This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/8vMvZJ6S4wIvSeidLWIqXdB2xEU.roa File: 8vMvZJ6S4wIvSeidLWIqXdB2xEU.roa (raw, json) Hash identifier: YSfZ6yHjbJE8NoHQ6iqadOGUmWSZLkJjEKtjGtKNsbU= Subject key identifier: F2:F3:2F:64:9E:92:E3:02:2F:49:E8:9D:2D:62:2A:5D:D0:76:C4:45 Certificate issuer: /CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22 Certificate serial: 019B7B3641B41F9595216699BF81A69C582F Authority key identifier: B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/8vMvZJ6S4wIvSeidLWIqXdB2xEU.roa Signing time: Thu 01 Jan 2026 20:18:31 +0000 ROA not before: Thu 01 Jan 2026 20:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61423 IP address blocks: 193.109.52.0/24 maxlen: 24 193.109.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:41:b4:1f:95:95:21:66:99:bf:81:a6:9c:58:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22 Validity Not Before: Jan 1 20:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2f32f649e92e3022f49e89d2d622a5dd076c445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b6:4d:54:d5:54:a2:f9:ff:d2:36:c4:70:0e: d3:53:8c:f3:7f:fb:70:e2:dd:b0:9a:94:0b:60:b8: 19:bc:62:b4:8e:54:3a:17:6d:3b:0f:b4:32:0a:00: da:58:5a:02:4e:fe:22:0f:b8:6a:26:b8:6f:6f:15: d7:23:92:3f:48:4f:c0:b7:06:58:4c:06:b9:25:aa: ac:fa:42:45:d9:a2:5b:b5:27:45:c3:de:30:db:52: 4d:8c:c5:4f:ff:9e:a5:da:a6:b3:c0:dd:fe:3e:c0: 11:bf:39:22:18:bf:cf:81:47:6c:45:aa:f9:d0:79: 76:fc:77:50:b9:f0:e0:29:0a:5a:1a:b7:e1:9b:c3: 68:80:c6:65:43:15:19:dd:ee:44:37:8d:1f:45:41: c6:f5:cd:bb:93:5c:2c:ba:64:ed:97:a9:68:13:81: fc:62:2d:1e:ee:93:3b:23:09:1d:0d:91:f5:3d:92: 77:8e:45:32:10:cd:27:88:40:21:34:e2:43:e7:c2: 4c:75:1d:41:c9:ca:0c:4d:8d:a9:52:34:77:67:4e: bf:73:08:d5:16:2c:f7:21:94:e5:b7:b4:6c:e0:a3: f9:82:1f:a2:52:7c:1a:a2:a4:60:2b:37:fd:73:86: e4:bc:eb:00:70:c9:ec:c2:2b:20:2c:8a:29:23:ce: be:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F3:2F:64:9E:92:E3:02:2F:49:E8:9D:2D:62:2A:5D:D0:76:C4:45 X509v3 Authority Key Identifier: keyid:B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/8vMvZJ6S4wIvSeidLWIqXdB2xEU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.52.0/23 Signature Algorithm: sha256WithRSAEncryption 77:08:f9:b7:e3:bc:7d:9a:e2:4e:07:d3:1e:52:de:69:72:72: 20:38:9e:d7:fd:e5:ae:d2:84:55:54:fd:d1:87:c0:75:e1:d8: ce:1d:a1:43:ba:31:aa:55:15:2c:92:ed:f4:e0:a9:99:6b:2f: 10:03:31:92:1a:6e:4d:35:f5:dc:3d:3e:a6:4b:a8:d1:15:d3: 07:00:d4:54:8b:33:4b:79:53:49:18:2c:e5:0f:e5:85:2f:29: 12:66:cd:22:b2:e1:90:3c:47:06:2b:8d:0f:fb:bb:e1:34:31: de:a2:62:ba:ab:9c:73:fc:ad:58:f9:4b:a4:54:49:d5:39:3c: df:65:3a:48:f4:16:5b:e9:55:cb:ed:bb:61:d0:49:1e:8c:a0: 00:13:13:c2:95:1e:0c:87:81:21:4c:50:e9:cd:17:3c:df:f0: 49:b2:db:80:30:17:43:d9:a4:da:df:9b:a5:4f:66:30:d1:ee: 79:85:1c:58:ec:85:b3:59:39:9c:c5:06:50:2f:22:4d:99:b1: 23:d0:68:16:66:5d:f8:c5:70:5e:7b:b4:67:72:85:40:97:c2: e7:a7:4d:30:a5:bc:4d:3f:75:c7:b5:ac:22:31:a9:f0:b8:ff: 32:ab:03:58:2e:6b:ef:07:6d:f7:1c:ca:3e:c4:9e:c3:ff:09: f4:5f:74:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NkG0H5WVIWaZv4GmnFgvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYjZiNmQ3ZTVkZDBjMzI4ZjZjZWFmN2U5ZTljMGQxY2I4 YzFkMjIwHhcNMjYwMTAxMjAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmYzMmY2NDllOTJlMzAyMmY0OWU4OWQyZDYyMmE1ZGQwNzZjNDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7ZNVNVUovn/0jbEcA7TU4zzf/tw 4t2wmpQLYLgZvGK0jlQ6F207D7QyCgDaWFoCTv4iD7hqJrhvbxXXI5I/SE/AtwZY TAa5Jaqs+kJF2aJbtSdFw94w21JNjMVP/56l2qazwN3+PsARvzkiGL/PgUdsRar5 0Hl2/HdQufDgKQpaGrfhm8NogMZlQxUZ3e5EN40fRUHG9c27k1wsumTtl6loE4H8 Yi0e7pM7IwkdDZH1PZJ3jkUyEM0niEAhNOJD58JMdR1BycoMTY2pUjR3Z06/cwjV Fiz3IZTlt7Rs4KP5gh+iUnwaoqRgKzf9c4bkvOsAcMnswisgLIopI86++wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPLzL2SekuMCL0nonS1iKl3QdsRFMB8GA1UdIwQY MBaAFLO2ttfl3Qwyj2zq9+npwNHLjB0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczdhMjEtWGREREtQYk9yMzZlbkEwY3VNSFNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yZDc5NDYtZGI4Yi00YTU3LWE3MGIt MjA3MTU0NmI3MGY5LzEvOHZNdlpKNlM0d0l2U2VpZExXSXFYZEIyeEVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yZDc5NDYtZGI4Yi00YTU3LWE3MGItMjA3MTU0NmI3MGY5 LzEvczdhMjEtWGREREtQYk9yMzZlbkEwY3VNSFNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwW00MA0G CSqGSIb3DQEBCwUAA4IBAQB3CPm347x9muJOB9MeUt5pcnIgOJ7X/eWu0oRVVP3R h8B14djOHaFDujGqVRUsku304KmZay8QAzGSGm5NNfXcPT6mS6jRFdMHANRUizNL eVNJGCzlD+WFLykSZs0isuGQPEcGK40P+7vhNDHeomK6q5xz/K1Y+UukVEnVOTzf ZTpI9BZb6VXL7bth0EkejKAAExPClR4Mh4EhTFDpzRc83/BJstuAMBdD2aTa35ul T2Yw0e55hRxY7IWzWTmcxQZQLyJNmbEj0GgWZl34xXBee7RncoVAl8Lnp00wpbxN P3XHtawiManwuP8yqwNYLmvvB233HMo+xJ7D/wn0X3Rv -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:16 2026 by rpki-client