This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/sr8WeIRMBJ4bRfuf-lp3-tgD570.roa File: sr8WeIRMBJ4bRfuf-lp3-tgD570.roa (raw, json) Hash identifier: TnOmb2gICaHIuyc6o/5CaEP4UWNo++HGY655v8j+/yg= Subject key identifier: B2:BF:16:78:84:4C:04:9E:1B:45:FB:9F:FA:5A:77:FA:D8:03:E7:BD Certificate issuer: /CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746 Certificate serial: 019B791120E7222BD4DF60D385702829CFBD Authority key identifier: A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/sr8WeIRMBJ4bRfuf-lp3-tgD570.roa Signing time: Thu 01 Jan 2026 10:18:44 +0000 ROA not before: Thu 01 Jan 2026 10:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39048 IP address blocks: 193.176.92.0/24 maxlen: 24 193.176.93.0/24 maxlen: 24 193.176.94.0/24 maxlen: 24 193.176.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:20:e7:22:2b:d4:df:60:d3:85:70:28:29:cf:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746 Validity Not Before: Jan 1 10:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2bf1678844c049e1b45fb9ffa5a77fad803e7bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fa:60:b4:4b:a7:b2:79:b4:a3:a1:b2:f8:85: a4:07:19:df:55:81:49:bb:40:6c:93:25:4b:99:c0: b0:7c:6e:bc:a8:19:b6:99:6d:df:a5:e4:26:1d:4f: c7:ed:6f:d5:15:33:5a:cd:14:56:1c:11:5e:3d:d9: a7:3f:f4:bf:08:bf:49:9a:21:0c:4b:e8:90:ed:01: ac:1f:10:00:16:85:11:97:8c:23:d0:07:41:05:b2: 93:09:52:24:83:22:7d:7a:8b:09:ad:63:9f:ae:ab: 15:38:79:7b:41:61:7d:67:66:50:42:e6:6a:b4:27: 0d:f5:02:d9:ce:e1:09:ea:83:bb:40:0a:f8:70:54: 0d:10:7e:f0:66:4a:fd:b4:74:49:6f:74:06:a5:f4: 66:9f:5d:a4:c2:c4:47:0e:fa:60:66:02:50:4e:3b: 95:ee:ff:58:b7:55:ea:11:2a:dd:4d:30:e7:e5:38: c2:e4:9b:fb:6f:5b:8f:db:17:db:c0:6b:22:38:b2: 3a:8d:c5:1b:9e:0d:45:3c:30:5e:11:4e:54:0d:bb: 34:e7:9b:ce:25:be:28:1a:dd:02:69:0a:5c:d5:a6: 6e:50:44:7c:bc:ee:3b:99:c0:ae:8b:b8:49:af:d7: 97:ec:10:a2:23:db:20:9d:c6:2e:ec:c7:7f:1f:b4: 63:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:BF:16:78:84:4C:04:9E:1B:45:FB:9F:FA:5A:77:FA:D8:03:E7:BD X509v3 Authority Key Identifier: keyid:A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/sr8WeIRMBJ4bRfuf-lp3-tgD570.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.176.92.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:a8:6d:13:70:b4:c6:9b:21:9f:8b:2d:36:12:5a:81:5b:4f: bd:3b:0f:1f:f3:20:c9:f0:3b:2c:8b:ac:62:ae:4d:8b:97:f2: cb:68:6a:7a:45:49:c1:86:a0:e1:13:8e:a4:62:8a:8c:bc:25: c8:68:04:10:78:72:cc:ad:0f:d7:17:dc:49:e0:dd:50:ba:f1: 5d:f3:bd:0d:8d:c3:0d:06:fc:fe:1f:fe:ea:5c:de:ec:0a:5d: 11:52:6c:64:cc:94:61:bc:32:91:0c:fe:bb:ec:c3:51:1f:41: a8:e9:29:0f:16:a7:17:df:1e:c6:9b:cd:f6:a7:28:c7:36:8d: de:a4:e1:9f:0d:b0:10:b8:f6:30:0b:9c:1c:89:bf:65:00:55: 1b:c8:02:e6:43:ad:e6:91:f9:bc:53:8b:b2:e5:4d:c5:8c:3a: d7:72:cc:d5:69:69:37:90:25:ca:a2:42:73:dd:be:f5:b9:ff: 25:00:32:d6:04:57:77:d5:30:7d:10:87:8f:3e:e5:1e:40:79: e5:71:f5:96:eb:f1:46:fb:3c:6c:5e:1d:23:4d:bd:e9:10:9a: 72:9b:15:45:dd:14:2e:0c:6f:e6:15:77:52:57:b0:cd:02:2c: 13:4c:65:3f:c4:70:67:66:e0:95:b5:5a:24:a4:de:9a:b0:13: 09:d5:3b:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ESDnIivU32DThXAoKc+9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYjg1ZmUyYjJjMjY5OTFiMWYzMWM2NmZjNjdhYzBjOGEx MDk3NDYwHhcNMjYwMTAxMTAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmJmMTY3ODg0NGMwNDllMWI0NWZiOWZmYTVhNzdmYWQ4MDNlN2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fpgtEunsnm0o6Gy+IWkBxnfVYFJ u0BskyVLmcCwfG68qBm2mW3fpeQmHU/H7W/VFTNazRRWHBFePdmnP/S/CL9JmiEM S+iQ7QGsHxAAFoURl4wj0AdBBbKTCVIkgyJ9eosJrWOfrqsVOHl7QWF9Z2ZQQuZq tCcN9QLZzuEJ6oO7QAr4cFQNEH7wZkr9tHRJb3QGpfRmn12kwsRHDvpgZgJQTjuV 7v9Yt1XqESrdTTDn5TjC5Jv7b1uP2xfbwGsiOLI6jcUbng1FPDBeEU5UDbs055vO Jb4oGt0CaQpc1aZuUER8vO47mcCui7hJr9eX7BCiI9sgncYu7Md/H7Rj7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLK/FniETASeG0X7n/pad/rYA+e9MB8GA1UdIwQY MBaAFKO4X+KywmmRsfMcZvxnrAyKEJdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzdoZjRyTENhWkd4OHh4bV9HZXNESW9RbDBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lOTkwODItNjU5ZS00OWUyLWFkOTEt NzZiYjcxZWIwYTVhLzEvc3I4V2VJUk1CSjRiUmZ1Zi1scDMtdGdENTcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9lOTkwODItNjU5ZS00OWUyLWFkOTEtNzZiYjcxZWIwYTVh LzEvbzdoZjRyTENhWkd4OHh4bV9HZXNESW9RbDBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwbBcMA0G CSqGSIb3DQEBCwUAA4IBAQA/qG0TcLTGmyGfiy02ElqBW0+9Ow8f8yDJ8Dssi6xi rk2Ll/LLaGp6RUnBhqDhE46kYoqMvCXIaAQQeHLMrQ/XF9xJ4N1QuvFd870NjcMN Bvz+H/7qXN7sCl0RUmxkzJRhvDKRDP677MNRH0Go6SkPFqcX3x7Gm832pyjHNo3e pOGfDbAQuPYwC5wcib9lAFUbyALmQ63mkfm8U4uy5U3FjDrXcszVaWk3kCXKokJz 3b71uf8lADLWBFd31TB9EIePPuUeQHnlcfWW6/FG+zxsXh0jTb3pEJpymxVF3RQu DG/mFXdSV7DNAiwTTGU/xHBnZuCVtVokpN6asBMJ1TsN -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:16 2026 by rpki-client