This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/aO8SV7r8aRmaMsrCVn54MAITseY.roa File: aO8SV7r8aRmaMsrCVn54MAITseY.roa (raw, json) Hash identifier: UBYs9t/xpmJLmkQIIYwuZf57SETqiU4zYplqSc9D++E= Subject key identifier: 68:EF:12:57:BA:FC:69:19:9A:32:CA:C2:56:7E:78:30:02:13:B1:E6 Certificate issuer: /CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8 Certificate serial: 019B7CED3638C2635CBA1B9B7EBEF83DCCCD Authority key identifier: EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/aO8SV7r8aRmaMsrCVn54MAITseY.roa Signing time: Fri 02 Jan 2026 04:17:59 +0000 ROA not before: Fri 02 Jan 2026 04:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207400 IP address blocks: 193.29.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:36:38:c2:63:5c:ba:1b:9b:7e:be:f8:3d:cc:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8 Validity Not Before: Jan 2 04:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68ef1257bafc69199a32cac2567e78300213b1e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:af:54:96:79:d6:62:55:a3:c5:10:b3:8f:40: 11:90:97:42:a6:e3:e9:ff:ce:c7:52:d6:97:30:a3: 3d:b0:73:b2:7e:5a:33:3d:75:bb:bf:67:56:5b:fa: 46:bc:88:f3:92:1d:40:07:71:26:9a:56:62:5d:13: 62:25:55:fa:72:67:bf:ed:c0:c7:eb:c0:49:23:59: 46:2a:64:1e:85:01:7f:5f:0b:9b:63:af:c9:7c:32: 66:e1:6f:40:1e:fc:c1:9f:56:0c:9e:36:e9:5e:19: 4e:52:13:5c:d7:1f:c0:aa:78:42:b3:00:a9:c8:cd: f8:5f:de:d2:50:55:0d:44:95:89:46:1c:80:22:9a: 22:00:f2:ed:ad:06:03:43:27:8f:bd:7f:6b:69:31: 7d:e4:e7:31:f3:dd:85:5b:59:ad:b7:e8:fe:cd:a6: a7:95:2f:9a:1c:02:2c:0d:a5:5f:a8:bf:be:5c:57: 46:7a:b0:11:fd:ff:88:4a:6d:8d:5b:c2:f7:7c:08: 2c:50:82:b3:89:41:11:28:b5:2a:6a:3c:12:42:aa: e5:2c:94:83:d7:c6:d3:55:3d:e8:e1:6d:77:c8:b1: 6b:6b:a9:45:08:46:eb:59:7c:99:c4:d0:77:68:34: f6:62:d8:a9:d6:5f:f9:90:13:4e:4e:a4:2c:6c:73: f4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:EF:12:57:BA:FC:69:19:9A:32:CA:C2:56:7E:78:30:02:13:B1:E6 X509v3 Authority Key Identifier: keyid:EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/aO8SV7r8aRmaMsrCVn54MAITseY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.29.226.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:ef:9b:89:09:5b:08:e7:cb:86:0e:f3:e8:15:bd:da:c9:51: 9b:6a:44:19:11:cd:b3:85:58:06:52:dc:b1:ae:22:e7:47:17: 16:5b:73:45:7d:dc:b2:fe:f9:30:91:7b:cb:41:2e:a2:79:fb: 88:58:c7:ea:c4:67:93:34:ad:14:3f:9c:58:05:82:19:d9:eb: fa:0a:89:03:b2:c2:16:af:cb:1b:56:43:c5:5a:10:7d:ff:ce: 88:8b:e7:7d:6a:20:fd:24:4d:57:07:69:04:fe:ab:f0:df:8d: 30:b0:b0:a7:7e:74:31:a9:3b:00:43:e7:8a:8e:11:6b:29:f7: 38:89:88:8f:01:8f:ef:e3:67:6f:ea:2e:5b:34:4f:bd:c0:66: 2b:1e:c9:1a:45:94:14:b2:7b:a9:92:58:5d:a3:50:95:78:0c: 20:79:ab:0f:66:0f:9e:10:26:72:fe:bc:cf:71:ec:7c:39:de: 6a:a1:4f:83:89:f6:cb:e7:77:6f:49:07:f8:73:1b:5d:9b:c0: e0:44:bd:c7:d8:67:c9:9c:d8:9f:42:5b:2e:13:65:95:ac:03: 83:84:05:ff:a9:cd:2e:d2:b5:60:63:63:0f:72:e7:e7:c5:bf: 57:32:0c:b9:02:50:6e:01:04:e9:08:e7:73:e5:fb:a6:56:f0: dd:d9:06:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87TY4wmNcuhubfr74PczNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNzM4YTM4MWU2MGY1YThmZTA1ODdmYzZiMWEzYzgxM2M4 ZTNjYTgwHhcNMjYwMTAyMDQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGVmMTI1N2JhZmM2OTE5OWEzMmNhYzI1NjdlNzgzMDAyMTNiMWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj69UlnnWYlWjxRCzj0ARkJdCpuPp /87HUtaXMKM9sHOyflozPXW7v2dWW/pGvIjzkh1AB3EmmlZiXRNiJVX6cme/7cDH 68BJI1lGKmQehQF/XwubY6/JfDJm4W9AHvzBn1YMnjbpXhlOUhNc1x/AqnhCswCp yM34X97SUFUNRJWJRhyAIpoiAPLtrQYDQyePvX9raTF95Ocx892FW1mtt+j+zaan lS+aHAIsDaVfqL++XFdGerAR/f+ISm2NW8L3fAgsUIKziUERKLUqajwSQqrlLJSD 18bTVT3o4W13yLFra6lFCEbrWXyZxNB3aDT2Ytip1l/5kBNOTqQsbHP0JwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGjvEle6/GkZmjLKwlZ+eDACE7HmMB8GA1UdIwQY MBaAFOxzijgeYPWo/gWH/GsaPIE8jjyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0hPS09CNWc5YWotQllmOGF4bzhnVHlPUEtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8wYzFjZTAtNDUzMy00ZTQzLWJlOWMt NTNjZjI2YjBhNzI0LzEvYU84U1Y3cjhhUm1hTXNyQ1ZuNTRNQUlUc2VZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8wYzFjZTAtNDUzMy00ZTQzLWJlOWMtNTNjZjI2YjBhNzI0 LzEvN0hPS09CNWc5YWotQllmOGF4bzhnVHlPUEtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwR3iMA0G CSqGSIb3DQEBCwUAA4IBAQAK75uJCVsI58uGDvPoFb3ayVGbakQZEc2zhVgGUtyx riLnRxcWW3NFfdyy/vkwkXvLQS6iefuIWMfqxGeTNK0UP5xYBYIZ2ev6CokDssIW r8sbVkPFWhB9/86Ii+d9aiD9JE1XB2kE/qvw340wsLCnfnQxqTsAQ+eKjhFrKfc4 iYiPAY/v42dv6i5bNE+9wGYrHskaRZQUsnupklhdo1CVeAwgeasPZg+eECZy/rzP cex8Od5qoU+DifbL53dvSQf4cxtdm8DgRL3H2GfJnNifQlsuE2WVrAODhAX/qc0u 0rVgY2MPcufnxb9XMgy5AlBuAQTpCOdz5fumVvDd2QYW -----END CERTIFICATE-----Generated at Tue Feb 10 02:58:27 2026 by rpki-client