This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/y8-TomRf2SfXgjAfIqDbASYx4Kw.roa File: y8-TomRf2SfXgjAfIqDbASYx4Kw.roa (raw, json) Hash identifier: uG779XP+SowZScRgyybF2Yr7PqJO6NR4pXnq6h4jggk= Subject key identifier: CB:CF:93:A2:64:5F:D9:27:D7:82:30:1F:22:A0:DB:01:26:31:E0:AC Certificate issuer: /CN=03f3fe6075082be8e588329b43d761bf6e7b01d0 Certificate serial: 019B79105758D963A15ABADE136C058C5FDB Authority key identifier: 03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/y8-TomRf2SfXgjAfIqDbASYx4Kw.roa Signing time: Thu 01 Jan 2026 10:17:52 +0000 ROA not before: Thu 01 Jan 2026 10:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209823 IP address blocks: 195.24.245.0/24 maxlen: 24 2a12:5541:1::/48 maxlen: 48 2a12:5541:2::/48 maxlen: 48 2a12:5541:a::/48 maxlen: 48 2a12:5541:100::/48 maxlen: 48 2a12:5541:200::/48 maxlen: 48 2a12:5541:331::/48 maxlen: 48 2a12:5541:5541::/48 maxlen: 48 2a12:5542::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:57:58:d9:63:a1:5a:ba:de:13:6c:05:8c:5f:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03f3fe6075082be8e588329b43d761bf6e7b01d0 Validity Not Before: Jan 1 10:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbcf93a2645fd927d782301f22a0db012631e0ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e9:44:2a:fd:d7:5f:64:d0:49:07:04:ad:07: af:81:92:82:98:71:0b:8e:39:6f:b0:63:0b:6b:d2: 3b:b3:7d:83:fc:2f:03:06:5b:d7:15:f3:44:ac:ba: c7:69:df:26:8d:c3:64:c7:5b:d6:7a:31:4b:b3:9c: f4:6e:55:d1:a2:35:f9:04:e1:9f:2d:71:2a:3e:5c: 40:ae:9f:72:8d:f6:84:02:53:d6:04:b3:2e:a0:06: 9a:bb:5f:66:07:34:8d:9c:9d:66:61:50:4f:a1:2b: bd:3b:74:10:1b:38:55:cd:6f:47:88:26:42:8f:73: 3a:e9:a0:e7:de:99:d8:1c:90:a9:01:5d:68:fa:68: 81:e6:05:b6:d2:c6:84:1c:fb:ea:29:2a:67:41:54: 56:65:10:f6:10:75:1b:0e:aa:89:62:2e:e0:83:c2: a6:da:a6:20:47:25:b7:a2:39:28:50:b8:31:5b:33: fc:f7:ee:04:fb:16:4b:85:d7:fd:9b:0b:09:6b:24: 5e:75:88:1d:e8:bb:dc:89:c8:0f:00:42:7a:47:70: 4a:31:c4:28:fb:e8:66:eb:19:4c:20:aa:51:df:86: 2b:0e:59:28:a6:3f:41:90:c7:fe:c4:fc:85:24:ea: e6:32:f3:dd:c1:98:66:e6:7a:ad:8c:f5:81:a7:6e: 48:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:CF:93:A2:64:5F:D9:27:D7:82:30:1F:22:A0:DB:01:26:31:E0:AC X509v3 Authority Key Identifier: keyid:03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/y8-TomRf2SfXgjAfIqDbASYx4Kw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.24.245.0/24 IPv6: 2a12:5541:1::-2a12:5541:2:ffff:ffff:ffff:ffff:ffff 2a12:5541:a::/48 2a12:5541:100::/48 2a12:5541:200::/48 2a12:5541:331::/48 2a12:5541:5541::/48 2a12:5542::/32 Signature Algorithm: sha256WithRSAEncryption 72:03:2a:0e:9d:15:ec:47:fc:9e:14:fa:40:13:19:96:52:ac: f7:cd:02:db:7d:eb:7d:ef:20:ad:3c:e2:d5:c8:0e:ac:81:08: 43:a9:4f:d2:f2:b1:45:b2:6d:f9:da:32:39:fd:57:72:5f:4f: 3f:66:f2:5f:05:c9:e5:d6:34:51:7c:da:af:27:4a:23:b8:ba: 23:9c:27:95:c5:01:19:d5:6b:6f:6d:c2:c7:e0:b3:af:ae:32: 74:d5:3b:ba:c2:d3:18:9c:03:16:e7:b5:ee:29:51:f0:2c:21: ea:92:db:26:44:01:27:1d:3f:cd:46:ff:c6:0e:2e:88:ca:c5: da:ed:c0:68:cc:02:be:00:9f:1d:23:71:f0:3a:ea:99:0b:96: 5b:52:be:de:e4:0a:d7:a3:85:06:f8:b3:53:0a:6e:d9:96:8c: ab:b8:4d:d8:24:e1:c7:69:18:16:ac:44:2d:a8:b1:e5:5d:71: 1c:47:f1:e7:e3:97:46:31:93:ad:f1:94:f0:40:ce:94:16:fb: d6:e0:41:7b:9f:41:85:69:56:65:f7:78:a3:04:dc:a1:ec:5b: 20:9f:7f:c2:b6:d2:87:15:bc:0b:eb:ec:28:20:58:02:96:f0: c1:d3:16:92:7b:9d:a6:bf:1c:a8:68:78:06:48:ba:6f:3d:4e: f9:65:ca:cb -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgISAZt5EFdY2WOhWrreE2wFjF/bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZjNmZTYwNzUwODJiZThlNTg4MzI5YjQzZDc2MWJmNmU3 YjAxZDAwHhcNMjYwMTAxMTAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmNmOTNhMjY0NWZkOTI3ZDc4MjMwMWYyMmEwZGIwMTI2MzFlMGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+lEKv3XX2TQSQcErQevgZKCmHEL jjlvsGMLa9I7s32D/C8DBlvXFfNErLrHad8mjcNkx1vWejFLs5z0blXRojX5BOGf LXEqPlxArp9yjfaEAlPWBLMuoAaau19mBzSNnJ1mYVBPoSu9O3QQGzhVzW9HiCZC j3M66aDn3pnYHJCpAV1o+miB5gW20saEHPvqKSpnQVRWZRD2EHUbDqqJYi7gg8Km 2qYgRyW3ojkoULgxWzP89+4E+xZLhdf9mwsJayRedYgd6LvcicgPAEJ6R3BKMcQo ++hm6xlMIKpR34YrDlkopj9BkMf+xPyFJOrmMvPdwZhm5nqtjPWBp25IUwIDAQAB o4ICWTCCAlUwHQYDVR0OBBYEFMvPk6JkX9kn14IwHyKg2wEmMeCsMB8GA1UdIwQY MBaAFAPz/mB1CCvo5Ygym0PXYb9uewHQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQV9QLVlIVUlLLWpsaURLYlE5ZGh2MjU3QWRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84YmY3ZWEtODgzYS00YzQzLTk0NmMt ODJkYWZlMTA0YmM1LzEveTgtVG9tUmYyU2ZYZ2pBZklxRGJBU1l4NEt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84YmY3ZWEtODgzYS00YzQzLTk0NmMtODJkYWZlMTA0YmM1 LzEvQV9QLVlIVUlLLWpsaURLYlE5ZGh2MjU3QWRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjAMBAIAATAGAwQAwxj1ME4E AgACMEgwEgMHACoSVUEAAQMHACoSVUEAAgMHACoSVUEACgMHACoSVUEBAAMHACoS VUECAAMHACoSVUEDMQMHACoSVUFVQQMFACoSVUIwDQYJKoZIhvcNAQELBQADggEB AHIDKg6dFexH/J4U+kATGZZSrPfNAtt9633vIK084tXIDqyBCEOpT9LysUWybfna Mjn9V3JfTz9m8l8FyeXWNFF82q8nSiO4uiOcJ5XFARnVa29twsfgs6+uMnTVO7rC 0xicAxbnte4pUfAsIeqS2yZEAScdP81G/8YOLojKxdrtwGjMAr4Anx0jcfA66pkL lltSvt7kCtejhQb4s1MKbtmWjKu4Tdgk4cdpGBasRC2oseVdcRxH8efjl0Yxk63x lPBAzpQW+9bgQXufQYVpVmX3eKME3KHsWyCff8K20ocVvAvr7CggWAKW8MHTFpJ7 naa/HKhoeAZIum89Tvllyss= -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:18 2026 by rpki-client