This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/8lFiF1wAdPJ2hAxovfgzct_NPm4.roa File: 8lFiF1wAdPJ2hAxovfgzct_NPm4.roa (raw, json) Hash identifier: Ym4lP51eot+4QlKi10WZ3Du5yp0u/4cXY/HYDj8vrhg= Subject key identifier: F2:51:62:17:5C:00:74:F2:76:84:0C:68:BD:F8:33:72:DF:CD:3E:6E Certificate issuer: /CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d Certificate serial: 019B78355419488E1ECC03B0428741830049 Authority key identifier: BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/8lFiF1wAdPJ2hAxovfgzct_NPm4.roa Signing time: Thu 01 Jan 2026 06:18:39 +0000 ROA not before: Thu 01 Jan 2026 06:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214591 IP address blocks: 193.34.203.192/26 maxlen: 26 2001:7f8:15b:1::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:54:19:48:8e:1e:cc:03:b0:42:87:41:83:00:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d Validity Not Before: Jan 1 06:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f25162175c0074f276840c68bdf83372dfcd3e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d7:b1:bd:5b:39:bd:56:55:4d:f7:cb:7f:fb: 91:da:d2:6f:4b:7f:94:20:fd:00:29:47:72:f5:01: 6d:76:16:9a:e1:1a:fb:c4:5b:10:f5:6c:b8:97:38: 65:bf:91:37:5d:be:32:4e:3e:1c:e5:b3:03:92:c3: 7a:a7:64:58:ba:26:6b:7c:21:51:31:72:7f:c1:83: 4b:1f:db:9f:5f:8e:3d:18:88:16:34:63:f2:fc:1d: dd:37:d5:fc:bd:d9:56:2e:5b:19:e1:28:35:1e:f9: dc:97:81:28:82:37:d6:54:aa:53:79:26:4b:fc:0f: d8:2e:8e:02:60:db:2d:89:fa:b5:34:0b:00:17:b3: 41:13:68:3c:cb:fa:7d:1e:30:1e:c8:d7:3f:68:9f: a1:73:0d:21:3b:e7:a7:16:80:98:7b:fd:32:27:cf: dc:d4:56:9a:c1:52:a4:e0:cf:a9:8e:4a:49:52:e9: 38:e1:7f:2f:84:cb:93:13:f0:1a:2f:76:c5:23:78: f6:dc:d1:ca:2c:4b:6e:74:63:16:9d:e3:3e:45:1b: 3c:7a:63:13:d0:85:78:f1:d5:7a:6a:62:af:97:8f: 6d:0e:67:4f:87:10:9f:c1:ec:e9:0b:1f:e8:f9:31: d7:d6:1e:e7:57:bf:17:6d:82:58:e2:06:6d:79:bd: f9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:51:62:17:5C:00:74:F2:76:84:0C:68:BD:F8:33:72:DF:CD:3E:6E X509v3 Authority Key Identifier: keyid:BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/8lFiF1wAdPJ2hAxovfgzct_NPm4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.203.192/26 IPv6: 2001:7f8:15b:1::/64 Signature Algorithm: sha256WithRSAEncryption 33:e6:9e:25:c7:5b:da:27:94:17:ad:91:07:5a:b5:a5:70:ab: be:45:bd:05:dc:64:b8:61:79:ab:fa:f0:40:6a:d8:48:55:d3: d2:2c:65:f5:3c:bd:87:eb:6b:89:bb:59:c4:70:e9:34:19:69: b4:32:09:52:eb:c2:ee:f2:66:dc:24:42:84:8a:46:96:f2:a3: d0:fa:34:59:67:08:77:5c:fd:bc:a9:7a:7c:e6:50:ac:34:74: 33:ba:f0:fd:74:50:d2:23:62:b7:c6:1e:ed:5a:ac:f4:99:e2: 85:88:9d:b6:27:3d:9f:c5:1a:65:ce:b5:23:24:8f:a0:3d:00: 15:f1:e3:88:1e:92:8d:d0:98:db:3f:f3:d8:9e:22:67:7c:f0: 34:42:fb:0e:98:78:b1:86:19:38:5b:bc:dc:f6:85:f3:e3:a8: 53:4a:aa:5f:c9:01:34:06:7e:46:20:0f:bb:be:da:9a:5a:10: e5:7f:59:77:71:09:c8:b4:9e:45:a5:75:da:1d:e0:28:53:01: 49:eb:f1:7f:4b:3d:1e:10:9e:34:c8:70:27:72:13:b3:f1:e7: 87:e1:ec:5f:b0:64:cb:f5:bb:e2:85:ed:52:a4:47:ec:24:58: 44:8d:63:3d:98:a4:4c:65:c5:b6:25:0a:38:58:7c:1e:04:86: 31:92:ee:9d -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt4NVQZSI4ezAOwQodBgwBJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWE3NDhiYTE0YTc2ZTVkOGE2ZWRhY2I1NDI2MDgyYTU2 ZjVlM2QwHhcNMjYwMTAxMDYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjUxNjIxNzVjMDA3NGYyNzY4NDBjNjhiZGY4MzM3MmRmY2QzZTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9exvVs5vVZVTffLf/uR2tJvS3+U IP0AKUdy9QFtdhaa4Rr7xFsQ9Wy4lzhlv5E3Xb4yTj4c5bMDksN6p2RYuiZrfCFR MXJ/wYNLH9ufX449GIgWNGPy/B3dN9X8vdlWLlsZ4Sg1Hvncl4EogjfWVKpTeSZL /A/YLo4CYNstifq1NAsAF7NBE2g8y/p9HjAeyNc/aJ+hcw0hO+enFoCYe/0yJ8/c 1FaawVKk4M+pjkpJUuk44X8vhMuTE/AaL3bFI3j23NHKLEtudGMWneM+RRs8emMT 0IV48dV6amKvl49tDmdPhxCfwezpCx/o+THX1h7nV78XbYJY4gZteb35VQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFPJRYhdcAHTydoQMaL34M3LfzT5uMB8GA1UdIwQY MBaAFLqqdIuhSnbl2KbtrLVCYIKlb149MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFwMGk2RktkdVhZcHUyc3RVSmdncVZ2WGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9hOGU0NWItMTdjNi00MzZkLTgxYTgt YzUxOTUxNjJlM2JlLzEvOGxGaUYxd0FkUEoyaEF4b3ZmZ3pjdF9OUG00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9hOGU0NWItMTdjNi00MzZkLTgxYTgtYzUxOTUxNjJlM2Jl LzEvdXFwMGk2RktkdVhZcHUyc3RVSmdncVZ2WGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjANBAIAATAHAwUGwSLLwDAR BAIAAjALAwkAIAEH+AFbAAEwDQYJKoZIhvcNAQELBQADggEBADPmniXHW9onlBet kQdataVwq75FvQXcZLhheav68EBq2EhV09IsZfU8vYfra4m7WcRw6TQZabQyCVLr wu7yZtwkQoSKRpbyo9D6NFlnCHdc/bypenzmUKw0dDO68P10UNIjYrfGHu1arPSZ 4oWInbYnPZ/FGmXOtSMkj6A9ABXx44geko3QmNs/89ieImd88DRC+w6YeLGGGThb vNz2hfPjqFNKql/JATQGfkYgD7u+2ppaEOV/WXdxCci0nkWlddod4ChTAUnr8X9L PR4QnjTIcCdyE7Px54fh7F+wZMv1u+KF7VKkR+wkWESNYz2YpExlxbYlCjhYfB4E hjGS7p0= -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:43 2026 by rpki-client