This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8RRV5XgZtXfjCz-C-0VFbXB0Ik0.roa File: 8RRV5XgZtXfjCz-C-0VFbXB0Ik0.roa (raw, json) Hash identifier: ILmtIQm+jPjX+aaeRvz74Devm4+j8XIgr9D0Qle5QHI= Subject key identifier: F1:14:55:E5:78:19:B5:77:E3:0B:3F:82:FB:45:45:6D:70:74:22:4D Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A23CA9337DE2ABC4C288ED85772183 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8RRV5XgZtXfjCz-C-0VFbXB0Ik0.roa Signing time: Thu 01 Jan 2026 08:17:36 +0000 ROA not before: Thu 01 Jan 2026 08:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4766 IP address blocks: 93.152.68.0/24 maxlen: 24 93.152.74.0/24 maxlen: 24 93.152.78.0/24 maxlen: 24 93.152.82.0/24 maxlen: 24 93.152.88.0/24 maxlen: 24 93.152.105.0/24 maxlen: 24 93.152.108.0/24 maxlen: 24 93.152.111.0/24 maxlen: 24 93.152.123.0/24 maxlen: 24 93.152.126.0/24 maxlen: 24 109.174.236.0/22 maxlen: 22 195.172.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:3c:a9:33:7d:e2:ab:c4:c2:88:ed:85:77:21:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f11455e57819b577e30b3f82fb45456d7074224d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fe:46:a1:11:b0:49:15:87:e0:a5:0c:18:2f: 2d:bf:38:0b:73:da:4d:f0:6c:c9:d1:6f:f4:f3:c1: 90:a0:9d:94:8d:70:2c:43:b8:e0:96:53:2b:8a:d4: 7a:3e:d2:36:f2:d2:9b:b3:32:f3:70:d3:2c:eb:18: a9:fe:0b:10:b8:bb:76:e6:ca:e9:f2:b5:04:2a:fe: 72:ef:b3:24:45:e6:d2:5d:42:68:34:9f:08:73:58: 7a:fc:79:df:a7:2c:09:d3:b6:a9:71:e5:d4:04:6b: 95:82:c6:a9:7a:f6:52:55:ed:8e:6b:c9:eb:6d:65: e2:0a:46:29:86:04:eb:ff:ca:7c:49:08:56:d7:80: 41:c1:6e:27:53:c8:4e:4d:1c:11:5a:42:97:a6:cf: fe:06:dc:57:a0:9b:45:e2:60:9f:24:23:a5:8b:ba: 43:f7:81:78:6b:69:cd:62:1b:f7:ef:d2:4d:67:0d: 2b:2e:0a:99:39:71:29:1e:db:6b:23:5c:bf:72:b9: 0d:bd:2f:4f:ee:7b:7e:4d:be:fb:be:bf:0c:ea:7b: e4:73:20:b1:ae:12:fa:30:23:7e:2c:f8:79:aa:a6: 20:a0:28:5b:49:4c:31:27:03:82:c8:fa:51:85:e4: 87:f0:6d:1c:2d:6f:5f:a5:7f:7f:82:de:a6:00:e2: a6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:14:55:E5:78:19:B5:77:E3:0B:3F:82:FB:45:45:6D:70:74:22:4D X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8RRV5XgZtXfjCz-C-0VFbXB0Ik0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.152.68.0/24 93.152.74.0/24 93.152.78.0/24 93.152.82.0/24 93.152.88.0/24 93.152.105.0/24 93.152.108.0/24 93.152.111.0/24 93.152.123.0/24 93.152.126.0/24 109.174.236.0/22 195.172.206.0/23 Signature Algorithm: sha256WithRSAEncryption 29:c5:16:0d:ae:54:4d:b8:f8:ac:ce:22:0f:a0:29:a0:d8:ee: 5a:ef:75:4a:43:1f:92:18:08:32:06:12:08:8d:84:a5:8d:3f: 24:c6:09:89:a4:0f:8a:10:78:26:5c:6d:9e:9b:0a:dd:c1:97: 0c:e5:79:be:58:c9:06:ab:b6:d1:2a:ef:51:4c:c5:f5:d2:55: a8:b0:c8:ac:e4:7d:87:21:96:4d:91:8b:b6:b2:bb:d6:b9:b1: 38:aa:26:c1:34:26:2f:0b:3c:ae:92:ac:9f:70:37:b6:b3:3c: 69:4f:33:c5:76:19:50:4a:4e:0c:fe:32:98:97:0f:ca:0c:7a: 24:f3:da:cd:e7:ab:72:f1:f3:1d:0e:95:1f:8b:b1:90:c3:36: 51:0d:09:d3:e6:03:2c:55:9c:50:4d:d9:ce:8c:ad:d8:cf:3b: 48:cb:f3:63:d7:32:53:e3:89:85:67:7c:99:b0:14:37:da:ec: 8d:ab:0d:8c:4b:30:b9:0f:a9:18:4f:5b:d8:66:df:d8:50:11: 29:01:c9:10:fe:0d:75:dc:c5:bf:33:6e:12:ba:d3:47:b4:fa: ac:96:5c:4f:b9:9a:e4:1c:4e:5f:80:95:38:aa:23:35:2c:bc: a8:58:f4:54:a9:74:6d:42:f6:e2:55:81:ca:90:2d:b4:89:3d: 0d:62:4a:fd -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt4ojypM33iq8TCiO2FdyGDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTE0NTVlNTc4MTliNTc3ZTMwYjNmODJmYjQ1NDU2ZDcwNzQyMjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/5GoRGwSRWH4KUMGC8tvzgLc9pN 8GzJ0W/088GQoJ2UjXAsQ7jgllMritR6PtI28tKbszLzcNMs6xip/gsQuLt25srp 8rUEKv5y77MkRebSXUJoNJ8Ic1h6/HnfpywJ07apceXUBGuVgsapevZSVe2Oa8nr bWXiCkYphgTr/8p8SQhW14BBwW4nU8hOTRwRWkKXps/+BtxXoJtF4mCfJCOli7pD 94F4a2nNYhv379JNZw0rLgqZOXEpHttrI1y/crkNvS9P7nt+Tb77vr8M6nvkcyCx rhL6MCN+LPh5qqYgoChbSUwxJwOCyPpRheSH8G0cLW9fpX9/gt6mAOKmhwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPEUVeV4GbV34ws/gvtFRW1wdCJNMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvOFJSVjVYZ1p0WGZqQ3otQy0wVkZiWEIwSWswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAXZhEAwQA XZhKAwQAXZhOAwQAXZhSAwQAXZhYAwQAXZhpAwQAXZhsAwQAXZhvAwQAXZh7AwQA XZh+AwQCba7sAwQBw6zOMA0GCSqGSIb3DQEBCwUAA4IBAQApxRYNrlRNuPisziIP oCmg2O5a73VKQx+SGAgyBhIIjYSljT8kxgmJpA+KEHgmXG2emwrdwZcM5Xm+WMkG q7bRKu9RTMX10lWosMis5H2HIZZNkYu2srvWubE4qibBNCYvCzyukqyfcDe2szxp TzPFdhlQSk4M/jKYlw/KDHok89rN56ty8fMdDpUfi7GQwzZRDQnT5gMsVZxQTdnO jK3YzztIy/Nj1zJT44mFZ3yZsBQ32uyNqw2MSzC5D6kYT1vYZt/YUBEpAckQ/g11 3MW/M24SutNHtPqsllxPuZrkHE5fgJU4qiM1LLyoWPRUqXRtQvbiVYHKkC20iT0N Ykr9 -----END CERTIFICATE-----Generated at Mon Jan 19 08:16:31 2026 by rpki-client