This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/8ZBdrFRJIh0YxKW2bFMDctXLyVQ.roa File: 8ZBdrFRJIh0YxKW2bFMDctXLyVQ.roa (raw, json) Hash identifier: CTY1C1lk5dtltm5cBLtdER5DWsVLf/sfo1mRHFDWCFY= Subject key identifier: F1:90:5D:AC:54:49:22:1D:18:C4:A5:B6:6C:53:03:72:D5:CB:C9:54 Certificate issuer: /CN=db2ec22a66b5b24986395feed7fb5b90e28c9be4 Certificate serial: 019BDB9609A1565D5AFC140B35F5693E649E Authority key identifier: DB:2E:C2:2A:66:B5:B2:49:86:39:5F:EE:D7:FB:5B:90:E2:8C:9B:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y7CKma1skmGOV_u1_tbkOKMm-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/8ZBdrFRJIh0YxKW2bFMDctXLyVQ.roa Signing time: Tue 20 Jan 2026 13:26:41 +0000 ROA not before: Tue 20 Jan 2026 13:26:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9145 IP address blocks: 195.226.216.0/24 maxlen: 24 2a12:5dc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/2y7CKma1skmGOV_u1_tbkOKMm-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:96:09:a1:56:5d:5a:fc:14:0b:35:f5:69:3e:64:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db2ec22a66b5b24986395feed7fb5b90e28c9be4 Validity Not Before: Jan 20 13:26:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1905dac5449221d18c4a5b66c530372d5cbc954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:65:09:ba:8a:8f:a7:d6:92:8a:e0:fb:e9:91: 9d:b4:8b:af:fa:41:d4:a3:d0:3e:fd:f2:d1:5d:b3: 0d:38:61:f0:9d:b5:62:ea:fa:b5:30:67:0b:23:17: 80:9b:3a:d0:bb:b0:fa:2d:5b:eb:35:54:cf:0c:90: ca:4f:fe:26:df:46:38:e2:4a:7f:68:a4:4c:a5:d2: cc:51:f2:55:51:2e:a4:a2:73:87:88:61:de:9e:17: c8:91:df:5c:7a:3c:94:78:57:2f:24:b9:77:0f:01: e3:6b:b1:ea:0e:1a:ed:eb:e8:4f:e7:1d:86:8e:1e: 78:71:ce:2e:b7:22:d2:9c:1c:bd:31:94:7a:8e:2a: 82:f1:75:44:03:7a:3f:f1:10:c9:4e:bb:62:c1:76: 5a:55:1f:b4:a6:a7:c0:1f:b9:dc:7d:92:29:45:5a: b9:ab:5e:bb:c5:df:f1:f4:29:84:fe:28:69:b7:e8: a2:04:b3:0c:40:89:e1:48:e2:b6:61:65:27:aa:3b: 30:a7:a9:cc:99:09:29:c4:94:d3:d5:fb:4b:5a:ba: b3:bf:71:b2:5d:88:44:48:13:98:55:53:b1:3c:ba: 27:bd:c0:a7:db:1c:8d:13:53:51:da:b1:a0:5d:e2: e8:db:db:5a:e7:33:ae:3d:5a:77:a2:b9:08:89:7c: de:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:90:5D:AC:54:49:22:1D:18:C4:A5:B6:6C:53:03:72:D5:CB:C9:54 X509v3 Authority Key Identifier: keyid:DB:2E:C2:2A:66:B5:B2:49:86:39:5F:EE:D7:FB:5B:90:E2:8C:9B:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y7CKma1skmGOV_u1_tbkOKMm-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/8ZBdrFRJIh0YxKW2bFMDctXLyVQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.226.216.0/24 IPv6: 2a12:5dc0::/29 Signature Algorithm: sha256WithRSAEncryption 54:8d:02:fa:b1:45:8d:37:1e:49:b7:1d:6d:2b:d0:1c:89:1a: eb:a6:f1:23:84:5d:3a:20:ba:4e:52:09:f8:de:2a:11:13:01: 54:0e:13:d5:1b:7f:4c:7a:7f:48:67:1a:69:a5:eb:38:8e:b3: 04:ec:b2:e5:ab:cc:cc:5b:02:a9:e7:10:3c:ac:78:de:26:3d: f6:03:46:b4:66:08:6f:00:b7:89:7c:79:d4:1d:e0:78:09:d4: e5:a2:eb:61:f0:18:81:10:3d:45:4c:51:6e:72:8f:8e:da:87: 07:26:11:ea:76:94:26:58:da:d1:57:ab:74:b3:0e:d0:3e:e1: e0:52:da:89:1b:79:0e:90:4f:a7:eb:9e:0a:12:fe:ee:0d:b0: 01:25:57:eb:bf:40:38:eb:7d:89:33:75:b3:54:f9:e9:04:61: 6d:8b:97:61:85:d0:77:1a:3a:bd:1d:aa:52:9a:6e:25:c5:15: 60:f6:01:36:ab:f4:a0:4e:cf:f1:1c:1e:e1:f4:74:a3:06:2a: c1:b8:8f:da:c4:00:58:4f:9e:44:16:bd:e0:eb:42:c8:eb:30: fe:82:0a:6e:a6:62:c1:51:92:f3:65:63:4a:a9:a6:69:3e:29: 8b:b9:b3:95:db:f4:3e:e9:8f:e5:2f:ac:f4:42:cf:91:54:c4: 27:f2:3c:3e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZvblgmhVl1a/BQLNfVpPmSeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMmVjMjJhNjZiNWIyNDk4NjM5NWZlZWQ3ZmI1YjkwZTI4 YzliZTQwHhcNMjYwMTIwMTMyNjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTkwNWRhYzU0NDkyMjFkMThjNGE1YjY2YzUzMDM3MmQ1Y2JjOTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2UJuoqPp9aSiuD76ZGdtIuv+kHU o9A+/fLRXbMNOGHwnbVi6vq1MGcLIxeAmzrQu7D6LVvrNVTPDJDKT/4m30Y44kp/ aKRMpdLMUfJVUS6konOHiGHenhfIkd9cejyUeFcvJLl3DwHja7HqDhrt6+hP5x2G jh54cc4utyLSnBy9MZR6jiqC8XVEA3o/8RDJTrtiwXZaVR+0pqfAH7ncfZIpRVq5 q167xd/x9CmE/ihpt+iiBLMMQInhSOK2YWUnqjswp6nMmQkpxJTT1ftLWrqzv3Gy XYhESBOYVVOxPLonvcCn2xyNE1NR2rGgXeLo29ta5zOuPVp3orkIiXzewQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPGQXaxUSSIdGMSltmxTA3LVy8lUMB8GA1UdIwQY MBaAFNsuwipmtbJJhjlf7tf7W5DijJvkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnk3Q0ttYTFza21HT1ZfdTFfdGJrT0tNbS1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yZmJjYmYtMzU4ZS00OTI4LTlhODQt Y2U3OGQ0YzA2NDJmLzEvOFpCZHJGUkpJaDBZeEtXMmJGTURjdFhMeVZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8yZmJjYmYtMzU4ZS00OTI4LTlhODQtY2U3OGQ0YzA2NDJm LzEvMnk3Q0ttYTFza21HT1ZfdTFfdGJrT0tNbS1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAw+LYMA0E AgACMAcDBQMqEl3AMA0GCSqGSIb3DQEBCwUAA4IBAQBUjQL6sUWNNx5Jtx1tK9Ac iRrrpvEjhF06ILpOUgn43ioREwFUDhPVG39Men9IZxpppes4jrME7LLlq8zMWwKp 5xA8rHjeJj32A0a0ZghvALeJfHnUHeB4CdTlouth8BiBED1FTFFuco+O2ocHJhHq dpQmWNrRV6t0sw7QPuHgUtqJG3kOkE+n654KEv7uDbABJVfrv0A4632JM3WzVPnp BGFti5dhhdB3Gjq9HapSmm4lxRVg9gE2q/SgTs/xHB7h9HSjBirBuI/axABYT55E Fr3g60LI6zD+ggpupmLBUZLzZWNKqaZpPimLubOV2/Q+6Y/lL6z0Qs+RVMQn8jw+ -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:25 2026 by rpki-client