This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/i8DSsz1zrzQenpw3T2bP8cFRsq8.roa File: i8DSsz1zrzQenpw3T2bP8cFRsq8.roa (raw, json) Hash identifier: oEuQy5j/C31ArjuLYoalrrQGCWj0f7zf2ngtaCvBjYo= Subject key identifier: 8B:C0:D2:B3:3D:73:AF:34:1E:9E:9C:37:4F:66:CF:F1:C1:51:B2:AF Certificate issuer: /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14 Certificate serial: 019B7BA3D13A77A284A57562DB699F5F8A56 Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/i8DSsz1zrzQenpw3T2bP8cFRsq8.roa Signing time: Thu 01 Jan 2026 22:18:12 +0000 ROA not before: Thu 01 Jan 2026 22:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211908 IP address blocks: 93.180.216.0/21 maxlen: 24 185.254.12.0/22 maxlen: 24 199.74.188.0/22 maxlen: 24 199.74.190.0/24 maxlen: 24 2a0b:1880::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d1:3a:77:a2:84:a5:75:62:db:69:9f:5f:8a:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14 Validity Not Before: Jan 1 22:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bc0d2b33d73af341e9e9c374f66cff1c151b2af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:64:b6:ec:03:33:25:ad:8f:bb:a2:62:be:01: db:b7:0a:39:82:c3:42:11:d2:35:98:56:30:e4:35: 4e:c7:50:b3:d3:c8:30:05:99:aa:66:8b:a9:4b:32: 7f:89:aa:da:9d:e6:41:37:57:7b:bc:53:4e:16:be: 30:61:3f:49:1f:f5:4d:7c:ce:1c:86:a3:41:28:c1: a7:1b:48:14:b7:e9:b7:00:d7:ab:48:58:8c:80:51: 7f:7c:3b:3a:83:57:8c:1d:67:7d:06:52:3f:76:5f: 5d:42:d0:c8:79:53:df:73:86:a3:07:b5:cb:fe:48: 40:7a:87:3b:f4:bc:fd:cc:46:cf:33:de:a6:9d:40: 1f:48:96:3a:52:a7:53:93:3c:1f:a3:17:59:2d:f8: 73:92:00:a7:bc:7c:a7:48:d2:39:43:b4:0e:39:0c: 63:4f:d5:5c:6d:ed:cd:6c:f4:38:ca:0e:13:aa:9e: 85:89:da:61:e3:65:dc:17:4b:56:b5:ca:a2:e4:39: ea:bb:e0:9d:86:0f:8c:8a:7f:fb:4e:12:e0:99:4e: be:07:fd:d9:97:01:c3:ee:1c:1d:f0:6b:d5:62:66: f0:5a:93:0b:bb:63:28:77:7e:c4:29:87:2c:de:f3: b7:e3:3c:6c:36:f5:9a:64:5c:5e:73:23:32:63:3a: 77:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C0:D2:B3:3D:73:AF:34:1E:9E:9C:37:4F:66:CF:F1:C1:51:B2:AF X509v3 Authority Key Identifier: keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/i8DSsz1zrzQenpw3T2bP8cFRsq8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.180.216.0/21 185.254.12.0/22 199.74.188.0/22 IPv6: 2a0b:1880::/29 Signature Algorithm: sha256WithRSAEncryption af:0a:25:72:57:15:11:a0:86:92:41:33:ff:a6:41:5c:27:bd: 67:58:c2:9e:56:0a:5b:a4:2c:b5:65:63:c1:97:58:8b:28:66: ce:b8:c0:34:8a:a1:3d:af:16:3e:9e:e3:d0:95:de:5b:45:98: 04:af:b3:ab:5b:c7:2a:45:cf:6c:a7:10:da:5a:ae:47:e6:4e: ee:b7:ce:ca:27:6c:92:21:b1:e7:92:53:8a:ff:38:9c:52:e3: 33:0a:09:4f:b1:2e:a5:93:96:b5:fa:b2:50:38:55:b6:62:30: be:66:65:3a:08:4d:d3:8c:8e:cd:77:f5:7c:3c:39:0a:59:c9: ec:a6:ef:fe:77:17:49:01:67:8c:40:b5:27:14:c5:2d:67:cd: dc:be:57:ef:b4:1e:a7:d2:a7:49:d2:a5:50:bb:07:d9:18:52: 76:f4:5b:a3:e2:45:18:83:60:13:ad:9e:e0:56:32:57:24:13: 6a:33:a1:b2:6d:4c:5a:35:c6:91:d5:77:36:0a:db:71:91:8e: 38:21:14:b6:5a:b1:9f:89:01:9d:12:6c:62:89:5d:10:79:b9: 81:74:95:48:14:23:d8:9b:68:46:61:6b:4d:b1:da:a4:b7:6c: 2b:80:a2:10:cf:d4:35:db:6d:23:77:70:a5:6c:3b:9d:94:c9: 81:ec:d9:a7 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt7o9E6d6KEpXVi22mfX4pWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTRkOWU0MWVhNWUyZDE2MWI3YzRjZGIyZTQ3MDJjNGYy NDhlMTQwHhcNMjYwMTAxMjIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmMwZDJiMzNkNzNhZjM0MWU5ZTljMzc0ZjY2Y2ZmMWMxNTFiMmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmS27AMzJa2Pu6JivgHbtwo5gsNC EdI1mFYw5DVOx1Cz08gwBZmqZoupSzJ/iaraneZBN1d7vFNOFr4wYT9JH/VNfM4c hqNBKMGnG0gUt+m3ANerSFiMgFF/fDs6g1eMHWd9BlI/dl9dQtDIeVPfc4ajB7XL /khAeoc79Lz9zEbPM96mnUAfSJY6UqdTkzwfoxdZLfhzkgCnvHynSNI5Q7QOOQxj T9Vcbe3NbPQ4yg4Tqp6Fidph42XcF0tWtcqi5Dnqu+Cdhg+Min/7ThLgmU6+B/3Z lwHD7hwd8GvVYmbwWpMLu2Mod37EKYcs3vO34zxsNvWaZFxecyMyYzp3zQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFIvA0rM9c680Hp6cN09mz/HBUbKvMB8GA1UdIwQY MBaAFO9U2eQepeLRYbfEzbLkcCxPJI4UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzIt ZmJjNmZjYjVlN2E2LzEvaThEU3N6MXpyelFlbnB3M1QyYlA4Y0ZSc3E4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzItZmJjNmZjYjVlN2E2 LzEvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDXbTYAwQC uf4MAwQCx0q8MA0EAgACMAcDBQMqCxiAMA0GCSqGSIb3DQEBCwUAA4IBAQCvCiVy VxURoIaSQTP/pkFcJ71nWMKeVgpbpCy1ZWPBl1iLKGbOuMA0iqE9rxY+nuPQld5b RZgEr7OrW8cqRc9spxDaWq5H5k7ut87KJ2ySIbHnklOK/zicUuMzCglPsS6lk5a1 +rJQOFW2YjC+ZmU6CE3TjI7Nd/V8PDkKWcnspu/+dxdJAWeMQLUnFMUtZ83cvlfv tB6n0qdJ0qVQuwfZGFJ29Fuj4kUYg2ATrZ7gVjJXJBNqM6GybUxaNcaR1Xc2Cttx kY44IRS2WrGfiQGdEmxiiV0QebmBdJVIFCPYm2hGYWtNsdqkt2wrgKIQz9Q1220j d3ClbDudlMmB7Nmn -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:41 2026 by rpki-client