This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/8pZUXvACu9QhvKuW-qMjjg-zMpg.roa File: 8pZUXvACu9QhvKuW-qMjjg-zMpg.roa (raw, json) Hash identifier: 0/gavMRZtZdbhY3KH3ekU0vMqEL7/EvqYK9+J6uWS6E= Subject key identifier: F2:96:54:5E:F0:02:BB:D4:21:BC:AB:96:FA:A3:23:8E:0F:B3:32:98 Certificate issuer: /CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616 Certificate serial: 019B7B359550E20E1E5FD8BC34E95AF7D345 Authority key identifier: B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/8pZUXvACu9QhvKuW-qMjjg-zMpg.roa Signing time: Thu 01 Jan 2026 20:17:47 +0000 ROA not before: Thu 01 Jan 2026 20:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208139 IP address blocks: 31.128.244.0/24 maxlen: 24 31.128.245.0/24 maxlen: 24 31.128.248.0/24 maxlen: 24 31.128.249.0/24 maxlen: 24 31.128.250.0/24 maxlen: 24 31.128.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:95:50:e2:0e:1e:5f:d8:bc:34:e9:5a:f7:d3:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616 Validity Not Before: Jan 1 20:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f296545ef002bbd421bcab96faa3238e0fb33298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:79:19:76:4e:eb:58:37:f5:b1:d9:bf:b6:5f: ff:f0:00:e5:0a:da:74:07:70:0f:de:11:da:76:49: a5:10:80:5b:71:bb:c0:8f:7e:2f:22:2b:d4:07:92: 85:79:2d:f4:36:fb:b3:7f:2c:11:49:fc:c3:15:de: 72:af:7b:14:5e:88:5d:83:eb:4e:1f:e6:47:4c:26: f6:82:37:1e:f4:bf:49:28:fe:a9:e9:2b:d8:ec:73: 81:dc:56:8d:9b:28:99:4c:02:9b:59:93:34:7e:1b: b6:f6:54:ad:b3:a6:20:33:4a:9a:09:54:7d:b1:e7: 27:0b:0e:f7:f9:5e:31:50:e2:06:8a:88:5f:a9:a9: d8:2a:f5:3d:54:36:96:4f:eb:f8:f8:d1:4a:be:a6: ca:64:60:45:9d:d5:d3:15:b7:c9:ac:cf:df:8a:ed: d0:00:81:14:bd:61:c7:75:71:78:4b:96:36:61:31: 84:6d:94:25:db:da:58:56:6d:75:14:e1:c6:08:8a: f4:dc:35:32:6e:22:49:83:d2:a2:2a:c9:0a:00:cb: e8:93:ed:11:1f:a7:f7:a6:10:2b:4f:76:fc:82:b1: 5b:84:49:52:7b:06:27:a9:f4:5b:c5:32:35:0a:e2: c2:02:d1:2e:36:11:fc:a7:2f:7e:15:8d:dc:a0:88: 94:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:96:54:5E:F0:02:BB:D4:21:BC:AB:96:FA:A3:23:8E:0F:B3:32:98 X509v3 Authority Key Identifier: keyid:B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/8pZUXvACu9QhvKuW-qMjjg-zMpg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.128.244.0/23 31.128.248.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:26:e9:d7:d4:80:de:d3:48:46:c2:18:a3:7b:49:8f:c8:1e: 14:49:64:14:b5:6b:5c:8b:21:d8:75:c2:6e:ef:c8:09:58:8f: 0c:62:c1:02:f1:b9:87:a3:32:b4:0c:57:e3:89:79:83:dc:f0: 3c:63:36:0f:0c:8b:f0:d8:fc:42:c2:59:d1:05:33:79:0f:55: 13:0e:17:62:bf:43:5b:33:5f:97:36:7d:ca:4a:7b:0b:ad:19: e7:5a:b0:c6:73:b6:a8:e6:5c:78:cb:72:7b:f1:8b:65:ec:1f: de:1d:58:ce:ff:1c:b1:bb:48:43:4a:f8:e3:e3:ab:5e:2c:1e: 9c:e4:f6:9d:39:81:1b:00:9b:90:61:2b:83:ff:4e:ab:ae:45: 6a:ae:4e:dc:b6:53:6d:19:29:3c:1c:59:68:72:d1:4c:8c:94: 26:ab:c0:26:72:b9:64:f6:a1:e6:eb:40:aa:5b:01:d2:c3:a1: 75:45:9c:81:09:77:53:76:d8:f1:7c:1b:68:91:e3:b3:51:42: 08:1f:bd:95:78:fa:5f:d8:da:71:67:93:65:00:bb:06:59:b3: d3:4c:9e:81:c7:ab:f4:bc:cb:22:71:2e:ec:33:a2:1c:73:b3: 15:42:b0:5b:1b:15:6e:1d:d1:1d:dc:db:7d:0b:3a:7f:a4:43: 9b:52:89:2e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NZVQ4g4eX9i8NOla99NFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NWVhZGMyZWM3MGIzMGZhNDIyNWVkN2ZjZDU3MzBmMGM3 YmM2MTYwHhcNMjYwMTAxMjAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjk2NTQ1ZWYwMDJiYmQ0MjFiY2FiOTZmYWEzMjM4ZTBmYjMzMjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nkZdk7rWDf1sdm/tl//8ADlCtp0 B3AP3hHadkmlEIBbcbvAj34vIivUB5KFeS30NvuzfywRSfzDFd5yr3sUXohdg+tO H+ZHTCb2gjce9L9JKP6p6SvY7HOB3FaNmyiZTAKbWZM0fhu29lSts6YgM0qaCVR9 secnCw73+V4xUOIGiohfqanYKvU9VDaWT+v4+NFKvqbKZGBFndXTFbfJrM/fiu3Q AIEUvWHHdXF4S5Y2YTGEbZQl29pYVm11FOHGCIr03DUybiJJg9KiKskKAMvok+0R H6f3phArT3b8grFbhElSewYnqfRbxTI1CuLCAtEuNhH8py9+FY3coIiUuwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPKWVF7wArvUIbyrlvqjI44PszKYMB8GA1UdIwQY MBaAFLhercLscLMPpCJe1/zVcw8Me8YWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUY2dHd1eHdzdy1rSWw3WF9OVnpEd3g3eGhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMDdiMTgtMTlkNy00MWYyLWFmNmIt YmM3YTIwOGE1ZTJlLzEvOHBaVVh2QUN1OVFodkt1Vy1xTWpqZy16TXBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9mMDdiMTgtMTlkNy00MWYyLWFmNmItYmM3YTIwOGE1ZTJl LzEvdUY2dHd1eHdzdy1rSWw3WF9OVnpEd3g3eGhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBH4D0AwQC H4D4MA0GCSqGSIb3DQEBCwUAA4IBAQB6JunX1IDe00hGwhije0mPyB4USWQUtWtc iyHYdcJu78gJWI8MYsEC8bmHozK0DFfjiXmD3PA8YzYPDIvw2PxCwlnRBTN5D1UT Dhdiv0NbM1+XNn3KSnsLrRnnWrDGc7ao5lx4y3J78Ytl7B/eHVjO/xyxu0hDSvjj 46teLB6c5PadOYEbAJuQYSuD/06rrkVqrk7ctlNtGSk8HFloctFMjJQmq8Amcrlk 9qHm60CqWwHSw6F1RZyBCXdTdtjxfBtokeOzUUIIH72VePpf2NpxZ5NlALsGWbPT TJ6Bx6v0vMsicS7sM6Icc7MVQrBbGxVuHdEd3Nt9Czp/pEObUoku -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:39 2026 by rpki-client