This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/e8yL6z8TxhAI8s7lifD5i0Vr0cU.roa File: e8yL6z8TxhAI8s7lifD5i0Vr0cU.roa (raw, json) Hash identifier: nilHfeTYPJt56v6fPn3HSV0r3VH6M1R/PsNJkl8uQHk= Subject key identifier: 7B:CC:8B:EB:3F:13:C6:10:08:F2:CE:E5:89:F0:F9:8B:45:6B:D1:C5 Certificate issuer: /CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6 Certificate serial: 019ABF7B3A0C1FCFA70ED9863049460CD58C Authority key identifier: 6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/e8yL6z8TxhAI8s7lifD5i0Vr0cU.roa Signing time: Wed 26 Nov 2025 09:25:15 +0000 ROA not before: Wed 26 Nov 2025 09:25:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203465 IP address blocks: 93.174.248.0/21 maxlen: 24 2a03:8ac0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:7b:3a:0c:1f:cf:a7:0e:d9:86:30:49:46:0c:d5:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6 Validity Not Before: Nov 26 09:25:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7bcc8beb3f13c61008f2cee589f0f98b456bd1c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:37:72:92:20:7c:4e:19:4f:77:fc:02:35:4d: 96:30:d0:6e:7d:31:5e:a3:8a:88:d5:cc:9d:20:09: 16:f0:fb:6c:b9:81:5f:79:85:2b:c5:69:20:67:b7: a6:15:47:ef:9b:5a:6f:ec:2c:31:d7:dd:dd:a4:6b: 0e:19:85:ed:c1:50:f6:4e:22:45:ec:54:92:5f:09: 34:19:23:c1:1d:57:f6:28:cd:e3:ba:15:89:30:ad: 3f:3b:d7:07:52:22:3a:ac:b1:19:e4:20:02:16:ea: b8:f4:04:61:13:10:cd:7e:71:40:d5:91:50:da:d8: d1:61:2f:07:91:39:48:43:36:39:ac:8c:cf:f6:07: e2:34:08:f9:35:8a:35:d4:f8:b3:a6:fd:9e:0e:53: 27:b5:1f:08:b6:f4:2e:25:bb:08:bf:ae:48:58:f7: d3:7b:62:be:b0:56:5b:5b:8e:ec:cb:dd:c1:b4:f3: 27:79:3a:db:ad:a4:11:42:68:6d:53:f9:0b:60:dc: ef:ec:69:2b:aa:e2:ea:0d:e5:5a:04:2e:ae:52:6f: 77:31:8a:17:3a:22:72:52:44:5e:41:99:c7:c6:1a: 3e:d3:6a:88:d0:56:2f:0b:74:4f:af:f7:d7:5e:89: 5b:38:38:53:b9:43:e4:90:0a:56:39:3d:ad:68:af: b7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:CC:8B:EB:3F:13:C6:10:08:F2:CE:E5:89:F0:F9:8B:45:6B:D1:C5 X509v3 Authority Key Identifier: keyid:6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/e8yL6z8TxhAI8s7lifD5i0Vr0cU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.174.248.0/21 IPv6: 2a03:8ac0::/32 Signature Algorithm: sha256WithRSAEncryption 61:c8:d2:2d:f0:99:7d:2d:9d:b7:8e:f9:70:8b:4d:9e:33:f0: 1a:83:31:60:c9:c5:c1:72:41:36:16:d8:28:b9:17:e4:f3:90: 40:8c:25:33:0f:82:09:07:af:92:8f:a1:67:dd:f3:dd:1f:43: b7:4e:29:bf:b9:93:d1:9a:35:01:f1:14:49:4c:56:5d:be:ba: 54:6f:75:97:d8:ac:3c:9f:79:b7:5f:53:2b:4b:a8:d1:3b:9b: d1:8a:38:92:c3:49:65:45:31:61:28:82:d7:45:11:02:53:60: 33:df:c2:b5:85:d1:6a:38:6e:13:9c:72:f2:77:0d:6a:3a:a7: 20:46:50:dc:1d:68:ba:29:a4:a9:14:94:57:ad:a3:f6:46:64: d7:f2:bb:d8:ac:50:28:92:f3:44:d8:75:df:20:f1:74:d0:36: 9f:b4:67:02:fd:cd:5b:26:14:5d:f6:8b:7c:b0:88:f0:23:49: bb:7d:22:88:00:c3:3b:92:63:7b:08:28:7e:05:bf:b0:8e:ad: 35:e0:96:8b:0c:ea:6a:57:97:44:e1:e1:10:8e:da:d2:f8:6f: 3b:2e:08:b0:1c:90:72:36:7c:40:49:35:4a:4e:2a:52:b0:f1: 43:1a:a8:81:42:a7:16:31:9d:17:c0:84:5c:80:64:ab:d5:2c: f4:a2:e6:d7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZq/ezoMH8+nDtmGMElGDNWMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjODQ0YmQ2MmNiZmI1YWRjY2ZiNGRjMTZlY2EyM2NiNWM5 ZGRlYjYwHhcNMjUxMTI2MDkyNTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmNjOGJlYjNmMTNjNjEwMDhmMmNlZTU4OWYwZjk4YjQ1NmJkMWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzdykiB8ThlPd/wCNU2WMNBufTFe o4qI1cydIAkW8PtsuYFfeYUrxWkgZ7emFUfvm1pv7Cwx193dpGsOGYXtwVD2TiJF 7FSSXwk0GSPBHVf2KM3juhWJMK0/O9cHUiI6rLEZ5CACFuq49ARhExDNfnFA1ZFQ 2tjRYS8HkTlIQzY5rIzP9gfiNAj5NYo11Pizpv2eDlMntR8ItvQuJbsIv65IWPfT e2K+sFZbW47sy93BtPMneTrbraQRQmhtU/kLYNzv7GkrquLqDeVaBC6uUm93MYoX OiJyUkReQZnHxho+02qI0FYvC3RPr/fXXolbODhTuUPkkApWOT2taK+35QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHvMi+s/E8YQCPLO5Ynw+YtFa9HFMB8GA1UdIwQY MBaAFGyES9Ysv7WtzPtNwW7KI8tcnd62MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklSTDFpeV90YTNNLTAzQmJzb2p5MXlkM3JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jYjFiYzUtMmMxNS00MmY3LTllZjIt NWM5OWI2ODNkYjBkLzEvZTh5TDZ6OFR4aEFJOHM3bGlmRDVpMFZyMGNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9jYjFiYzUtMmMxNS00MmY3LTllZjItNWM5OWI2ODNkYjBk LzEvYklSTDFpeV90YTNNLTAzQmJzb2p5MXlkM3JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDXa74MA0E AgACMAcDBQAqA4rAMA0GCSqGSIb3DQEBCwUAA4IBAQBhyNIt8Jl9LZ23jvlwi02e M/AagzFgycXBckE2FtgouRfk85BAjCUzD4IJB6+Sj6Fn3fPdH0O3Tim/uZPRmjUB 8RRJTFZdvrpUb3WX2Kw8n3m3X1MrS6jRO5vRijiSw0llRTFhKILXRRECU2Az38K1 hdFqOG4TnHLydw1qOqcgRlDcHWi6KaSpFJRXraP2RmTX8rvYrFAokvNE2HXfIPF0 0DaftGcC/c1bJhRd9ot8sIjwI0m7fSKIAMM7kmN7CCh+Bb+wjq014JaLDOpqV5dE 4eEQjtrS+G87LgiwHJByNnxASTVKTipSsPFDGqiBQqcWMZ0XwIRcgGSr1Sz0oubX -----END CERTIFICATE-----Generated at Sat Dec 6 15:35:24 2025 by rpki-client