This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/8n9b1McJwVwYSHNYtuA1BPtMKyQ.roa File: 8n9b1McJwVwYSHNYtuA1BPtMKyQ.roa (raw, json) Hash identifier: znLA/cadcAOzu6Norl0ideQ8XGJcQszWKS7ox01S1jA= Subject key identifier: F2:7F:5B:D4:C7:09:C1:5C:18:48:73:58:B6:E0:35:04:FB:4C:2B:24 Certificate issuer: /CN=da35b27eb523b67f8d691c8062f3370e149302fd Certificate serial: 019B79ECD077063B03E1127FEB9C5B3F2273 Authority key identifier: DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/8n9b1McJwVwYSHNYtuA1BPtMKyQ.roa Signing time: Thu 01 Jan 2026 14:18:41 +0000 ROA not before: Thu 01 Jan 2026 14:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15576 IP address blocks: 193.222.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d0:77:06:3b:03:e1:12:7f:eb:9c:5b:3f:22:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da35b27eb523b67f8d691c8062f3370e149302fd Validity Not Before: Jan 1 14:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f27f5bd4c709c15c18487358b6e03504fb4c2b24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:38:b9:ce:20:7a:76:fb:c7:f4:0e:de:b4:3f: 1e:a5:fb:f6:1b:ba:af:c5:8c:8a:0b:64:a9:91:2e: 68:e0:1e:fd:1b:9b:d5:c8:95:7b:2d:47:35:e6:95: b3:26:28:b3:e2:a6:41:c0:38:7a:97:b3:cb:d1:2b: e2:ea:42:5b:6d:e0:6d:8c:58:86:04:32:a4:3f:a1: 63:f1:a9:8c:0f:89:a0:f5:83:83:06:dc:c1:b3:97: 1f:c5:2e:75:a8:5e:39:92:a8:ab:d1:90:f3:ff:89: ce:ee:d6:0b:19:e6:e0:a7:6b:c0:bf:89:05:84:b0: 03:19:1d:1f:fe:bd:6b:c5:98:70:df:9f:2f:72:f0: 52:5c:22:3f:d2:4d:4f:75:22:9d:a5:2f:ce:8a:65: 38:23:c6:9a:33:da:5b:b6:c7:16:af:51:63:9f:de: 88:af:7e:3a:51:d0:07:6f:1b:02:74:e7:58:5a:06: 5f:eb:34:b5:45:37:e3:ec:cf:31:a7:c1:d6:64:7b: 24:e3:6c:ea:95:c5:ff:16:f1:9c:68:f2:29:54:e6: 79:ab:36:2f:a4:6a:3f:f5:9c:4b:ab:57:5e:c3:38: 03:6a:8d:43:6e:da:1f:ac:4f:7c:b0:00:01:4c:95: 38:f9:d4:8b:ef:21:e9:17:f7:d3:fa:b8:2c:7a:08: 7a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:7F:5B:D4:C7:09:C1:5C:18:48:73:58:B6:E0:35:04:FB:4C:2B:24 X509v3 Authority Key Identifier: keyid:DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/8n9b1McJwVwYSHNYtuA1BPtMKyQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.222.138.0/24 Signature Algorithm: sha256WithRSAEncryption 09:09:b6:d0:ba:8b:bd:af:27:99:01:f9:24:19:4c:f6:f8:0a: b7:10:4a:c6:d8:72:03:77:ef:34:d9:fa:d0:c0:1f:a3:b8:41: 65:ff:b8:d5:0b:f2:20:c2:c9:1d:8a:e3:59:5f:d8:5f:d6:54: 6c:d9:6b:d2:a1:e6:4b:20:20:23:fd:db:27:0b:ae:f7:8f:9c: 7d:85:4e:21:de:ad:28:4b:53:16:78:62:c9:c3:85:de:55:67: fb:f6:38:a8:75:4b:7d:73:58:6e:2a:13:73:2d:d2:2a:f1:28: 19:c0:f9:b5:d2:15:05:80:63:6d:a9:aa:ae:08:47:06:d3:63: 51:47:18:cc:e2:b8:1e:5a:24:27:23:2d:07:02:5c:a2:e8:eb: d2:b0:a2:25:59:9e:89:51:17:af:90:c3:fe:e8:ed:6d:28:95: 17:a6:c0:f8:77:87:33:71:46:54:80:8d:30:06:92:49:0f:84: e3:2b:c8:58:c7:40:81:71:53:bb:ed:06:b4:09:78:d0:69:6e: 6f:1e:66:39:ee:d5:5d:2a:3a:d0:1e:e8:70:ef:8a:81:49:35: d0:ac:7d:ba:20:79:9d:0f:2d:9d:10:ca:26:34:7a:b6:bb:7b: 60:c4:a3:13:ce:14:f1:03:28:df:e2:63:ea:77:17:8b:0f:7b: b4:87:14:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57NB3BjsD4RJ/65xbPyJzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMzViMjdlYjUyM2I2N2Y4ZDY5MWM4MDYyZjMzNzBlMTQ5 MzAyZmQwHhcNMjYwMTAxMTQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjdmNWJkNGM3MDljMTVjMTg0ODczNThiNmUwMzUwNGZiNGMyYjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ti5ziB6dvvH9A7etD8epfv2G7qv xYyKC2SpkS5o4B79G5vVyJV7LUc15pWzJiiz4qZBwDh6l7PL0Svi6kJbbeBtjFiG BDKkP6Fj8amMD4mg9YODBtzBs5cfxS51qF45kqir0ZDz/4nO7tYLGebgp2vAv4kF hLADGR0f/r1rxZhw358vcvBSXCI/0k1PdSKdpS/OimU4I8aaM9pbtscWr1Fjn96I r346UdAHbxsCdOdYWgZf6zS1RTfj7M8xp8HWZHsk42zqlcX/FvGcaPIpVOZ5qzYv pGo/9ZxLq1dewzgDao1DbtofrE98sAABTJU4+dSL7yHpF/fT+rgsegh6AwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPJ/W9THCcFcGEhzWLbgNQT7TCskMB8GA1UdIwQY MBaAFNo1sn61I7Z/jWkcgGLzNw4UkwL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmpXeWZyVWp0bi1OYVJ5QVl2TTNEaFNUQXYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mM2Y4YzQtMTliMC00ZjNiLTg4ZTMt Y2NlYWViNWQyZGI5LzEvOG45YjFNY0p3VndZU0hOWXR1QTFCUHRNS3lRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9mM2Y4YzQtMTliMC00ZjNiLTg4ZTMtY2NlYWViNWQyZGI5 LzEvMmpXeWZyVWp0bi1OYVJ5QVl2TTNEaFNUQXYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwd6KMA0G CSqGSIb3DQEBCwUAA4IBAQAJCbbQuou9ryeZAfkkGUz2+Aq3EErG2HIDd+802frQ wB+juEFl/7jVC/IgwskdiuNZX9hf1lRs2WvSoeZLICAj/dsnC673j5x9hU4h3q0o S1MWeGLJw4XeVWf79jiodUt9c1huKhNzLdIq8SgZwPm10hUFgGNtqaquCEcG02NR RxjM4rgeWiQnIy0HAlyi6OvSsKIlWZ6JURevkMP+6O1tKJUXpsD4d4czcUZUgI0w BpJJD4TjK8hYx0CBcVO77Qa0CXjQaW5vHmY57tVdKjrQHuhw74qBSTXQrH26IHmd Dy2dEMomNHq2u3tgxKMTzhTxAyjf4mPqdxeLD3u0hxQS -----END CERTIFICATE-----Generated at Mon Jan 26 19:20:02 2026 by rpki-client