This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/q8ALlbE4IIvLhKys6r6M1Hgfxyo.roa File: q8ALlbE4IIvLhKys6r6M1Hgfxyo.roa (raw, json) Hash identifier: k/Wh/c00eZEFbymGhdaEUynKj87Lx/1rWZSCYQ9Ry88= Subject key identifier: AB:C0:0B:95:B1:38:20:8B:CB:84:AC:AC:EA:BE:8C:D4:78:1F:C7:2A Certificate issuer: /CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404 Certificate serial: 019B78A2858AC480DF4B264154CF7F11E65A Authority key identifier: FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/q8ALlbE4IIvLhKys6r6M1Hgfxyo.roa Signing time: Thu 01 Jan 2026 08:17:55 +0000 ROA not before: Thu 01 Jan 2026 08:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51050 IP address blocks: 193.38.140.0/23 maxlen: 23 193.39.6.0/23 maxlen: 23 2a0f:b580::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:85:8a:c4:80:df:4b:26:41:54:cf:7f:11:e6:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404 Validity Not Before: Jan 1 08:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abc00b95b138208bcb84acaceabe8cd4781fc72a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bb:7e:5a:d8:9d:b8:c5:3f:a1:76:9b:54:e3: 86:3f:4b:6f:dd:41:3a:65:35:bb:8d:d7:e2:67:26: 29:fc:dd:5e:1f:ad:5d:fd:64:bc:68:97:db:2a:53: 46:75:72:16:75:52:b6:ec:57:27:a0:4e:23:1c:81: 5e:6a:26:fd:22:c2:1e:37:53:43:4e:a9:c7:cf:18: b6:ec:80:a6:01:35:69:f3:b2:76:57:c2:a1:b8:4b: 4e:d6:8c:fe:ac:21:57:0c:06:b8:87:ad:38:ea:77: e5:86:ba:2d:d9:6d:f6:df:d4:bb:cd:44:b8:6d:0d: 91:ea:e5:d5:d6:89:6f:25:f2:c5:c8:cf:3c:ed:2f: 30:e1:0e:1b:05:39:21:a0:64:87:20:cd:e5:2c:c5: ad:b2:b9:d8:97:62:bc:a6:13:70:bf:9c:96:99:34: e8:37:78:e9:bf:c8:19:9c:cd:7e:cd:11:ad:0a:ca: 7c:b9:3b:6c:7a:4c:34:8d:a1:e1:06:c3:1e:02:2b: f2:6b:14:d3:9c:bb:95:93:77:b9:fe:8e:20:96:90: 2e:6e:d4:4f:97:6f:8e:fe:a1:53:af:7f:f2:66:1f: 21:c9:ff:55:3f:50:af:40:48:30:9f:76:92:02:c6: a0:fb:d7:8a:df:15:13:25:54:43:b3:7c:48:57:40: b1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C0:0B:95:B1:38:20:8B:CB:84:AC:AC:EA:BE:8C:D4:78:1F:C7:2A X509v3 Authority Key Identifier: keyid:FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/q8ALlbE4IIvLhKys6r6M1Hgfxyo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.38.140.0/23 193.39.6.0/23 IPv6: 2a0f:b580::/29 Signature Algorithm: sha256WithRSAEncryption a5:34:1f:5e:22:55:6f:58:37:51:76:68:98:2b:88:df:5a:bc: 33:78:7d:a4:7c:56:59:50:15:fb:b8:e8:49:c4:fd:57:de:b2: b7:ac:22:0d:be:02:d0:10:ba:58:09:69:e5:4f:8f:dd:80:ea: 36:c0:94:90:1b:b4:aa:29:cc:ca:4e:58:08:3b:cb:1b:9d:c4: 2c:c6:8e:89:c7:18:80:5a:df:50:e6:d0:03:49:8e:b8:9a:a9: c3:26:28:d2:c9:43:5f:a2:e4:8d:33:44:e4:16:f7:3f:a3:33: a7:2d:b2:3f:25:f4:10:ea:e6:c6:6f:e9:11:87:69:00:ae:d3: 05:a7:32:dd:b1:45:c2:51:94:e4:34:3b:37:c1:36:0f:09:d5: 67:63:23:00:12:58:39:27:4b:e2:3d:2c:35:77:27:b6:31:69: 20:92:c3:58:cc:e1:65:75:82:58:a6:bf:f2:0a:cc:e6:51:35: 2c:9e:2d:82:e9:52:37:09:47:31:14:ac:e6:a6:95:8a:76:19: ba:23:0d:59:72:64:e7:b2:49:cc:4b:95:e3:1b:e1:ed:15:68: 32:b1:cb:c8:7e:48:80:30:f2:47:19:5a:94:92:e2:a2:f0:9b: de:66:bf:a1:36:a2:29:ea:1b:a2:d5:bf:e8:57:10:a3:28:50: 67:a8:74:c6 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt4ooWKxIDfSyZBVM9/EeZaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiM2Q5MGE0ODllMmQ0OWM1NjRlMDhhM2EyZjM0NDVmYjJj OGQ0MDQwHhcNMjYwMTAxMDgxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmMwMGI5NWIxMzgyMDhiY2I4NGFjYWNlYWJlOGNkNDc4MWZjNzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbt+WtiduMU/oXabVOOGP0tv3UE6 ZTW7jdfiZyYp/N1eH61d/WS8aJfbKlNGdXIWdVK27FcnoE4jHIFeaib9IsIeN1ND TqnHzxi27ICmATVp87J2V8KhuEtO1oz+rCFXDAa4h6046nflhrot2W3239S7zUS4 bQ2R6uXV1olvJfLFyM887S8w4Q4bBTkhoGSHIM3lLMWtsrnYl2K8phNwv5yWmTTo N3jpv8gZnM1+zRGtCsp8uTtsekw0jaHhBsMeAivyaxTTnLuVk3e5/o4glpAubtRP l2+O/qFTr3/yZh8hyf9VP1CvQEgwn3aSAsag+9eK3xUTJVRDs3xIV0Cx2QIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFKvAC5WxOCCLy4SsrOq+jNR4H8cqMB8GA1UdIwQY MBaAFPs9kKSJ4tScVk4Io6LzRF+yyNQEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS16MlFwSW5pMUp4V1RnaWpvdk5FWDdMSTFBUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvMzBhNTVkLTk5NTktNDhlOC05YTgx LTlhYjBmZjg3MGQyMy8xL3E4QUxsYkU0SUl2TGhLeXM2cjZNMUhnZnh5by5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYmUvMzBhNTVkLTk5NTktNDhlOC05YTgxLTlhYjBmZjg3MGQy My8xLzEtejJRcEluaTFKeFdUZ2lqb3ZORVg3TEkxQVEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAHBJowD BAHBJwYwDQQCAAIwBwMFAyoPtYAwDQYJKoZIhvcNAQELBQADggEBAKU0H14iVW9Y N1F2aJgriN9avDN4faR8VllQFfu46EnE/VfesresIg2+AtAQulgJaeVPj92A6jbA lJAbtKopzMpOWAg7yxudxCzGjonHGIBa31Dm0ANJjriaqcMmKNLJQ1+i5I0zROQW 9z+jM6ctsj8l9BDq5sZv6RGHaQCu0wWnMt2xRcJRlOQ0OzfBNg8J1WdjIwASWDkn S+I9LDV3J7YxaSCSw1jM4WV1glimv/IKzOZRNSyeLYLpUjcJRzEUrOamlYp2Gboj DVlyZOeyScxLleMb4e0VaDKxy8h+SIAw8kcZWpSS4qLwm95mv6E2oinqG6LVv+hX EKMoUGeodMY= -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:39 2026 by rpki-client