This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/gz48DT8yvVXU6Q0Ihpo8uWF9ZyY.roa File: gz48DT8yvVXU6Q0Ihpo8uWF9ZyY.roa (raw, json) Hash identifier: uFF29kwOP7JuhrlKM9SjwTrWnoX0uyBEFJr7qMFIhn0= Subject key identifier: 83:3E:3C:0D:3F:32:BD:55:D4:E9:0D:08:86:9A:3C:B9:61:7D:67:26 Certificate issuer: /CN=b2fba356186c1dc5031c2fb20bc635491f878637 Certificate serial: 019B78A30D3CF78D84C6CF0D5B4C3E296A77 Authority key identifier: B2:FB:A3:56:18:6C:1D:C5:03:1C:2F:B2:0B:C6:35:49:1F:87:86:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svujVhhsHcUDHC-yC8Y1SR-Hhjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/gz48DT8yvVXU6Q0Ihpo8uWF9ZyY.roa Signing time: Thu 01 Jan 2026 08:18:30 +0000 ROA not before: Thu 01 Jan 2026 08:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41827 IP address blocks: 185.95.132.0/22 maxlen: 24 185.168.164.0/22 maxlen: 24 2a05:f340::/29 maxlen: 29 2a0b:ea00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.crl rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft rsync://rpki.ripe.net/repository/DEFAULT/svujVhhsHcUDHC-yC8Y1SR-Hhjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:0d:3c:f7:8d:84:c6:cf:0d:5b:4c:3e:29:6a:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2fba356186c1dc5031c2fb20bc635491f878637 Validity Not Before: Jan 1 08:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=833e3c0d3f32bd55d4e90d08869a3cb9617d6726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a4:e5:06:27:73:2f:15:48:ea:52:47:9a:92: 5a:08:1a:42:2e:2b:b4:f6:56:de:ef:bc:58:d2:af: 24:10:e9:f6:7c:41:1f:9c:b8:5d:ca:04:35:98:87: bf:50:55:9e:03:f1:19:39:fd:1d:d9:ed:de:15:08: d7:6c:28:db:26:94:3e:88:42:23:59:98:e3:c1:dd: 71:4f:de:11:ee:7e:20:5b:8c:37:c5:de:d1:32:fc: ac:b8:41:e3:10:e3:81:87:12:f7:69:70:2b:6c:c1: c8:9e:88:68:20:07:cc:3d:1e:7f:2d:00:c6:13:c5: 1e:e7:15:6c:b4:66:59:99:de:95:a5:21:d9:3a:cc: 96:f9:48:a3:c7:b1:ce:36:9a:ed:f5:9a:67:43:b1: 0c:fc:da:0f:42:de:0a:73:0d:ae:ed:38:89:a3:75: ca:b2:98:19:0a:d6:9f:65:bf:6b:c3:db:b3:fa:97: 6b:ac:b4:a6:44:93:20:ab:f0:bb:f2:e4:56:86:e5: 21:9d:8b:63:01:28:f9:d2:40:f7:37:8c:aa:9f:cf: 96:22:d7:2c:3b:41:5b:3b:0d:67:db:26:01:48:5a: 5d:93:fa:1f:2e:59:ec:4d:d5:7a:de:bd:4e:7f:66: 7d:cd:6c:ec:3a:01:d1:32:b3:ff:6c:ac:4f:63:c6: 18:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:3E:3C:0D:3F:32:BD:55:D4:E9:0D:08:86:9A:3C:B9:61:7D:67:26 X509v3 Authority Key Identifier: keyid:B2:FB:A3:56:18:6C:1D:C5:03:1C:2F:B2:0B:C6:35:49:1F:87:86:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svujVhhsHcUDHC-yC8Y1SR-Hhjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/gz48DT8yvVXU6Q0Ihpo8uWF9ZyY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.95.132.0/22 185.168.164.0/22 IPv6: 2a05:f340::/29 2a0b:ea00::/32 Signature Algorithm: sha256WithRSAEncryption 37:d6:a9:60:a0:e7:19:81:2c:78:43:d8:ef:d4:a3:4b:da:a1: 3c:01:ff:0a:c9:2f:53:1e:e0:f1:66:59:bb:0a:a5:e8:cf:82: bb:5a:7f:c3:14:da:db:e6:9b:ec:41:35:6e:94:1b:55:be:5f: 3f:bb:2e:ea:05:28:06:aa:ad:16:89:4e:0d:b7:3f:5c:33:54: 54:5d:4f:f9:b5:3b:f7:5e:5f:4f:e2:c3:36:6b:6a:7e:ff:5d: fb:05:19:f5:43:f5:23:8c:1d:fa:6e:4e:1f:ee:9f:9b:6f:7b: 24:6d:a1:ff:a1:68:94:c9:3b:1f:a4:56:e6:c4:cc:c4:a4:6a: ee:d2:fd:60:01:2f:5d:01:ae:cb:a1:7a:20:6d:15:a6:5c:c6: 67:40:d8:81:a6:5d:d8:32:f7:a2:b6:59:aa:3a:d6:b8:5c:78: cd:f0:ba:e5:ef:8a:7f:2d:b3:d9:07:29:e8:d7:ea:58:2c:c2: f2:e4:e8:d9:13:11:f3:43:a4:9c:2d:22:27:39:6f:5e:aa:f2: 2f:91:4e:32:9f:20:9f:56:19:7e:b5:3d:3c:9e:03:d4:b2:63: f6:99:92:30:d2:6f:1f:f0:d6:b8:f1:72:75:36:7c:e4:45:b2: af:d8:40:c4:f8:7b:1e:e7:4a:53:be:38:9e:65:04:58:c9:d5: ef:68:27:9f -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt4ow08942Exs8NW0w+KWp3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZmJhMzU2MTg2YzFkYzUwMzFjMmZiMjBiYzYzNTQ5MWY4 Nzg2MzcwHhcNMjYwMTAxMDgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzNlM2MwZDNmMzJiZDU1ZDRlOTBkMDg4NjlhM2NiOTYxN2Q2NzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qTlBidzLxVI6lJHmpJaCBpCLiu0 9lbe77xY0q8kEOn2fEEfnLhdygQ1mIe/UFWeA/EZOf0d2e3eFQjXbCjbJpQ+iEIj WZjjwd1xT94R7n4gW4w3xd7RMvysuEHjEOOBhxL3aXArbMHInohoIAfMPR5/LQDG E8Ue5xVstGZZmd6VpSHZOsyW+Uijx7HONprt9ZpnQ7EM/NoPQt4Kcw2u7TiJo3XK spgZCtafZb9rw9uz+pdrrLSmRJMgq/C78uRWhuUhnYtjASj50kD3N4yqn8+WItcs O0FbOw1n2yYBSFpdk/ofLlnsTdV63r1Of2Z9zWzsOgHRMrP/bKxPY8YYewIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFIM+PA0/Mr1V1OkNCIaaPLlhfWcmMB8GA1UdIwQY MBaAFLL7o1YYbB3FAxwvsgvGNUkfh4Y3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3Z1alZoaHNIY1VESEMteUM4WTFTUi1IaGpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82YThmMGMtNTdhMy00NDk2LTlmOWUt Mjg2NTNjYzEyMzY4LzEvZ3o0OERUOHl2VlhVNlEwSWhwbzh1V0Y5WnlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My82YThmMGMtNTdhMy00NDk2LTlmOWUtMjg2NTNjYzEyMzY4 LzEvc3Z1alZoaHNIY1VESEMteUM4WTFTUi1IaGpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCuV+EAwQC uaikMBQEAgACMA4DBQMqBfNAAwUAKgvqADANBgkqhkiG9w0BAQsFAAOCAQEAN9ap YKDnGYEseEPY79SjS9qhPAH/CskvUx7g8WZZuwql6M+Cu1p/wxTa2+ab7EE1bpQb Vb5fP7su6gUoBqqtFolODbc/XDNUVF1P+bU7915fT+LDNmtqfv9d+wUZ9UP1I4wd +m5OH+6fm297JG2h/6FolMk7H6RW5sTMxKRq7tL9YAEvXQGuy6F6IG0VplzGZ0DY gaZd2DL3orZZqjrWuFx4zfC65e+Kfy2z2Qcp6NfqWCzC8uTo2RMR80OknC0iJzlv XqryL5FOMp8gn1YZfrU9PJ4D1LJj9pmSMNJvH/DWuPFydTZ85EWyr9hAxPh7HudK U744nmUEWMnV72gnnw== -----END CERTIFICATE-----Generated at Tue Feb 10 06:26:02 2026 by rpki-client