This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/8x6YocXhEAE4EUV764wUI2PKiKU.roa File: 8x6YocXhEAE4EUV764wUI2PKiKU.roa (raw, json) Hash identifier: yeyp7+DYbQfuSd5MS8n2WSRAshm6pVInjHRluL8iOew= Subject key identifier: F3:1E:98:A1:C5:E1:10:01:38:11:45:7B:EB:8C:14:23:63:CA:88:A5 Certificate issuer: /CN=79d0d856764a3fee64be14f0a49f59a6865285d1 Certificate serial: 019B7CEE458CE04AAC4B3F5F160AB7FDA60B Authority key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/8x6YocXhEAE4EUV764wUI2PKiKU.roa Signing time: Fri 02 Jan 2026 04:19:08 +0000 ROA not before: Fri 02 Jan 2026 04:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8767 IP address blocks: 193.28.242.0/24 maxlen: 24 2a10:57c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:45:8c:e0:4a:ac:4b:3f:5f:16:0a:b7:fd:a6:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79d0d856764a3fee64be14f0a49f59a6865285d1 Validity Not Before: Jan 2 04:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f31e98a1c5e110013811457beb8c142363ca88a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:75:8c:36:7e:97:c0:d1:11:e9:88:3e:63:92: 50:33:77:8e:ef:ce:0e:af:21:ca:d7:1c:d1:d1:87: 18:fc:9d:f3:23:46:13:4b:a8:60:d0:ce:33:98:b4: 15:c7:48:15:7d:f9:28:6d:32:e7:91:a2:c6:e6:2c: 64:0b:d3:82:70:14:6d:31:35:05:4d:9a:62:e4:69: 38:3c:08:d6:2a:94:33:6c:d9:70:80:91:58:72:b4: 86:2a:ed:4e:d5:e6:f6:6b:90:a3:a3:4f:b6:fb:bf: eb:3b:e2:4a:7d:58:aa:99:5c:21:72:c5:14:9e:bb: 10:d4:9f:c1:4a:63:16:2d:ea:af:c3:27:bd:32:30: f8:f1:fe:a6:a6:53:7c:1a:7d:23:02:d4:a4:26:89: a0:39:f9:75:22:22:aa:43:7c:48:b2:16:96:8d:ae: 95:ef:d9:06:ea:59:c8:be:93:3e:99:b0:b9:aa:65: 61:76:52:b4:34:40:d0:2b:eb:2a:df:bc:9c:84:a0: bc:c2:76:93:9c:29:e9:e4:35:6b:ef:ba:63:03:c0: d1:c6:01:68:a7:54:31:3a:c9:e6:8c:e0:3f:c1:20: 5b:e9:1b:70:71:05:7d:2c:2f:61:63:91:3a:e4:28: 1d:3f:74:c1:67:af:ca:21:b8:f6:30:b0:0a:30:30: 02:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1E:98:A1:C5:E1:10:01:38:11:45:7B:EB:8C:14:23:63:CA:88:A5 X509v3 Authority Key Identifier: keyid:79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/8x6YocXhEAE4EUV764wUI2PKiKU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.28.242.0/24 IPv6: 2a10:57c0::/29 Signature Algorithm: sha256WithRSAEncryption 81:05:00:55:17:43:db:31:a2:e8:dd:20:52:e7:13:89:a0:5c: 88:f2:6d:1f:a9:b2:0f:43:55:c7:6c:f1:f8:44:cf:ab:61:a7: 83:24:7e:12:93:15:3a:4f:02:1b:ed:1f:76:f7:25:48:f7:28: e8:8c:f3:6d:34:c5:f4:a5:34:82:c0:05:df:a2:1d:47:6c:f5: ee:49:47:1a:56:2a:61:6b:1e:6a:e2:c8:e9:4e:f5:9b:e8:42: 73:f4:b3:0f:79:91:56:42:9d:96:5d:a5:a8:c3:93:37:49:16: ad:93:e4:6f:e9:83:9d:34:c1:52:1b:0f:e2:01:74:92:e7:a0: f7:b6:b8:81:b1:a6:19:84:94:00:8a:20:5e:8a:ca:f6:35:fd: 20:3b:45:04:74:87:33:07:a8:73:30:21:76:d2:9e:49:88:f6: 62:bc:15:85:f6:53:b3:11:22:35:9f:fb:f8:18:76:34:75:3f: 94:23:c8:d0:d5:cf:9f:eb:d6:1a:6e:f6:b1:9c:53:b0:1d:02: 9e:bc:36:0f:3c:eb:16:ec:96:e5:d0:20:3e:71:4f:74:1c:a2: 24:ed:35:55:16:a4:5d:dc:aa:69:23:e4:56:a8:2e:82:1b:8e: 6c:04:24:f7:80:76:04:eb:87:df:e9:ac:aa:c2:d1:08:a1:ce: dd:04:1a:5f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87kWM4EqsSz9fFgq3/aYLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5ZDBkODU2NzY0YTNmZWU2NGJlMTRmMGE0OWY1OWE2ODY1 Mjg1ZDEwHhcNMjYwMTAyMDQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzFlOThhMWM1ZTExMDAxMzgxMTQ1N2JlYjhjMTQyMzYzY2E4OGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXWMNn6XwNER6Yg+Y5JQM3eO784O ryHK1xzR0YcY/J3zI0YTS6hg0M4zmLQVx0gVffkobTLnkaLG5ixkC9OCcBRtMTUF TZpi5Gk4PAjWKpQzbNlwgJFYcrSGKu1O1eb2a5Cjo0+2+7/rO+JKfViqmVwhcsUU nrsQ1J/BSmMWLeqvwye9MjD48f6mplN8Gn0jAtSkJomgOfl1IiKqQ3xIshaWja6V 79kG6lnIvpM+mbC5qmVhdlK0NEDQK+sq37ychKC8wnaTnCnp5DVr77pjA8DRxgFo p1QxOsnmjOA/wSBb6RtwcQV9LC9hY5E65CgdP3TBZ6/KIbj2MLAKMDACMwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPMemKHF4RABOBFFe+uMFCNjyoilMB8GA1UdIwQY MBaAFHnQ2FZ2Sj/uZL4U8KSfWaaGUoXRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWREWVZuWktQLTVrdmhUd3BKOVpwb1pTaGRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS80M2UzMDktNzVjNS00ZjQwLTlkYjMt ZjJiYjY5ZTc1ZTc0LzEvOHg2WW9jWGhFQUU0RVVWNzY0d1VJMlBLaUtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS80M2UzMDktNzVjNS00ZjQwLTlkYjMtZjJiYjY5ZTc1ZTc0 LzEvZWREWVZuWktQLTVrdmhUd3BKOVpwb1pTaGRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwRzyMA0E AgACMAcDBQMqEFfAMA0GCSqGSIb3DQEBCwUAA4IBAQCBBQBVF0PbMaLo3SBS5xOJ oFyI8m0fqbIPQ1XHbPH4RM+rYaeDJH4SkxU6TwIb7R929yVI9yjojPNtNMX0pTSC wAXfoh1HbPXuSUcaViphax5q4sjpTvWb6EJz9LMPeZFWQp2WXaWow5M3SRatk+Rv 6YOdNMFSGw/iAXSS56D3triBsaYZhJQAiiBeisr2Nf0gO0UEdIczB6hzMCF20p5J iPZivBWF9lOzESI1n/v4GHY0dT+UI8jQ1c+f69YabvaxnFOwHQKevDYPPOsW7Jbl 0CA+cU90HKIk7TVVFqRd3KppI+RWqC6CG45sBCT3gHYE64ff6ayqwtEIoc7dBBpf -----END CERTIFICATE-----Generated at Tue Jan 27 05:34:10 2026 by rpki-client