1WVF9HUEE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/Z8MA0G CSqGSIb3DQEBCwUAA4IBAQAYJuobhbBYUzQiXDPSCXqM7ht6FrrnDJYGyP9XvEVP brDDjQfnawFDRgUAfQ/ZjbFDhyrNa9aMVCtLDdgXDVNxFbAjxQ8ySWCv7TH3zisR zeRT6fR3+CxQKDV3Z97K9Nn2PPqWP81rBY0A7Zy73cJ8XRItCPj007OipbMmDF+5 YdG3JP8pA4dgUTE1V7HQGegDzphumwVSLHEU++nb+cOi6Ci0VRLFeSCPQMwXKp8o c1jcd9HHxdnFLuT7SFFtiFsdDVOU0Gxv8vDvjuedLQ29Qkq+BVB4+l9F+MwfwnXp CrobF/F8Lj3yxiL9I+W1Pv4+wHZwo9hp/V+8k8s1rs4u -----END CERTIFICATE-----Generated at Mon Jan 26 12:22:09 2026 by rpki-client