This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/G8Q8U9PXAXyP6GSlPYqobfziQzA.roa File: G8Q8U9PXAXyP6GSlPYqobfziQzA.roa (raw, json) Hash identifier: 34ZB7ek6+uTjMbRni0oLjT93sAaYBaeAPO9eFx4+uCg= Subject key identifier: 1B:C4:3C:53:D3:D7:01:7C:8F:E8:64:A5:3D:8A:A8:6D:FC:E2:43:30 Certificate issuer: /CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6 Certificate serial: 019B7F15DE23ABACCBF69F8DFB99480D51F9 Authority key identifier: 05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/G8Q8U9PXAXyP6GSlPYqobfziQzA.roa Signing time: Fri 02 Jan 2026 14:21:38 +0000 ROA not before: Fri 02 Jan 2026 14:21:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211702 IP address blocks: 193.163.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:de:23:ab:ac:cb:f6:9f:8d:fb:99:48:0d:51:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6 Validity Not Before: Jan 2 14:21:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bc43c53d3d7017c8fe864a53d8aa86dfce24330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7f:e6:4b:8a:cc:a5:45:ef:c0:68:1c:ac:15: 7e:ad:33:dd:86:5c:29:87:42:81:52:f7:78:cf:f5: 5e:4a:21:23:bf:55:c2:e4:d1:fb:23:15:0b:e6:8a: 53:e3:8d:03:7d:5f:f7:bd:7c:36:f9:a0:02:6b:e0: 61:43:a5:bf:2c:e1:4d:17:9a:6f:40:25:4b:1b:88: 7c:07:ca:96:60:0d:68:88:50:06:42:80:ce:54:6b: 7d:8a:9e:2f:f0:ac:e7:d1:c3:f1:83:3b:d0:33:8d: a8:1b:9a:e9:d5:37:eb:67:26:91:be:af:9d:7b:97: 99:99:96:58:bc:7a:62:12:82:84:26:cc:60:45:ff: e5:8b:3f:2a:8d:32:5b:12:db:9b:4d:b4:f8:51:07: 6e:e5:5e:71:62:c5:a1:e4:96:32:ee:6e:4f:a6:62: 34:e2:b0:71:38:75:02:7e:bd:6c:e2:91:f6:9b:80: 6a:89:07:5c:b8:b8:82:49:7e:25:3d:5e:80:14:74: 4d:72:3a:a8:11:5e:60:b2:b5:14:96:23:e5:f1:c1: 36:0f:c5:9f:b6:57:fe:29:1c:3d:d0:1f:9c:0c:4e: ba:a2:c5:f4:23:b1:b2:4c:79:fc:b7:de:cf:61:f3: 1a:e3:78:9a:96:0c:f2:e4:4d:c5:3a:fe:13:02:bb: 8a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C4:3C:53:D3:D7:01:7C:8F:E8:64:A5:3D:8A:A8:6D:FC:E2:43:30 X509v3 Authority Key Identifier: keyid:05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/G8Q8U9PXAXyP6GSlPYqobfziQzA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.163.144.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:7e:c6:bf:d6:2b:e6:bb:6f:ae:49:33:55:ac:84:ee:6b:8c: 36:4f:07:b6:b7:ab:60:6e:28:bd:c3:5e:cf:2b:0e:f4:2e:0a: e2:be:bb:30:a5:fd:65:b4:eb:29:89:68:b2:fb:66:df:0d:48: ca:68:d6:f0:5c:ee:21:f8:8d:14:b6:c3:59:62:96:a4:9c:ac: 6e:6b:73:03:98:1b:c2:d2:a1:bb:0d:8c:0a:df:f3:70:b3:6d: 94:eb:2c:80:ed:33:45:f3:d9:c5:c1:26:45:49:c5:d3:36:d4: 64:a0:70:fe:d1:6d:cb:aa:22:b9:47:85:98:af:2c:e1:e5:d5: 76:8d:de:6a:39:e9:01:cf:1e:fd:74:d4:a3:77:86:0a:ed:f2: 42:b6:2d:16:3e:c5:d3:60:e8:09:53:c4:df:39:73:c7:21:b2: ff:14:b1:f9:97:fb:b1:e3:04:b0:41:b2:f8:b2:51:d7:bf:f0: a7:ae:ab:a9:30:e6:89:44:50:f5:33:ff:f1:c9:c7:20:54:5b: 13:f5:ba:96:55:0d:07:64:90:17:47:86:69:68:44:51:5f:a7: 8d:1b:f2:8c:06:40:cb:b5:54:6e:e1:6f:d3:df:11:d2:70:23: 09:28:8e:33:a2:a0:6c:e1:35:bf:e7:7e:46:43:65:bb:db:f9: df:89:8a:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fd4jq6zL9p+N+5lIDVH5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YTA4ZmI5YWY0ZDZjYWZjY2ZhZTNiMjhlYzZlZDQ5YzQy M2VmYzYwHhcNMjYwMTAyMTQyMTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmM0M2M1M2QzZDcwMTdjOGZlODY0YTUzZDhhYTg2ZGZjZTI0MzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn/mS4rMpUXvwGgcrBV+rTPdhlwp h0KBUvd4z/VeSiEjv1XC5NH7IxUL5opT440DfV/3vXw2+aACa+BhQ6W/LOFNF5pv QCVLG4h8B8qWYA1oiFAGQoDOVGt9ip4v8Kzn0cPxgzvQM42oG5rp1TfrZyaRvq+d e5eZmZZYvHpiEoKEJsxgRf/liz8qjTJbEtubTbT4UQdu5V5xYsWh5JYy7m5PpmI0 4rBxOHUCfr1s4pH2m4BqiQdcuLiCSX4lPV6AFHRNcjqoEV5gsrUUliPl8cE2D8Wf tlf+KRw90B+cDE66osX0I7GyTHn8t97PYfMa43ialgzy5E3FOv4TAruKUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBvEPFPT1wF8j+hkpT2KqG384kMwMB8GA1UdIwQY MBaAFAWgj7mvTWyvzPrjso7G7UnEI+/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmFDUHVhOU5iS19NLXVPeWpzYnRTY1FqNzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xZTQ0NGUtMWM5Yy00MWI3LWEzNzEt ZDJiMjNhMzU1ZWRhLzEvRzhROFU5UFhBWHlQNkdTbFBZcW9iZnppUXpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xZTQ0NGUtMWM5Yy00MWI3LWEzNzEtZDJiMjNhMzU1ZWRh LzEvQmFDUHVhOU5iS19NLXVPeWpzYnRTY1FqNzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaOQMA0G CSqGSIb3DQEBCwUAA4IBAQCOfsa/1ivmu2+uSTNVrITua4w2Twe2t6tgbii9w17P Kw70Lgrivrswpf1ltOspiWiy+2bfDUjKaNbwXO4h+I0UtsNZYpaknKxua3MDmBvC 0qG7DYwK3/Nws22U6yyA7TNF89nFwSZFScXTNtRkoHD+0W3LqiK5R4WYryzh5dV2 jd5qOekBzx79dNSjd4YK7fJCti0WPsXTYOgJU8TfOXPHIbL/FLH5l/ux4wSwQbL4 slHXv/CnrqupMOaJRFD1M//xyccgVFsT9bqWVQ0HZJAXR4ZpaERRX6eNG/KMBkDL tVRu4W/T3xHScCMJKI4zoqBs4TW/535GQ2W72/nfiYpj -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:55 2026 by rpki-client