This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/8l9vvdAD5ig5DjTOEqHSWzxEtqI.roa File: 8l9vvdAD5ig5DjTOEqHSWzxEtqI.roa (raw, json) Hash identifier: /ZabFzyJivcnbLtz1Of+Qh0KFPOxtwgBRMKumxY4Dq4= Subject key identifier: F2:5F:6F:BD:D0:03:E6:28:39:0E:34:CE:12:A1:D2:5B:3C:44:B6:A2 Certificate issuer: /CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c Certificate serial: 019B7E37C4B230151A0CADB8B8FB48D675F5 Authority key identifier: C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/8l9vvdAD5ig5DjTOEqHSWzxEtqI.roa Signing time: Fri 02 Jan 2026 10:19:02 +0000 ROA not before: Fri 02 Jan 2026 10:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207858 IP address blocks: 193.28.255.0/24 maxlen: 24 193.29.1.0/24 maxlen: 24 193.29.4.0/24 maxlen: 24 193.29.8.0/24 maxlen: 24 2a0f:7a40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:c4:b2:30:15:1a:0c:ad:b8:b8:fb:48:d6:75:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c Validity Not Before: Jan 2 10:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f25f6fbdd003e628390e34ce12a1d25b3c44b6a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:75:31:9b:31:ec:2b:91:90:47:0c:97:92:68: a9:39:ad:2d:a4:ab:82:56:86:66:4a:79:a4:4d:69: fa:31:3e:77:04:72:1b:1a:76:33:d6:d0:2d:72:7e: 6f:21:3f:91:48:e0:74:b4:64:d4:ac:32:c9:a6:6b: a7:a7:5b:33:cf:54:60:c2:10:86:4d:63:c3:6e:71: ae:4d:18:d9:1d:d7:12:d6:b2:d3:3e:13:b2:e3:47: 11:80:61:1b:0e:28:b9:9b:14:4f:ea:ad:b2:20:52: 00:88:ea:f2:20:f5:0f:23:37:d9:c4:31:02:7a:a0: fd:05:e9:8c:d4:ba:14:89:fa:45:58:31:1e:de:28: 41:5d:2a:8b:ee:d4:2d:6f:fc:80:fa:c1:e8:dd:53: cf:8c:a3:ea:80:aa:6b:67:7b:e6:0b:ee:ef:18:45: f9:f6:31:b9:df:6e:a3:be:98:ac:2e:3c:00:f6:f1: e6:4e:ad:84:87:c8:c3:20:11:68:85:f1:bd:de:58: 2f:fa:ca:2d:07:84:94:29:cc:e0:94:f8:b3:6e:e7: b3:8a:8a:c1:74:08:ab:c8:38:df:0b:55:56:13:6d: bc:11:d7:fd:16:e7:fb:35:71:47:1d:8d:bd:02:12: eb:02:9b:49:b4:13:cb:cc:59:1a:63:2b:04:12:14: 15:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:5F:6F:BD:D0:03:E6:28:39:0E:34:CE:12:A1:D2:5B:3C:44:B6:A2 X509v3 Authority Key Identifier: keyid:C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/8l9vvdAD5ig5DjTOEqHSWzxEtqI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.28.255.0/24 193.29.1.0/24 193.29.4.0/24 193.29.8.0/24 IPv6: 2a0f:7a40::/29 Signature Algorithm: sha256WithRSAEncryption 67:1d:8a:58:d1:10:d2:b7:23:cf:bf:2f:f2:4c:f3:fc:40:52: bf:64:05:4c:ca:ec:1c:f5:f3:3f:16:f4:b2:8d:cf:49:a6:52: 96:69:35:f7:4d:de:6f:f2:4d:37:1e:98:4e:1e:8f:65:9f:cc: aa:fd:93:6b:0e:69:03:e7:0a:94:27:a8:8c:01:29:2a:84:5a: 16:49:26:61:4b:56:ed:1c:f5:3a:d2:fb:50:d3:51:19:17:4b: 9a:78:3e:a2:57:a2:cd:57:83:03:33:c6:51:c0:a0:c1:1b:9d: 68:e2:b2:d4:86:cc:37:f0:49:ca:88:94:d7:b0:6d:72:2d:fa: 31:fc:83:50:b7:91:45:1c:a3:81:68:5e:2a:6e:ba:70:f4:72: 6c:8c:48:6e:e1:7b:86:6c:e5:d1:b9:3a:bb:ea:5b:84:4b:26: c7:2b:7f:af:1b:bb:af:ae:83:b3:4d:04:f0:bd:c7:b3:3f:af: d2:6b:fd:9f:99:7e:54:4f:b7:5d:63:34:8a:f5:0d:e4:9a:1c: 91:74:2b:c2:51:41:7d:a2:3f:06:11:af:d1:fc:b9:74:2d:d2: a5:01:e4:19:d0:b7:35:f9:62:85:8a:21:ff:e3:f6:e3:8b:f3: e9:a3:7b:ed:5c:c1:19:45:f2:a8:4a:50:ad:3b:e3:7c:86:f7: 1d:f7:5d:17 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt+N8SyMBUaDK24uPtI1nX1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMzBhY2RmMDQxYjVkY2M3ZTVlYzZjZjhmZjhiZDA2NDhl ODY3MGMwHhcNMjYwMTAyMTAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjVmNmZiZGQwMDNlNjI4MzkwZTM0Y2UxMmExZDI1YjNjNDRiNmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13UxmzHsK5GQRwyXkmipOa0tpKuC VoZmSnmkTWn6MT53BHIbGnYz1tAtcn5vIT+RSOB0tGTUrDLJpmunp1szz1RgwhCG TWPDbnGuTRjZHdcS1rLTPhOy40cRgGEbDii5mxRP6q2yIFIAiOryIPUPIzfZxDEC eqD9BemM1LoUifpFWDEe3ihBXSqL7tQtb/yA+sHo3VPPjKPqgKprZ3vmC+7vGEX5 9jG5326jvpisLjwA9vHmTq2Eh8jDIBFohfG93lgv+sotB4SUKczglPizbueziorB dAiryDjfC1VWE228Edf9Fuf7NXFHHY29AhLrAptJtBPLzFkaYysEEhQVmQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFPJfb73QA+YoOQ40zhKh0ls8RLaiMB8GA1UdIwQY MBaAFMMwrN8EG13Mfl7Gz4/4vQZI6GcMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3pDczN3UWJYY3gtWHNiUGpfaTlCa2pvWnd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yYTg0ZTktNjhiMy00ZTNmLWI2MTUt YTBhZDYxZDE5NGExLzEvOGw5dnZkQUQ1aWc1RGpUT0VxSFNXenhFdHFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8yYTg0ZTktNjhiMy00ZTNmLWI2MTUtYTBhZDYxZDE5NGEx LzEvd3pDczN3UWJYY3gtWHNiUGpfaTlCa2pvWnd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAwRz/AwQA wR0BAwQAwR0EAwQAwR0IMA0EAgACMAcDBQMqD3pAMA0GCSqGSIb3DQEBCwUAA4IB AQBnHYpY0RDStyPPvy/yTPP8QFK/ZAVMyuwc9fM/FvSyjc9JplKWaTX3Td5v8k03 HphOHo9ln8yq/ZNrDmkD5wqUJ6iMASkqhFoWSSZhS1btHPU60vtQ01EZF0uaeD6i V6LNV4MDM8ZRwKDBG51o4rLUhsw38EnKiJTXsG1yLfox/INQt5FFHKOBaF4qbrpw 9HJsjEhu4XuGbOXRuTq76luESybHK3+vG7uvroOzTQTwvcezP6/Sa/2fmX5UT7dd YzSK9Q3kmhyRdCvCUUF9oj8GEa/R/Ll0LdKlAeQZ0Lc1+WKFiiH/4/bji/Ppo3vt XMEZRfKoSlCtO+N8hvcd910X -----END CERTIFICATE-----Generated at Tue Feb 10 04:49:07 2026 by rpki-client