This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/8zxa1q2pegxEFJQoIheCYHVqZoU.roa File: 8zxa1q2pegxEFJQoIheCYHVqZoU.roa (raw, json) Hash identifier: v8r5BgJNEJNHgyAxvwz6DOghzdizbsYuLfqjq+S4nBs= Subject key identifier: F3:3C:5A:D6:AD:A9:7A:0C:44:14:94:28:22:17:82:60:75:6A:66:85 Certificate issuer: /CN=2f78e0066bb27c5f52e7025d61190daa90b97348 Certificate serial: 019AFEB8B786C3B0E41D79A974182013BADD Authority key identifier: 2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/8zxa1q2pegxEFJQoIheCYHVqZoU.roa Signing time: Mon 08 Dec 2025 16:08:29 +0000 ROA not before: Mon 08 Dec 2025 16:08:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20724 IP address blocks: 93.95.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:b8:b7:86:c3:b0:e4:1d:79:a9:74:18:20:13:ba:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f78e0066bb27c5f52e7025d61190daa90b97348 Validity Not Before: Dec 8 16:08:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f33c5ad6ada97a0c4414942822178260756a6685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ab:a9:59:87:d6:c8:e3:68:e6:a9:19:da:9a: 54:49:17:eb:6a:2a:5b:b6:25:02:47:79:8e:36:0d: 20:8b:fc:9d:04:47:f3:88:b7:56:4a:fb:57:6b:f9: 50:64:8c:73:d2:81:0e:9d:9a:66:c7:05:93:aa:b3: ea:b1:65:29:a2:44:e9:d6:c3:c4:82:5e:c9:b7:5e: 94:51:e9:1a:58:e7:e4:93:fd:35:18:64:02:30:2d: 80:50:35:ab:3b:60:d3:2b:2c:5c:13:bd:65:17:41: 09:ca:d2:c0:9f:e0:44:3a:b2:35:b7:6a:dc:b4:8e: 7d:fe:a5:60:af:4d:0e:d4:ed:95:85:e7:bf:9b:bd: 64:ab:83:75:35:cb:9e:00:fe:2c:c6:e2:15:42:2e: b3:50:26:3d:6c:19:56:f4:8b:76:a6:02:95:3c:02: d3:09:74:36:a0:7f:d1:d1:9b:e5:6b:9c:d4:d8:fc: 2c:17:24:f0:c6:a0:f0:db:40:c0:45:37:f4:09:e7: eb:b6:b0:49:a1:61:d9:9c:7a:3c:4f:6b:e1:c3:9f: 3e:5c:92:74:00:6b:ea:99:ff:22:3f:fd:54:76:41: da:7b:a7:72:69:66:53:97:a4:0e:2b:f0:a9:49:fa: 90:d8:bc:4b:d6:9c:79:2c:ca:bf:cc:49:0c:98:71: 3e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3C:5A:D6:AD:A9:7A:0C:44:14:94:28:22:17:82:60:75:6A:66:85 X509v3 Authority Key Identifier: keyid:2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/8zxa1q2pegxEFJQoIheCYHVqZoU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.95.24.0/24 Signature Algorithm: sha256WithRSAEncryption 74:1a:f5:a8:dc:40:43:e0:f1:0b:79:06:26:e1:8a:ef:b3:93: 28:7e:d9:21:62:d0:7f:62:63:88:95:9e:22:5e:0f:48:1c:80: a4:3a:29:99:48:36:c0:d7:b4:c0:21:ec:28:05:ce:e5:44:24: 3a:ff:7a:dd:8b:86:c3:16:00:4d:fc:35:9d:ec:11:d2:c7:3f: 5e:bf:2e:4d:80:fc:3a:25:c7:a4:a0:7e:20:4c:9d:d6:2e:65: 5d:24:49:b9:b4:86:cd:a0:2b:11:b5:08:ab:c5:fc:df:3d:74: d1:b4:92:80:1d:34:62:15:2a:2a:ea:29:d2:dd:7c:be:4e:df: 21:5f:73:fd:f8:fd:87:c1:b3:b5:c5:65:82:cc:47:13:78:de: 7d:53:4a:74:0e:e2:96:db:b6:a7:45:9e:61:29:c8:39:49:eb: bd:14:bb:b7:65:65:50:78:6c:0f:2f:f9:9f:5a:8a:f5:3d:ae: 1f:20:c0:82:91:5f:9e:0f:31:ad:39:85:34:4b:56:75:a8:7d: dc:02:3a:7d:8c:d1:df:8f:26:89:2e:01:9c:53:ae:e4:a6:8b: f5:e6:1c:08:05:c8:d0:85:09:92:bb:5b:42:79:d9:00:3b:f4: 00:6a:00:90:bb:80:84:a4:48:8a:c6:e7:50:db:6c:03:88:06: 96:eb:60:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr+uLeGw7DkHXmpdBggE7rdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNzhlMDA2NmJiMjdjNWY1MmU3MDI1ZDYxMTkwZGFhOTBi OTczNDgwHhcNMjUxMjA4MTYwODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzNjNWFkNmFkYTk3YTBjNDQxNDk0MjgyMjE3ODI2MDc1NmE2Njg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqupWYfWyONo5qkZ2ppUSRfraipb tiUCR3mONg0gi/ydBEfziLdWSvtXa/lQZIxz0oEOnZpmxwWTqrPqsWUpokTp1sPE gl7Jt16UUekaWOfkk/01GGQCMC2AUDWrO2DTKyxcE71lF0EJytLAn+BEOrI1t2rc tI59/qVgr00O1O2Vhee/m71kq4N1NcueAP4sxuIVQi6zUCY9bBlW9It2pgKVPALT CXQ2oH/R0Zvla5zU2PwsFyTwxqDw20DARTf0CefrtrBJoWHZnHo8T2vhw58+XJJ0 AGvqmf8iP/1UdkHae6dyaWZTl6QOK/CpSfqQ2LxL1px5LMq/zEkMmHE+VQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPM8WtatqXoMRBSUKCIXgmB1amaFMB8GA1UdIwQY MBaAFC944AZrsnxfUucCXWEZDaqQuXNIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDNqZ0JtdXlmRjlTNXdKZFlSa05xcEM1YzBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMzBhYzctZWMwYy00NGRlLTg1YTgt YjJiNzk2MmMyZDgxLzEvOHp4YTFxMnBlZ3hFRkpRb0loZUNZSFZxWm9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMzBhYzctZWMwYy00NGRlLTg1YTgtYjJiNzk2MmMyZDgx LzEvTDNqZ0JtdXlmRjlTNXdKZFlSa05xcEM1YzBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXV8YMA0G CSqGSIb3DQEBCwUAA4IBAQB0GvWo3EBD4PELeQYm4Yrvs5MoftkhYtB/YmOIlZ4i Xg9IHICkOimZSDbA17TAIewoBc7lRCQ6/3rdi4bDFgBN/DWd7BHSxz9evy5NgPw6 JcekoH4gTJ3WLmVdJEm5tIbNoCsRtQirxfzfPXTRtJKAHTRiFSoq6inS3Xy+Tt8h X3P9+P2HwbO1xWWCzEcTeN59U0p0DuKW27anRZ5hKcg5Seu9FLu3ZWVQeGwPL/mf Wor1Pa4fIMCCkV+eDzGtOYU0S1Z1qH3cAjp9jNHfjyaJLgGcU67kpov15hwIBcjQ hQmSu1tCedkAO/QAagCQu4CEpEiKxudQ22wDiAaW62B+ -----END CERTIFICATE-----Generated at Fri Dec 12 06:37:09 2025 by rpki-client