This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/u6E8pL8xTaRGWfi-RDxX4w8Xbpk.roa File: u6E8pL8xTaRGWfi-RDxX4w8Xbpk.roa (raw, json) Hash identifier: 9QQeKURrORfbCSgK0HygRpzrFwuV2YJ2NlIlJcaVFzY= Subject key identifier: BB:A1:3C:A4:BF:31:4D:A4:46:59:F8:BE:44:3C:57:E3:0F:17:6E:99 Certificate issuer: /CN=8da02b1da4aa71e65b6fb9be23a6b208c25c57d8 Certificate serial: 019B7759195DCE77044349C04C09F9117C4A Authority key identifier: 8D:A0:2B:1D:A4:AA:71:E6:5B:6F:B9:BE:23:A6:B2:08:C2:5C:57:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaArHaSqceZbb7m-I6ayCMJcV9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/u6E8pL8xTaRGWfi-RDxX4w8Xbpk.roa Signing time: Thu 01 Jan 2026 02:18:06 +0000 ROA not before: Thu 01 Jan 2026 02:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208326 IP address blocks: 195.88.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.crl rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.mft rsync://rpki.ripe.net/repository/DEFAULT/jaArHaSqceZbb7m-I6ayCMJcV9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:19:5d:ce:77:04:43:49:c0:4c:09:f9:11:7c:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8da02b1da4aa71e65b6fb9be23a6b208c25c57d8 Validity Not Before: Jan 1 02:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bba13ca4bf314da44659f8be443c57e30f176e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:14:d4:c7:b3:6a:b5:e6:2e:0d:35:85:6e:41: 21:dd:42:14:c7:69:d2:85:ee:d0:ff:9b:81:f7:37: 13:f2:e4:e5:66:53:2d:35:90:a6:2e:7d:22:5e:59: 8e:7f:2e:8e:3d:15:36:06:cd:b0:da:d0:82:20:37: d7:9f:67:48:47:09:18:07:ea:91:d1:c8:df:57:19: 38:ef:21:fd:8f:15:52:19:f6:aa:ad:a3:f1:d9:9c: 91:c1:e6:8a:2d:8e:8b:19:98:83:b8:86:30:a5:1f: f9:2b:c5:1a:70:40:52:d8:3f:ea:fe:b3:c1:a9:6f: 11:40:8f:84:b9:27:db:84:c2:ed:fa:7a:6d:f2:87: 72:89:d9:38:60:eb:2b:bd:c4:cb:cd:fc:33:19:05: 5d:d4:52:cb:bd:db:2d:8e:da:40:48:5d:90:8a:f2: 22:33:c5:2b:e5:ee:95:ad:fc:d9:2b:b9:f3:b3:0f: 1f:10:30:22:4b:c4:b3:f7:fd:10:02:7b:e6:da:87: ce:c5:3e:49:7a:0a:00:04:c2:54:8b:fc:a4:ee:7e: 74:8f:bf:3b:d6:ea:95:e2:a1:57:a2:3b:cc:6d:33: 7c:e9:eb:02:d8:f5:7c:9b:76:72:f6:11:34:5e:f6: 85:da:a5:fe:3f:25:b8:89:3d:99:d6:38:6f:2a:45: 39:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A1:3C:A4:BF:31:4D:A4:46:59:F8:BE:44:3C:57:E3:0F:17:6E:99 X509v3 Authority Key Identifier: keyid:8D:A0:2B:1D:A4:AA:71:E6:5B:6F:B9:BE:23:A6:B2:08:C2:5C:57:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaArHaSqceZbb7m-I6ayCMJcV9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/u6E8pL8xTaRGWfi-RDxX4w8Xbpk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.88.19.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:37:3b:7f:25:49:01:b2:ff:cf:45:4d:39:53:ac:43:96:93: 24:51:c0:e4:8e:7b:2e:95:18:f8:b5:5a:34:59:30:2e:74:2b: 08:41:b9:67:cd:3f:3e:72:95:5e:90:16:06:77:20:33:97:ae: 4d:92:a2:9c:13:3c:c2:07:00:3c:40:9b:7b:8d:8f:b3:b1:66: ea:d6:0b:ae:84:99:c4:c0:75:a8:e5:44:6e:44:a3:39:f9:e3: bb:a2:45:34:35:90:2d:61:23:18:24:3c:d1:6e:48:1b:b4:2c: bd:b3:7e:47:cb:25:e4:93:da:0c:5b:91:2a:2c:09:7f:b8:c4: 0d:bc:a5:f9:1b:88:29:68:3e:76:86:69:66:bf:a8:49:85:ba: dc:f0:97:4b:f3:d7:5e:69:49:8b:d1:c4:86:d3:d5:2e:9f:0b: 6e:e8:e3:42:5d:8d:04:16:b8:6e:3f:14:0f:c9:57:65:42:95: 18:b8:3e:0c:b2:d6:27:47:fc:a5:31:ee:6e:2f:55:99:5c:d1: 93:85:86:98:fc:bf:2b:d6:32:b7:98:20:86:2a:18:79:a0:a3: 25:99:b9:ca:d2:cf:d3:37:f5:68:ba:ae:95:af:5e:df:13:d3: 56:6c:3e:44:f1:72:59:7f:d2:0a:0d:30:01:a7:78:25:fa:01: a9:e5:1e:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WRldzncEQ0nATAn5EXxKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYTAyYjFkYTRhYTcxZTY1YjZmYjliZTIzYTZiMjA4YzI1 YzU3ZDgwHhcNMjYwMTAxMDIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmExM2NhNGJmMzE0ZGE0NDY1OWY4YmU0NDNjNTdlMzBmMTc2ZTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8RTUx7NqteYuDTWFbkEh3UIUx2nS he7Q/5uB9zcT8uTlZlMtNZCmLn0iXlmOfy6OPRU2Bs2w2tCCIDfXn2dIRwkYB+qR 0cjfVxk47yH9jxVSGfaqraPx2ZyRweaKLY6LGZiDuIYwpR/5K8UacEBS2D/q/rPB qW8RQI+EuSfbhMLt+npt8odyidk4YOsrvcTLzfwzGQVd1FLLvdstjtpASF2QivIi M8Ur5e6VrfzZK7nzsw8fEDAiS8Sz9/0QAnvm2ofOxT5JegoABMJUi/yk7n50j787 1uqV4qFXojvMbTN86esC2PV8m3Zy9hE0XvaF2qX+PyW4iT2Z1jhvKkU5LQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLuhPKS/MU2kRln4vkQ8V+MPF26ZMB8GA1UdIwQY MBaAFI2gKx2kqnHmW2+5viOmsgjCXFfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamFBckhhU3FjZVpiYjdtLUk2YXlDTUpjVjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kYmE2YzUtMjBlNS00MDczLTg1M2Et YzllMjlkZWJhMjQ0LzEvdTZFOHBMOHhUYVJHV2ZpLVJEeFg0dzhYYnBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9kYmE2YzUtMjBlNS00MDczLTg1M2EtYzllMjlkZWJhMjQ0 LzEvamFBckhhU3FjZVpiYjdtLUk2YXlDTUpjVjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1gTMA0G CSqGSIb3DQEBCwUAA4IBAQBLNzt/JUkBsv/PRU05U6xDlpMkUcDkjnsulRj4tVo0 WTAudCsIQblnzT8+cpVekBYGdyAzl65NkqKcEzzCBwA8QJt7jY+zsWbq1guuhJnE wHWo5URuRKM5+eO7okU0NZAtYSMYJDzRbkgbtCy9s35HyyXkk9oMW5EqLAl/uMQN vKX5G4gpaD52hmlmv6hJhbrc8JdL89deaUmL0cSG09Uunwtu6ONCXY0EFrhuPxQP yVdlQpUYuD4MstYnR/ylMe5uL1WZXNGThYaY/L8r1jK3mCCGKhh5oKMlmbnK0s/T N/Vouq6Vr17fE9NWbD5E8XJZf9IKDTABp3gl+gGp5R6R -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:21 2026 by rpki-client