This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/xF8lmBKJz9rF5yNf4LEKehT9GwY.roa File: xF8lmBKJz9rF5yNf4LEKehT9GwY.roa (raw, json) Hash identifier: D1B4kYiE/FjLFmWbqTiQuTtPyIAc898BJjX7NCQ6xhA= Subject key identifier: C4:5F:25:98:12:89:CF:DA:C5:E7:23:5F:E0:B1:0A:7A:14:FD:1B:06 Certificate issuer: /CN=7bbf58975b81e8f9f9c15e4d8b899190cec00687 Certificate serial: 019B78355C39281D3C0D439B36E57369DED3 Authority key identifier: 7B:BF:58:97:5B:81:E8:F9:F9:C1:5E:4D:8B:89:91:90:CE:C0:06:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/xF8lmBKJz9rF5yNf4LEKehT9GwY.roa Signing time: Thu 01 Jan 2026 06:18:41 +0000 ROA not before: Thu 01 Jan 2026 06:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199181 IP address blocks: 194.31.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.crl rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.mft rsync://rpki.ripe.net/repository/DEFAULT/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:5c:39:28:1d:3c:0d:43:9b:36:e5:73:69:de:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bbf58975b81e8f9f9c15e4d8b899190cec00687 Validity Not Before: Jan 1 06:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c45f25981289cfdac5e7235fe0b10a7a14fd1b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8e:22:0f:85:e7:97:ac:c4:07:30:a4:71:c6: d9:a0:ca:cc:4a:34:08:52:9d:f2:d8:4b:b8:23:8d: bb:e3:62:3e:aa:70:44:33:03:c3:c1:50:ee:4b:91: b9:8c:06:ea:6a:bf:18:b1:01:fd:09:8d:81:c1:4f: 2d:89:6f:7b:33:da:86:c9:97:c8:a4:68:8e:2e:ef: 01:68:26:a0:1c:ad:5f:58:94:ac:77:c5:ef:3d:67: bd:0c:62:32:ca:95:7c:80:83:9a:9b:37:b8:88:ad: 37:ea:87:9b:cd:20:55:2c:41:48:9d:99:bf:9b:1b: 0b:2d:71:43:74:c6:60:cd:20:d6:a9:29:8b:0f:50: 08:f1:09:00:f2:ab:12:8d:31:03:24:b8:10:db:37: 65:a5:3e:9d:a1:57:1a:e3:ae:2a:9d:91:2d:32:24: b4:17:0d:43:dc:67:9f:f2:02:46:86:34:61:84:a2: 88:5c:c3:a7:f6:83:e6:07:41:16:84:b2:03:42:d1: 55:21:7b:e7:31:8b:1e:b5:37:1d:7c:b0:0b:8f:77: 10:9c:e3:f9:fe:bd:34:7c:bf:ec:dc:94:fd:c9:6e: 8b:82:ee:79:88:fd:8d:f0:82:88:0d:a0:c5:71:e2: 2f:3a:b6:cf:00:71:ae:51:87:58:08:cd:6f:bd:2e: de:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5F:25:98:12:89:CF:DA:C5:E7:23:5F:E0:B1:0A:7A:14:FD:1B:06 X509v3 Authority Key Identifier: keyid:7B:BF:58:97:5B:81:E8:F9:F9:C1:5E:4D:8B:89:91:90:CE:C0:06:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/xF8lmBKJz9rF5yNf4LEKehT9GwY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.253.0/24 Signature Algorithm: sha256WithRSAEncryption 06:a8:37:6c:8c:c5:6e:3f:60:65:4d:c6:60:14:d8:45:da:2e: cb:77:02:f8:f1:8a:46:90:a5:48:b7:73:95:ed:07:bb:dc:40: 84:b4:2b:2e:ee:20:69:d1:27:81:ea:8b:6b:ac:55:0b:09:6a: 60:87:d0:19:d7:6f:86:a1:d7:72:dc:a7:20:e1:72:9c:e8:ad: 96:ae:e1:0f:05:f7:aa:2a:a6:a8:dd:e0:7f:a4:f7:ff:d2:d7: 82:f8:b6:d3:05:1d:ad:8d:49:54:6f:b6:70:9f:64:b4:7d:11: 00:59:38:9d:7f:71:c7:f9:73:85:bb:2e:f1:f4:89:2a:6a:04: 41:7c:e9:69:d2:0e:8e:2a:44:f1:dd:9b:15:c0:c6:a7:5a:36: c7:b6:15:d3:59:73:b7:48:11:c7:ca:ab:5e:07:9d:c9:f9:a3: 2a:04:b6:6e:29:50:30:0c:64:a4:26:8a:72:6c:db:7c:f9:33: 73:67:90:7d:49:b7:d1:3f:21:60:52:79:f4:b8:f5:77:b1:aa: b3:fb:e9:44:a5:5f:06:88:f5:b7:4d:c9:92:72:c3:f3:2e:b2: b5:de:c9:b1:5e:99:e9:cd:d4:c8:15:ca:f7:05:07:ba:2c:ca: 44:b0:e4:51:db:c0:3d:08:ed:3c:5d:d9:c5:2c:69:e9:36:1c: 5f:56:42:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NVw5KB08DUObNuVzad7TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYmY1ODk3NWI4MWU4ZjlmOWMxNWU0ZDhiODk5MTkwY2Vj MDA2ODcwHhcNMjYwMTAxMDYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDVmMjU5ODEyODljZmRhYzVlNzIzNWZlMGIxMGE3YTE0ZmQxYjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0o4iD4Xnl6zEBzCkccbZoMrMSjQI Up3y2Eu4I42742I+qnBEMwPDwVDuS5G5jAbqar8YsQH9CY2BwU8tiW97M9qGyZfI pGiOLu8BaCagHK1fWJSsd8XvPWe9DGIyypV8gIOamze4iK036oebzSBVLEFInZm/ mxsLLXFDdMZgzSDWqSmLD1AI8QkA8qsSjTEDJLgQ2zdlpT6doVca464qnZEtMiS0 Fw1D3Gef8gJGhjRhhKKIXMOn9oPmB0EWhLIDQtFVIXvnMYsetTcdfLALj3cQnOP5 /r00fL/s3JT9yW6Lgu55iP2N8IKIDaDFceIvOrbPAHGuUYdYCM1vvS7eyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMRfJZgSic/axecjX+CxCnoU/RsGMB8GA1UdIwQY MBaAFHu/WJdbgej5+cFeTYuJkZDOwAaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTc5WWwxdUI2UG41d1Y1Tmk0bVJrTTdBQm9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wZWE5Y2EtYWM5Ny00M2YwLTg1Nzct MWM3MGQxZTdiNzgyLzEveEY4bG1CS0p6OXJGNXlOZjRMRUtlaFQ5R3dZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8wZWE5Y2EtYWM5Ny00M2YwLTg1NzctMWM3MGQxZTdiNzgy LzEvZTc5WWwxdUI2UG41d1Y1Tmk0bVJrTTdBQm9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh/9MA0G CSqGSIb3DQEBCwUAA4IBAQAGqDdsjMVuP2BlTcZgFNhF2i7LdwL48YpGkKVIt3OV 7Qe73ECEtCsu7iBp0SeB6otrrFULCWpgh9AZ12+Goddy3Kcg4XKc6K2WruEPBfeq Kqao3eB/pPf/0teC+LbTBR2tjUlUb7Zwn2S0fREAWTidf3HH+XOFuy7x9IkqagRB fOlp0g6OKkTx3ZsVwManWjbHthXTWXO3SBHHyqteB53J+aMqBLZuKVAwDGSkJopy bNt8+TNzZ5B9SbfRPyFgUnn0uPV3saqz++lEpV8GiPW3TcmScsPzLrK13smxXpnp zdTIFcr3BQe6LMpEsORR28A9CO08XdnFLGnpNhxfVkLh -----END CERTIFICATE-----Generated at Tue Feb 10 04:26:29 2026 by rpki-client