This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/a8dxxiPCuafVW1pqgQGmv3vqh6s.roa File: a8dxxiPCuafVW1pqgQGmv3vqh6s.roa (raw, json) Hash identifier: rc0rV/NjxsPC/BhNPsXHclt7GZGOVjNNBw3HxehbP5Y= Subject key identifier: 6B:C7:71:C6:23:C2:B9:A7:D5:5B:5A:6A:81:01:A6:BF:7B:EA:87:AB Certificate issuer: /CN=ab6da834b32cb12c4bdae33f672f348d983f3176 Certificate serial: 019B7835593C5E2DD6240DC1912DF0F8943C Authority key identifier: AB:6D:A8:34:B3:2C:B1:2C:4B:DA:E3:3F:67:2F:34:8D:98:3F:31:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/a8dxxiPCuafVW1pqgQGmv3vqh6s.roa Signing time: Thu 01 Jan 2026 06:18:40 +0000 ROA not before: Thu 01 Jan 2026 06:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28967 IP address blocks: 195.39.224.0/24 maxlen: 24 195.39.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:59:3c:5e:2d:d6:24:0d:c1:91:2d:f0:f8:94:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab6da834b32cb12c4bdae33f672f348d983f3176 Validity Not Before: Jan 1 06:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6bc771c623c2b9a7d55b5a6a8101a6bf7bea87ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9a:2c:6f:ab:4f:dc:41:11:c9:30:14:d2:89: 11:61:76:a8:25:a0:8c:79:3f:bc:79:66:be:34:72: 77:68:8c:de:78:88:c1:47:36:03:88:24:0d:25:a4: 49:c3:7e:6e:41:c5:ac:6f:c8:52:91:9f:bc:11:91: 3f:31:a9:0b:d0:52:4b:c5:a7:03:f8:14:0e:8f:fe: ca:28:b4:4d:18:15:48:dc:ac:90:27:43:e6:92:40: c4:31:52:3b:d8:5b:be:18:fc:f2:7e:05:b3:b4:58: 6f:3b:f3:67:6e:d9:e7:eb:a9:2c:0d:80:04:43:a2: 5c:43:52:b2:dc:a6:5d:e4:ba:bb:64:9f:7d:79:71: 5e:d3:88:cd:41:29:d8:12:e9:55:a4:57:43:b9:23: 5a:da:85:0d:28:30:52:5d:c8:d4:76:0f:f8:2b:41: f1:c1:4c:b2:4b:d7:bd:c5:63:e7:cb:76:b9:9f:a8: 5b:6f:e7:7c:4c:5b:cd:52:7b:cf:2c:34:1b:d2:86: 75:67:89:06:12:c5:8f:ac:60:49:30:a6:70:11:a1: 78:ed:5b:d6:eb:ce:d8:15:c2:03:64:93:95:77:17: cc:32:48:67:a1:4a:1e:38:8f:26:f8:be:bb:c4:dc: 5c:94:9b:3b:b3:45:85:6c:dc:ff:58:92:c8:b7:fb: 56:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C7:71:C6:23:C2:B9:A7:D5:5B:5A:6A:81:01:A6:BF:7B:EA:87:AB X509v3 Authority Key Identifier: keyid:AB:6D:A8:34:B3:2C:B1:2C:4B:DA:E3:3F:67:2F:34:8D:98:3F:31:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/a8dxxiPCuafVW1pqgQGmv3vqh6s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.39.224.0/23 Signature Algorithm: sha256WithRSAEncryption 21:21:85:06:15:ef:aa:94:c4:2f:1a:00:21:59:9e:02:f7:d6: 74:25:bd:2e:be:93:62:92:f2:cd:00:29:63:fb:b0:0d:18:59: 57:d9:48:5c:c2:a5:ce:bc:44:0c:26:be:85:b1:eb:d5:55:c6: 0a:61:0e:3b:59:3e:0f:b9:3b:2a:0a:e0:96:15:c1:00:6c:8d: 26:60:36:5d:36:52:3d:c6:c9:94:e4:37:d2:54:3c:15:dc:f5: 54:1a:3e:79:18:4e:7d:b7:78:48:7a:5c:7c:16:f0:0d:a9:4e: 37:8c:e6:6c:65:68:07:89:f9:6a:15:ad:42:56:78:4f:30:39: 09:a3:f1:30:38:38:86:31:42:c0:dc:ca:08:5d:db:0d:4b:81: 3b:27:0a:17:06:55:62:f1:01:8e:14:08:19:0e:e1:eb:73:78: 78:b7:4d:bf:a6:ee:a7:9c:ae:64:92:95:48:14:e2:48:6e:fd: 25:42:b1:a9:1d:c4:1c:e2:bb:18:ab:e5:25:26:1e:b1:c3:b9: 71:d4:1b:19:f3:52:fb:4e:8f:71:e4:be:3a:6f:d4:6a:78:a9: c3:86:f7:ec:20:c6:a7:6f:96:5d:ab:de:f3:28:22:16:7e:f7: aa:29:d6:65:49:90:f2:03:90:3f:dc:73:ef:68:9d:15:ec:9b: 53:07:3c:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NVk8Xi3WJA3BkS3w+JQ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNmRhODM0YjMyY2IxMmM0YmRhZTMzZjY3MmYzNDhkOTgz ZjMxNzYwHhcNMjYwMTAxMDYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmM3NzFjNjIzYzJiOWE3ZDU1YjVhNmE4MTAxYTZiZjdiZWE4N2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5osb6tP3EERyTAU0okRYXaoJaCM eT+8eWa+NHJ3aIzeeIjBRzYDiCQNJaRJw35uQcWsb8hSkZ+8EZE/MakL0FJLxacD +BQOj/7KKLRNGBVI3KyQJ0PmkkDEMVI72Fu+GPzyfgWztFhvO/Nnbtnn66ksDYAE Q6JcQ1Ky3KZd5Lq7ZJ99eXFe04jNQSnYEulVpFdDuSNa2oUNKDBSXcjUdg/4K0Hx wUyyS9e9xWPny3a5n6hbb+d8TFvNUnvPLDQb0oZ1Z4kGEsWPrGBJMKZwEaF47VvW 687YFcIDZJOVdxfMMkhnoUoeOI8m+L67xNxclJs7s0WFbNz/WJLIt/tWvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGvHccYjwrmn1VtaaoEBpr976oerMB8GA1UdIwQY MBaAFKttqDSzLLEsS9rjP2cvNI2YPzF2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTIyb05MTXNzU3hMMnVNX1p5ODBqWmdfTVhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8wZWM3YTctMGFiYy00ZmY5LTk5NTgt NTg2N2NhNzc4OTdlLzEvYThkeHhpUEN1YWZWVzFwcWdRR212M3ZxaDZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8wZWM3YTctMGFiYy00ZmY5LTk5NTgtNTg2N2NhNzc4OTdl LzEvcTIyb05MTXNzU3hMMnVNX1p5ODBqWmdfTVhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwyfgMA0G CSqGSIb3DQEBCwUAA4IBAQAhIYUGFe+qlMQvGgAhWZ4C99Z0Jb0uvpNikvLNAClj +7ANGFlX2UhcwqXOvEQMJr6FsevVVcYKYQ47WT4PuTsqCuCWFcEAbI0mYDZdNlI9 xsmU5DfSVDwV3PVUGj55GE59t3hIelx8FvANqU43jOZsZWgHiflqFa1CVnhPMDkJ o/EwODiGMULA3MoIXdsNS4E7JwoXBlVi8QGOFAgZDuHrc3h4t02/pu6nnK5kkpVI FOJIbv0lQrGpHcQc4rsYq+UlJh6xw7lx1BsZ81L7To9x5L46b9RqeKnDhvfsIMan b5Zdq97zKCIWfveqKdZlSZDyA5A/3HPvaJ0V7JtTBzxV -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:54 2026 by rpki-client