This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/8E3KQn28QEnX6E9rSlznvHJTpOk.roa File: 8E3KQn28QEnX6E9rSlznvHJTpOk.roa (raw, json) Hash identifier: 2FxfSHabUGnOaZPwXMI3ZNNQShrnuJ5A0V2bbWoD1Z4= Subject key identifier: F0:4D:CA:42:7D:BC:40:49:D7:E8:4F:6B:4A:5C:E7:BC:72:53:A4:E9 Certificate issuer: /CN=e5eeb5ca1d215bc9ac2cb40d1ee9bee7750f9f57 Certificate serial: 019B7EA4D0AEAAD94327162F407D7C61F785 Authority key identifier: E5:EE:B5:CA:1D:21:5B:C9:AC:2C:B4:0D:1E:E9:BE:E7:75:0F:9F:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5e61yh0hW8msLLQNHum-53UPn1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/8E3KQn28QEnX6E9rSlznvHJTpOk.roa Signing time: Fri 02 Jan 2026 12:18:09 +0000 ROA not before: Fri 02 Jan 2026 12:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198655 IP address blocks: 193.105.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.crl rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.mft rsync://rpki.ripe.net/repository/DEFAULT/5e61yh0hW8msLLQNHum-53UPn1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:d0:ae:aa:d9:43:27:16:2f:40:7d:7c:61:f7:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5eeb5ca1d215bc9ac2cb40d1ee9bee7750f9f57 Validity Not Before: Jan 2 12:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f04dca427dbc4049d7e84f6b4a5ce7bc7253a4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:43:7f:c1:ea:10:95:05:f9:59:bd:98:83:1b: ee:2d:84:d8:0e:dd:bb:9e:e5:8d:d0:7e:a0:fd:66: 0c:a9:4e:bd:0b:9b:db:62:78:f2:85:ac:47:c9:19: 6c:c1:59:a5:88:ea:32:3f:42:cc:39:0d:b4:13:73: 86:b6:8f:c1:17:03:f1:da:c9:0a:3e:2f:be:30:f4: 14:26:0b:e7:96:70:82:62:c3:c7:9b:20:53:c1:02: 3d:7f:91:28:1b:b8:3b:45:96:f8:99:99:41:88:a8: ed:fe:91:ef:72:8f:8e:54:8f:fa:9c:6d:cd:6f:9b: 4e:f3:96:35:20:13:9f:67:81:d0:2d:d8:1b:ef:83: b1:78:0b:2b:13:2e:39:a2:cc:06:86:85:59:52:5d: 69:71:27:bf:b2:b3:d8:f6:2b:86:b3:d6:c9:fd:01: 29:96:f6:81:d5:e7:3e:80:85:1a:d8:7b:10:51:08: f3:be:d2:bf:7b:02:98:d6:b1:97:b5:22:85:96:cc: f5:bc:88:e9:ac:3b:88:68:1e:58:16:ba:9e:1f:e8: de:aa:3d:5d:0e:fd:bc:0a:df:6c:04:42:5a:fd:ff: 36:4f:7e:d3:67:8b:2f:9b:3d:f8:ee:1a:26:2e:9f: 2b:a5:20:6a:e4:0a:6e:c3:43:98:80:71:12:01:df: 20:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4D:CA:42:7D:BC:40:49:D7:E8:4F:6B:4A:5C:E7:BC:72:53:A4:E9 X509v3 Authority Key Identifier: keyid:E5:EE:B5:CA:1D:21:5B:C9:AC:2C:B4:0D:1E:E9:BE:E7:75:0F:9F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e61yh0hW8msLLQNHum-53UPn1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/8E3KQn28QEnX6E9rSlznvHJTpOk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.16.0/24 Signature Algorithm: sha256WithRSAEncryption 13:8e:65:fe:11:e3:99:e7:6e:eb:eb:f3:7f:77:8f:62:b4:d8: 39:24:72:14:b2:43:36:fc:30:cd:bd:ee:28:27:9e:e5:d1:e1: af:5f:35:a0:27:78:03:99:ac:99:8b:58:92:38:ae:85:79:2c: a9:0f:b5:bd:5e:53:52:c2:c6:8c:f5:07:22:c7:76:df:05:a1: 71:9c:4b:36:00:80:6e:b7:61:53:9d:ea:f9:5f:dc:3a:38:0b: 3a:0b:68:cb:91:6f:b3:a6:42:b4:d0:4c:f7:00:4e:d2:fa:af: 74:bd:ab:7f:b4:a8:7a:13:f3:fc:b2:ca:9c:e0:2d:a4:79:4b: 84:c0:19:90:76:47:07:f1:37:f6:ef:4e:69:ea:03:80:05:a6: 72:41:26:ff:b4:6d:7a:b6:cf:5d:32:a2:00:c3:91:64:3c:89: 4a:a4:e8:e4:3f:35:d3:3b:c7:a2:e4:b4:96:0b:92:49:db:a2: dd:8b:6b:0f:4b:43:33:02:ac:12:36:b3:ea:d3:65:88:75:8a: 66:52:76:59:69:66:7b:0f:6d:77:85:7b:e0:ae:d5:5c:ff:43: 58:ae:cd:54:5c:48:5e:c4:06:f0:6c:be:92:7e:e0:6d:ac:b4: 85:72:55:b8:56:5d:c6:93:11:07:d4:ad:da:bf:df:7a:a2:58: 4f:ee:08:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pNCuqtlDJxYvQH18YfeFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZWViNWNhMWQyMTViYzlhYzJjYjQwZDFlZTliZWU3NzUw ZjlmNTcwHhcNMjYwMTAyMTIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDRkY2E0MjdkYmM0MDQ5ZDdlODRmNmI0YTVjZTdiYzcyNTNhNGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kN/weoQlQX5Wb2YgxvuLYTYDt27 nuWN0H6g/WYMqU69C5vbYnjyhaxHyRlswVmliOoyP0LMOQ20E3OGto/BFwPx2skK Pi++MPQUJgvnlnCCYsPHmyBTwQI9f5EoG7g7RZb4mZlBiKjt/pHvco+OVI/6nG3N b5tO85Y1IBOfZ4HQLdgb74OxeAsrEy45oswGhoVZUl1pcSe/srPY9iuGs9bJ/QEp lvaB1ec+gIUa2HsQUQjzvtK/ewKY1rGXtSKFlsz1vIjprDuIaB5YFrqeH+jeqj1d Dv28Ct9sBEJa/f82T37TZ4svmz347homLp8rpSBq5Apuw0OYgHESAd8geQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPBNykJ9vEBJ1+hPa0pc57xyU6TpMB8GA1UdIwQY MBaAFOXutcodIVvJrCy0DR7pvud1D59XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWU2MXloMGhXOG1zTExRTkh1bS01M1VQbjFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kODg0N2EtNzQzZi00OGI2LWI3ODMt ZTlmYjRiNjE0MTY0LzEvOEUzS1FuMjhRRW5YNkU5clNsem52SEpUcE9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9kODg0N2EtNzQzZi00OGI2LWI3ODMtZTlmYjRiNjE0MTY0 LzEvNWU2MXloMGhXOG1zTExRTkh1bS01M1VQbjFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWkQMA0G CSqGSIb3DQEBCwUAA4IBAQATjmX+EeOZ527r6/N/d49itNg5JHIUskM2/DDNve4o J57l0eGvXzWgJ3gDmayZi1iSOK6FeSypD7W9XlNSwsaM9Qcix3bfBaFxnEs2AIBu t2FTner5X9w6OAs6C2jLkW+zpkK00Ez3AE7S+q90vat/tKh6E/P8ssqc4C2keUuE wBmQdkcH8Tf2705p6gOABaZyQSb/tG16ts9dMqIAw5FkPIlKpOjkPzXTO8ei5LSW C5JJ26Ldi2sPS0MzAqwSNrPq02WIdYpmUnZZaWZ7D213hXvgrtVc/0NYrs1UXEhe xAbwbL6SfuBtrLSFclW4Vl3GkxEH1K3av996olhP7gi/ -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:56 2026 by rpki-client