This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/a8XnUOfpz8ZY7eKp-4bvRwhsoUk.roa File: a8XnUOfpz8ZY7eKp-4bvRwhsoUk.roa (raw, json) Hash identifier: ezF+mZ7l6Eoc1jbkNrsOHMCf2Y5Hcn8BAe23t9pa+WQ= Subject key identifier: 6B:C5:E7:50:E7:E9:CF:C6:58:ED:E2:A9:FB:86:EF:47:08:6C:A1:49 Certificate issuer: /CN=3896d9f39201a49fa1369582e18f1a2bb965b283 Certificate serial: 019B7EA5925C56490ACEF3899FFF7485964E Authority key identifier: 38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/a8XnUOfpz8ZY7eKp-4bvRwhsoUk.roa Signing time: Fri 02 Jan 2026 12:18:58 +0000 ROA not before: Fri 02 Jan 2026 12:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3257 IP address blocks: 193.24.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:92:5c:56:49:0a:ce:f3:89:9f:ff:74:85:96:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3896d9f39201a49fa1369582e18f1a2bb965b283 Validity Not Before: Jan 2 12:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6bc5e750e7e9cfc658ede2a9fb86ef47086ca149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:27:93:c9:0d:a3:0a:e8:4d:08:28:a1:fd:2e: 3a:8e:fe:37:13:98:bf:17:0a:51:b5:8d:79:0f:2b: 8c:c5:6f:5e:7d:f2:db:5a:ee:95:2a:77:d0:2a:fd: 5f:b7:44:8d:e6:a3:a0:0b:f5:01:c8:d0:b9:fc:4a: df:3a:01:5c:52:fb:64:22:f6:9e:14:b2:e5:e4:8c: b3:a1:d0:be:6e:dc:4e:c2:a3:48:05:87:5e:f9:21: da:55:81:d0:c5:ec:4a:af:a0:eb:fd:23:1b:8b:72: 34:cd:52:5b:cd:cb:d9:94:be:a8:b7:f6:8f:df:ab: d8:a3:cf:f0:0d:1c:44:6c:c9:f9:74:8e:88:54:ae: 26:c7:e0:1f:04:2c:f2:ad:6b:26:7d:44:0f:5d:e9: 3d:b1:99:ff:2b:55:2c:c9:79:39:4a:56:b7:9d:13: 89:50:10:9d:7f:3d:d7:d9:e0:9a:75:7b:78:a9:cc: a6:2f:ed:09:a6:a6:1f:4c:c8:08:3d:09:3d:f1:73: 71:5e:b3:e9:45:bb:f6:ad:d6:c2:ba:31:fb:7b:17: 26:81:e4:c7:72:9c:fa:03:54:44:37:cc:36:b2:5c: 63:0c:9c:74:3c:60:75:97:2f:53:44:60:3e:8f:f4: b6:01:05:c8:87:91:27:19:14:7d:6c:02:e6:c5:73: 8f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C5:E7:50:E7:E9:CF:C6:58:ED:E2:A9:FB:86:EF:47:08:6C:A1:49 X509v3 Authority Key Identifier: keyid:38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/a8XnUOfpz8ZY7eKp-4bvRwhsoUk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.24.109.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:5a:b7:51:34:ce:0f:3f:45:46:f4:a5:1b:e6:38:3c:7f:9d: 95:e6:38:46:1b:5c:9f:a7:ed:13:37:9b:81:7e:28:70:7f:16: 00:6d:97:aa:b1:82:42:48:f9:50:d2:60:4c:9d:19:f0:f1:aa: bd:5c:ef:09:c0:bf:3b:45:5e:46:77:4f:22:4e:29:5d:30:d2: b9:8a:e8:9b:e7:f6:3c:1c:c0:7f:02:b0:75:ea:53:eb:1e:b3: f8:65:ed:75:55:75:6b:22:c9:d5:75:76:ee:f0:5d:1c:70:1b: 65:53:8d:94:17:86:11:1e:59:f9:e6:cb:d1:6a:86:2c:27:b7: ca:50:43:c9:a9:5d:11:40:3a:ff:91:46:a3:93:25:6b:ed:e6: c5:fb:a4:4d:ce:65:e5:a1:33:d5:b9:6d:60:8d:ce:39:90:78: 9b:01:3f:a4:2a:ca:27:e5:95:21:13:bf:2b:ef:b0:50:2a:48: 04:7e:b7:53:76:07:e4:16:3a:6c:b4:f8:53:d6:fc:6a:f4:b4: 9d:5e:3a:8c:f9:47:b5:b5:ea:47:93:19:84:22:05:27:f9:56: 18:1d:e4:a3:89:a8:e0:a6:28:d5:ad:d5:a0:ac:90:cf:5f:2e: f3:69:eb:ac:03:07:3a:d5:30:a0:2a:57:75:dd:5f:0a:e4:3d: 89:b8:95:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pZJcVkkKzvOJn/90hZZOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4OTZkOWYzOTIwMWE0OWZhMTM2OTU4MmUxOGYxYTJiYjk2 NWIyODMwHhcNMjYwMTAyMTIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmM1ZTc1MGU3ZTljZmM2NThlZGUyYTlmYjg2ZWY0NzA4NmNhMTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwieTyQ2jCuhNCCih/S46jv43E5i/ FwpRtY15DyuMxW9effLbWu6VKnfQKv1ft0SN5qOgC/UByNC5/ErfOgFcUvtkIvae FLLl5IyzodC+btxOwqNIBYde+SHaVYHQxexKr6Dr/SMbi3I0zVJbzcvZlL6ot/aP 36vYo8/wDRxEbMn5dI6IVK4mx+AfBCzyrWsmfUQPXek9sZn/K1UsyXk5Sla3nROJ UBCdfz3X2eCadXt4qcymL+0JpqYfTMgIPQk98XNxXrPpRbv2rdbCujH7excmgeTH cpz6A1REN8w2slxjDJx0PGB1ly9TRGA+j/S2AQXIh5EnGRR9bALmxXOPOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGvF51Dn6c/GWO3iqfuG70cIbKFJMB8GA1UdIwQY MBaAFDiW2fOSAaSfoTaVguGPGiu5ZbKDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0piWjg1SUJwSi1oTnBXQzRZOGFLN2xsc29NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83ODQ2MDEtMDQ2MS00NzUzLThhNTIt ZTgwYTA1ZTM5ZjRiLzEvYThYblVPZnB6OFpZN2VLcC00YnZSd2hzb1VrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy83ODQ2MDEtMDQ2MS00NzUzLThhNTItZTgwYTA1ZTM5ZjRi LzEvT0piWjg1SUJwSi1oTnBXQzRZOGFLN2xsc29NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRhtMA0G CSqGSIb3DQEBCwUAA4IBAQAOWrdRNM4PP0VG9KUb5jg8f52V5jhGG1yfp+0TN5uB fihwfxYAbZeqsYJCSPlQ0mBMnRnw8aq9XO8JwL87RV5Gd08iTildMNK5iuib5/Y8 HMB/ArB16lPrHrP4Ze11VXVrIsnVdXbu8F0ccBtlU42UF4YRHln55svRaoYsJ7fK UEPJqV0RQDr/kUajkyVr7ebF+6RNzmXloTPVuW1gjc45kHibAT+kKson5ZUhE78r 77BQKkgEfrdTdgfkFjpstPhT1vxq9LSdXjqM+Ue1tepHkxmEIgUn+VYYHeSjiajg pijVrdWgrJDPXy7zaeusAwc61TCgKld13V8K5D2JuJX8 -----END CERTIFICATE-----Generated at Fri Jan 2 16:24:32 2026 by rpki-client