This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/8qvgkfD_thQ4z_WLXGgGH3lh3Jo.roa File: 8qvgkfD_thQ4z_WLXGgGH3lh3Jo.roa (raw, json) Hash identifier: lpIuAWveKCKeQMUzXLJXzixQ82Be/vxjOdAft2Y84BY= Subject key identifier: F2:AB:E0:91:F0:FF:B6:14:38:CF:F5:8B:5C:68:06:1F:79:61:DC:9A Certificate issuer: /CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1 Certificate serial: 019B7F13A587FE5E42D4E525E069EF39CC8E Authority key identifier: 3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/8qvgkfD_thQ4z_WLXGgGH3lh3Jo.roa Signing time: Fri 02 Jan 2026 14:19:12 +0000 ROA not before: Fri 02 Jan 2026 14:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5413 IP address blocks: 193.35.240.0/22 maxlen: 24 194.33.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:a5:87:fe:5e:42:d4:e5:25:e0:69:ef:39:cc:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1 Validity Not Before: Jan 2 14:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2abe091f0ffb61438cff58b5c68061f7961dc9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:eb:39:44:39:6c:40:96:bb:4a:f2:0d:7e:1c: 78:9d:22:e7:3d:92:5b:f3:e9:56:97:79:1c:68:61: 02:04:97:31:dc:fb:65:49:5c:e3:71:b1:1c:4f:9c: 78:bf:7a:c9:db:9c:1b:ab:55:35:dd:d9:d7:52:a6: 81:4c:69:82:14:cc:8b:2c:82:bd:50:39:8a:97:cb: dc:54:a7:f9:0b:3c:2a:f1:08:d2:ce:6b:87:01:35: fd:11:17:61:e6:2b:31:04:d2:cd:e3:bd:35:0d:c8: ea:ae:d1:9a:8d:91:b1:63:55:a5:15:a4:2b:30:ce: 7e:ff:fe:f0:2a:a3:ea:0f:77:8b:26:9d:13:af:4e: 4c:d4:66:5b:4a:6c:b8:e6:ae:05:4c:84:6c:bf:74: 8b:96:9a:a2:45:db:7c:7e:13:bc:1c:06:64:44:0b: bd:6c:fb:8c:cc:f5:d0:ff:a8:7b:12:6a:4d:ee:dd: af:40:87:ef:01:c9:c6:a0:91:c7:ac:75:b7:b7:90: f4:e1:b3:11:22:93:9f:9f:02:08:b2:5e:b8:d8:45: 38:61:66:46:c8:15:36:5f:01:cd:a6:45:c7:f1:8f: f5:a6:0c:8b:c2:a8:1a:80:ec:30:4a:bf:e8:86:32: a4:6c:cd:b8:fc:ae:ec:07:8e:21:ca:8a:cb:8f:61: bf:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:AB:E0:91:F0:FF:B6:14:38:CF:F5:8B:5C:68:06:1F:79:61:DC:9A X509v3 Authority Key Identifier: keyid:3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/8qvgkfD_thQ4z_WLXGgGH3lh3Jo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.35.240.0/22 194.33.128.0/20 Signature Algorithm: sha256WithRSAEncryption 46:b8:cb:6e:46:b2:1d:e2:0f:53:d7:7f:ca:47:95:ab:2d:75: 2d:81:10:0c:6a:78:ba:24:91:67:b9:47:0b:5a:e8:18:56:29: 79:b6:5b:c0:49:ed:2b:3a:ff:6d:2c:94:d5:c2:95:ea:9d:ac: ae:0d:24:1b:7d:8d:b1:9c:b9:c6:dc:3b:1b:5d:a6:47:0f:70: 07:0a:6c:bc:a7:cd:df:4c:83:26:09:5e:0f:7c:05:e0:cd:bf: 1f:2d:f8:fc:2d:b0:a2:66:bf:0c:5b:15:48:07:4c:fe:2b:f4: f5:b6:db:3b:cb:05:2e:3e:21:03:be:1d:b1:0e:fe:7e:f6:d9: 2b:44:a8:a4:fd:bb:4d:27:c4:8c:3b:14:f1:57:3d:74:c6:6f: 2d:fc:6d:8b:9d:ba:bc:94:a5:ec:dc:c8:da:9a:e0:50:1c:2b: aa:0b:dd:74:27:90:b2:f3:6b:aa:e5:7e:4d:23:f6:41:a8:d8: 2c:49:da:26:20:76:e6:fe:02:00:a3:57:98:4b:81:05:9c:34: a2:fd:bb:45:b1:ff:7e:42:75:bf:4c:d1:2b:f2:d4:4b:0b:fd: 85:d4:f9:5f:70:41:4d:bf:8d:d5:b9:bf:09:fe:d7:a0:34:57: e4:a5:7e:5d:7f:89:ae:2a:ef:22:68:be:93:49:08:b5:45:7e: 6b:50:f2:3b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/E6WH/l5C1OUl4GnvOcyOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZmZiNjA1ZGNlMzA2MGRmYjY2ZGNjY2E4OGViN2RhMGFj NzRhZjEwHhcNMjYwMTAyMTQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmFiZTA5MWYwZmZiNjE0MzhjZmY1OGI1YzY4MDYxZjc5NjFkYzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOs5RDlsQJa7SvINfhx4nSLnPZJb 8+lWl3kcaGECBJcx3PtlSVzjcbEcT5x4v3rJ25wbq1U13dnXUqaBTGmCFMyLLIK9 UDmKl8vcVKf5Czwq8QjSzmuHATX9ERdh5isxBNLN4701DcjqrtGajZGxY1WlFaQr MM5+//7wKqPqD3eLJp0Tr05M1GZbSmy45q4FTIRsv3SLlpqiRdt8fhO8HAZkRAu9 bPuMzPXQ/6h7EmpN7t2vQIfvAcnGoJHHrHW3t5D04bMRIpOfnwIIsl642EU4YWZG yBU2XwHNpkXH8Y/1pgyLwqgagOwwSr/ohjKkbM24/K7sB44hyorLj2G/3QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPKr4JHw/7YUOM/1i1xoBh95YdyaMB8GA1UdIwQY MBaAFDv/tgXc4wYN+2bczKiOt9oKx0rxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT18tMkJkempCZzM3WnR6TXFJNjMyZ3JIU3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wY2FhZWItMjg3ZC00ZWQ1LWFkN2Ut NmIxZDA3MTQ1NTRhLzEvOHF2Z2tmRF90aFE0el9XTFhHZ0dIM2xoM0pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wY2FhZWItMjg3ZC00ZWQ1LWFkN2UtNmIxZDA3MTQ1NTRh LzEvT18tMkJkempCZzM3WnR6TXFJNjMyZ3JIU3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCwSPwAwQE wiGAMA0GCSqGSIb3DQEBCwUAA4IBAQBGuMtuRrId4g9T13/KR5WrLXUtgRAMani6 JJFnuUcLWugYVil5tlvASe0rOv9tLJTVwpXqnayuDSQbfY2xnLnG3DsbXaZHD3AH Cmy8p83fTIMmCV4PfAXgzb8fLfj8LbCiZr8MWxVIB0z+K/T1tts7ywUuPiEDvh2x Dv5+9tkrRKik/btNJ8SMOxTxVz10xm8t/G2Lnbq8lKXs3MjamuBQHCuqC910J5Cy 82uq5X5NI/ZBqNgsSdomIHbm/gIAo1eYS4EFnDSi/btFsf9+QnW/TNEr8tRLC/2F 1PlfcEFNv43Vub8J/tegNFfkpX5df4muKu8iaL6TSQi1RX5rUPI7 -----END CERTIFICATE-----Generated at Sun Jan 25 21:57:40 2026 by rpki-client