This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/i-ANpr6wgO4krsxaS_Mr1pJHk_s.roa File: i-ANpr6wgO4krsxaS_Mr1pJHk_s.roa (raw, json) Hash identifier: gL8PqoF8vFY4ZSfQKB1yxJH42nNfNmgI+ETePYwGBJ0= Subject key identifier: 8B:E0:0D:A6:BE:B0:80:EE:24:AE:CC:5A:4B:F3:2B:D6:92:47:93:FB Certificate issuer: /CN=8e0c54b3aae251915ffc98bd34a550181ffab49a Certificate serial: 019B7D5B1740C668B2529DA983A67B8D5FD0 Authority key identifier: 8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/i-ANpr6wgO4krsxaS_Mr1pJHk_s.roa Signing time: Fri 02 Jan 2026 06:18:00 +0000 ROA not before: Fri 02 Jan 2026 06:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8272 IP address blocks: 193.221.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:17:40:c6:68:b2:52:9d:a9:83:a6:7b:8d:5f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e0c54b3aae251915ffc98bd34a550181ffab49a Validity Not Before: Jan 2 06:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8be00da6beb080ee24aecc5a4bf32bd6924793fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b7:bd:eb:22:42:ea:38:d6:18:b6:8c:42:e2: 1d:bd:9f:ba:76:55:74:a0:b9:41:d4:7a:6c:3e:0d: bd:13:2d:fa:ab:73:e8:01:18:27:a5:20:8c:60:e9: 45:c6:50:54:43:15:4e:65:b4:f2:13:ac:2d:90:0f: ad:a0:16:49:ff:98:d2:95:33:bc:94:af:6a:31:d0: 81:8a:70:18:f3:dc:27:77:24:e0:a0:f7:4e:46:fd: f3:97:d5:15:25:cc:c3:9c:39:70:8b:9b:cd:db:40: 04:61:83:17:97:7d:93:f9:50:c6:e3:e6:a2:3f:b3: 4d:86:53:99:53:5f:20:11:74:df:fe:e6:3a:ec:59: 8f:e4:41:ae:25:5d:3c:07:7c:b7:e6:57:d2:0f:3b: 51:07:f5:ea:62:e5:93:8c:fa:cd:79:fc:6c:f5:8a: 05:7b:9b:c2:50:4b:db:cf:d2:75:cb:16:90:98:a0: 61:05:d5:e3:26:b5:09:14:70:85:3a:99:34:4b:21: 36:ba:43:a6:5b:58:84:cc:cf:e0:f3:6d:41:ea:b0: ce:af:5c:2c:05:de:2b:fd:52:9e:db:23:98:a9:64: 18:b2:ae:5b:90:e4:23:70:d9:64:f6:66:69:fb:39: 15:8a:b5:62:9a:1f:32:7a:25:cf:58:60:7b:1b:87: 05:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E0:0D:A6:BE:B0:80:EE:24:AE:CC:5A:4B:F3:2B:D6:92:47:93:FB X509v3 Authority Key Identifier: keyid:8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/i-ANpr6wgO4krsxaS_Mr1pJHk_s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.221.118.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:f2:50:b6:23:33:60:54:d5:c8:71:1e:81:d9:fa:53:be:e3: 8d:c9:6c:c4:4e:9e:41:44:91:53:63:45:97:86:2b:5f:59:d5: e8:3c:91:1d:40:28:16:9c:6f:5c:04:ff:06:c5:28:9e:2b:67: b1:b0:34:fc:8f:e1:5d:de:2f:ce:5f:14:e7:1a:3f:1d:1f:66: a6:5b:64:fe:4d:12:0b:e5:19:51:d7:70:02:1b:49:e6:67:06: 2e:05:f3:ca:cf:95:49:c4:19:d7:1d:a7:ae:bb:11:6c:aa:97: a3:e8:72:7b:cc:4d:61:76:2f:eb:06:22:4d:5f:17:83:9c:d1: db:e2:1d:92:91:c0:c8:78:bc:16:63:a5:51:41:03:ea:64:10: 2e:df:60:5c:cc:ce:be:0e:b6:b1:24:b5:72:88:cc:76:ba:e7: 5f:99:09:fe:95:71:5d:15:c3:5b:f1:8d:a4:5c:1f:72:9a:71: d3:08:17:c4:b8:6c:8c:83:95:73:c4:5e:01:dd:e8:39:83:68: 81:d7:37:38:90:87:10:5d:1c:f9:c4:14:52:89:ad:6b:d6:dc: f3:b7:26:f4:4d:ab:a0:e6:5f:85:ec:ad:ae:be:4d:12:97:67: 2b:a0:0b:8e:1a:49:17:58:4b:83:f5:f2:48:8d:e0:a7:c8:0b: d6:49:93:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WxdAxmiyUp2pg6Z7jV/QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMGM1NGIzYWFlMjUxOTE1ZmZjOThiZDM0YTU1MDE4MWZm YWI0OWEwHhcNMjYwMTAyMDYxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmUwMGRhNmJlYjA4MGVlMjRhZWNjNWE0YmYzMmJkNjkyNDc5M2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6re96yJC6jjWGLaMQuIdvZ+6dlV0 oLlB1HpsPg29Ey36q3PoARgnpSCMYOlFxlBUQxVOZbTyE6wtkA+toBZJ/5jSlTO8 lK9qMdCBinAY89wndyTgoPdORv3zl9UVJczDnDlwi5vN20AEYYMXl32T+VDG4+ai P7NNhlOZU18gEXTf/uY67FmP5EGuJV08B3y35lfSDztRB/XqYuWTjPrNefxs9YoF e5vCUEvbz9J1yxaQmKBhBdXjJrUJFHCFOpk0SyE2ukOmW1iEzM/g821B6rDOr1ws Bd4r/VKe2yOYqWQYsq5bkOQjcNlk9mZp+zkVirVimh8yeiXPWGB7G4cFyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIvgDaa+sIDuJK7MWkvzK9aSR5P7MB8GA1UdIwQY MBaAFI4MVLOq4lGRX/yYvTSlUBgf+rSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamd4VXM2cmlVWkZmX0ppOU5LVlFHQl82dEpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iNjI1MGMtZTA2Mi00MDM3LWI4ZjMt YmYxZTFkZTJlYTYzLzEvaS1BTnByNndnTzRrcnN4YVNfTXIxcEpIa19zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9iNjI1MGMtZTA2Mi00MDM3LWI4ZjMtYmYxZTFkZTJlYTYz LzEvamd4VXM2cmlVWkZmX0ppOU5LVlFHQl82dEpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwd12MA0G CSqGSIb3DQEBCwUAA4IBAQA88lC2IzNgVNXIcR6B2fpTvuONyWzETp5BRJFTY0WX hitfWdXoPJEdQCgWnG9cBP8GxSieK2exsDT8j+Fd3i/OXxTnGj8dH2amW2T+TRIL 5RlR13ACG0nmZwYuBfPKz5VJxBnXHaeuuxFsqpej6HJ7zE1hdi/rBiJNXxeDnNHb 4h2SkcDIeLwWY6VRQQPqZBAu32BczM6+DraxJLVyiMx2uudfmQn+lXFdFcNb8Y2k XB9ymnHTCBfEuGyMg5VzxF4B3eg5g2iB1zc4kIcQXRz5xBRSia1r1tzztyb0Taug 5l+F7K2uvk0Sl2croAuOGkkXWEuD9fJIjeCnyAvWSZOf -----END CERTIFICATE-----Generated at Mon Jan 26 07:56:26 2026 by rpki-client