This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/8gDgcDeShfBdliF1DBTffvxw12U.roa File: 8gDgcDeShfBdliF1DBTffvxw12U.roa (raw, json) Hash identifier: Fz6nbI88uHxwSxo85BK5DCibUg4PuN/OzYci0coXooc= Subject key identifier: F2:00:E0:70:37:92:85:F0:5D:96:21:75:0C:14:DF:7E:FC:70:D7:65 Certificate issuer: /CN=0032534e8d560d73553c632bba10344a7c816614 Certificate serial: 019B7C11C425BB8AE59B25D539A164B7E315 Authority key identifier: 00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/8gDgcDeShfBdliF1DBTffvxw12U.roa Signing time: Fri 02 Jan 2026 00:18:17 +0000 ROA not before: Fri 02 Jan 2026 00:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1820 IP address blocks: 91.202.108.0/22 maxlen: 32 193.110.100.0/23 maxlen: 32 194.28.196.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 19:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:c4:25:bb:8a:e5:9b:25:d5:39:a1:64:b7:e3:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0032534e8d560d73553c632bba10344a7c816614 Validity Not Before: Jan 2 00:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f200e070379285f05d9621750c14df7efc70d765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6d:d7:b1:33:d6:b6:44:06:b4:10:c8:94:de: 34:46:81:ca:42:68:6f:4c:1c:cf:b3:38:fa:e2:6f: 47:56:ed:ea:c6:f2:c4:73:bb:80:4d:cf:66:be:c2: 93:89:29:37:fe:97:80:6c:9a:b3:a2:8e:b1:72:98: a7:f7:ec:2c:65:d0:ff:22:ce:b9:f2:1d:b9:0c:5e: cd:a8:5f:45:f7:76:5f:f2:06:27:71:58:22:ae:15: 6a:60:76:1b:5e:8d:6a:8d:2c:b3:d6:61:75:7d:d0: b8:65:ab:df:63:c2:e0:6d:4a:b5:b2:ab:df:0b:ad: 1d:31:5f:b0:9a:14:17:60:55:ce:a0:99:d4:e8:db: 22:d9:89:3f:c1:0b:bd:72:2e:6e:3f:a8:af:d0:d4: 49:99:b2:42:74:d0:db:a0:47:2c:61:ad:09:42:8b: fb:97:c7:0c:6f:29:07:f9:76:ec:f0:2c:fc:66:1c: 0f:2a:34:0b:03:db:6f:b0:1e:ba:9f:db:cd:27:69: 92:17:99:15:59:12:1f:e5:7a:d3:62:8c:e8:08:f5: cd:3f:5d:c2:c5:01:57:fb:75:52:a3:01:9a:d0:97: c8:6b:14:ce:9b:11:ee:49:3c:6b:d5:db:bc:87:57: 6d:db:9f:76:90:5a:08:10:5c:18:37:f9:fa:65:00: b5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:00:E0:70:37:92:85:F0:5D:96:21:75:0C:14:DF:7E:FC:70:D7:65 X509v3 Authority Key Identifier: keyid:00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/8gDgcDeShfBdliF1DBTffvxw12U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.202.108.0/22 193.110.100.0/23 194.28.196.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:c3:97:a5:3e:0f:42:ac:e3:2e:c5:24:46:54:d9:1d:ff:4c: e3:2b:11:de:e6:94:7a:9a:c1:87:9a:c3:85:f9:3d:e7:a6:1a: 17:8c:b7:91:72:82:2d:4c:04:b6:0d:07:39:97:d7:0f:ee:15: ef:67:9d:e5:00:30:36:cf:83:ac:83:8c:1d:48:18:92:ab:d4: 5f:a7:fe:6d:86:64:1c:92:59:fa:a4:a4:aa:c0:cf:f8:03:64: 74:02:67:c9:ff:9d:5f:cd:b0:2e:b6:a7:fb:81:44:1f:b2:75: c3:4f:7a:9b:cd:67:c8:57:2e:ea:6e:3f:b4:fe:e5:09:73:46: 0b:3a:d6:06:8b:13:21:09:e2:2c:7f:5c:b0:03:ec:18:04:60: 33:b7:8e:4f:45:4f:94:c4:45:8f:71:87:65:21:60:ad:c7:c6: 44:8a:a7:bb:14:51:a3:e0:90:1f:60:79:d3:2a:d7:02:bd:9d: 79:8e:68:cd:3b:42:3f:0e:aa:df:9b:81:cf:d6:53:c1:cb:cd: c1:73:b3:90:0c:9e:dc:44:72:7a:5c:5b:42:c6:0f:d2:54:3f: a5:93:25:e0:db:be:0d:42:bf:f7:26:af:93:61:92:28:3e:78: 85:41:6e:db:26:af:c5:ab:99:00:74:7c:99:32:cf:ea:3c:4f: e6:af:6c:00 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8EcQlu4rlmyXVOaFkt+MVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMzI1MzRlOGQ1NjBkNzM1NTNjNjMyYmJhMTAzNDRhN2M4 MTY2MTQwHhcNMjYwMTAyMDAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjAwZTA3MDM3OTI4NWYwNWQ5NjIxNzUwYzE0ZGY3ZWZjNzBkNzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm3XsTPWtkQGtBDIlN40RoHKQmhv TBzPszj64m9HVu3qxvLEc7uATc9mvsKTiSk3/peAbJqzoo6xcpin9+wsZdD/Is65 8h25DF7NqF9F93Zf8gYncVgirhVqYHYbXo1qjSyz1mF1fdC4ZavfY8LgbUq1sqvf C60dMV+wmhQXYFXOoJnU6Nsi2Yk/wQu9ci5uP6iv0NRJmbJCdNDboEcsYa0JQov7 l8cMbykH+Xbs8Cz8ZhwPKjQLA9tvsB66n9vNJ2mSF5kVWRIf5XrTYozoCPXNP13C xQFX+3VSowGa0JfIaxTOmxHuSTxr1du8h1dt2592kFoIEFwYN/n6ZQC1wwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPIA4HA3koXwXZYhdQwU3378cNdlMB8GA1UdIwQY MBaAFAAyU06NVg1zVTxjK7oQNEp8gWYUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQURKVFRvMVdEWE5WUEdNcnVoQTBTbnlCWmhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kZWUxZWUtOTM4NC00NWFiLWE3MGEt NWVhZTZlZDU4Mzc1LzEvOGdEZ2NEZVNoZkJkbGlGMURCVGZmdnh3MTJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9kZWUxZWUtOTM4NC00NWFiLWE3MGEtNWVhZTZlZDU4Mzc1 LzEvQURKVFRvMVdEWE5WUEdNcnVoQTBTbnlCWmhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCW8psAwQB wW5kAwQCwhzEMA0GCSqGSIb3DQEBCwUAA4IBAQArw5elPg9CrOMuxSRGVNkd/0zj KxHe5pR6msGHmsOF+T3nphoXjLeRcoItTAS2DQc5l9cP7hXvZ53lADA2z4Osg4wd SBiSq9Rfp/5thmQckln6pKSqwM/4A2R0AmfJ/51fzbAutqf7gUQfsnXDT3qbzWfI Vy7qbj+0/uUJc0YLOtYGixMhCeIsf1ywA+wYBGAzt45PRU+UxEWPcYdlIWCtx8ZE iqe7FFGj4JAfYHnTKtcCvZ15jmjNO0I/Dqrfm4HP1lPBy83Bc7OQDJ7cRHJ6XFtC xg/SVD+lkyXg274NQr/3Jq+TYZIoPniFQW7bJq/Fq5kAdHyZMs/qPE/mr2wA -----END CERTIFICATE-----Generated at Sun Feb 8 04:50:42 2026 by rpki-client