This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/fNhCdvxeQZoj3XWy5STPfpMqe10.roa File: fNhCdvxeQZoj3XWy5STPfpMqe10.roa (raw, json) Hash identifier: wCTx9tvZPwFH9B8JWj62Kbx4BG2D1H+xagdcL9UIjPI= Subject key identifier: 7C:D8:42:76:FC:5E:41:9A:23:DD:75:B2:E5:24:CF:7E:93:2A:7B:5D Certificate issuer: /CN=e8206aa3252e3ea8d684eaec7a2993513b5d2307 Certificate serial: 019B7EA73287F262EFFB4467776ED903C6A7 Authority key identifier: E8:20:6A:A3:25:2E:3E:A8:D6:84:EA:EC:7A:29:93:51:3B:5D:23:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/fNhCdvxeQZoj3XWy5STPfpMqe10.roa Signing time: Fri 02 Jan 2026 12:20:45 +0000 ROA not before: Fri 02 Jan 2026 12:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15738 IP address blocks: 80.84.176.0/20 maxlen: 20 80.254.0.0/20 maxlen: 20 2a06:ff40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.mft rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:32:87:f2:62:ef:fb:44:67:77:6e:d9:03:c6:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8206aa3252e3ea8d684eaec7a2993513b5d2307 Validity Not Before: Jan 2 12:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cd84276fc5e419a23dd75b2e524cf7e932a7b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:05:1a:89:9d:0f:6b:35:e2:1c:0f:c5:5e:63: 05:97:cf:dc:24:e7:98:09:6b:84:c7:63:13:2d:df: a7:d1:49:8c:3d:93:2e:d0:f5:bf:b9:ee:e5:0d:e8: 39:96:b1:62:f5:33:6f:73:31:a2:ed:c1:1b:02:9d: cb:a0:0d:cd:8d:a6:1b:98:13:a3:12:4b:56:bb:58: 06:3b:70:2f:4c:92:3f:09:61:5a:fc:30:59:03:c7: fa:4c:ad:6c:58:f1:0e:01:2a:15:54:61:83:6d:a6: 74:e0:bd:3b:eb:2b:b8:a6:d5:fe:2d:4a:1d:d0:87: 5a:ad:94:fb:26:b4:f9:df:de:d6:47:47:9b:eb:27: 1c:cf:27:d4:e3:3a:12:1d:38:72:6d:73:aa:25:91: 44:3b:9d:82:ec:d0:a5:18:84:78:7e:9c:d7:4a:8c: d0:f9:de:62:9b:71:00:d5:31:63:a2:75:29:f0:22: 17:0b:d3:30:a4:58:fe:1e:3e:89:de:de:cb:38:8f: cd:98:76:6b:9e:1a:92:7f:8d:05:52:a4:f5:bb:e1: 62:44:30:69:69:45:e5:19:0c:60:18:0b:85:d8:dd: f4:74:6f:d8:d0:01:ae:bf:ac:a1:3c:e8:4b:aa:83: fe:27:40:ba:a3:2b:8e:66:13:9a:4e:12:22:ac:04: 43:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D8:42:76:FC:5E:41:9A:23:DD:75:B2:E5:24:CF:7E:93:2A:7B:5D X509v3 Authority Key Identifier: keyid:E8:20:6A:A3:25:2E:3E:A8:D6:84:EA:EC:7A:29:93:51:3B:5D:23:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/fNhCdvxeQZoj3XWy5STPfpMqe10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.84.176.0/20 80.254.0.0/20 IPv6: 2a06:ff40::/29 Signature Algorithm: sha256WithRSAEncryption 96:df:c4:ba:8f:11:f6:9f:19:a0:2f:f6:cf:66:0d:8f:0a:1f: 8e:bf:fd:52:22:0b:b3:47:b1:c2:04:46:a4:45:d7:c9:ee:3c: 37:fc:7c:f4:54:c2:b8:5f:a2:06:1b:e8:02:9c:9f:56:be:d0: 25:8c:7c:22:47:98:e3:b0:eb:d8:be:1e:28:3f:c8:5b:e9:bb: 84:e0:ec:8c:14:41:08:bf:86:63:45:61:f6:36:28:5c:1d:b2: 10:ad:0a:d2:8b:33:d2:e2:0b:b9:36:cd:79:2d:69:a0:32:fd: 7c:ca:13:79:49:a8:63:01:e0:2a:2e:50:cb:50:ed:69:f8:ad: 4a:92:70:db:8e:40:63:63:af:a0:af:1f:82:09:f0:9a:39:7a: 7d:f4:92:c6:e9:fe:09:82:b8:fb:44:fb:e1:85:7d:62:c5:18: d1:d6:d6:3d:f3:d6:b2:7a:ad:2c:25:3c:ab:ff:38:a5:58:49: 26:0a:1a:9c:78:db:0e:c5:99:0c:2a:b0:b5:3d:91:45:e7:e5: 8c:a7:59:be:bf:f6:30:89:6a:2d:0f:cb:14:7a:d7:f4:3c:65: 2d:95:87:f3:c4:80:86:37:8d:17:de:f1:6f:71:c2:19:53:d7: 5b:47:83:ba:b1:58:48:cb:47:fc:c6:95:67:50:1c:fb:6c:9c: ca:ad:22:c3 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+pzKH8mLv+0Rnd27ZA8anMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MjA2YWEzMjUyZTNlYThkNjg0ZWFlYzdhMjk5MzUxM2I1 ZDIzMDcwHhcNMjYwMTAyMTIyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2Q4NDI3NmZjNWU0MTlhMjNkZDc1YjJlNTI0Y2Y3ZTkzMmE3YjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwUaiZ0PazXiHA/FXmMFl8/cJOeY CWuEx2MTLd+n0UmMPZMu0PW/ue7lDeg5lrFi9TNvczGi7cEbAp3LoA3NjaYbmBOj EktWu1gGO3AvTJI/CWFa/DBZA8f6TK1sWPEOASoVVGGDbaZ04L076yu4ptX+LUod 0IdarZT7JrT5397WR0eb6ycczyfU4zoSHThybXOqJZFEO52C7NClGIR4fpzXSozQ +d5im3EA1TFjonUp8CIXC9MwpFj+Hj6J3t7LOI/NmHZrnhqSf40FUqT1u+FiRDBp aUXlGQxgGAuF2N30dG/Y0AGuv6yhPOhLqoP+J0C6oyuOZhOaThIirARDCwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFHzYQnb8XkGaI911suUkz36TKntdMB8GA1UdIwQY MBaAFOggaqMlLj6o1oTq7Hopk1E7XSMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkNCcW95VXVQcWpXaE9yc2VpbVRVVHRkSXdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80N2FjY2ItNmYzYy00YzZjLTlmZDAt NTg1ZWI4NDU1OGY5LzEvZk5oQ2R2eGVRWm9qM1hXeTVTVFBmcE1xZTEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80N2FjY2ItNmYzYy00YzZjLTlmZDAtNTg1ZWI4NDU1OGY5 LzEvNkNCcW95VXVQcWpXaE9yc2VpbVRVVHRkSXdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEUFSwAwQE UP4AMA0EAgACMAcDBQMqBv9AMA0GCSqGSIb3DQEBCwUAA4IBAQCW38S6jxH2nxmg L/bPZg2PCh+Ov/1SIguzR7HCBEakRdfJ7jw3/Hz0VMK4X6IGG+gCnJ9WvtAljHwi R5jjsOvYvh4oP8hb6buE4OyMFEEIv4ZjRWH2NihcHbIQrQrSizPS4gu5Ns15LWmg Mv18yhN5SahjAeAqLlDLUO1p+K1KknDbjkBjY6+grx+CCfCaOXp99JLG6f4Jgrj7 RPvhhX1ixRjR1tY989ayeq0sJTyr/zilWEkmChqceNsOxZkMKrC1PZFF5+WMp1m+ v/YwiWotD8sUetf0PGUtlYfzxICGN40X3vFvccIZU9dbR4O6sVhIy0f8xpVnUBz7 bJzKrSLD -----END CERTIFICATE-----Generated at Mon Feb 9 23:55:01 2026 by rpki-client