This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/1-2P8OWE-nT9yglepyYQAlaB5NfE.roa File: 1-2P8OWE-nT9yglepyYQAlaB5NfE.roa (raw, json) Hash identifier: hXJitTuZsInHr+UtjyUxAZf5csxkpDvw7CF/W7Cve9U= Subject key identifier: FB:63:FC:39:61:3E:9D:3F:72:82:57:A9:C9:84:00:95:A0:79:35:F1 Certificate issuer: /CN=068cc8f57a2b3c2299b1f482b67e15d9de43ad3c Certificate serial: 019B7C11B1B38B18F4892D1CE7EA4CBC8FB5 Authority key identifier: 06:8C:C8:F5:7A:2B:3C:22:99:B1:F4:82:B6:7E:15:D9:DE:43:AD:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BozI9XorPCKZsfSCtn4V2d5DrTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/1-2P8OWE-nT9yglepyYQAlaB5NfE.roa Signing time: Fri 02 Jan 2026 00:18:12 +0000 ROA not before: Fri 02 Jan 2026 00:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25133 IP address blocks: 193.0.240.0/24 maxlen: 24 193.254.196.0/24 maxlen: 24 193.254.197.0/24 maxlen: 24 195.95.232.0/23 maxlen: 23 2a02:c080::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft rsync://rpki.ripe.net/repository/DEFAULT/BozI9XorPCKZsfSCtn4V2d5DrTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:b1:b3:8b:18:f4:89:2d:1c:e7:ea:4c:bc:8f:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=068cc8f57a2b3c2299b1f482b67e15d9de43ad3c Validity Not Before: Jan 2 00:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb63fc39613e9d3f728257a9c9840095a07935f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:7f:dc:09:0a:f8:41:6e:bb:09:83:34:a0:83: 2d:97:b0:6c:1c:70:a2:07:52:d7:84:00:d8:7f:a9: 52:41:c4:11:cd:6f:25:e6:0c:9e:68:02:9c:95:ac: 07:bc:d5:bb:e7:61:83:b4:52:88:9f:72:b2:3b:f6: 8f:f1:5c:e2:60:93:9e:0e:91:e7:c0:08:9a:e9:6f: 49:2e:b8:bd:c5:75:d0:56:2e:60:a9:eb:39:b3:0e: c9:35:d8:64:98:fd:2a:61:5d:8c:77:94:ea:46:36: 62:98:48:78:ac:79:4a:25:96:7c:5d:db:61:3b:92: 4a:24:19:8b:37:55:5f:e3:f9:14:14:2e:79:41:f4: aa:8c:33:43:df:f1:50:6e:8c:24:b3:d8:b4:06:6a: d2:51:b4:3c:86:9f:e4:5c:83:79:1e:19:c1:02:e4: b3:2e:38:6f:93:bf:9f:9a:43:9e:57:0c:fb:e5:c4: 45:44:67:4d:5a:ec:ea:03:2b:50:76:75:64:5d:f3: ac:66:e6:56:fc:06:a1:bf:89:11:57:84:18:04:0c: ba:f6:1a:03:34:41:4a:8a:dd:20:dc:fb:1b:27:13: 61:db:74:15:ea:21:aa:b1:5a:e3:b1:7a:6b:90:cc: bc:51:c7:a0:15:f9:0a:87:1f:fa:88:e7:67:5d:1a: 5e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:63:FC:39:61:3E:9D:3F:72:82:57:A9:C9:84:00:95:A0:79:35:F1 X509v3 Authority Key Identifier: keyid:06:8C:C8:F5:7A:2B:3C:22:99:B1:F4:82:B6:7E:15:D9:DE:43:AD:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BozI9XorPCKZsfSCtn4V2d5DrTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/1-2P8OWE-nT9yglepyYQAlaB5NfE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.240.0/24 193.254.196.0/23 195.95.232.0/23 IPv6: 2a02:c080::/29 Signature Algorithm: sha256WithRSAEncryption 33:41:14:55:43:15:fc:83:5f:c6:ee:70:9a:68:31:29:b4:7c: ff:2c:a8:b8:80:b5:99:ce:12:81:f2:4a:38:c8:96:44:f2:c8: a5:55:8d:de:d7:98:cd:83:90:93:52:5d:38:9e:32:1f:a1:5d: 1f:6b:78:f1:94:60:3d:db:f9:d3:a2:a1:49:6f:5c:53:9b:81: 64:12:3f:af:92:8e:6a:ae:e0:51:48:75:5d:24:8d:33:f3:39: 39:89:8a:ba:91:79:a7:cd:06:8e:bf:69:31:79:18:ef:bb:21: 33:b6:46:dd:9b:06:ed:03:55:4f:df:cd:e7:b1:ad:a4:89:83: bf:bd:1e:bf:bd:06:aa:81:f1:eb:4e:58:ea:c4:13:7b:cc:32: a8:b8:b1:a4:a4:9b:91:3a:e8:42:eb:f1:24:a3:5a:c6:71:75: f1:25:c3:6c:3a:9e:50:a7:69:12:26:8c:90:de:70:d0:d4:9f: 93:a4:7b:55:73:b3:52:bc:a7:3b:cf:dc:55:a9:4c:1e:6d:a7: 67:71:9c:60:15:84:67:b6:2f:69:99:79:b7:e3:d3:5b:31:4e: a3:fd:b8:65:8f:bb:4d:31:6c:5b:cd:79:14:bb:53:18:0a:af: 3c:7c:a2:2f:d5:b8:73:d5:1a:2b:bb:15:43:94:ad:65:dd:f6: 75:2b:11:ae -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt8EbGzixj0iS0c5+pMvI+1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2OGNjOGY1N2EyYjNjMjI5OWIxZjQ4MmI2N2UxNWQ5ZGU0 M2FkM2MwHhcNMjYwMTAyMDAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjYzZmMzOTYxM2U5ZDNmNzI4MjU3YTljOTg0MDA5NWEwNzkzNWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA93/cCQr4QW67CYM0oIMtl7BsHHCi B1LXhADYf6lSQcQRzW8l5gyeaAKclawHvNW752GDtFKIn3KyO/aP8VziYJOeDpHn wAia6W9JLri9xXXQVi5gqes5sw7JNdhkmP0qYV2Md5TqRjZimEh4rHlKJZZ8Xdth O5JKJBmLN1Vf4/kUFC55QfSqjDND3/FQbowks9i0BmrSUbQ8hp/kXIN5HhnBAuSz Ljhvk7+fmkOeVwz75cRFRGdNWuzqAytQdnVkXfOsZuZW/Aahv4kRV4QYBAy69hoD NEFKit0g3PsbJxNh23QV6iGqsVrjsXprkMy8UcegFfkKhx/6iOdnXRpelwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPtj/DlhPp0/coJXqcmEAJWgeTXxMB8GA1UdIwQY MBaAFAaMyPV6KzwimbH0grZ+FdneQ608MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm96STlYb3JQQ0tac2ZTQ3RuNFYyZDVEclR3LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9kYmRlOGMtYTBmYy00NGQ3LTk5M2It MmEyODQxNmQ0NWIyLzEvMS0yUDhPV0UtblQ5eWdsZXB5WVFBbGFCNU5mRS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvM2EvZGJkZThjLWEwZmMtNDRkNy05OTNiLTJhMjg0MTZkNDVi Mi8xL0Jvekk5WG9yUENLWnNmU0N0bjRWMmQ1RHJUdy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA6BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAMEA8AME AcH+xAMEAcNf6DANBAIAAjAHAwUDKgLAgDANBgkqhkiG9w0BAQsFAAOCAQEAM0EU VUMV/INfxu5wmmgxKbR8/yyouIC1mc4SgfJKOMiWRPLIpVWN3teYzYOQk1JdOJ4y H6FdH2t48ZRgPdv506KhSW9cU5uBZBI/r5KOaq7gUUh1XSSNM/M5OYmKupF5p80G jr9pMXkY77shM7ZG3ZsG7QNVT9/N57GtpImDv70ev70GqoHx605Y6sQTe8wyqLix pKSbkTroQuvxJKNaxnF18SXDbDqeUKdpEiaMkN5w0NSfk6R7VXOzUrynO8/cValM Hm2nZ3GcYBWEZ7YvaZl5t+PTWzFOo/24ZY+7TTFsW815FLtTGAqvPHyiL9W4c9Ua K7sVQ5StZd32dSsRrg== -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:14 2026 by rpki-client