This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/8GnAqPanEF-aLifFEt28x_W5bDA.roa File: 8GnAqPanEF-aLifFEt28x_W5bDA.roa (raw, json) Hash identifier: MVg0h+oZbG/5iMupvC5wE+JQeAtDrUL1XBd2HQzTeWA= Subject key identifier: F0:69:C0:A8:F6:A7:10:5F:9A:2E:27:C5:12:DD:BC:C7:F5:B9:6C:30 Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1 Certificate serial: 019B79EBF2ABC9DD6794211D7EA8CE55E261 Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/8GnAqPanEF-aLifFEt28x_W5bDA.roa Signing time: Thu 01 Jan 2026 14:17:44 +0000 ROA not before: Thu 01 Jan 2026 14:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21062 IP address blocks: 93.125.39.0/24 maxlen: 24 213.184.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:f2:ab:c9:dd:67:94:21:1d:7e:a8:ce:55:e2:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1 Validity Not Before: Jan 1 14:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f069c0a8f6a7105f9a2e27c512ddbcc7f5b96c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e5:cd:62:3a:71:09:90:8f:59:f9:67:e8:c9: ab:ec:02:a5:97:fa:26:d6:95:56:52:47:42:ad:56: af:40:84:83:9c:3f:17:67:30:e6:b4:55:06:94:bc: b1:af:d8:9a:d1:84:eb:d2:50:b8:b3:a3:74:f1:d5: 68:72:19:17:61:b0:11:8a:c0:77:f5:5e:90:77:f0: f0:62:07:c3:2c:1a:bb:fb:d8:94:24:71:12:e6:84: 4f:34:14:e9:5d:56:2c:f0:5c:27:37:98:37:62:57: a5:24:1e:29:2f:94:7c:f0:00:b3:2d:18:49:ac:1e: f4:a3:12:3e:c2:5c:19:14:50:57:14:61:b6:68:8e: f0:b5:e2:50:9c:68:83:7d:61:45:3f:29:ef:35:f8: 23:30:0e:40:45:b6:17:aa:54:c3:03:3e:3a:4a:b8: 62:8a:5a:a3:49:14:bd:42:fd:6d:15:de:d0:e8:08: 37:2a:3a:83:6b:6c:bb:3a:8d:30:c5:e0:ef:fc:34: 67:12:3b:9c:1f:9a:93:31:ef:d5:49:8c:6f:ef:77: 2e:5f:17:1b:69:61:83:29:77:ef:7e:6b:88:77:05: 42:d2:eb:d9:67:d7:db:06:4c:f5:43:bb:50:57:30: ea:63:50:c4:90:06:6a:fe:03:44:bb:70:a0:85:39: 9b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:69:C0:A8:F6:A7:10:5F:9A:2E:27:C5:12:DD:BC:C7:F5:B9:6C:30 X509v3 Authority Key Identifier: keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/8GnAqPanEF-aLifFEt28x_W5bDA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.125.39.0/24 213.184.241.0/24 Signature Algorithm: sha256WithRSAEncryption 07:c2:86:1e:82:79:4e:c4:2a:f3:f3:fa:83:32:99:5c:0e:85: 77:f7:43:fa:d5:3c:a8:97:c6:35:e2:c2:26:d8:78:ca:32:e5: f9:72:d1:42:32:5f:2c:1a:70:1c:6c:57:f0:97:a1:cd:03:6c: 44:5e:3d:01:cd:15:c8:9d:78:b1:0b:53:64:a4:05:68:3d:35: 4d:1d:ab:6b:e3:eb:ec:08:f2:94:30:38:4a:4e:f3:c6:0b:27: fa:62:16:5f:a7:71:ec:f0:e6:52:98:2d:65:d2:cb:8e:7d:b7: 4a:d0:d6:9d:81:0c:c5:5f:c0:99:ba:4e:30:03:de:43:7e:c3: 3f:8f:36:5c:58:09:c8:69:67:8a:d8:69:c7:78:42:f4:d2:33: 97:11:c3:f3:de:98:9e:59:48:66:41:8b:10:01:ce:ed:21:66: 58:54:12:68:08:ca:22:d4:92:5f:8e:34:f5:3d:ec:25:c2:ae: e7:08:47:aa:81:4f:5d:5a:64:6b:15:f8:9f:27:f0:29:b7:99: 1a:41:ef:61:3c:c8:7d:7d:3e:57:d1:bb:6f:98:8c:d4:78:7a: 92:5d:9a:39:9d:78:0e:20:5c:09:bc:0c:45:28:64:ad:e6:6f: bc:19:51:64:47:fb:c0:83:30:c4:51:d1:38:77:48:ef:11:00: b4:28:91:76 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt56/Kryd1nlCEdfqjOVeJhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMTQ5ZjYyNDQ3ODUzNjg5YzEyZmIyODhhZmViNmI2ODFj ZmViYzEwHhcNMjYwMTAxMTQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDY5YzBhOGY2YTcxMDVmOWEyZTI3YzUxMmRkYmNjN2Y1Yjk2YzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+XNYjpxCZCPWfln6Mmr7AKll/om 1pVWUkdCrVavQISDnD8XZzDmtFUGlLyxr9ia0YTr0lC4s6N08dVochkXYbARisB3 9V6Qd/DwYgfDLBq7+9iUJHES5oRPNBTpXVYs8FwnN5g3YlelJB4pL5R88ACzLRhJ rB70oxI+wlwZFFBXFGG2aI7wteJQnGiDfWFFPynvNfgjMA5ARbYXqlTDAz46Srhi ilqjSRS9Qv1tFd7Q6Ag3KjqDa2y7Oo0wxeDv/DRnEjucH5qTMe/VSYxv73cuXxcb aWGDKXfvfmuIdwVC0uvZZ9fbBkz1Q7tQVzDqY1DEkAZq/gNEu3CghTmbkwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPBpwKj2pxBfmi4nxRLdvMf1uWwwMB8GA1UdIwQY MBaAFH0Un2JEeFNonBL7KIr+traBz+vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTct YWFiMGU0MTRjYzYzLzEvOEduQXFQYW5FRi1hTGlmRkV0Mjh4X1c1YkRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTctYWFiMGU0MTRjYzYz LzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXX0nAwQA 1bjxMA0GCSqGSIb3DQEBCwUAA4IBAQAHwoYegnlOxCrz8/qDMplcDoV390P61Tyo l8Y14sIm2HjKMuX5ctFCMl8sGnAcbFfwl6HNA2xEXj0BzRXInXixC1NkpAVoPTVN Hatr4+vsCPKUMDhKTvPGCyf6YhZfp3Hs8OZSmC1l0suOfbdK0NadgQzFX8CZuk4w A95DfsM/jzZcWAnIaWeK2GnHeEL00jOXEcPz3pieWUhmQYsQAc7tIWZYVBJoCMoi 1JJfjjT1Pewlwq7nCEeqgU9dWmRrFfifJ/Apt5kaQe9hPMh9fT5X0btvmIzUeHqS XZo5nXgOIFwJvAxFKGSt5m+8GVFkR/vAgzDEUdE4d0jvEQC0KJF2 -----END CERTIFICATE-----Generated at Mon Jan 26 01:16:41 2026 by rpki-client