This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/mX8HnTFvLthfSZ2ZAzBIL5WiGxo.roa File: mX8HnTFvLthfSZ2ZAzBIL5WiGxo.roa (raw, json) Hash identifier: JasekT6eOU4dUWNEwUdVF7G0JwY0SRq9zwzctkh7yh0= Subject key identifier: 99:7F:07:9D:31:6F:2E:D8:5F:49:9D:99:03:30:48:2F:95:A2:1B:1A Certificate issuer: /CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4 Certificate serial: 019B7BA455272C7D295B9AF7C2EC9C077585 Authority key identifier: E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/mX8HnTFvLthfSZ2ZAzBIL5WiGxo.roa Signing time: Thu 01 Jan 2026 22:18:45 +0000 ROA not before: Thu 01 Jan 2026 22:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47304 IP address blocks: 93.184.192.0/20 maxlen: 20 185.155.80.0/22 maxlen: 22 2a07:91c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:55:27:2c:7d:29:5b:9a:f7:c2:ec:9c:07:75:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4 Validity Not Before: Jan 1 22:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=997f079d316f2ed85f499d990330482f95a21b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4f:5f:98:1a:a0:09:fa:3d:d6:87:44:7e:2e: bc:b3:17:87:71:b6:e0:5d:96:a4:c3:25:2d:b4:19: d7:19:29:0b:6f:4a:9d:f6:6a:b5:29:19:07:83:f5: d1:f3:25:23:9f:42:fa:ed:a0:3f:f4:5f:8a:60:fd: 0f:89:a2:f2:24:b2:f6:e3:55:1c:db:26:45:d2:d3: 65:2f:fb:2b:b9:10:98:21:d3:8d:e4:5c:e0:82:4f: 21:3f:00:48:92:9c:34:a0:78:cd:74:c7:66:ee:80: ef:99:7e:55:d4:33:a6:fe:2a:47:69:77:b9:cd:c0: c2:31:57:2e:af:78:b2:22:2b:03:b2:e1:0f:2f:a7: bb:f6:22:4f:20:0c:59:d4:a7:b5:11:d5:cd:ff:45: c6:34:fd:e2:25:7f:d4:ff:b3:0a:2b:28:e5:20:b9: e7:10:22:ab:d7:97:2c:d6:32:28:af:fd:fc:7c:35: 01:42:fb:2c:44:4e:8a:d2:f5:d8:2c:b0:ac:9d:48: 1d:9c:88:0f:17:64:86:42:dc:8d:36:68:1b:84:0a: 9b:d5:fa:84:60:2d:37:19:3d:10:e2:a0:41:35:79: 44:b6:1a:d9:ac:0c:9d:1e:81:f7:5e:92:8d:b0:c0: 72:13:4f:33:0f:ee:da:2e:fc:b0:ce:ae:9e:b8:20: c4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:7F:07:9D:31:6F:2E:D8:5F:49:9D:99:03:30:48:2F:95:A2:1B:1A X509v3 Authority Key Identifier: keyid:E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/mX8HnTFvLthfSZ2ZAzBIL5WiGxo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.184.192.0/20 185.155.80.0/22 IPv6: 2a07:91c0::/29 Signature Algorithm: sha256WithRSAEncryption 58:e7:63:75:8f:3b:01:b8:99:20:08:ee:c4:59:2a:a5:c4:05: d8:3c:62:51:29:da:10:60:56:f6:e3:98:57:b3:8e:f9:a8:af: 28:52:dd:2e:81:b7:44:71:93:7c:be:16:3c:46:3d:a1:ef:89: 31:4e:14:20:2d:7d:c7:73:88:84:2e:c4:1d:42:6e:f6:6a:30: 3f:a5:00:e5:f1:d9:f7:c0:a7:be:a4:78:3e:f8:c0:b3:b9:30: fe:72:99:f6:62:95:04:bb:37:90:c8:a3:d4:b5:82:f2:87:25: 4d:3f:a1:ea:56:8f:8c:75:62:0e:c3:34:69:e7:08:20:fa:10: 46:2e:e1:1d:6c:43:58:11:d9:68:74:b3:06:c1:38:96:0a:4d: 13:be:50:ff:6f:a8:f2:f8:4b:dd:30:ec:2f:a8:30:8e:93:b8: cf:ed:d3:3a:38:50:6f:51:b7:51:19:b2:89:ce:04:18:fe:81: a9:ce:1d:00:49:f5:62:36:79:f2:1a:82:8b:4d:9e:80:30:3a: 0a:d0:cb:d8:b1:5d:44:91:c3:1d:e3:46:a7:e3:87:67:a7:ec: 12:01:a9:f2:d6:92:39:46:3c:1d:aa:eb:8c:f7:ce:35:4b:99: 98:35:4a:32:cb:24:0f:80:72:10:7d:5d:2d:3b:c5:63:87:d1: 1b:60:48:8f -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7pFUnLH0pW5r3wuycB3WFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZDM2MmU0OGFjYmUwMDQ4ZTlkMTI1YTYyYjhkOWIxNDBj YmZkZDQwHhcNMjYwMTAxMjIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTdmMDc5ZDMxNmYyZWQ4NWY0OTlkOTkwMzMwNDgyZjk1YTIxYjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkE9fmBqgCfo91odEfi68sxeHcbbg XZakwyUttBnXGSkLb0qd9mq1KRkHg/XR8yUjn0L67aA/9F+KYP0PiaLyJLL241Uc 2yZF0tNlL/sruRCYIdON5Fzggk8hPwBIkpw0oHjNdMdm7oDvmX5V1DOm/ipHaXe5 zcDCMVcur3iyIisDsuEPL6e79iJPIAxZ1Ke1EdXN/0XGNP3iJX/U/7MKKyjlILnn ECKr15cs1jIor/38fDUBQvssRE6K0vXYLLCsnUgdnIgPF2SGQtyNNmgbhAqb1fqE YC03GT0Q4qBBNXlEthrZrAydHoH3XpKNsMByE08zD+7aLvywzq6euCDEFwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJl/B50xby7YX0mdmQMwSC+VohsaMB8GA1UdIwQY MBaAFOHTYuSKy+AEjp0SWmK42bFAy/3UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGROaTVJckw0QVNPblJKYVlyalpzVURMX2RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84YWU1NzktMDAwYy00ZTczLTlmNjgt M2FkYTM1MjY1MmI0LzEvbVg4SG5URnZMdGhmU1oyWkF6QklMNVdpR3hvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84YWU1NzktMDAwYy00ZTczLTlmNjgtM2FkYTM1MjY1MmI0 LzEvNGROaTVJckw0QVNPblJKYVlyalpzVURMX2RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEXbjAAwQC uZtQMA0EAgACMAcDBQMqB5HAMA0GCSqGSIb3DQEBCwUAA4IBAQBY52N1jzsBuJkg CO7EWSqlxAXYPGJRKdoQYFb245hXs475qK8oUt0ugbdEcZN8vhY8Rj2h74kxThQg LX3Hc4iELsQdQm72ajA/pQDl8dn3wKe+pHg++MCzuTD+cpn2YpUEuzeQyKPUtYLy hyVNP6HqVo+MdWIOwzRp5wgg+hBGLuEdbENYEdlodLMGwTiWCk0TvlD/b6jy+Evd MOwvqDCOk7jP7dM6OFBvUbdRGbKJzgQY/oGpzh0ASfViNnnyGoKLTZ6AMDoK0MvY sV1EkcMd40an44dnp+wSAany1pI5RjwdquuM9841S5mYNUoyyyQPgHIQfV0tO8Vj h9EbYEiP -----END CERTIFICATE-----Generated at Tue Feb 10 03:02:11 2026 by rpki-client