This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9d958d-fe88-4bef-8c42-b514d65557c4/1/a8fsui1cavowzbsfQUOK3utbQ5k.roa File: a8fsui1cavowzbsfQUOK3utbQ5k.roa (raw, json) Hash identifier: KiE5sg4ki8+WuyvtAvZ8lbIg8LnlYLJRIquhphvBDt0= Subject key identifier: 6B:C7:EC:BA:2D:5C:6A:FA:30:CD:BB:1F:41:43:8A:DE:EB:5B:43:99 Certificate issuer: /CN=4ed0d7ec446de52b70ba55958ce29fff45512dd5 Certificate serial: 019B07BA033C79EA82B57AF09CE25AC0D270 Authority key identifier: 4E:D0:D7:EC:44:6D:E5:2B:70:BA:55:95:8C:E2:9F:FF:45:51:2D:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtDX7ERt5StwulWVjOKf_0VRLdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9d958d-fe88-4bef-8c42-b514d65557c4/1/a8fsui1cavowzbsfQUOK3utbQ5k.roa Signing time: Wed 10 Dec 2025 10:06:29 +0000 ROA not before: Wed 10 Dec 2025 10:06:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 35459 IP address blocks: 193.110.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/9d958d-fe88-4bef-8c42-b514d65557c4/1/TtDX7ERt5StwulWVjOKf_0VRLdU.crl rsync://rpki.ripe.net/repository/DEFAULT/15/9d958d-fe88-4bef-8c42-b514d65557c4/1/TtDX7ERt5StwulWVjOKf_0VRLdU.mft rsync://rpki.ripe.net/repository/DEFAULT/TtDX7ERt5StwulWVjOKf_0VRLdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:ba:03:3c:79:ea:82:b5:7a:f0:9c:e2:5a:c0:d2:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ed0d7ec446de52b70ba55958ce29fff45512dd5 Validity Not Before: Dec 10 10:06:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6bc7ecba2d5c6afa30cdbb1f41438adeeb5b4399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5a:4b:46:57:40:49:3e:3b:22:46:ff:c4:c3: e1:d5:dc:2d:19:89:9f:15:1f:c0:31:57:dd:6b:31: 79:0e:20:2c:cd:3e:ef:c7:99:f4:53:88:cc:d7:08: bb:08:29:a0:9c:48:e7:42:a4:ed:5e:b0:87:4b:be: ec:8c:28:b4:fe:4b:bc:86:15:97:89:ee:6e:72:42: 7d:a1:fb:c3:87:c1:52:6b:d9:fc:c8:03:30:b4:a3: 21:32:b8:a4:93:39:77:4d:c6:b2:83:fa:b0:17:15: 12:76:c3:9e:0b:09:45:e9:00:e3:71:0f:dd:18:3c: 00:26:83:c9:6b:59:7e:2f:63:07:ee:6f:28:aa:c5: 80:92:fc:1d:11:5f:da:5b:f4:22:e0:47:e9:e4:8b: 94:50:9e:76:d4:a6:12:a6:71:b0:4e:0c:ac:f4:41: e7:cc:4b:df:22:c9:35:b0:03:58:a5:69:81:44:a6: a1:c7:4a:1c:4f:39:d2:72:05:e2:92:99:9e:ac:f9: a6:3f:aa:cc:42:9d:4f:d2:71:f6:59:f9:2e:b7:0f: d5:12:00:3e:65:ec:b0:04:8c:68:64:32:08:6f:ab: 44:fe:fa:ba:c7:9e:41:3f:a0:65:f0:3c:97:6a:95: b6:d0:7a:e5:d3:e4:e2:0a:2b:ba:80:c6:35:a6:98: 4c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C7:EC:BA:2D:5C:6A:FA:30:CD:BB:1F:41:43:8A:DE:EB:5B:43:99 X509v3 Authority Key Identifier: keyid:4E:D0:D7:EC:44:6D:E5:2B:70:BA:55:95:8C:E2:9F:FF:45:51:2D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtDX7ERt5StwulWVjOKf_0VRLdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d958d-fe88-4bef-8c42-b514d65557c4/1/a8fsui1cavowzbsfQUOK3utbQ5k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d958d-fe88-4bef-8c42-b514d65557c4/1/TtDX7ERt5StwulWVjOKf_0VRLdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.110.86.0/24 Signature Algorithm: sha256WithRSAEncryption 36:b8:6d:56:ab:e2:2e:3a:cd:6d:d6:25:90:d5:3e:f3:7e:6b: dd:17:d5:da:00:7e:b6:8e:a0:5d:00:c9:16:1a:2f:28:f4:a3: 47:13:57:dc:36:94:57:59:5b:7e:0d:19:32:d6:ea:87:22:66: 19:fd:9c:cc:14:6e:e9:6b:2c:7f:51:40:d5:0d:04:81:ed:ae: 4a:ca:96:95:92:80:22:96:08:3a:7f:5b:1b:91:d6:6b:03:3d: 92:80:3d:67:5b:95:ad:ea:18:d8:9e:c5:4c:55:9e:08:ea:9e: cf:8b:44:2f:bd:b0:f6:ed:83:27:0a:9f:7f:cf:84:9e:b5:88: 3b:63:e4:4b:67:17:44:5a:b3:e8:16:f0:f2:bc:98:e7:71:d9: 97:85:88:b3:68:5e:65:96:7e:8f:91:61:83:8e:2a:ea:1f:b8: a0:6f:d0:7e:88:1e:52:98:f6:52:93:e4:e0:2f:22:5f:bd:c3: a9:44:fa:57:4e:e2:73:c2:16:15:37:07:18:7d:38:1e:e5:5d: df:8e:79:f8:7c:65:1c:f9:a4:0a:ac:31:33:a7:87:6e:32:6c: a3:85:69:d1:d4:50:d1:02:8a:d2:52:55:dd:64:be:80:a6:77: 7a:f4:29:01:f3:13:8e:fd:91:48:ea:51:f4:eb:50:41:96:0a: 6c:c3:c1:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsHugM8eeqCtXrwnOJawNJwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZDBkN2VjNDQ2ZGU1MmI3MGJhNTU5NThjZTI5ZmZmNDU1 MTJkZDUwHhcNMjUxMjEwMTAwNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmM3ZWNiYTJkNWM2YWZhMzBjZGJiMWY0MTQzOGFkZWViNWI0Mzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1pLRldAST47Ikb/xMPh1dwtGYmf FR/AMVfdazF5DiAszT7vx5n0U4jM1wi7CCmgnEjnQqTtXrCHS77sjCi0/ku8hhWX ie5uckJ9ofvDh8FSa9n8yAMwtKMhMrikkzl3Tcayg/qwFxUSdsOeCwlF6QDjcQ/d GDwAJoPJa1l+L2MH7m8oqsWAkvwdEV/aW/Qi4Efp5IuUUJ521KYSpnGwTgys9EHn zEvfIsk1sANYpWmBRKahx0ocTznScgXikpmerPmmP6rMQp1P0nH2Wfkutw/VEgA+ ZeywBIxoZDIIb6tE/vq6x55BP6Bl8DyXapW20Hrl0+TiCiu6gMY1pphMXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGvH7LotXGr6MM27H0FDit7rW0OZMB8GA1UdIwQY MBaAFE7Q1+xEbeUrcLpVlYzin/9FUS3VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHREWDdFUnQ1U3R3dWxXVmpPS2ZfMFZSTGRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS85ZDk1OGQtZmU4OC00YmVmLThjNDIt YjUxNGQ2NTU1N2M0LzEvYThmc3VpMWNhdm93emJzZlFVT0szdXRiUTVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS85ZDk1OGQtZmU4OC00YmVmLThjNDItYjUxNGQ2NTU1N2M0 LzEvVHREWDdFUnQ1U3R3dWxXVmpPS2ZfMFZSTGRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW5WMA0G CSqGSIb3DQEBCwUAA4IBAQA2uG1Wq+IuOs1t1iWQ1T7zfmvdF9XaAH62jqBdAMkW Gi8o9KNHE1fcNpRXWVt+DRky1uqHImYZ/ZzMFG7payx/UUDVDQSB7a5KypaVkoAi lgg6f1sbkdZrAz2SgD1nW5Wt6hjYnsVMVZ4I6p7Pi0QvvbD27YMnCp9/z4SetYg7 Y+RLZxdEWrPoFvDyvJjncdmXhYizaF5lln6PkWGDjirqH7igb9B+iB5SmPZSk+Tg LyJfvcOpRPpXTuJzwhYVNwcYfTge5V3fjnn4fGUc+aQKrDEzp4duMmyjhWnR1FDR AorSUlXdZL6Apnd69CkB8xOO/ZFI6lH061BBlgpsw8GG -----END CERTIFICATE-----Generated at Fri Dec 26 17:19:33 2025 by rpki-client