This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/8TgZ1ezQTau0zguN7Ddhap1UtEM.roa File: 8TgZ1ezQTau0zguN7Ddhap1UtEM.roa (raw, json) Hash identifier: vUGsoKyYaDO9yJpgoC4HYrCuKAT3mZ2cyxJ8r1fHfwQ= Subject key identifier: F1:38:19:D5:EC:D0:4D:AB:B4:CE:0B:8D:EC:37:61:6A:9D:54:B4:43 Certificate issuer: /CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e Certificate serial: 019B7CEDD2FAF0EA89D1E6A84BFC589D9127 Authority key identifier: EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/8TgZ1ezQTau0zguN7Ddhap1UtEM.roa Signing time: Fri 02 Jan 2026 04:18:39 +0000 ROA not before: Fri 02 Jan 2026 04:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213291 IP address blocks: 195.242.0.0/23 maxlen: 24 195.242.7.0/24 maxlen: 24 195.242.8.0/21 maxlen: 24 195.242.16.0/20 maxlen: 24 2a13:5940::/32 maxlen: 32 2a13:5945:7::/48 maxlen: 48 2a13:5945:c::/48 maxlen: 48 2a13:5945:22::/48 maxlen: 48 2a13:5947::/40 maxlen: 48 2a13:5947:130::/48 maxlen: 48 2a13:5947:150::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.mft rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:d2:fa:f0:ea:89:d1:e6:a8:4b:fc:58:9d:91:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e Validity Not Before: Jan 2 04:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f13819d5ecd04dabb4ce0b8dec37616a9d54b443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cb:76:63:f2:c1:a9:3b:4e:ad:d1:ba:93:22: 62:41:6d:73:d4:cc:79:5d:f4:4b:2a:a4:85:41:06: df:f7:6e:a1:a8:21:02:31:f7:0f:d1:dc:24:c9:b2: 5d:41:16:2f:61:83:6f:32:cb:c7:6f:ae:d0:0b:5e: 19:9d:8f:6a:e8:6a:2a:82:58:60:47:a6:f5:68:af: 8b:ee:ea:5a:13:f6:d3:79:71:08:e0:e8:89:70:b8: b6:f7:4c:73:d7:ba:db:91:ab:46:17:74:6b:56:35: bc:e5:26:87:d5:59:78:e4:06:bc:33:11:c3:d3:9d: 12:f5:15:04:17:ce:d7:13:73:4b:ee:bd:ca:0f:d8: 37:f3:c0:7f:cf:7e:f6:8e:19:cd:cd:b6:d1:0a:48: ae:5d:53:29:0e:6d:8d:9a:3e:30:9b:c1:46:36:06: fe:b9:72:6e:e3:26:68:75:52:0c:00:9f:63:e1:d8: d7:c8:94:04:f8:22:1b:06:a6:a0:9e:98:c5:2e:d0: 97:b4:6f:15:0f:4f:52:c1:8f:43:f6:38:38:ee:f6: 01:53:88:18:c6:c6:54:99:56:96:63:67:df:db:53: 8f:8f:96:c5:17:52:f3:c1:6c:40:83:e7:d2:22:3c: c1:9f:7a:b9:f3:c9:ff:f1:4a:1e:d0:6a:22:29:ec: 48:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:38:19:D5:EC:D0:4D:AB:B4:CE:0B:8D:EC:37:61:6A:9D:54:B4:43 X509v3 Authority Key Identifier: keyid:EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/8TgZ1ezQTau0zguN7Ddhap1UtEM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.242.0.0/23 195.242.7.0-195.242.31.255 IPv6: 2a13:5940::/32 2a13:5945:7::/48 2a13:5945:c::/48 2a13:5945:22::/48 2a13:5947::/40 2a13:5947:130::/48 2a13:5947:150::/48 Signature Algorithm: sha256WithRSAEncryption 65:93:d5:25:80:b2:93:32:13:f6:6f:44:41:f6:00:a0:ae:84: cc:d4:68:a5:42:bc:de:76:bb:0e:71:9b:a4:0a:68:3a:f0:1d: c5:fe:f4:55:e3:46:f8:cc:ff:ee:72:e8:b6:ee:d1:86:61:94: d1:b2:ca:57:f0:5f:6f:5e:49:f8:b6:db:6d:a8:d0:88:ec:20: ab:90:7a:51:24:8f:18:a3:3e:89:ff:0a:55:6a:11:18:49:26: b6:95:05:01:5f:e3:3d:99:c8:6d:81:df:af:c7:b4:98:32:a5: e7:d5:f5:a8:b3:fd:75:21:d0:f5:12:2c:4a:98:a9:70:7d:13: 5d:c7:2d:c5:81:b2:9e:a7:74:b4:58:6a:5a:4b:2f:4a:d3:61: 61:57:84:d3:5b:44:a2:62:f2:bb:99:68:cc:fc:f4:3a:a9:11: 89:47:56:f7:b4:1e:c2:6d:bf:d2:52:2c:ad:f7:6d:34:b3:2e: e1:a0:44:7f:ec:55:77:ac:d9:13:44:f9:0d:71:ca:f7:34:3f: 40:63:cd:88:3a:47:6d:5e:23:6f:62:a2:e5:7e:10:16:8d:e5: 4f:72:d6:41:18:d8:af:40:dd:1b:cc:4d:86:dd:7e:82:9a:be: 6f:11:aa:c1:eb:59:82:ed:9a:03:a5:1d:d6:c2:0d:e2:07:58: 60:cc:2c:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgISAZt87dL68OqJ0eaoS/xYnZEnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhZTI2NTMxNzljYWZlNWZmNjY1MWM2MDU4YjY3YWQyZDJj ODQ4NWUwHhcNMjYwMTAyMDQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTM4MTlkNWVjZDA0ZGFiYjRjZTBiOGRlYzM3NjE2YTlkNTRiNDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqct2Y/LBqTtOrdG6kyJiQW1z1Mx5 XfRLKqSFQQbf926hqCECMfcP0dwkybJdQRYvYYNvMsvHb67QC14ZnY9q6Goqglhg R6b1aK+L7upaE/bTeXEI4OiJcLi290xz17rbkatGF3RrVjW85SaH1Vl45Aa8MxHD 050S9RUEF87XE3NL7r3KD9g388B/z372jhnNzbbRCkiuXVMpDm2Nmj4wm8FGNgb+ uXJu4yZodVIMAJ9j4djXyJQE+CIbBqagnpjFLtCXtG8VD09SwY9D9jg47vYBU4gY xsZUmVaWY2ff21OPj5bFF1LzwWxAg+fSIjzBn3q588n/8Uoe0GoiKexIewIDAQAB o4ICWzCCAlcwHQYDVR0OBBYEFPE4GdXs0E2rtM4Ljew3YWqdVLRDMB8GA1UdIwQY MBaAFOriZTF5yv5f9mUcYFi2etLSyEheMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnVKbE1YbktfbF8yWlJ4Z1dMWjYwdExJU0Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xOWU5YzUtODJlMi00MzhiLWEwZTkt OTkyZDc5N2Y0YmJiLzEvOFRnWjFlelFUYXUwemd1TjdEZGhhcDFVdEVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8xOWU5YzUtODJlMi00MzhiLWEwZTktOTkyZDc5N2Y0YmJi LzEvNnVKbE1YbktfbF8yWlJ4Z1dMWjYwdExJU0Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHEGCCsGAQUFBwEHAQH/BGIwYDAaBAIAATAUAwQBw/IAMAwD BADD8gcDBAXD8gAwQgQCAAIwPAMFACoTWUADBwAqE1lFAAcDBwAqE1lFAAwDBwAq E1lFACIDBgAqE1lHAAMHACoTWUcBMAMHACoTWUcBUDANBgkqhkiG9w0BAQsFAAOC AQEAZZPVJYCykzIT9m9EQfYAoK6EzNRopUK83na7DnGbpApoOvAdxf70VeNG+Mz/ 7nLotu7RhmGU0bLKV/Bfb15J+LbbbajQiOwgq5B6USSPGKM+if8KVWoRGEkmtpUF AV/jPZnIbYHfr8e0mDKl59X1qLP9dSHQ9RIsSpipcH0TXcctxYGynqd0tFhqWksv StNhYVeE01tEomLyu5lozPz0OqkRiUdW97Qewm2/0lIsrfdtNLMu4aBEf+xVd6zZ E0T5DXHK9zQ/QGPNiDpHbV4jb2Ki5X4QFo3lT3LWQRjYr0DdG8xNht1+gpq+bxGq wetZgu2aA6Ud1sIN4gdYYMwszA== -----END CERTIFICATE-----Generated at Sun Jan 25 10:29:05 2026 by rpki-client