This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8MbvZg4nJLxjpACHGGvE274PjfI.roa File: 8MbvZg4nJLxjpACHGGvE274PjfI.roa (raw, json) Hash identifier: C+z1gLQ4B6d8l3FM5zwD6yHOEzKX81I/v9A0sqaiqyk= Subject key identifier: F0:C6:EF:66:0E:27:24:BC:63:A4:00:87:18:6B:C4:DB:BE:0F:8D:F2 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B79EC772F0168E82443A3C057AA1AC3A0 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8MbvZg4nJLxjpACHGGvE274PjfI.roa Signing time: Thu 01 Jan 2026 14:18:18 +0000 ROA not before: Thu 01 Jan 2026 14:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213905 IP address blocks: 193.23.209.0/24 maxlen: 24 193.23.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:77:2f:01:68:e8:24:43:a3:c0:57:aa:1a:c3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 1 14:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0c6ef660e2724bc63a40087186bc4dbbe0f8df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e8:fd:14:78:78:cd:70:7a:89:e4:23:00:2b: 8a:05:1a:7a:bb:68:c4:89:44:40:04:c0:56:b3:0b: b5:63:83:e6:c7:98:1a:2b:2a:fb:4c:4b:0b:8c:4e: 69:85:57:98:d5:e3:e1:8b:f8:be:67:18:b2:66:99: e1:87:52:ca:e0:0a:49:f8:da:97:cd:d8:1b:19:d4: e3:00:55:4b:63:c7:be:a3:c8:08:0a:1f:1d:26:07: 42:8e:0b:16:90:b8:2f:5c:da:f5:ec:4d:c4:a8:f7: de:b8:1a:19:99:36:cc:0e:d5:94:fb:a7:60:38:a7: 84:d3:23:37:bd:e5:32:d3:84:36:3f:f6:b1:f9:c9: 36:65:95:73:c6:2d:22:41:9d:18:7d:70:df:36:e0: 2f:bf:36:65:f4:2b:b6:d9:e8:26:29:1a:4b:2f:3e: fe:72:80:ce:ac:d2:06:7f:05:b4:ad:99:30:7a:86: d9:c5:6c:e4:69:6e:ee:23:76:42:98:d6:cd:15:59: f5:65:a4:f2:e7:2e:b3:30:51:d9:0d:12:14:d7:08: f6:c7:8e:ae:5c:3a:85:f0:0c:08:a2:48:f3:6c:92: c1:11:fb:27:1a:42:13:08:24:92:49:19:20:0a:0c: 6e:25:05:3c:b6:b9:87:60:ab:5c:f0:3a:49:90:8b: f9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C6:EF:66:0E:27:24:BC:63:A4:00:87:18:6B:C4:DB:BE:0F:8D:F2 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8MbvZg4nJLxjpACHGGvE274PjfI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.23.209.0/24 193.23.221.0/24 Signature Algorithm: sha256WithRSAEncryption 48:f2:4a:9c:af:b0:f7:25:18:00:92:28:45:1e:6e:e3:56:e4: 03:03:41:a1:d5:e6:aa:65:77:00:6d:bd:a0:99:48:ff:6e:bb: 32:93:96:12:16:83:0d:da:94:54:c6:39:e6:7a:7d:86:90:ef: 3a:b5:55:cd:df:47:29:c4:01:35:e6:2d:49:bb:02:5e:3b:d0: c3:93:8a:2b:e0:c1:f1:32:13:a1:e7:c4:e1:d7:76:27:04:7a: 19:cf:b3:fa:ba:de:fe:f4:f8:9a:b3:57:52:a5:04:71:12:c2: fb:22:0a:b9:9e:f2:91:5f:b0:26:81:f8:f8:4f:e9:e4:bd:47: 66:9f:63:ce:8b:36:c4:9b:41:a3:09:d6:65:7a:21:a3:b7:86: 8e:88:80:ca:32:b7:db:c1:29:bf:e4:fa:d9:5a:10:93:cb:41: 30:d6:a6:0b:12:e5:27:95:ef:87:11:ed:75:85:3c:6b:5b:3f: 07:47:ab:42:85:78:af:20:5f:b0:ac:1d:5d:13:f4:3a:ee:14: 2e:67:ce:09:94:3c:24:d9:82:9c:69:7c:5d:8d:da:5e:d8:4d: 83:d2:fe:c1:82:16:d8:16:9b:93:f4:dc:9a:98:40:a3:ac:8f: 68:2f:e9:ec:84:16:96:8f:1e:45:e8:96:8f:d5:20:1c:92:28: cd:cf:23:e9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57HcvAWjoJEOjwFeqGsOgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTAxMTQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGM2ZWY2NjBlMjcyNGJjNjNhNDAwODcxODZiYzRkYmJlMGY4ZGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+j9FHh4zXB6ieQjACuKBRp6u2jE iURABMBWswu1Y4Pmx5gaKyr7TEsLjE5phVeY1ePhi/i+ZxiyZpnhh1LK4ApJ+NqX zdgbGdTjAFVLY8e+o8gICh8dJgdCjgsWkLgvXNr17E3EqPfeuBoZmTbMDtWU+6dg OKeE0yM3veUy04Q2P/ax+ck2ZZVzxi0iQZ0YfXDfNuAvvzZl9Cu22egmKRpLLz7+ coDOrNIGfwW0rZkweobZxWzkaW7uI3ZCmNbNFVn1ZaTy5y6zMFHZDRIU1wj2x46u XDqF8AwIokjzbJLBEfsnGkITCCSSSRkgCgxuJQU8trmHYKtc8DpJkIv54wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPDG72YOJyS8Y6QAhxhrxNu+D43yMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvOE1idlpnNG5KTHhqcEFDSEdHdkUyNzRQamZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwRfRAwQA wRfdMA0GCSqGSIb3DQEBCwUAA4IBAQBI8kqcr7D3JRgAkihFHm7jVuQDA0Gh1eaq ZXcAbb2gmUj/brsyk5YSFoMN2pRUxjnmen2GkO86tVXN30cpxAE15i1JuwJeO9DD k4or4MHxMhOh58Th13YnBHoZz7P6ut7+9Pias1dSpQRxEsL7Igq5nvKRX7Amgfj4 T+nkvUdmn2POizbEm0GjCdZleiGjt4aOiIDKMrfbwSm/5PrZWhCTy0Ew1qYLEuUn le+HEe11hTxrWz8HR6tChXivIF+wrB1dE/Q67hQuZ84JlDwk2YKcaXxdjdpe2E2D 0v7BghbYFpuT9NyamECjrI9oL+nshBaWjx5F6JaP1SAckijNzyPp -----END CERTIFICATE-----Generated at Sun Jan 25 07:36:45 2026 by rpki-client