This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/H8Tx-FU_K_Xw4DqaXZNJJymAcOY.roa File: H8Tx-FU_K_Xw4DqaXZNJJymAcOY.roa (raw, json) Hash identifier: v6fAc8qtsBNF/a7lV9CtRvjhfPSbDeEFmnJZ3DEa25s= Subject key identifier: 1F:C4:F1:F8:55:3F:2B:F5:F0:E0:3A:9A:5D:93:49:27:29:80:70:E6 Certificate issuer: /CN=cde8e6543992db497598c22e7a8b9578f88d982f Certificate serial: 019B79100B6257A39C7324F18EDA7A1151DA Authority key identifier: CD:E8:E6:54:39:92:DB:49:75:98:C2:2E:7A:8B:95:78:F8:8D:98:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/H8Tx-FU_K_Xw4DqaXZNJJymAcOY.roa Signing time: Thu 01 Jan 2026 10:17:33 +0000 ROA not before: Thu 01 Jan 2026 10:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34386 IP address blocks: 193.58.200.0/22 maxlen: 22 193.58.200.0/23 maxlen: 23 193.58.203.0/24 maxlen: 24 194.79.244.0/22 maxlen: 22 194.79.244.0/23 maxlen: 23 194.79.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:0b:62:57:a3:9c:73:24:f1:8e:da:7a:11:51:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cde8e6543992db497598c22e7a8b9578f88d982f Validity Not Before: Jan 1 10:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fc4f1f8553f2bf5f0e03a9a5d934927298070e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a3:e0:cd:74:96:68:fc:53:11:e1:17:f2:f9: 9e:c0:a7:ca:0f:6e:b2:7b:01:e1:22:12:35:4c:98: db:30:c4:bd:ea:91:d2:5b:68:04:e9:f6:25:01:04: b9:c6:be:96:83:0c:73:aa:62:bb:07:0d:a3:57:55: cf:f2:01:3e:78:e6:08:c5:54:33:9f:54:ff:dd:98: 24:8a:96:18:9d:1d:1c:11:a2:46:6c:18:73:c0:b8: 9e:c3:ac:2a:e7:c1:ac:fe:14:a2:dc:c0:9e:57:a1: 7c:56:10:36:67:55:45:40:c3:09:49:4d:a8:e8:66: 50:8a:0c:c0:4f:b3:8d:55:5c:39:4b:d0:15:7c:c4: 96:46:6d:1a:84:2c:4d:db:1e:06:6a:50:f1:d5:9c: e7:a0:0f:ab:78:69:22:0a:ff:ef:f0:23:82:2d:e3: 44:df:7d:b1:28:67:81:1d:3e:89:e2:69:8f:c5:41: 95:6e:4c:48:00:76:b5:57:3d:bf:08:a8:2a:0b:dd: 95:cd:d5:a3:4a:f9:92:9b:89:48:ed:75:02:03:26: 2f:f0:c7:12:91:af:29:04:9a:3e:64:fa:a9:01:49: 0f:79:7a:32:a8:0f:5b:c7:fa:58:ea:7c:2e:d9:ef: 66:20:75:dc:de:05:62:78:54:df:ca:98:66:39:02: d2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C4:F1:F8:55:3F:2B:F5:F0:E0:3A:9A:5D:93:49:27:29:80:70:E6 X509v3 Authority Key Identifier: keyid:CD:E8:E6:54:39:92:DB:49:75:98:C2:2E:7A:8B:95:78:F8:8D:98:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/H8Tx-FU_K_Xw4DqaXZNJJymAcOY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.58.200.0/22 194.79.244.0/22 Signature Algorithm: sha256WithRSAEncryption 62:d4:46:af:5f:35:8d:21:0b:b2:c7:9d:32:2d:20:e9:c8:cf: b5:09:e0:72:e9:2b:e1:66:bd:8d:43:c0:95:0c:60:0f:14:fd: 07:3e:00:02:83:9f:b0:ab:37:b4:0d:03:1e:32:e0:00:cf:0c: 92:de:ea:4e:61:9e:a7:ac:11:08:ed:d1:01:c8:c4:67:f9:8f: ea:9b:cd:5d:52:50:17:bb:12:30:72:7c:2c:33:14:52:fb:e2: 57:df:51:ae:b4:68:e5:63:6c:16:76:ca:62:fd:86:d5:ba:37: ea:82:92:f3:21:b9:25:e9:62:bd:4f:53:63:7f:68:0e:5f:42: df:5b:dd:02:a0:d3:b6:66:88:ca:6d:a7:e9:09:61:1b:d0:96: d1:8e:44:2c:ab:26:bf:6a:c4:f9:68:07:47:e8:76:86:b2:f6: 01:fa:5d:0e:b2:40:94:30:b4:58:83:24:bc:9f:f5:92:aa:c0: 80:aa:7e:ec:8a:ce:1d:e2:50:7e:6b:32:13:3f:bc:db:0e:20: aa:97:29:32:24:3f:14:88:50:24:c1:d0:a2:80:98:7c:3e:c8: 26:c0:be:a2:25:2a:b1:de:1a:f1:5e:1a:46:b8:27:bf:c6:51: c0:ab:73:85:6e:e9:90:e8:8d:24:f6:d8:fd:79:75:5a:4c:4e: 09:08:bd:2f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EAtiV6OccyTxjtp6EVHaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZThlNjU0Mzk5MmRiNDk3NTk4YzIyZTdhOGI5NTc4Zjg4 ZDk4MmYwHhcNMjYwMTAxMTAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmM0ZjFmODU1M2YyYmY1ZjBlMDNhOWE1ZDkzNDkyNzI5ODA3MGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qPgzXSWaPxTEeEX8vmewKfKD26y ewHhIhI1TJjbMMS96pHSW2gE6fYlAQS5xr6WgwxzqmK7Bw2jV1XP8gE+eOYIxVQz n1T/3ZgkipYYnR0cEaJGbBhzwLiew6wq58Gs/hSi3MCeV6F8VhA2Z1VFQMMJSU2o 6GZQigzAT7ONVVw5S9AVfMSWRm0ahCxN2x4GalDx1ZznoA+reGkiCv/v8COCLeNE 332xKGeBHT6J4mmPxUGVbkxIAHa1Vz2/CKgqC92VzdWjSvmSm4lI7XUCAyYv8McS ka8pBJo+ZPqpAUkPeXoyqA9bx/pY6nwu2e9mIHXc3gVieFTfyphmOQLS3QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFB/E8fhVPyv18OA6ml2TSScpgHDmMB8GA1UdIwQY MBaAFM3o5lQ5kttJdZjCLnqLlXj4jZgvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemVqbVZEbVMyMGwxbU1JdWVvdVZlUGlObUM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9kMTM1M2ItZmE5ZC00ZTZlLThjMjIt MGFiMjVkMGIwYmVlLzEvSDhUeC1GVV9LX1h3NERxYVhaTkpKeW1BY09ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9kMTM1M2ItZmE5ZC00ZTZlLThjMjItMGFiMjVkMGIwYmVl LzEvemVqbVZEbVMyMGwxbU1JdWVvdVZlUGlObUM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCwTrIAwQC wk/0MA0GCSqGSIb3DQEBCwUAA4IBAQBi1EavXzWNIQuyx50yLSDpyM+1CeBy6Svh Zr2NQ8CVDGAPFP0HPgACg5+wqze0DQMeMuAAzwyS3upOYZ6nrBEI7dEByMRn+Y/q m81dUlAXuxIwcnwsMxRS++JX31GutGjlY2wWdspi/YbVujfqgpLzIbkl6WK9T1Nj f2gOX0LfW90CoNO2ZojKbafpCWEb0JbRjkQsqya/asT5aAdH6HaGsvYB+l0OskCU MLRYgyS8n/WSqsCAqn7sis4d4lB+azITP7zbDiCqlykyJD8UiFAkwdCigJh8Psgm wL6iJSqx3hrxXhpGuCe/xlHAq3OFbumQ6I0k9tj9eXVaTE4JCL0v -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:14 2026 by rpki-client