This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/8TaBsBYidW6NwN4w-r-_-frpmPw.roa File: 8TaBsBYidW6NwN4w-r-_-frpmPw.roa (raw, json) Hash identifier: d3cj9imIBJIrG7w+OMuxucJCXGk/PoAG60c7YkaGWUU= Subject key identifier: F1:36:81:B0:16:22:75:6E:8D:C0:DE:30:FA:BF:BF:F9:FA:E9:98:FC Certificate issuer: /CN=0e0134fafba72e06339cadc55d5f13bae482b12d Certificate serial: 019B7C8067B8BF71AD24F32F722AF4FAFF6E Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/8TaBsBYidW6NwN4w-r-_-frpmPw.roa Signing time: Fri 02 Jan 2026 02:19:08 +0000 ROA not before: Fri 02 Jan 2026 02:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49685 IP address blocks: 193.30.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:67:b8:bf:71:ad:24:f3:2f:72:2a:f4:fa:ff:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d Validity Not Before: Jan 2 02:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f13681b01622756e8dc0de30fabfbff9fae998fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f8:24:39:fe:70:aa:7f:7d:39:bd:17:22:5b: 64:bd:91:74:44:56:91:f2:94:fe:76:4f:fc:3d:5f: cc:aa:ec:34:19:70:01:9d:08:84:8f:31:6e:55:95: c9:79:76:be:15:93:3f:ca:1e:87:92:ea:bf:d4:91: 17:54:de:39:e3:fa:32:8a:66:32:16:b5:4c:1c:a8: 5e:6f:8a:2c:cc:aa:61:37:0e:55:8b:58:64:b2:a1: 20:75:fa:6d:a0:0c:ff:a5:fd:61:86:f2:59:95:a3: 3f:eb:ac:f6:06:00:a8:3c:28:aa:d2:5d:f7:18:5b: 12:9a:b6:ad:87:63:28:5f:45:89:d3:53:22:9a:59: f9:dc:78:0c:17:ab:d4:6d:61:d4:1c:1b:f1:3d:a8: 97:e8:2f:36:aa:b5:46:55:e6:dc:57:af:c1:a6:53: f2:74:0e:ae:8c:54:43:36:d3:8c:62:d7:5f:8c:fc: e8:67:05:12:3b:c9:be:c9:b1:4f:b1:4b:44:5d:75: f7:5b:a5:5e:c8:b3:ab:5b:cd:e1:aa:5c:0f:0a:dc: 68:89:87:d2:59:e6:16:7a:2d:fc:b5:12:66:1c:06: 5c:a1:1b:02:87:5a:08:3f:ff:21:1f:54:57:59:df: c0:ec:d3:aa:44:25:bc:a7:dc:b9:0a:35:c4:6e:c1: e3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:36:81:B0:16:22:75:6E:8D:C0:DE:30:FA:BF:BF:F9:FA:E9:98:FC X509v3 Authority Key Identifier: keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/8TaBsBYidW6NwN4w-r-_-frpmPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.30.170.0/24 Signature Algorithm: sha256WithRSAEncryption a3:c8:77:f4:c8:3c:aa:62:f3:2a:16:fd:08:40:71:20:58:b1: 77:f4:32:8f:b6:a0:3a:54:fe:76:14:94:41:a2:7c:99:6c:5e: f6:b1:04:4b:78:3b:dc:eb:06:37:73:07:5e:0d:8f:0a:e6:e8: d6:de:fc:f8:9a:5c:51:ff:cc:62:97:4f:46:f0:90:6f:bd:49: c8:78:7a:11:68:ea:f6:5b:60:31:96:38:2c:ce:94:63:d2:f7: 34:4c:4e:00:3e:5e:4f:94:fc:28:b8:af:81:91:10:7e:e6:b9: 62:b7:48:c2:32:68:07:91:c5:79:20:6e:8b:7f:3b:a4:57:4f: 51:bd:1b:9b:79:61:c5:06:03:82:33:38:40:11:6d:0d:fc:e7: 4b:f6:1a:09:2b:2a:6e:c1:fc:cc:80:af:8b:1d:8b:4b:c4:30: 2c:00:09:b2:f8:4d:92:ad:c1:39:0f:7f:2d:58:ab:6f:b2:e4: fa:d1:0a:b9:a4:b3:b1:5c:65:99:66:e6:9b:39:71:12:c7:90: 7d:18:8a:dc:c9:17:c2:1a:53:0a:22:b2:05:8f:e7:02:d6:30: 39:38:c9:21:b6:23:0f:b6:9b:af:c5:c3:27:0c:ef:e4:41:00: 81:1f:06:a4:ec:78:88:05:5c:7f:6c:e3:f2:57:fe:a7:50:cf: ea:99:b3:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gGe4v3GtJPMvcir0+v9uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMDEzNGZhZmJhNzJlMDYzMzljYWRjNTVkNWYxM2JhZTQ4 MmIxMmQwHhcNMjYwMTAyMDIxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTM2ODFiMDE2MjI3NTZlOGRjMGRlMzBmYWJmYmZmOWZhZTk5OGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvgkOf5wqn99Ob0XIltkvZF0RFaR 8pT+dk/8PV/Mquw0GXABnQiEjzFuVZXJeXa+FZM/yh6Hkuq/1JEXVN454/oyimYy FrVMHKheb4oszKphNw5Vi1hksqEgdfptoAz/pf1hhvJZlaM/66z2BgCoPCiq0l33 GFsSmrath2MoX0WJ01Mimln53HgMF6vUbWHUHBvxPaiX6C82qrVGVebcV6/BplPy dA6ujFRDNtOMYtdfjPzoZwUSO8m+ybFPsUtEXXX3W6VeyLOrW83hqlwPCtxoiYfS WeYWei38tRJmHAZcoRsCh1oIP/8hH1RXWd/A7NOqRCW8p9y5CjXEbsHjIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPE2gbAWInVujcDeMPq/v/n66Zj8MB8GA1UdIwQY MBaAFA4BNPr7py4GM5ytxV1fE7rkgrEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGdFMC12dW5MZ1l6bkszRlhWOFR1dVNDc1MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9hODIxZGYtNmI0OS00NDg5LThhNzct ZDEyNDZjYzJjMzRlLzEvOFRhQnNCWWlkVzZOd040dy1yLV8tZnJwbVB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9hODIxZGYtNmI0OS00NDg5LThhNzctZDEyNDZjYzJjMzRl LzEvRGdFMC12dW5MZ1l6bkszRlhWOFR1dVNDc1MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwR6qMA0G CSqGSIb3DQEBCwUAA4IBAQCjyHf0yDyqYvMqFv0IQHEgWLF39DKPtqA6VP52FJRB onyZbF72sQRLeDvc6wY3cwdeDY8K5ujW3vz4mlxR/8xil09G8JBvvUnIeHoRaOr2 W2AxljgszpRj0vc0TE4APl5PlPwouK+BkRB+5rlit0jCMmgHkcV5IG6LfzukV09R vRubeWHFBgOCMzhAEW0N/OdL9hoJKypuwfzMgK+LHYtLxDAsAAmy+E2SrcE5D38t WKtvsuT60Qq5pLOxXGWZZuabOXESx5B9GIrcyRfCGlMKIrIFj+cC1jA5OMkhtiMP tpuvxcMnDO/kQQCBHwak7HiIBVx/bOPyV/6nUM/qmbOH -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:31 2026 by rpki-client