This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/8FRJmqKD4O9hicOCfimP2sZW9Bw.roa File: 8FRJmqKD4O9hicOCfimP2sZW9Bw.roa (raw, json) Hash identifier: qsSQr7ZX2Tfzn8qTUOO+KjaxEWYNuzZCcjzvYa3m+dI= Subject key identifier: F0:54:49:9A:A2:83:E0:EF:61:89:C3:82:7E:29:8F:DA:C6:56:F4:1C Certificate issuer: /CN=b2af133d4ac34bdcfb7bddc7e11b27054362f709 Certificate serial: 019B7E38D63C4FE173599F6D880FEC1A5821 Authority key identifier: B2:AF:13:3D:4A:C3:4B:DC:FB:7B:DD:C7:E1:1B:27:05:43:62:F7:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/8FRJmqKD4O9hicOCfimP2sZW9Bw.roa Signing time: Fri 02 Jan 2026 10:20:12 +0000 ROA not before: Fri 02 Jan 2026 10:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198340 IP address blocks: 193.57.218.0/23 maxlen: 23 193.57.218.0/24 maxlen: 24 193.57.219.0/24 maxlen: 24 193.57.220.0/23 maxlen: 23 193.57.220.0/24 maxlen: 24 193.57.221.0/24 maxlen: 24 193.57.241.0/24 maxlen: 24 193.57.244.0/24 maxlen: 24 193.57.245.0/24 maxlen: 24 193.57.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.crl rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d6:3c:4f:e1:73:59:9f:6d:88:0f:ec:1a:58:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2af133d4ac34bdcfb7bddc7e11b27054362f709 Validity Not Before: Jan 2 10:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f054499aa283e0ef6189c3827e298fdac656f41c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:77:2f:04:72:ad:18:f4:47:11:0a:22:1d:98: 56:00:f1:55:f6:9e:87:23:a8:c8:26:53:77:96:82: 67:a0:e7:d8:e4:99:31:e8:bc:f4:02:60:c5:12:83: 79:39:42:32:a4:2b:3c:a5:4f:35:e7:51:b8:b8:98: 82:66:57:67:f8:dc:f9:68:cb:a9:c0:ea:70:a2:aa: 85:2c:ed:4f:0e:97:79:55:4b:50:b3:56:98:3f:12: bc:a5:eb:3b:33:64:b6:c7:ab:6e:fb:a0:c1:58:36: 6f:dd:3a:c3:7b:7d:f6:27:32:43:4b:f1:c5:85:5b: b3:ac:5f:de:20:13:92:f8:15:d2:d2:8f:49:30:6d: 8b:66:5f:14:53:17:96:df:c4:3e:a4:0c:e5:0a:d5: df:fe:29:81:45:9c:0c:39:63:82:11:cf:f8:69:ef: 88:95:60:e1:fd:ab:09:69:28:6f:49:c5:3f:7f:99: 62:44:6a:41:f0:0f:85:75:53:7c:5b:e6:67:f2:ae: e7:33:f6:e2:45:1e:c3:f2:4c:95:b9:84:ba:49:79: 86:88:3c:61:9a:37:65:d9:48:e9:bd:56:19:31:99: 09:f4:cd:70:60:df:47:56:a4:96:fe:4b:a1:7a:e6: 41:33:c4:78:f2:96:c8:11:47:96:02:00:0a:76:95: 72:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:54:49:9A:A2:83:E0:EF:61:89:C3:82:7E:29:8F:DA:C6:56:F4:1C X509v3 Authority Key Identifier: keyid:B2:AF:13:3D:4A:C3:4B:DC:FB:7B:DD:C7:E1:1B:27:05:43:62:F7:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/8FRJmqKD4O9hicOCfimP2sZW9Bw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.57.218.0-193.57.221.255 193.57.241.0/24 193.57.244.0/23 193.57.247.0/24 Signature Algorithm: sha256WithRSAEncryption 59:f9:5a:4b:18:2c:da:06:a0:7b:2e:7e:d4:95:7c:de:f0:25: 7d:eb:b8:3b:69:e2:18:e8:c1:5c:17:c7:a4:a0:97:ee:01:a2: 4b:46:5c:a2:09:a1:01:87:86:fd:6c:19:e1:a1:b1:bf:a2:6e: 82:ea:4e:12:1a:41:82:ce:e7:d2:36:f1:3f:20:1e:23:4f:24: 84:61:4d:5d:a4:71:b5:92:d9:75:67:ed:0f:e1:1b:4a:b1:1a: 09:c2:62:85:c2:71:67:08:d2:6a:97:c2:4c:f1:c0:81:3e:52: 1c:71:db:b7:83:5c:58:08:67:6d:22:af:db:ad:1d:00:9b:1b: 06:3a:b3:af:99:49:b9:78:a0:4b:8f:02:2b:4f:3b:6c:14:0a: 13:78:58:a3:32:ae:a8:fd:d9:5d:fb:db:50:15:99:4e:0d:09: 63:0d:95:da:f7:80:88:da:87:70:ab:7c:70:b1:7a:76:d8:36: 53:b1:6d:a2:55:6f:ae:95:fc:c6:73:a8:83:00:4b:4b:68:e2: 9d:2e:ce:16:a2:2e:79:f3:ac:23:0c:37:35:0e:ae:ff:e6:d9: 3d:16:c0:3e:cf:ec:ee:62:25:6b:44:25:21:f7:fb:dd:a3:1e: a3:0f:da:cc:4d:df:54:cb:bd:22:c5:32:d6:64:40:18:74:33: 3e:d5:36:1c -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt+ONY8T+FzWZ9tiA/sGlghMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYWYxMzNkNGFjMzRiZGNmYjdiZGRjN2UxMWIyNzA1NDM2 MmY3MDkwHhcNMjYwMTAyMTAyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDU0NDk5YWEyODNlMGVmNjE4OWMzODI3ZTI5OGZkYWM2NTZmNDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3cvBHKtGPRHEQoiHZhWAPFV9p6H I6jIJlN3loJnoOfY5Jkx6Lz0AmDFEoN5OUIypCs8pU8151G4uJiCZldn+Nz5aMup wOpwoqqFLO1PDpd5VUtQs1aYPxK8pes7M2S2x6tu+6DBWDZv3TrDe332JzJDS/HF hVuzrF/eIBOS+BXS0o9JMG2LZl8UUxeW38Q+pAzlCtXf/imBRZwMOWOCEc/4ae+I lWDh/asJaShvScU/f5liRGpB8A+FdVN8W+Zn8q7nM/biRR7D8kyVuYS6SXmGiDxh mjdl2UjpvVYZMZkJ9M1wYN9HVqSW/kuheuZBM8R48pbIEUeWAgAKdpVyMQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFPBUSZqig+DvYYnDgn4pj9rGVvQcMB8GA1UdIwQY MBaAFLKvEz1Kw0vc+3vdx+EbJwVDYvcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3E4VFBVckRTOXo3ZTkzSDRSc25CVU5pOXdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lYWFjYWUtMzc3ZS00NTdhLTkwMGEt ZjNlYWFlNjMzYTFlLzEvOEZSSm1xS0Q0TzloaWNPQ2ZpbVAyc1pXOUJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lYWFjYWUtMzc3ZS00NTdhLTkwMGEtZjNlYWFlNjMzYTFl LzEvc3E4VFBVckRTOXo3ZTkzSDRSc25CVU5pOXdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAHBOdoD BAHBOdwDBADBOfEDBAHBOfQDBADBOfcwDQYJKoZIhvcNAQELBQADggEBAFn5WksY LNoGoHsuftSVfN7wJX3ruDtp4hjowVwXx6Sgl+4BoktGXKIJoQGHhv1sGeGhsb+i boLqThIaQYLO59I28T8gHiNPJIRhTV2kcbWS2XVn7Q/hG0qxGgnCYoXCcWcI0mqX wkzxwIE+Uhxx27eDXFgIZ20ir9utHQCbGwY6s6+ZSbl4oEuPAitPO2wUChN4WKMy rqj92V3721AVmU4NCWMNldr3gIjah3CrfHCxenbYNlOxbaJVb66V/MZzqIMAS0to 4p0uzhaiLnnzrCMMNzUOrv/m2T0WwD7P7O5iJWtEJSH3+92jHqMP2sxN31TLvSLF MtZkQBh0Mz7VNhw= -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:59 2026 by rpki-client