This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/8BEgv2DgNKbNbNuzLHl3VGFIGL8.roa File: 8BEgv2DgNKbNbNuzLHl3VGFIGL8.roa (raw, json) Hash identifier: SQFbOHpDcvay1MqsdXqe1YtJV1othwB2O5ZriM/HbH0= Subject key identifier: F0:11:20:BF:60:E0:34:A6:CD:6C:DB:B3:2C:79:77:54:61:48:18:BF Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901 Certificate serial: 019B7A5B782F60A4FF97EDA728E0BB40688C Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/8BEgv2DgNKbNbNuzLHl3VGFIGL8.roa Signing time: Thu 01 Jan 2026 16:19:33 +0000 ROA not before: Thu 01 Jan 2026 16:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50053 IP address blocks: 91.205.220.0/24 maxlen: 24 193.56.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 16:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:78:2f:60:a4:ff:97:ed:a7:28:e0:bb:40:68:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901 Validity Not Before: Jan 1 16:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f01120bf60e034a6cd6cdbb32c797754614818bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c6:67:21:ad:93:cf:64:9f:5e:57:95:05:b3: b6:53:33:59:b0:73:93:4d:a2:50:e2:87:0b:74:fe: f2:71:24:67:d8:90:69:98:36:b4:68:2b:d8:6a:a1: 4e:71:7c:8a:cd:f4:f1:c2:bf:1f:1c:61:6e:a8:e7: af:81:c7:ff:b4:85:fd:c8:29:4f:c6:df:4d:66:84: 2e:3c:3a:c6:a3:fb:a4:cf:81:ef:36:f0:da:6e:13: e6:46:88:29:30:d0:c9:f9:bb:c2:8a:3d:73:3b:0f: ac:60:64:23:18:c7:31:03:32:44:9c:e9:09:32:30: 89:11:db:63:b3:6d:ea:7b:2a:f7:e5:40:a4:5f:f8: 2c:9f:80:5f:aa:13:3f:7c:e4:ee:9e:b7:cf:72:e8: 7a:46:c6:1e:04:1c:bf:4c:9a:4e:6d:e7:82:af:b2: b6:af:2d:d3:e6:01:99:5e:1f:92:70:5b:a4:ef:87: 4d:21:85:31:16:8a:7d:fc:4a:a3:8e:3a:df:81:f6: 85:ae:6c:4e:50:91:b3:a6:1e:fc:ef:04:21:2f:65: eb:3a:ee:14:c9:fa:a3:6c:4e:4a:c3:fd:9d:ad:0d: d1:5b:1f:e8:24:40:b9:00:62:e5:03:66:63:7c:cb: 7c:35:5d:a9:2f:41:89:7e:9b:c1:fd:66:a7:60:b6: 2f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:11:20:BF:60:E0:34:A6:CD:6C:DB:B3:2C:79:77:54:61:48:18:BF X509v3 Authority Key Identifier: keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/8BEgv2DgNKbNbNuzLHl3VGFIGL8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.205.220.0/24 193.56.3.0/24 Signature Algorithm: sha256WithRSAEncryption 44:f7:bb:e2:1d:27:b3:45:6b:1d:ab:52:32:b6:2f:e8:d8:6d: dd:ab:11:b8:77:7d:ad:87:21:e9:ae:57:4f:57:d1:23:6e:f1: 92:2e:92:8b:c5:72:59:fa:7c:b7:7e:97:7a:03:42:86:eb:f1: 2d:99:d8:35:52:01:31:d9:1c:48:77:69:17:0a:58:ad:94:39: c5:6f:42:a3:9f:56:b6:b6:3a:e3:bc:a1:4e:b9:2c:8b:74:e2: e1:e4:25:14:7e:e5:b5:b5:c6:1d:8e:58:69:dd:d6:5a:98:2f: 38:4f:e1:ed:62:11:88:90:3c:30:6d:e4:fa:d6:9a:60:ea:d0: db:ed:83:0b:a2:92:6e:3c:43:2d:32:e2:18:ba:49:a2:dd:cf: 10:c0:30:e0:7e:19:99:da:2a:b1:26:f1:b4:3d:25:b8:89:14: e1:03:52:f7:69:87:4d:90:a4:ea:91:be:75:84:d0:a9:d3:7b: 9a:68:33:f3:b3:09:4c:29:d6:0d:a9:b6:df:0a:2d:43:ed:85: 13:05:f0:36:7d:eb:25:08:86:01:c7:3e:fa:50:70:4c:4c:3e: 7d:e2:e9:ae:70:14:13:e4:20:73:b3:c2:99:f4:9d:87:dd:0a: 48:80:d3:df:0d:28:6c:2d:87:a5:96:c8:06:52:cb:93:96:f9: d8:8d:6a:a1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6W3gvYKT/l+2nKOC7QGiMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi YzU5MDEwHhcNMjYwMTAxMTYxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDExMjBiZjYwZTAzNGE2Y2Q2Y2RiYjMyYzc5Nzc1NDYxNDgxOGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58ZnIa2Tz2SfXleVBbO2UzNZsHOT TaJQ4ocLdP7ycSRn2JBpmDa0aCvYaqFOcXyKzfTxwr8fHGFuqOevgcf/tIX9yClP xt9NZoQuPDrGo/ukz4HvNvDabhPmRogpMNDJ+bvCij1zOw+sYGQjGMcxAzJEnOkJ MjCJEdtjs23qeyr35UCkX/gsn4BfqhM/fOTunrfPcuh6RsYeBBy/TJpObeeCr7K2 ry3T5gGZXh+ScFuk74dNIYUxFop9/EqjjjrfgfaFrmxOUJGzph787wQhL2XrOu4U yfqjbE5Kw/2drQ3RWx/oJEC5AGLlA2ZjfMt8NV2pL0GJfpvB/WanYLYv2wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPARIL9g4DSmzWzbsyx5d1RhSBi/MB8GA1UdIwQY MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt NGRkMDQzNDZhYmMzLzEvOEJFZ3YyRGdOS2JOYk51ekxIbDNWR0ZJR0w4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW83cAwQA wTgDMA0GCSqGSIb3DQEBCwUAA4IBAQBE97viHSezRWsdq1Iyti/o2G3dqxG4d32t hyHprldPV9EjbvGSLpKLxXJZ+ny3fpd6A0KG6/Etmdg1UgEx2RxId2kXClitlDnF b0Kjn1a2tjrjvKFOuSyLdOLh5CUUfuW1tcYdjlhp3dZamC84T+HtYhGIkDwwbeT6 1ppg6tDb7YMLopJuPEMtMuIYukmi3c8QwDDgfhmZ2iqxJvG0PSW4iRThA1L3aYdN kKTqkb51hNCp03uaaDPzswlMKdYNqbbfCi1D7YUTBfA2feslCIYBxz76UHBMTD59 4umucBQT5CBzs8KZ9J2H3QpIgNPfDShsLYellsgGUsuTlvnYjWqh -----END CERTIFICATE-----Generated at Thu Jan 1 21:36:01 2026 by rpki-client