This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/8ki6p7N4UmEmV-0NazqEv7cAQKc.roa File: 8ki6p7N4UmEmV-0NazqEv7cAQKc.roa (raw, json) Hash identifier: Q0BUMMV+0mfUnsBWl6XxVsO5hGuTsx5iHlZ2d9i6cbo= Subject key identifier: F2:48:BA:A7:B3:78:52:61:26:57:ED:0D:6B:3A:84:BF:B7:00:40:A7 Certificate issuer: /CN=f416539e74934d23a0572f6625dbfdb54e820873 Certificate serial: 019B76EBA59DCA7FC3F380E05F1DADA5C6C9 Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/8ki6p7N4UmEmV-0NazqEv7cAQKc.roa Signing time: Thu 01 Jan 2026 00:18:33 +0000 ROA not before: Thu 01 Jan 2026 00:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196838 IP address blocks: 93.159.192.0/24 maxlen: 24 93.159.193.0/24 maxlen: 24 93.159.194.0/24 maxlen: 24 93.159.195.0/24 maxlen: 24 93.159.196.0/24 maxlen: 24 93.159.197.0/24 maxlen: 24 93.159.198.0/24 maxlen: 24 93.159.199.0/24 maxlen: 24 109.69.160.0/24 maxlen: 24 109.69.161.0/24 maxlen: 24 109.69.162.0/24 maxlen: 24 109.69.163.0/24 maxlen: 24 194.156.252.0/24 maxlen: 24 194.156.253.0/24 maxlen: 24 194.156.254.0/24 maxlen: 24 194.156.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a5:9d:ca:7f:c3:f3:80:e0:5f:1d:ad:a5:c6:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873 Validity Not Before: Jan 1 00:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f248baa7b37852612657ed0d6b3a84bfb70040a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e5:c5:78:4a:1a:b2:09:42:57:47:e2:2b:51: c2:c6:8b:b2:94:25:b0:4e:23:6f:a8:81:2b:88:26: 09:b4:55:3d:68:d0:d8:f6:bd:e6:03:74:b3:1f:39: d8:09:fb:ce:29:0b:27:84:42:b3:49:eb:2d:e7:c6: b6:fc:a4:f4:1b:a5:aa:48:48:47:57:ee:13:98:fe: 56:87:51:26:ae:1a:68:d3:37:c1:52:8c:ea:48:78: b2:4f:bb:31:32:e4:1b:f0:ad:23:00:90:f4:73:f7: 38:2f:29:a3:40:9d:fa:47:6f:be:61:47:56:8f:05: f8:cb:d4:99:53:05:4d:28:37:62:bf:e9:85:8a:a8: bf:88:03:a9:3b:b5:23:17:a0:3a:07:85:f0:55:b4: 42:c1:7b:1e:61:81:4d:54:0f:24:2a:34:bc:99:d4: 2f:7d:2e:d0:5b:0e:ea:00:72:6c:2d:13:ca:60:37: 1f:30:6e:0c:cc:c7:bb:a6:1f:c8:00:fd:4c:eb:d5: 41:76:0a:6a:84:ac:c1:22:b3:2e:da:2f:a5:f3:5b: 96:fc:18:fb:b8:30:5a:2a:c2:08:b7:32:25:7b:5c: 24:00:81:ea:fb:22:3c:60:7a:08:ef:e4:c5:6d:0e: c9:d4:42:90:f0:d6:72:c5:5f:33:a3:00:1f:bd:94: 77:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:48:BA:A7:B3:78:52:61:26:57:ED:0D:6B:3A:84:BF:B7:00:40:A7 X509v3 Authority Key Identifier: keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/8ki6p7N4UmEmV-0NazqEv7cAQKc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.159.192.0/21 109.69.160.0/22 194.156.252.0/22 Signature Algorithm: sha256WithRSAEncryption 62:a5:d2:0d:9d:57:df:93:dc:c6:ed:b1:8c:24:42:51:a5:8f: f4:d6:cf:da:57:b8:9f:11:f0:5a:ff:95:12:0d:9a:e3:71:5e: 49:d3:ed:b4:74:a4:b5:7f:9e:2d:dc:92:36:a6:6c:6d:94:c0: 12:e8:2c:71:5d:a5:4c:f6:7f:b4:14:ef:39:20:3c:7f:72:dd: f7:92:e2:bb:7b:27:b9:07:13:02:8c:f5:f6:a5:88:a8:cd:74: 64:ff:1e:0c:20:9e:73:6e:7b:e5:43:c3:47:a6:68:47:5d:42: da:66:1e:c5:a2:c8:4a:fa:f9:27:1f:de:98:82:a7:27:42:4d: 3d:61:96:03:82:77:cc:3f:c7:ea:7a:ff:70:c1:56:d9:3d:c1: a9:39:17:41:b8:a7:38:9f:bc:b3:c1:6b:95:ce:bb:d3:55:92: 07:37:35:1e:60:1c:2e:fd:32:bc:7a:8a:e9:e3:3b:91:ff:88: 1e:89:a6:02:7b:46:e9:fe:54:52:bb:19:0c:33:d7:a9:64:20: 42:36:ef:56:c7:2d:bf:cd:b8:09:4b:98:04:b6:b0:91:95:14: ee:95:db:aa:28:19:e4:74:eb:5a:6d:d8:2e:65:15:7b:f3:db: 85:5c:f3:64:7c:8e:e1:bc:69:c1:50:f8:fe:07:16:ed:20:41: 76:b2:00:db -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt266Wdyn/D84DgXx2tpcbJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0MTY1MzllNzQ5MzRkMjNhMDU3MmY2NjI1ZGJmZGI1NGU4 MjA4NzMwHhcNMjYwMTAxMDAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjQ4YmFhN2IzNzg1MjYxMjY1N2VkMGQ2YjNhODRiZmI3MDA0MGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquXFeEoasglCV0fiK1HCxouylCWw TiNvqIEriCYJtFU9aNDY9r3mA3SzHznYCfvOKQsnhEKzSest58a2/KT0G6WqSEhH V+4TmP5Wh1Emrhpo0zfBUozqSHiyT7sxMuQb8K0jAJD0c/c4LymjQJ36R2++YUdW jwX4y9SZUwVNKDdiv+mFiqi/iAOpO7UjF6A6B4XwVbRCwXseYYFNVA8kKjS8mdQv fS7QWw7qAHJsLRPKYDcfMG4MzMe7ph/IAP1M69VBdgpqhKzBIrMu2i+l81uW/Bj7 uDBaKsIItzIle1wkAIHq+yI8YHoI7+TFbQ7J1EKQ8NZyxV8zowAfvZR3PQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPJIuqezeFJhJlftDWs6hL+3AECnMB8GA1UdIwQY MBaAFPQWU550k00joFcvZiXb/bVOgghzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUJaVG5uU1RUU09nVnk5bUpkdjl0VTZDQ0hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy81M2U0OTYtMDA5Ny00NjJhLWE5ODkt ZDY3YTYxZDU0MTZkLzEvOGtpNnA3TjRVbUVtVi0wTmF6cUV2N2NBUUtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy81M2U0OTYtMDA5Ny00NjJhLWE5ODktZDY3YTYxZDU0MTZk LzEvOUJaVG5uU1RUU09nVnk5bUpkdjl0VTZDQ0hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDXZ/AAwQC bUWgAwQCwpz8MA0GCSqGSIb3DQEBCwUAA4IBAQBipdINnVffk9zG7bGMJEJRpY/0 1s/aV7ifEfBa/5USDZrjcV5J0+20dKS1f54t3JI2pmxtlMAS6CxxXaVM9n+0FO85 IDx/ct33kuK7eye5BxMCjPX2pYiozXRk/x4MIJ5zbnvlQ8NHpmhHXULaZh7FoshK +vknH96YgqcnQk09YZYDgnfMP8fqev9wwVbZPcGpORdBuKc4n7yzwWuVzrvTVZIH NzUeYBwu/TK8eorp4zuR/4geiaYCe0bp/lRSuxkMM9epZCBCNu9Wxy2/zbgJS5gE trCRlRTulduqKBnkdOtabdguZRV789uFXPNkfI7hvGnBUPj+BxbtIEF2sgDb -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:55 2026 by rpki-client