This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/s_i-4HgM08ZomafIARg5DCNgTzI.roa File: s_i-4HgM08ZomafIARg5DCNgTzI.roa (raw, json) Hash identifier: wSP0h+XQV0/zt4QIiT80nzFtCCr+jVfJzFx1wPlXOiY= Subject key identifier: B3:F8:BE:E0:78:0C:D3:C6:68:99:A7:C8:01:18:39:0C:23:60:4F:32 Certificate issuer: /CN=8c2289ae0b10629350da0a50e87b389109f16c2e Certificate serial: 019B775903E655ADD8792A05F33393B9A2F6 Authority key identifier: 8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/s_i-4HgM08ZomafIARg5DCNgTzI.roa Signing time: Thu 01 Jan 2026 02:18:00 +0000 ROA not before: Thu 01 Jan 2026 02:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44542 IP address blocks: 93.92.136.0/21 maxlen: 24 93.92.136.0/22 maxlen: 22 93.92.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:03:e6:55:ad:d8:79:2a:05:f3:33:93:b9:a2:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c2289ae0b10629350da0a50e87b389109f16c2e Validity Not Before: Jan 1 02:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3f8bee0780cd3c66899a7c80118390c23604f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:af:c7:69:54:6a:9a:bf:57:12:bb:3d:1f:74: fe:7c:5b:79:d2:8a:db:97:94:ee:e6:ab:46:af:af: f1:f8:4b:da:25:2d:f6:00:9a:69:28:e5:95:2b:9c: e4:3d:3b:73:21:71:1f:c5:a6:24:76:5c:29:96:f6: e5:fe:1d:bd:59:4d:16:f1:f5:5b:46:89:ac:ee:e4: 2f:79:6c:6e:c3:3d:be:93:80:b3:21:0f:8b:01:52: a5:ab:a4:c7:e7:ca:5c:f0:0a:17:d5:aa:4c:cf:89: 8f:a5:77:60:99:bd:1b:6f:74:d8:7a:3c:db:79:5d: 8f:41:c2:bc:48:5d:d3:c5:3b:57:e3:f5:65:c3:a5: 06:04:15:f5:0b:64:91:d8:28:83:33:cc:12:6f:d6: 96:09:71:62:78:9c:6d:9f:ee:4c:74:f0:e0:47:c3: 2c:64:34:6c:1d:ea:c4:c4:78:11:c5:00:eb:7e:eb: 79:ab:6a:c6:fe:2b:a2:03:1e:49:fe:d1:b5:00:aa: 8f:d5:7e:b3:f6:9b:b1:e0:06:6b:20:3a:9a:01:61: 54:76:98:57:87:c1:61:a5:a2:b1:ac:18:89:d3:2e: fc:de:3a:57:56:21:d8:10:18:fa:a5:da:3b:ef:f5: ff:ba:b6:e0:49:99:bb:5b:07:2b:f0:0e:c7:44:e2: 91:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F8:BE:E0:78:0C:D3:C6:68:99:A7:C8:01:18:39:0C:23:60:4F:32 X509v3 Authority Key Identifier: keyid:8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/s_i-4HgM08ZomafIARg5DCNgTzI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.92.136.0/21 Signature Algorithm: sha256WithRSAEncryption 54:65:a2:e6:d9:fc:76:be:a2:66:ed:1b:09:a0:7a:13:68:f7: 38:d9:72:f9:b0:ce:a1:a1:c3:e4:6d:5f:1b:cf:d1:28:e0:a9: 79:e0:11:2f:3c:8b:21:24:8c:38:21:60:c9:3f:12:89:41:59: bf:6a:4c:d1:e7:0e:12:ca:d2:18:08:96:ab:55:81:a3:ef:30: 6c:0c:0e:8d:3e:67:43:19:de:c6:a7:c3:36:ff:2c:06:6d:6b: 19:91:82:c2:a0:1e:e0:ee:93:ab:b4:c1:20:2c:bb:20:ed:08: fd:60:cd:81:e9:8c:60:3e:ee:e2:55:8c:8e:d8:3f:99:3a:6f: 4d:9e:5b:e4:27:95:d5:c7:38:00:8c:b9:6b:61:3c:dc:bf:8b: eb:b8:b0:80:aa:4c:00:91:13:41:3d:4a:07:39:26:ef:d6:02: 09:c4:2a:aa:20:74:b6:be:22:1d:ab:8d:08:49:68:b4:f0:76: 9d:f8:74:5f:6b:40:76:93:99:41:70:f1:a5:29:6e:42:5c:f5: a5:9a:9d:a7:3f:22:d0:1b:7b:e9:62:b5:09:5a:10:92:1c:5b: 05:a7:bc:39:21:9d:c7:a4:72:5a:51:ca:7b:ba:4f:b4:25:df: 1e:59:c1:37:d4:09:e5:0e:a5:2a:57:1f:ce:0b:15:15:fc:53: 33:03:f7:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WQPmVa3YeSoF8zOTuaL2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMjI4OWFlMGIxMDYyOTM1MGRhMGE1MGU4N2IzODkxMDlm MTZjMmUwHhcNMjYwMTAxMDIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2Y4YmVlMDc4MGNkM2M2Njg5OWE3YzgwMTE4MzkwYzIzNjA0ZjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgq/HaVRqmr9XErs9H3T+fFt50orb l5Tu5qtGr6/x+EvaJS32AJppKOWVK5zkPTtzIXEfxaYkdlwplvbl/h29WU0W8fVb Roms7uQveWxuwz2+k4CzIQ+LAVKlq6TH58pc8AoX1apMz4mPpXdgmb0bb3TYejzb eV2PQcK8SF3TxTtX4/Vlw6UGBBX1C2SR2CiDM8wSb9aWCXFieJxtn+5MdPDgR8Ms ZDRsHerExHgRxQDrfut5q2rG/iuiAx5J/tG1AKqP1X6z9pux4AZrIDqaAWFUdphX h8FhpaKxrBiJ0y783jpXViHYEBj6pdo77/X/urbgSZm7Wwcr8A7HROKRwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLP4vuB4DNPGaJmnyAEYOQwjYE8yMB8GA1UdIwQY MBaAFIwiia4LEGKTUNoKUOh7OJEJ8WwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakNLSnJnc1FZcE5RMmdwUTZIczRrUW54YkM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zNDMzNzktZjhlMS00YmU2LWJlMDEt ZjgzOTQ2YzJjODJlLzEvc19pLTRIZ00wOFpvbWFmSUFSZzVEQ05nVHpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8zNDMzNzktZjhlMS00YmU2LWJlMDEtZjgzOTQ2YzJjODJl LzEvakNLSnJnc1FZcE5RMmdwUTZIczRrUW54YkM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXVyIMA0G CSqGSIb3DQEBCwUAA4IBAQBUZaLm2fx2vqJm7RsJoHoTaPc42XL5sM6hocPkbV8b z9Eo4Kl54BEvPIshJIw4IWDJPxKJQVm/akzR5w4SytIYCJarVYGj7zBsDA6NPmdD Gd7Gp8M2/ywGbWsZkYLCoB7g7pOrtMEgLLsg7Qj9YM2B6YxgPu7iVYyO2D+ZOm9N nlvkJ5XVxzgAjLlrYTzcv4vruLCAqkwAkRNBPUoHOSbv1gIJxCqqIHS2viIdq40I SWi08Had+HRfa0B2k5lBcPGlKW5CXPWlmp2nPyLQG3vpYrUJWhCSHFsFp7w5IZ3H pHJaUcp7uk+0Jd8eWcE31AnlDqUqVx/OCxUV/FMzA/cS -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:48 2026 by rpki-client