This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/8Na-R2PqVFyNzA5u6KAFRMf11HE.roa File: 8Na-R2PqVFyNzA5u6KAFRMf11HE.roa (raw, json) Hash identifier: 8IZEcdLtXy5KbQ5iic2lrmgZO3w7ovtbGyG4T1KJfkY= Subject key identifier: F0:D6:BE:47:63:EA:54:5C:8D:CC:0E:6E:E8:A0:05:44:C7:F5:D4:71 Certificate issuer: /CN=93b322b59048e107b94a6db06557af5f0c9c290c Certificate serial: 019B7F833E6D1DE5344B13813D170AA72198 Authority key identifier: 93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/8Na-R2PqVFyNzA5u6KAFRMf11HE.roa Signing time: Fri 02 Jan 2026 16:21:06 +0000 ROA not before: Fri 02 Jan 2026 16:21:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 559 IP address blocks: 193.5.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.crl rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:3e:6d:1d:e5:34:4b:13:81:3d:17:0a:a7:21:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93b322b59048e107b94a6db06557af5f0c9c290c Validity Not Before: Jan 2 16:21:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0d6be4763ea545c8dcc0e6ee8a00544c7f5d471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3b:83:dc:d6:65:ac:7e:2f:f1:f4:ee:b5:ed: a0:8a:46:59:ed:5c:3c:24:1e:9a:a7:d4:38:9d:78: 30:a7:64:88:ae:48:3a:32:9d:34:39:72:3c:54:08: 0c:31:2e:7b:e7:eb:5f:f1:15:ea:ac:6c:5e:c3:fc: 40:90:9b:f3:2e:ad:9f:d9:bc:1f:d0:01:21:6b:52: da:82:26:98:b2:d8:2a:d6:f6:64:af:9a:f4:20:a0: dc:a1:18:57:7c:9d:a4:88:cc:d8:0a:fc:3b:81:99: 5c:6c:5b:11:9a:ab:79:bc:4d:66:28:2f:22:c1:fe: 98:4a:ae:b7:d3:92:ca:52:a7:cc:9e:2d:fa:5a:ab: 5f:84:8c:3a:c5:cc:b7:dc:21:80:8d:fd:f0:05:f6: 70:bc:db:12:73:d5:72:78:4c:1b:2c:8c:8b:fc:a7: f9:f9:83:81:96:5a:8c:cf:a3:b8:0c:21:2a:f3:7d: b8:8d:53:f3:7e:a5:8d:0e:47:26:37:7c:fb:53:b8: 71:7f:8b:56:2c:cf:cf:96:5c:23:25:1e:1b:75:09: a6:56:ad:8e:45:8e:29:bc:f2:05:00:28:ed:f2:2a: a3:58:5a:5a:4d:b5:5f:cb:10:c1:17:3a:bb:c3:cd: ec:6e:f8:34:bf:86:99:67:19:9f:66:db:ad:9b:c9: 2c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D6:BE:47:63:EA:54:5C:8D:CC:0E:6E:E8:A0:05:44:C7:F5:D4:71 X509v3 Authority Key Identifier: keyid:93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/8Na-R2PqVFyNzA5u6KAFRMf11HE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.5.26.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:de:ee:2e:73:a8:a3:01:3f:d9:3f:45:ad:41:9c:3b:20:ad: 35:14:3f:c7:40:47:c1:f7:1c:6c:03:fc:ca:87:14:c5:ed:4c: b0:97:6c:8c:98:c7:c7:61:38:b8:78:18:81:65:35:5b:2b:49: f2:eb:34:08:cb:ef:0d:f4:0b:53:c5:b3:ab:85:6f:16:95:50: 09:58:b2:8a:fe:2c:71:f6:ce:9b:47:a3:a7:2d:3b:f8:bd:eb: 6c:83:45:e0:3b:8c:e2:3b:2d:e8:f4:4d:78:c3:da:47:48:b2: d4:0e:dd:ca:e2:f1:55:a3:f8:84:33:86:d1:1f:8f:2c:39:53: fa:2c:bf:8b:39:62:aa:49:b8:e2:1e:36:4c:81:54:0d:5f:7e: 7d:04:f0:08:12:fe:d3:86:6d:2a:51:28:61:47:50:be:28:f9: 97:bc:9f:b6:31:bf:58:80:f5:5d:4c:da:31:ed:75:c9:c4:ea: 87:46:32:dd:e8:ee:de:99:1a:62:52:2a:5e:f9:fd:2a:28:88: f2:21:c2:c9:3b:c9:15:27:e1:da:c7:2d:25:31:04:00:93:b7: 82:ea:3c:ce:ae:4a:9f:ea:51:f0:61:5a:30:72:cf:3c:35:6f: d0:fb:15:ca:65:38:7e:fb:2c:42:f0:2e:46:96:54:93:d2:53: 20:fe:ef:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gz5tHeU0SxOBPRcKpyGYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYjMyMmI1OTA0OGUxMDdiOTRhNmRiMDY1NTdhZjVmMGM5 YzI5MGMwHhcNMjYwMTAyMTYyMTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGQ2YmU0NzYzZWE1NDVjOGRjYzBlNmVlOGEwMDU0NGM3ZjVkNDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzuD3NZlrH4v8fTute2gikZZ7Vw8 JB6ap9Q4nXgwp2SIrkg6Mp00OXI8VAgMMS575+tf8RXqrGxew/xAkJvzLq2f2bwf 0AEha1LagiaYstgq1vZkr5r0IKDcoRhXfJ2kiMzYCvw7gZlcbFsRmqt5vE1mKC8i wf6YSq6305LKUqfMni36WqtfhIw6xcy33CGAjf3wBfZwvNsSc9VyeEwbLIyL/Kf5 +YOBllqMz6O4DCEq8324jVPzfqWNDkcmN3z7U7hxf4tWLM/PllwjJR4bdQmmVq2O RY4pvPIFACjt8iqjWFpaTbVfyxDBFzq7w83sbvg0v4aZZxmfZtutm8ksIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPDWvkdj6lRcjcwObuigBUTH9dRxMB8GA1UdIwQY MBaAFJOzIrWQSOEHuUptsGVXr18MnCkMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazdNaXRaQkk0UWU1U20yd1pWZXZYd3ljS1F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83ZmY1MjAtNzI3MC00YTk4LWFlYzkt ZWY2MDRkNDE2YzM3LzEvOE5hLVIyUHFWRnlOekE1dTZLQUZSTWYxMUhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83ZmY1MjAtNzI3MC00YTk4LWFlYzktZWY2MDRkNDE2YzM3 LzEvazdNaXRaQkk0UWU1U20yd1pWZXZYd3ljS1F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwQUaMA0G CSqGSIb3DQEBCwUAA4IBAQA+3u4uc6ijAT/ZP0WtQZw7IK01FD/HQEfB9xxsA/zK hxTF7Uywl2yMmMfHYTi4eBiBZTVbK0ny6zQIy+8N9AtTxbOrhW8WlVAJWLKK/ixx 9s6bR6OnLTv4vetsg0XgO4ziOy3o9E14w9pHSLLUDt3K4vFVo/iEM4bRH48sOVP6 LL+LOWKqSbjiHjZMgVQNX359BPAIEv7Thm0qUShhR1C+KPmXvJ+2Mb9YgPVdTNox 7XXJxOqHRjLd6O7emRpiUipe+f0qKIjyIcLJO8kVJ+Haxy0lMQQAk7eC6jzOrkqf 6lHwYVowcs88NW/Q+xXKZTh++yxC8C5GllST0lMg/u8u -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:28 2026 by rpki-client