This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/ibn8bNQQz7BgdWQGJtHjkoVEvpE.roa File: ibn8bNQQz7BgdWQGJtHjkoVEvpE.roa (raw, json) Hash identifier: BoHl0eq6h4PEPopUgDa/zkXPmdyvWksghSbqXzV9YdE= Subject key identifier: 89:B9:FC:6C:D4:10:CF:B0:60:75:64:06:26:D1:E3:92:85:44:BE:91 Certificate issuer: /CN=a8bbd4d9858ab5280700ef7e95c04160f3d2cb48 Certificate serial: 019B7E37B9D4177F075189E270DC36545544 Authority key identifier: A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/ibn8bNQQz7BgdWQGJtHjkoVEvpE.roa Signing time: Fri 02 Jan 2026 10:18:59 +0000 ROA not before: Fri 02 Jan 2026 10:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42208 IP address blocks: 193.200.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:b9:d4:17:7f:07:51:89:e2:70:dc:36:54:55:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8bbd4d9858ab5280700ef7e95c04160f3d2cb48 Validity Not Before: Jan 2 10:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89b9fc6cd410cfb06075640626d1e3928544be91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c7:6c:69:2a:51:7e:b5:72:6f:f8:10:cb:29: 6b:9d:f8:7e:e7:a7:25:6f:bf:ba:17:95:30:df:c6: 90:dc:37:37:f3:83:b4:d7:10:ec:ce:fd:de:0e:bb: ee:d4:49:c6:8e:6a:8d:09:01:b7:a2:7b:98:67:0a: 06:35:ce:cb:0b:77:7e:37:a8:5f:89:3e:cb:7a:e6: c3:35:b1:48:03:17:d5:03:ab:09:21:05:38:00:0e: e7:d1:0a:2b:fd:10:9e:a4:e1:9c:28:bb:1c:f4:7b: 37:3e:70:75:70:92:33:57:72:8c:01:37:a5:02:05: 05:dd:ea:77:d9:6d:f6:81:e2:7d:44:84:f9:d2:f2: 70:af:9b:18:ec:0d:9b:07:96:54:31:d2:95:18:1e: fb:54:c5:64:c2:1a:a5:53:d8:5a:23:db:65:68:d3: bb:11:5f:2e:4e:75:54:0c:e1:13:21:74:17:54:73: 9f:43:ea:bd:00:8f:57:3c:c0:1b:2d:2f:4b:f9:dc: d5:df:4f:81:cd:c5:44:12:1c:3f:b8:49:ba:43:15: 18:ba:c4:ab:ef:59:11:f2:a7:81:f6:53:7c:dc:8c: 8b:34:d6:35:e0:de:e2:27:89:47:28:87:2d:37:d9: 6b:2b:66:e4:b8:4d:64:15:9a:1b:d7:9b:f8:8c:3b: e5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B9:FC:6C:D4:10:CF:B0:60:75:64:06:26:D1:E3:92:85:44:BE:91 X509v3 Authority Key Identifier: keyid:A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/ibn8bNQQz7BgdWQGJtHjkoVEvpE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.4.0/24 Signature Algorithm: sha256WithRSAEncryption 54:aa:0c:9c:a3:59:d7:a2:d2:93:75:80:23:f3:e8:c1:bf:67: d4:35:1c:02:b1:18:3e:01:ed:72:a3:76:1d:b2:7d:87:d7:dc: 78:c2:27:48:77:05:f2:01:37:5a:43:5a:7f:74:62:49:27:1e: 03:66:68:59:7c:dc:6a:83:f6:65:05:da:24:1f:0c:c9:b1:a6: 01:15:9f:c4:71:f8:c6:a8:49:53:4b:05:04:c4:22:c9:c2:72: 6a:ae:16:d9:3f:7b:38:5c:af:cc:9d:a3:98:bd:8f:78:9f:fa: 34:f0:e6:db:ff:bd:59:ad:b0:6f:4a:7c:29:d6:be:8d:6e:46: 02:0c:0d:d0:54:7f:df:aa:76:72:8a:cb:f6:41:e4:bd:0e:0a: 17:6d:42:bf:a1:90:c4:4f:52:2b:fb:d7:05:1f:05:20:e1:75: c8:2d:5a:67:6f:9c:63:ea:88:76:d5:8c:08:99:c5:bb:40:54: 1f:85:3c:37:4f:24:02:a0:c2:9e:db:87:9b:71:db:6a:dc:22: a3:59:07:22:3c:d3:59:ee:22:25:af:f8:73:e7:5e:e6:24:29: e7:57:28:93:ae:4b:98:4e:5b:94:f0:b7:29:c3:a4:dd:36:8d: 1f:21:ae:1b:d8:0e:50:d6:2c:c0:62:08:37:49:69:d3:72:3b: 18:0d:df:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N7nUF38HUYnicNw2VFVEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YmJkNGQ5ODU4YWI1MjgwNzAwZWY3ZTk1YzA0MTYwZjNk MmNiNDgwHhcNMjYwMTAyMTAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWI5ZmM2Y2Q0MTBjZmIwNjA3NTY0MDYyNmQxZTM5Mjg1NDRiZTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8dsaSpRfrVyb/gQyylrnfh+56cl b7+6F5Uw38aQ3Dc384O01xDszv3eDrvu1EnGjmqNCQG3onuYZwoGNc7LC3d+N6hf iT7LeubDNbFIAxfVA6sJIQU4AA7n0Qor/RCepOGcKLsc9Hs3PnB1cJIzV3KMATel AgUF3ep32W32geJ9RIT50vJwr5sY7A2bB5ZUMdKVGB77VMVkwhqlU9haI9tlaNO7 EV8uTnVUDOETIXQXVHOfQ+q9AI9XPMAbLS9L+dzV30+BzcVEEhw/uEm6QxUYusSr 71kR8qeB9lN83IyLNNY14N7iJ4lHKIctN9lrK2bkuE1kFZob15v4jDvlOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIm5/GzUEM+wYHVkBibR45KFRL6RMB8GA1UdIwQY MBaAFKi71NmFirUoBwDvfpXAQWDz0stIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUx2VTJZV0t0U2dIQU85LWxjQkJZUFBTeTBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83YWFkOWMtZDY1Ny00NWJkLWIwMTYt MThiMmZkNDMyMGY1LzEvaWJuOGJOUVF6N0JnZFdRR0p0SGprb1ZFdnBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83YWFkOWMtZDY1Ny00NWJkLWIwMTYtMThiMmZkNDMyMGY1 LzEvcUx2VTJZV0t0U2dIQU85LWxjQkJZUFBTeTBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcgEMA0G CSqGSIb3DQEBCwUAA4IBAQBUqgyco1nXotKTdYAj8+jBv2fUNRwCsRg+Ae1yo3Yd sn2H19x4widIdwXyATdaQ1p/dGJJJx4DZmhZfNxqg/ZlBdokHwzJsaYBFZ/EcfjG qElTSwUExCLJwnJqrhbZP3s4XK/MnaOYvY94n/o08Obb/71ZrbBvSnwp1r6NbkYC DA3QVH/fqnZyisv2QeS9DgoXbUK/oZDET1Ir+9cFHwUg4XXILVpnb5xj6oh21YwI mcW7QFQfhTw3TyQCoMKe24ebcdtq3CKjWQciPNNZ7iIlr/hz517mJCnnVyiTrkuY TluU8Lcpw6TdNo0fIa4b2A5Q1izAYgg3SWnTcjsYDd89 -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:48 2026 by rpki-client