This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/8wSSQI0I4F6Te2a4jzTZUzmT4kE.roa File: 8wSSQI0I4F6Te2a4jzTZUzmT4kE.roa (raw, json) Hash identifier: CzDXuVFvOpgIjJyo8JK5OTAHeeCyIkIfuyxNLXuiD4w= Subject key identifier: F3:04:92:40:8D:08:E0:5E:93:7B:66:B8:8F:34:D9:53:39:93:E2:41 Certificate issuer: /CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc Certificate serial: 019B78A313D3FCBB58898C306152DAD631D3 Authority key identifier: 93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/8wSSQI0I4F6Te2a4jzTZUzmT4kE.roa Signing time: Thu 01 Jan 2026 08:18:31 +0000 ROA not before: Thu 01 Jan 2026 08:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207439 IP address blocks: 91.234.47.0/24 maxlen: 24 185.49.175.0/24 maxlen: 24 2001:67c:29bc::/48 maxlen: 48 2a0c:800::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:13:d3:fc:bb:58:89:8c:30:61:52:da:d6:31:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc Validity Not Before: Jan 1 08:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f30492408d08e05e937b66b88f34d9533993e241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b5:85:d9:01:8e:36:57:37:12:a1:c2:5d:af: 57:00:a9:fa:ec:e1:55:92:d7:f3:a1:c0:fd:78:6a: d6:64:86:34:5b:5b:62:c0:8f:3b:d6:94:87:1c:37: 90:39:f2:80:48:e0:a4:2e:0b:6f:dd:48:52:c5:81: 38:43:77:3c:98:3b:9d:57:b1:c0:4f:59:82:8d:6e: d9:31:86:48:37:05:7e:60:06:c7:ab:a1:c0:63:da: a7:3c:ae:3c:60:f2:07:74:ad:c0:c6:03:d6:f7:8a: 6c:60:5f:3a:4f:55:5d:4c:2a:75:fd:af:ee:d3:98: 17:f4:8e:82:8e:0f:ac:5a:ba:2d:eb:0d:53:bb:1a: 80:99:c2:fa:12:d3:e2:bf:c1:c1:fd:3b:02:3c:51: f8:90:a8:b1:64:1f:42:09:8f:09:d1:45:c8:95:4e: dc:a0:33:cc:de:f7:22:fb:7f:b0:cf:1b:86:14:68: a0:56:dc:3a:69:d8:49:12:6b:ae:3c:20:fa:48:12: 53:29:32:97:23:ec:a8:9d:2f:a1:28:d0:cf:9d:2b: 1e:45:1a:e8:0d:36:0e:f0:ce:50:8d:79:a5:98:7b: be:00:44:ea:50:21:cd:aa:d6:da:a5:28:d6:5d:11: d9:dc:e8:6c:73:5d:4a:2d:72:5b:ef:0b:b2:b6:0a: 86:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:04:92:40:8D:08:E0:5E:93:7B:66:B8:8F:34:D9:53:39:93:E2:41 X509v3 Authority Key Identifier: keyid:93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/8wSSQI0I4F6Te2a4jzTZUzmT4kE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.47.0/24 185.49.175.0/24 IPv6: 2001:67c:29bc::/48 2a0c:800::/29 Signature Algorithm: sha256WithRSAEncryption c5:24:38:7c:3c:9c:d2:27:f2:38:d5:fc:81:e7:96:f4:e7:2e: fa:14:50:15:e4:0d:67:d6:3a:b7:72:ad:06:07:10:4a:49:ad: 6d:df:5e:64:47:6d:19:21:59:b1:b0:66:39:b1:7f:37:07:83: 17:3e:18:ae:7a:bb:3c:fd:e6:62:c7:ee:70:7d:46:52:1b:b3: 78:20:77:44:85:e7:f5:6f:ea:72:7a:eb:a4:a7:93:e1:da:26: 2c:0e:bf:b7:dc:3c:db:a0:af:6b:fa:10:82:fa:b8:99:e9:b8: 4b:0a:36:b9:0a:af:04:c7:98:12:24:81:33:71:d5:9b:1b:43: d2:fb:8e:68:87:32:3f:a6:d1:fb:cc:5a:df:ec:a9:da:04:e0: c9:58:f2:97:41:0d:0a:8a:65:85:4f:17:a9:91:85:47:ee:f6: db:15:6b:67:0a:b3:1f:9b:83:56:39:08:0f:24:88:12:9d:7c: 20:65:69:f6:64:e1:8a:0e:57:04:38:a5:5c:86:bf:47:0f:9a: 4e:87:5d:6b:69:ee:44:ac:c2:c1:10:22:a9:24:50:5a:44:a6: 1c:cb:9b:0c:3a:01:1c:5a:3f:a2:b9:ca:87:f1:9e:7e:62:c5: fb:ee:8b:aa:a7:bd:9c:56:21:9b:6e:ac:ae:f8:da:dd:a2:e3: 0c:8b:78:8e -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt4oxPT/LtYiYwwYVLa1jHTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYTlmOTA4MzBmZTIyNmM5MDhlYWRkYjY3YjViOTA5NmM1 ZTkxYmMwHhcNMjYwMTAxMDgxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzA0OTI0MDhkMDhlMDVlOTM3YjY2Yjg4ZjM0ZDk1MzM5OTNlMjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rWF2QGONlc3EqHCXa9XAKn67OFV ktfzocD9eGrWZIY0W1tiwI871pSHHDeQOfKASOCkLgtv3UhSxYE4Q3c8mDudV7HA T1mCjW7ZMYZINwV+YAbHq6HAY9qnPK48YPIHdK3AxgPW94psYF86T1VdTCp1/a/u 05gX9I6Cjg+sWrot6w1TuxqAmcL6EtPiv8HB/TsCPFH4kKixZB9CCY8J0UXIlU7c oDPM3vci+3+wzxuGFGigVtw6adhJEmuuPCD6SBJTKTKXI+yonS+hKNDPnSseRRro DTYO8M5QjXmlmHu+AETqUCHNqtbapSjWXRHZ3Ohsc11KLXJb7wuytgqGDQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFPMEkkCNCOBek3tmuI802VM5k+JBMB8GA1UdIwQY MBaAFJOp+Qgw/iJskI6t22e1uQlsXpG8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazZuNUNERC1JbXlRanEzYlo3VzVDV3hla2J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8yMjkzMDMtZmQzZS00YjNiLTgxNGQt MDY4MDZhMGJkMTgxLzEvOHdTU1FJMEk0RjZUZTJhNGp6VFpVem1UNGtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8yMjkzMDMtZmQzZS00YjNiLTgxNGQtMDY4MDZhMGJkMTgx LzEvazZuNUNERC1JbXlRanEzYlo3VzVDV3hla2J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQAW+ovAwQA uTGvMBYEAgACMBADBwAgAQZ8KbwDBQMqDAgAMA0GCSqGSIb3DQEBCwUAA4IBAQDF JDh8PJzSJ/I41fyB55b05y76FFAV5A1n1jq3cq0GBxBKSa1t315kR20ZIVmxsGY5 sX83B4MXPhiuers8/eZix+5wfUZSG7N4IHdEhef1b+pyeuukp5Ph2iYsDr+33Dzb oK9r+hCC+riZ6bhLCja5Cq8Ex5gSJIEzcdWbG0PS+45ohzI/ptH7zFrf7KnaBODJ WPKXQQ0KimWFTxepkYVH7vbbFWtnCrMfm4NWOQgPJIgSnXwgZWn2ZOGKDlcEOKVc hr9HD5pOh11rae5ErMLBECKpJFBaRKYcy5sMOgEcWj+iucqH8Z5+YsX77ouqp72c ViGbbqyu+NrdouMMi3iO -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:33 2026 by rpki-client