This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/8crzujhFPcFtbV2lWsb3pVCUfzo.roa File: 8crzujhFPcFtbV2lWsb3pVCUfzo.roa (raw, json) Hash identifier: eQSvKYDMqkqsiIoj2XOwpx4q3L0IumCSy//x/1LUkR8= Subject key identifier: F1:CA:F3:BA:38:45:3D:C1:6D:6D:5D:A5:5A:C6:F7:A5:50:94:7F:3A Certificate issuer: /CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606 Certificate serial: 019B7EA6C53C5E32D1B8192F9C92D6D65231 Authority key identifier: 7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/8crzujhFPcFtbV2lWsb3pVCUfzo.roa Signing time: Fri 02 Jan 2026 12:20:17 +0000 ROA not before: Fri 02 Jan 2026 12:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209897 IP address blocks: 193.149.240.0/22 maxlen: 24 193.149.244.0/23 maxlen: 24 193.149.248.0/21 maxlen: 24 193.149.253.0/24 maxlen: 24 193.149.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:c5:3c:5e:32:d1:b8:19:2f:9c:92:d6:d6:52:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606 Validity Not Before: Jan 2 12:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1caf3ba38453dc16d6d5da55ac6f7a550947f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7f:5b:05:b2:bb:a7:9d:c8:2c:13:16:17:32: ba:96:a2:1d:e4:0d:ec:80:0a:05:49:d7:b2:95:b1: 39:42:b1:43:9d:99:65:e2:e4:d7:fb:fd:9a:2b:c2: 2a:ce:b7:71:9b:1e:db:af:ac:65:1f:6c:e8:46:79: ae:61:67:b2:fb:b8:af:42:70:76:23:dc:b2:c7:de: 4c:d0:2a:bb:1a:d4:92:a9:c0:61:c3:7e:de:8a:d1: ea:b1:50:20:cc:20:eb:f8:42:80:23:4f:3e:e0:07: 70:e9:e9:14:e8:5b:c3:7f:6f:d7:4d:27:05:97:f5: 79:14:82:d3:d5:bb:8f:c8:81:b6:0b:4c:7a:3d:8e: f7:06:7f:f1:02:51:b7:81:e6:fb:e6:34:e8:94:15: dc:b9:53:79:16:f2:ae:2f:12:97:1a:89:cf:fb:6e: bd:d9:8a:29:30:9f:8b:c1:d2:1e:48:00:6d:c2:a3: 42:8e:58:ff:5d:08:09:87:f6:72:d1:0d:c8:74:f3: 55:07:2a:48:a6:71:db:57:64:4b:25:23:74:18:c0: 12:9c:c1:9a:63:83:f8:db:59:5e:dc:bf:bc:18:6a: bf:a3:f0:8b:1c:75:05:1d:7a:33:b8:72:28:6e:50: 1a:31:2f:52:97:38:0a:6a:a2:6f:43:bc:71:1d:96: 17:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:CA:F3:BA:38:45:3D:C1:6D:6D:5D:A5:5A:C6:F7:A5:50:94:7F:3A X509v3 Authority Key Identifier: keyid:7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/8crzujhFPcFtbV2lWsb3pVCUfzo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.149.240.0-193.149.245.255 193.149.248.0/21 Signature Algorithm: sha256WithRSAEncryption 55:d7:73:16:cc:59:f0:3d:c0:f4:13:fd:13:97:c8:67:4f:f8: 9a:48:5b:3c:5e:40:0d:82:4d:39:92:95:0e:b1:09:07:67:0e: 8b:3d:76:b6:be:4a:75:fc:30:72:b3:6d:79:64:de:d2:9f:23: 91:60:78:28:36:e3:07:2f:8d:b6:11:99:e9:6f:5e:1c:dd:b9: b3:cf:56:23:c5:8b:a5:9b:2e:91:95:d3:bf:9d:15:ae:46:d5: 43:cc:94:06:2d:11:18:08:13:07:2e:65:3e:b3:0c:43:a9:e1: 60:ad:d5:b6:5b:6e:0d:4f:79:48:8f:03:97:2b:85:db:da:6b: 20:4f:1a:ac:bd:3b:a7:45:fd:b2:95:b9:0e:19:18:91:bf:ca: e2:07:78:08:14:95:c4:1f:3f:25:b0:40:03:df:74:8a:56:56: b2:62:fd:4d:a2:28:42:d8:85:21:f0:89:13:85:c1:b6:55:57: e0:88:4d:21:9e:de:d7:c9:36:97:99:e3:da:27:07:88:42:b8: 12:93:22:81:26:71:73:28:dc:86:28:ea:25:77:56:6d:09:fa: 12:97:c8:51:b2:6f:62:a1:ab:a0:0d:0a:c1:57:d9:54:a6:60: c9:57:43:0c:1c:b4:4b:ca:87:45:f6:9a:cd:ba:1e:9e:70:29: aa:a1:73:3c -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt+psU8XjLRuBkvnJLW1lIxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNWFjODFiYmNjZjg1MmYyMmFjOGVkNTJkMmU5MmRiMzFk OGQ2MDYwHhcNMjYwMTAyMTIyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWNhZjNiYTM4NDUzZGMxNmQ2ZDVkYTU1YWM2ZjdhNTUwOTQ3ZjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX9bBbK7p53ILBMWFzK6lqId5A3s gAoFSdeylbE5QrFDnZll4uTX+/2aK8Iqzrdxmx7br6xlH2zoRnmuYWey+7ivQnB2 I9yyx95M0Cq7GtSSqcBhw37eitHqsVAgzCDr+EKAI08+4Adw6ekU6FvDf2/XTScF l/V5FILT1buPyIG2C0x6PY73Bn/xAlG3geb75jTolBXcuVN5FvKuLxKXGonP+269 2YopMJ+LwdIeSABtwqNCjlj/XQgJh/Zy0Q3IdPNVBypIpnHbV2RLJSN0GMASnMGa Y4P421le3L+8GGq/o/CLHHUFHXozuHIoblAaMS9SlzgKaqJvQ7xxHZYXuwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFPHK87o4RT3BbW1dpVrG96VQlH86MB8GA1UdIwQY MBaAFH5ayBu8z4UvIqyO1S0uktsx2NYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmxySUc3elBoUzhpckk3VkxTNlMyekhZMWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kMTNmODQtMTZjZS00ZDUxLWE2MTgt YzJhNWQ5ZDcwMzEzLzEvOGNyenVqaEZQY0Z0YlYybFdzYjNwVkNVZnpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9kMTNmODQtMTZjZS00ZDUxLWE2MTgtYzJhNWQ5ZDcwMzEz LzEvZmxySUc3elBoUzhpckk3VkxTNlMyekhZMWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBATBlfAD BAHBlfQDBAPBlfgwDQYJKoZIhvcNAQELBQADggEBAFXXcxbMWfA9wPQT/ROXyGdP +JpIWzxeQA2CTTmSlQ6xCQdnDos9dra+SnX8MHKzbXlk3tKfI5FgeCg24wcvjbYR melvXhzdubPPViPFi6WbLpGV07+dFa5G1UPMlAYtERgIEwcuZT6zDEOp4WCt1bZb bg1PeUiPA5crhdvaayBPGqy9O6dF/bKVuQ4ZGJG/yuIHeAgUlcQfPyWwQAPfdIpW VrJi/U2iKELYhSHwiROFwbZVV+CITSGe3tfJNpeZ49onB4hCuBKTIoEmcXMo3IYo 6iV3Vm0J+hKXyFGyb2Khq6ANCsFX2VSmYMlXQwwctEvKh0X2ms26Hp5wKaqhczw= -----END CERTIFICATE-----Generated at Mon Jan 26 04:55:25 2026 by rpki-client