This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/8Xsxvtu48prUP1c3Cq8BeimcmMw.roa File: 8Xsxvtu48prUP1c3Cq8BeimcmMw.roa (raw, json) Hash identifier: SK3knaerRRMCsRaWkniv3W5wobf8RfL84g7/rTqj+p8= Subject key identifier: F1:7B:31:BE:DB:B8:F2:9A:D4:3F:57:37:0A:AF:01:7A:29:9C:98:CC Certificate issuer: /CN=eb23a5f47ec67e925a92491ab99b24ba371183f1 Certificate serial: 019B7E3773998B5DBF3FE12650CECA50195A Authority key identifier: EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/8Xsxvtu48prUP1c3Cq8BeimcmMw.roa Signing time: Fri 02 Jan 2026 10:18:41 +0000 ROA not before: Fri 02 Jan 2026 10:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6661 IP address blocks: 193.168.10.0/23 maxlen: 24 193.168.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:73:99:8b:5d:bf:3f:e1:26:50:ce:ca:50:19:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb23a5f47ec67e925a92491ab99b24ba371183f1 Validity Not Before: Jan 2 10:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f17b31bedbb8f29ad43f57370aaf017a299c98cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cc:07:50:9f:c1:45:37:47:14:f2:d6:77:e3: bd:a5:68:c7:cc:06:70:77:ee:60:65:56:10:e4:63: 7e:de:88:63:2a:d7:3d:7c:72:58:16:01:fb:36:b7: dc:08:e8:59:99:6a:05:39:9a:d3:d8:8b:40:11:81: 1a:52:c3:1f:14:57:a8:2c:ec:f1:d1:aa:30:55:c8: 7e:ec:7d:07:15:22:43:d0:07:ff:c1:0c:24:24:3b: d1:35:3a:61:7d:1c:cd:0b:32:10:5a:c0:5a:98:5e: 38:c3:38:92:d0:66:78:43:3e:86:32:3c:69:a2:42: c1:a4:f6:13:24:68:0f:c2:d7:a4:13:af:ae:de:cd: 84:1a:95:c5:cb:5f:56:95:d1:dd:3b:36:9d:ee:a9: 85:83:dd:e6:45:c9:ab:2d:1e:0f:32:2d:cd:b4:5a: 81:31:98:33:e9:f2:cf:34:ca:71:bc:29:39:4a:14: c2:62:25:84:30:5a:21:a8:01:c8:55:54:b0:cc:74: 2f:d2:e6:c2:1a:c6:71:f6:22:94:19:b6:35:ed:e5: c5:4d:a5:35:03:20:16:86:af:e4:5c:a1:80:32:f6: 1d:0a:fb:dd:9c:61:cb:94:2a:4f:0a:23:28:e9:46: e9:2c:19:59:93:06:c9:83:62:29:3e:cf:8c:40:51: ab:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:7B:31:BE:DB:B8:F2:9A:D4:3F:57:37:0A:AF:01:7A:29:9C:98:CC X509v3 Authority Key Identifier: keyid:EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/8Xsxvtu48prUP1c3Cq8BeimcmMw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.168.10.0/23 193.168.14.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:7c:4e:e7:ec:9f:8e:3b:6b:41:50:27:23:85:b2:a5:25:52: 6b:a2:64:60:86:86:db:a4:60:af:63:2b:2c:8d:ad:77:3e:79: 73:b7:d0:38:71:a0:ee:d3:fb:bb:ff:6a:4f:aa:bd:04:5b:3c: fd:5a:dd:3b:70:d1:99:6c:4b:a9:ac:eb:31:e7:bb:28:58:bd: 66:7a:34:de:9b:c5:e1:91:e8:08:e6:a8:00:b6:de:10:3f:60: 89:db:29:2f:4a:2a:62:37:f7:23:22:53:3d:67:07:33:98:56: 75:19:44:b4:77:0f:ec:cd:d9:d2:1a:11:e6:9b:37:8c:83:ce: 2a:78:0d:47:66:3a:0d:94:e2:d3:c5:53:96:a1:91:03:51:8d: 0a:29:11:23:56:60:ce:fd:ac:ee:31:fa:ea:0e:b7:33:0f:76: dc:a5:50:62:43:e5:f7:08:57:81:bd:18:49:36:fa:ac:1b:8c: 02:c7:4e:c7:8f:9b:5f:00:67:e2:a1:fb:ad:28:b4:ea:9c:2b: 38:1a:89:ec:bf:e8:cf:c0:96:79:5b:5f:91:fe:46:48:5e:90: bf:61:03:1c:3a:1b:57:75:5b:92:79:6b:e9:cf:dd:95:24:0f: 41:50:f0:52:d9:92:8d:a9:1a:fb:db:2e:d9:a4:f3:d4:64:7e: 2d:37:61:dc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N3OZi12/P+EmUM7KUBlaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMjNhNWY0N2VjNjdlOTI1YTkyNDkxYWI5OWIyNGJhMzcx MTgzZjEwHhcNMjYwMTAyMTAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTdiMzFiZWRiYjhmMjlhZDQzZjU3MzcwYWFmMDE3YTI5OWM5OGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcwHUJ/BRTdHFPLWd+O9pWjHzAZw d+5gZVYQ5GN+3ohjKtc9fHJYFgH7NrfcCOhZmWoFOZrT2ItAEYEaUsMfFFeoLOzx 0aowVch+7H0HFSJD0Af/wQwkJDvRNTphfRzNCzIQWsBamF44wziS0GZ4Qz6GMjxp okLBpPYTJGgPwtekE6+u3s2EGpXFy19WldHdOzad7qmFg93mRcmrLR4PMi3NtFqB MZgz6fLPNMpxvCk5ShTCYiWEMFohqAHIVVSwzHQv0ubCGsZx9iKUGbY17eXFTaU1 AyAWhq/kXKGAMvYdCvvdnGHLlCpPCiMo6UbpLBlZkwbJg2IpPs+MQFGrLQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPF7Mb7buPKa1D9XNwqvAXopnJjMMB8GA1UdIwQY MBaAFOsjpfR+xn6SWpJJGrmbJLo3EYPxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnlPbDlIN0dmcEpha2trYXVac2t1amNSZ19FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9hYjU1MDAtZjYyMy00YTU0LTlhZTIt ZmZlMjFlZjk4Njc0LzEvOFhzeHZ0dTQ4cHJVUDFjM0NxOEJlaW1jbU13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9hYjU1MDAtZjYyMy00YTU0LTlhZTItZmZlMjFlZjk4Njc0 LzEvNnlPbDlIN0dmcEpha2trYXVac2t1amNSZ19FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwagKAwQB wagOMA0GCSqGSIb3DQEBCwUAA4IBAQBufE7n7J+OO2tBUCcjhbKlJVJromRghobb pGCvYyssja13Pnlzt9A4caDu0/u7/2pPqr0EWzz9Wt07cNGZbEuprOsx57soWL1m ejTem8XhkegI5qgAtt4QP2CJ2ykvSipiN/cjIlM9ZwczmFZ1GUS0dw/szdnSGhHm mzeMg84qeA1HZjoNlOLTxVOWoZEDUY0KKREjVmDO/azuMfrqDrczD3bcpVBiQ+X3 CFeBvRhJNvqsG4wCx07Hj5tfAGfiofutKLTqnCs4Gonsv+jPwJZ5W1+R/kZIXpC/ YQMcOhtXdVuSeWvpz92VJA9BUPBS2ZKNqRr72y7ZpPPUZH4tN2Hc -----END CERTIFICATE-----Generated at Tue Jan 27 07:59:06 2026 by rpki-client