This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/8DmkjBsB4UphtJeSH3FxYV3pk2w.roa File: 8DmkjBsB4UphtJeSH3FxYV3pk2w.roa (raw, json) Hash identifier: bPCKO1jX7AbhbVFNmCvWafOjpt+yiRZfbgufuUpuv5g= Subject key identifier: F0:39:A4:8C:1B:01:E1:4A:61:B4:97:92:1F:71:71:61:5D:E9:93:6C Certificate issuer: /CN=8119dca60d47bd603b8e9cc5debd96c5c4ba145b Certificate serial: 019B7D5ADADE81D679CB26BC128FD7DCC51D Authority key identifier: 81:19:DC:A6:0D:47:BD:60:3B:8E:9C:C5:DE:BD:96:C5:C4:BA:14:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/8DmkjBsB4UphtJeSH3FxYV3pk2w.roa Signing time: Fri 02 Jan 2026 06:17:44 +0000 ROA not before: Fri 02 Jan 2026 06:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24586 IP address blocks: 93.189.128.0/22 maxlen: 22 2a00:f320::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.crl rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:da:de:81:d6:79:cb:26:bc:12:8f:d7:dc:c5:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8119dca60d47bd603b8e9cc5debd96c5c4ba145b Validity Not Before: Jan 2 06:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f039a48c1b01e14a61b497921f7171615de9936c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5a:c5:e0:93:3b:c8:d0:1a:13:ea:40:da:06: a7:e4:da:2d:37:c2:de:23:d2:00:79:4e:6a:2a:0e: a2:66:95:9b:ea:22:44:65:d8:4b:96:3f:33:2a:c7: 30:cf:bc:d6:23:e2:bf:a8:26:41:a2:aa:64:c6:a4: 5e:b2:d8:a5:59:c6:1d:1e:33:97:e7:68:2c:06:d8: 99:bf:97:50:df:79:e1:e6:d4:5c:f4:80:b5:e9:99: 25:b1:19:d0:51:03:07:35:48:b9:d4:a6:01:d7:2b: 0b:d9:2f:f0:c6:0c:f5:3c:3e:76:61:7d:b0:8c:db: 1e:e4:19:21:26:af:cf:90:49:06:4a:71:85:0c:f5: be:da:1f:39:99:e3:6d:b9:f5:12:d1:3c:e2:55:79: 04:d3:62:e2:97:f6:23:34:f8:72:7b:17:aa:f3:58: d5:03:10:46:9b:a5:fc:e5:19:12:85:00:9f:b7:bc: dd:8b:11:eb:60:c3:13:74:4e:9c:4e:4b:2c:38:10: 4b:52:58:dc:87:fe:d8:3d:ba:e3:02:e8:14:80:2b: 47:f6:ad:a4:0e:3b:d5:da:d5:df:f0:19:78:53:f0: c9:04:08:94:60:ba:90:3a:b8:69:bf:95:85:dc:d9: 47:75:1a:2b:71:1e:df:a5:07:0e:e9:2e:a5:37:07: 0c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:39:A4:8C:1B:01:E1:4A:61:B4:97:92:1F:71:71:61:5D:E9:93:6C X509v3 Authority Key Identifier: keyid:81:19:DC:A6:0D:47:BD:60:3B:8E:9C:C5:DE:BD:96:C5:C4:BA:14:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/8DmkjBsB4UphtJeSH3FxYV3pk2w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.189.128.0/22 IPv6: 2a00:f320::/48 Signature Algorithm: sha256WithRSAEncryption 75:81:47:03:27:d8:77:be:9a:59:2a:14:88:d0:a0:e2:09:3c: cd:cd:3b:64:93:7e:8b:f5:d3:d4:35:2b:93:6f:5b:2b:c6:bb: 9a:33:52:78:1a:95:78:20:38:71:52:2c:67:ee:0d:5c:87:37: 05:bc:56:66:76:78:dd:ef:eb:03:35:59:9f:99:41:f6:46:04: c8:0a:ce:ee:4b:86:e0:6d:bf:31:37:6b:df:bf:dc:f9:f4:08: c2:18:c1:75:2b:dc:37:d0:83:17:2f:49:ca:df:b2:9c:05:21: ea:56:fa:01:ea:94:b0:0e:12:0b:5c:ef:2f:1b:77:4b:47:78: 76:46:37:6a:03:88:be:ac:3e:f7:3b:9f:0a:09:0a:1d:e3:03: c0:0d:e4:af:81:08:d2:68:f2:f2:5f:94:64:cf:57:97:75:a2: 75:47:30:2b:8e:a3:0e:69:0b:31:46:7c:02:d8:d0:93:d4:a9: fd:0c:b6:28:f2:a2:77:9d:07:9c:c1:d1:a0:25:d3:3c:fb:f8: 8f:71:a9:1c:d7:f7:a5:7b:b0:6c:a0:7b:09:27:86:aa:59:7b: 73:b1:bf:f8:ea:7a:8a:f9:01:91:85:d9:36:90:d9:df:e5:5e: 10:30:bf:05:59:9b:47:fe:a8:90:fb:d6:48:35:3c:f8:0e:ff: 45:e1:36:df -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9WtregdZ5yya8Eo/X3MUdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMTlkY2E2MGQ0N2JkNjAzYjhlOWNjNWRlYmQ5NmM1YzRi YTE0NWIwHhcNMjYwMTAyMDYxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDM5YTQ4YzFiMDFlMTRhNjFiNDk3OTIxZjcxNzE2MTVkZTk5MzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlrF4JM7yNAaE+pA2gan5NotN8Le I9IAeU5qKg6iZpWb6iJEZdhLlj8zKscwz7zWI+K/qCZBoqpkxqRestilWcYdHjOX 52gsBtiZv5dQ33nh5tRc9IC16ZklsRnQUQMHNUi51KYB1ysL2S/wxgz1PD52YX2w jNse5BkhJq/PkEkGSnGFDPW+2h85meNtufUS0TziVXkE02Lil/YjNPhyexeq81jV AxBGm6X85RkShQCft7zdixHrYMMTdE6cTkssOBBLUljch/7YPbrjAugUgCtH9q2k DjvV2tXf8Bl4U/DJBAiUYLqQOrhpv5WF3NlHdRorcR7fpQcO6S6lNwcM4QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFPA5pIwbAeFKYbSXkh9xcWFd6ZNsMB8GA1UdIwQY MBaAFIEZ3KYNR71gO46cxd69lsXEuhRbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1JuY3BnMUh2V0E3anB6RjNyMld4Y1M2RkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8yNTVlYzgtZjFlMy00YThmLWFmMzAt N2UzOWQ5NjNhNTM3LzEvOERta2pCc0I0VXBodEplU0gzRnhZVjNwazJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8yNTVlYzgtZjFlMy00YThmLWFmMzAtN2UzOWQ5NjNhNTM3 LzEvZ1JuY3BnMUh2V0E3anB6RjNyMld4Y1M2RkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCXb2AMA8E AgACMAkDBwAqAPMgAAAwDQYJKoZIhvcNAQELBQADggEBAHWBRwMn2He+mlkqFIjQ oOIJPM3NO2STfov109Q1K5NvWyvGu5ozUngalXggOHFSLGfuDVyHNwW8VmZ2eN3v 6wM1WZ+ZQfZGBMgKzu5LhuBtvzE3a9+/3Pn0CMIYwXUr3DfQgxcvScrfspwFIepW +gHqlLAOEgtc7y8bd0tHeHZGN2oDiL6sPvc7nwoJCh3jA8AN5K+BCNJo8vJflGTP V5d1onVHMCuOow5pCzFGfALY0JPUqf0MtijyonedB5zB0aAl0zz7+I9xqRzX96V7 sGygewknhqpZe3Oxv/jqeor5AZGF2TaQ2d/lXhAwvwVZm0f+qJD71kg1PPgO/0Xh Nt8= -----END CERTIFICATE-----Generated at Mon Feb 9 22:24:02 2026 by rpki-client