This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/8XVZkZs9aTYgXhHak4NEd39uxJw.roa File: 8XVZkZs9aTYgXhHak4NEd39uxJw.roa (raw, json) Hash identifier: SCbWhvc5dAVlQf2Rm3aO7mw2DxqRyMlcWllDbPzS+Gk= Subject key identifier: F1:75:59:91:9B:3D:69:36:20:5E:11:DA:93:83:44:77:7F:6E:C4:9C Certificate issuer: /CN=695c537d2656db4dd0c3c32fe981b3c771443e5b Certificate serial: 019B77C744AA25ADCEE3A47547B89B709281 Authority key identifier: 69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/8XVZkZs9aTYgXhHak4NEd39uxJw.roa Signing time: Thu 01 Jan 2026 04:18:26 +0000 ROA not before: Thu 01 Jan 2026 04:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31305 IP address blocks: 193.151.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.crl rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:44:aa:25:ad:ce:e3:a4:75:47:b8:9b:70:92:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=695c537d2656db4dd0c3c32fe981b3c771443e5b Validity Not Before: Jan 1 04:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f17559919b3d6936205e11da938344777f6ec49c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c6:c3:87:2e:ec:e8:09:aa:18:20:c3:e9:24: 4f:df:dd:8a:c4:27:ce:b5:b5:0b:90:0e:05:bc:7f: e3:98:b8:7e:3a:6c:be:db:17:4f:f7:eb:a2:d6:86: cf:49:f4:5d:c1:6a:59:0e:0c:74:de:0a:68:7a:05: a4:82:24:08:39:71:4f:d2:cd:3c:0a:63:19:72:d6: 1b:92:98:59:0f:8c:20:38:3f:83:d1:51:8c:bb:cf: 7c:d5:6a:e1:c3:a5:d4:fc:1a:a6:29:63:3f:e4:15: a0:6f:54:96:bf:23:88:da:3b:f5:83:2b:ba:e4:5f: 8e:7c:26:ad:80:c2:db:0b:38:38:55:e4:aa:e6:9c: c8:9d:67:ca:75:f0:fe:eb:8a:8d:eb:66:78:7b:6a: b1:29:1f:a3:24:f4:1e:08:a4:68:89:55:ac:b5:d9: 7f:f1:4d:b9:b1:0c:b1:3b:97:c8:43:07:d7:63:61: 5d:b5:e0:6f:19:7b:34:9a:a7:65:76:50:8c:aa:30: 12:4e:a3:17:11:b6:92:21:77:33:e4:68:ee:d2:6e: a4:3c:c6:36:10:cf:91:bf:03:ef:69:c5:77:38:30: a5:4f:45:5a:f0:cf:66:2a:78:ce:f2:ea:c3:2d:be: 71:62:17:b9:ef:43:86:59:e8:bd:99:ad:a1:09:2c: 3b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:75:59:91:9B:3D:69:36:20:5E:11:DA:93:83:44:77:7F:6E:C4:9C X509v3 Authority Key Identifier: keyid:69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/8XVZkZs9aTYgXhHak4NEd39uxJw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.151.12.0/22 Signature Algorithm: sha256WithRSAEncryption c6:6f:b6:f3:00:9a:b7:82:02:91:2c:a3:be:2c:d5:98:88:66: 81:71:b3:6f:82:34:ce:37:58:03:ab:7c:e7:6f:f1:3a:8d:51: e7:05:92:5e:f7:43:93:5d:66:60:0c:98:a7:5b:bf:21:57:d7: c4:70:03:0e:32:5b:b2:d8:a9:b8:6d:df:43:6f:dc:76:46:be: fd:4f:83:93:ff:db:2f:f1:42:95:b7:fe:fc:96:8e:3d:d0:f8: 97:7f:9e:44:77:30:f7:8d:46:d4:79:6c:05:a6:9e:c4:3a:55: 28:13:a0:6d:50:0b:01:96:13:75:8d:ed:c5:4a:ca:b8:1b:f1: 89:c5:7c:a1:5f:89:15:53:16:e0:4d:79:ab:15:66:8a:5b:a6: 1b:3b:f8:74:a6:d4:8d:a7:66:6b:d8:ea:83:d8:e0:b7:0e:36: 3b:27:f9:c3:42:99:12:3e:50:37:75:19:78:77:56:9e:7c:15: 3f:b9:fd:50:94:3d:01:7a:9d:5b:f3:71:05:45:34:d3:97:11: db:ad:5d:eb:f8:ad:21:43:7f:23:52:08:0d:e6:b6:79:79:b0: 8d:8d:8e:d2:e9:7e:8c:f0:3a:92:96:2c:db:33:78:8e:fa:42: b1:c5:e9:6c:de:14:6a:ef:0c:7e:7d:c2:15:71:e3:85:fb:13: c4:f6:af:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x0SqJa3O46R1R7ibcJKBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NWM1MzdkMjY1NmRiNGRkMGMzYzMyZmU5ODFiM2M3NzE0 NDNlNWIwHhcNMjYwMTAxMDQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTc1NTk5MTliM2Q2OTM2MjA1ZTExZGE5MzgzNDQ3NzdmNmVjNDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8bDhy7s6AmqGCDD6SRP392KxCfO tbULkA4FvH/jmLh+Omy+2xdP9+ui1obPSfRdwWpZDgx03gpoegWkgiQIOXFP0s08 CmMZctYbkphZD4wgOD+D0VGMu8981Wrhw6XU/BqmKWM/5BWgb1SWvyOI2jv1gyu6 5F+OfCatgMLbCzg4VeSq5pzInWfKdfD+64qN62Z4e2qxKR+jJPQeCKRoiVWstdl/ 8U25sQyxO5fIQwfXY2FdteBvGXs0mqdldlCMqjASTqMXEbaSIXcz5Gju0m6kPMY2 EM+RvwPvacV3ODClT0Va8M9mKnjO8urDLb5xYhe570OGWei9ma2hCSw7GwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPF1WZGbPWk2IF4R2pODRHd/bsScMB8GA1UdIwQY MBaAFGlcU30mVttN0MPDL+mBs8dxRD5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVZ4VGZTWlcyMDNRdzhNdjZZR3p4M0ZFUGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hOTQ5NjYtMDNlNS00MmVhLWFjMjYt YThiZWI1NjU3ZDc2LzEvOFhWWmtaczlhVFlnWGhIYWs0TkVkMzl1eEp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9hOTQ5NjYtMDNlNS00MmVhLWFjMjYtYThiZWI1NjU3ZDc2 LzEvYVZ4VGZTWlcyMDNRdzhNdjZZR3p4M0ZFUGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwZcMMA0G CSqGSIb3DQEBCwUAA4IBAQDGb7bzAJq3ggKRLKO+LNWYiGaBcbNvgjTON1gDq3zn b/E6jVHnBZJe90OTXWZgDJinW78hV9fEcAMOMluy2Km4bd9Db9x2Rr79T4OT/9sv 8UKVt/78lo490PiXf55EdzD3jUbUeWwFpp7EOlUoE6BtUAsBlhN1je3FSsq4G/GJ xXyhX4kVUxbgTXmrFWaKW6YbO/h0ptSNp2Zr2OqD2OC3DjY7J/nDQpkSPlA3dRl4 d1aefBU/uf1QlD0Bep1b83EFRTTTlxHbrV3r+K0hQ38jUggN5rZ5ebCNjY7S6X6M 8DqSlizbM3iO+kKxxels3hRq7wx+fcIVceOF+xPE9q8J -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:54 2026 by rpki-client