This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/8xWsq3Ksmca02iiHJdJUQxcFexE.roa File: 8xWsq3Ksmca02iiHJdJUQxcFexE.roa (raw, json) Hash identifier: 87bJiUuXc7TUv7OU+ZddkP+23jZwBuJLuJStO3EeuZU= Subject key identifier: F3:15:AC:AB:72:AC:99:C6:B4:DA:28:87:25:D2:54:43:17:05:7B:11 Certificate issuer: /CN=96d66966ffda0a5d0e131d134a79d93205c8c550 Certificate serial: 019B79ECF37B63EAB2671A3F7291CD797C21 Authority key identifier: 96:D6:69:66:FF:DA:0A:5D:0E:13:1D:13:4A:79:D9:32:05:C8:C5:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/8xWsq3Ksmca02iiHJdJUQxcFexE.roa Signing time: Thu 01 Jan 2026 14:18:50 +0000 ROA not before: Thu 01 Jan 2026 14:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210545 IP address blocks: 176.102.169.0/24 maxlen: 24 176.102.170.0/24 maxlen: 24 193.25.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:f3:7b:63:ea:b2:67:1a:3f:72:91:cd:79:7c:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96d66966ffda0a5d0e131d134a79d93205c8c550 Validity Not Before: Jan 1 14:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f315acab72ac99c6b4da288725d2544317057b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:41:90:61:b4:bd:54:2a:f7:2a:ef:88:1a:3a: 86:d0:50:e2:96:64:05:fb:3d:e8:3c:75:f6:00:e8: b9:b7:05:7c:7a:03:59:8c:fe:8b:a3:e5:a3:57:cc: 8a:e9:26:32:43:7f:6c:5b:d6:95:89:7e:1c:e4:6b: 70:11:c6:00:2b:db:97:7d:ad:56:fa:18:71:df:0f: d9:dc:55:33:81:39:e5:a2:d1:cf:da:ab:88:00:ca: 74:0f:e8:12:c1:a0:6a:0b:3a:59:60:31:d0:4b:d7: 38:97:15:98:e1:d5:b5:e4:05:80:a7:e0:72:27:32: bb:d3:d8:16:2a:ea:89:47:ec:48:c6:a2:fa:e8:3b: ba:12:0f:a0:fd:df:ae:34:4d:97:4c:f6:d7:fd:30: af:05:f0:25:57:6e:94:b9:c7:26:e8:43:4e:9f:01: 28:f3:d8:1b:f3:a0:cb:39:05:e6:19:64:a0:7f:f2: 5a:b3:45:b9:b8:41:09:9d:ef:b8:6d:2d:c3:08:93: 08:79:de:8e:1d:3b:9e:79:31:06:c3:36:29:01:7c: 04:00:5e:37:9b:99:e7:d5:76:ab:2f:a3:f5:27:20: 1c:78:d8:6c:cd:2a:47:44:c3:63:a2:c2:27:c8:88: 9f:f6:b9:0c:d6:e1:3b:0f:75:67:6c:7f:b6:35:7f: e7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:15:AC:AB:72:AC:99:C6:B4:DA:28:87:25:D2:54:43:17:05:7B:11 X509v3 Authority Key Identifier: keyid:96:D6:69:66:FF:DA:0A:5D:0E:13:1D:13:4A:79:D9:32:05:C8:C5:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/8xWsq3Ksmca02iiHJdJUQxcFexE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.102.169.0-176.102.170.255 193.25.170.0/23 Signature Algorithm: sha256WithRSAEncryption aa:56:c9:f5:06:85:b8:83:ec:0b:ef:b1:fd:b7:b8:29:b6:40: 71:f1:0e:5e:d7:b2:f2:50:8b:15:9e:aa:3e:00:40:cc:f0:2f: 00:f4:24:cb:b8:9e:47:04:21:79:7e:c5:d5:4c:ac:d0:d9:30: 5b:5e:d0:5d:86:0e:ec:cd:5f:6a:c5:5e:5b:ea:fb:ff:8f:69: f5:6f:17:02:b7:58:9e:82:12:45:b8:46:d4:21:20:87:ce:68: f2:ef:9b:a8:d1:0e:a6:4b:f7:f9:c2:0e:be:ec:a6:6d:7a:e0: b2:f1:4d:eb:9f:f6:57:f0:52:e6:4c:d4:e4:bd:f1:42:e8:d5: 10:02:15:70:97:2e:59:1f:f5:7a:48:36:ab:52:b1:fe:8f:8c: 1e:1a:e1:dc:63:b8:18:aa:d4:e9:7a:3f:d7:d6:34:7f:7e:68: 54:6f:d0:7e:17:b6:ff:85:4c:16:50:4a:15:7e:d9:29:e3:28: 4f:73:53:29:69:a9:2a:c5:5c:50:00:7d:63:56:91:d1:f9:15: 28:3e:c1:08:a8:cd:07:6a:65:f3:da:d6:3d:6a:25:b1:27:20: 44:ef:47:4b:f2:ff:5b:68:7a:fc:26:e1:61:e3:cc:7f:4d:12: 6c:32:75:42:f7:d7:8b:0e:88:e3:c0:2c:32:c6:ac:7a:d3:cb: 63:c3:3f:b2 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt57PN7Y+qyZxo/cpHNeXwhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZDY2OTY2ZmZkYTBhNWQwZTEzMWQxMzRhNzlkOTMyMDVj OGM1NTAwHhcNMjYwMTAxMTQxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzE1YWNhYjcyYWM5OWM2YjRkYTI4ODcyNWQyNTQ0MzE3MDU3YjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUGQYbS9VCr3Ku+IGjqG0FDilmQF +z3oPHX2AOi5twV8egNZjP6Lo+WjV8yK6SYyQ39sW9aViX4c5GtwEcYAK9uXfa1W +hhx3w/Z3FUzgTnlotHP2quIAMp0D+gSwaBqCzpZYDHQS9c4lxWY4dW15AWAp+By JzK709gWKuqJR+xIxqL66Du6Eg+g/d+uNE2XTPbX/TCvBfAlV26Uuccm6ENOnwEo 89gb86DLOQXmGWSgf/Jas0W5uEEJne+4bS3DCJMIed6OHTueeTEGwzYpAXwEAF43 m5nn1XarL6P1JyAceNhszSpHRMNjosInyIif9rkM1uE7D3VnbH+2NX/nfwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFPMVrKtyrJnGtNoohyXSVEMXBXsRMB8GA1UdIwQY MBaAFJbWaWb/2gpdDhMdE0p52TIFyMVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHRacFp2X2FDbDBPRXgwVFNublpNZ1hJeFZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi81YjQ0MjYtYTI2Ni00M2NlLWE5ZTYt YjBlNjA1OGQ0ZGQ3LzEvOHhXc3EzS3NtY2EwMmlpSEpkSlVReGNGZXhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi81YjQ0MjYtYTI2Ni00M2NlLWE5ZTYtYjBlNjA1OGQ0ZGQ3 LzEvbHRacFp2X2FDbDBPRXgwVFNublpNZ1hJeFZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBACwZqkD BACwZqoDBAHBGaowDQYJKoZIhvcNAQELBQADggEBAKpWyfUGhbiD7Avvsf23uCm2 QHHxDl7XsvJQixWeqj4AQMzwLwD0JMu4nkcEIXl+xdVMrNDZMFte0F2GDuzNX2rF Xlvq+/+PafVvFwK3WJ6CEkW4RtQhIIfOaPLvm6jRDqZL9/nCDr7spm164LLxTeuf 9lfwUuZM1OS98ULo1RACFXCXLlkf9XpINqtSsf6PjB4a4dxjuBiq1Ol6P9fWNH9+ aFRv0H4Xtv+FTBZQShV+2SnjKE9zUylpqSrFXFAAfWNWkdH5FSg+wQiozQdqZfPa 1j1qJbEnIETvR0vy/1toevwm4WHjzH9NEmwydUL314sOiOPALDLGrHrTy2PDP7I= -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:28 2026 by rpki-client