This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/hMYGnZ8V3zn1wswDkH9uB5kQnbc.roa File: hMYGnZ8V3zn1wswDkH9uB5kQnbc.roa (raw, json) Hash identifier: TZ/1y+suo43ZgqAyUHnWJ81Rah/utALvEr+b4U8z1+g= Subject key identifier: 84:C6:06:9D:9F:15:DF:39:F5:C2:CC:03:90:7F:6E:07:99:10:9D:B7 Certificate issuer: /CN=8bc1168da16020287eea1fdeca0541930a9d3689 Certificate serial: 019B7BA545B507EC487CAF3D867DABCFB1ED Authority key identifier: 8B:C1:16:8D:A1:60:20:28:7E:EA:1F:DE:CA:05:41:93:0A:9D:36:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8EWjaFgICh-6h_eygVBkwqdNok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/hMYGnZ8V3zn1wswDkH9uB5kQnbc.roa Signing time: Thu 01 Jan 2026 22:19:47 +0000 ROA not before: Thu 01 Jan 2026 22:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198738 IP address blocks: 193.169.200.0/24 maxlen: 24 193.169.201.0/24 maxlen: 24 193.201.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.mft rsync://rpki.ripe.net/repository/DEFAULT/i8EWjaFgICh-6h_eygVBkwqdNok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 22:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:45:b5:07:ec:48:7c:af:3d:86:7d:ab:cf:b1:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bc1168da16020287eea1fdeca0541930a9d3689 Validity Not Before: Jan 1 22:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84c6069d9f15df39f5c2cc03907f6e0799109db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ee:be:fc:fb:ae:15:95:05:d7:4e:b7:b1:0d: 62:d9:e3:f6:69:f8:4b:87:73:86:46:fb:82:69:8c: 26:c9:d9:9e:be:60:58:ec:4a:fa:71:b3:74:7d:be: 2e:0a:3c:98:f5:f5:23:3f:15:c2:97:29:8c:2f:00: a1:82:37:ac:82:ff:41:2a:2f:37:d0:1d:c8:a8:f3: 14:26:5a:8d:41:a0:94:19:35:54:c1:9d:67:7f:6c: f3:a6:8c:e1:f1:fc:1d:ce:d9:7b:fe:25:a8:b1:34: 17:0f:6e:b6:a1:af:c4:a6:09:47:04:a6:7a:c5:bb: 57:9b:fb:98:87:bf:4f:46:25:ee:d9:ef:e1:a2:c1: 8c:47:b2:3c:8f:80:f7:35:31:46:20:31:de:a2:ba: 31:c4:ab:75:61:5e:45:0d:b6:ab:60:d3:b6:21:79: f7:5c:31:be:23:68:f2:96:82:85:cf:ea:51:16:a5: 3e:fa:9c:6a:03:22:79:93:a1:a8:b0:f3:35:59:d7: 14:d4:da:89:37:c3:23:dc:4b:e9:39:ff:3a:da:42: ce:e5:50:df:24:81:3b:35:46:f0:fd:6d:d9:04:b9: 25:fc:72:29:b4:ad:f6:a7:47:71:c7:e4:29:95:0f: cc:b8:6a:f7:22:bf:48:58:d2:80:30:4e:33:e4:15: b4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C6:06:9D:9F:15:DF:39:F5:C2:CC:03:90:7F:6E:07:99:10:9D:B7 X509v3 Authority Key Identifier: keyid:8B:C1:16:8D:A1:60:20:28:7E:EA:1F:DE:CA:05:41:93:0A:9D:36:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8EWjaFgICh-6h_eygVBkwqdNok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/hMYGnZ8V3zn1wswDkH9uB5kQnbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.169.200.0/23 193.201.67.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:0c:c9:b4:32:b7:5e:7f:79:34:ad:3d:1f:32:8c:cb:b7:1b: 5e:41:93:a4:c6:30:cb:65:df:f3:36:0e:33:34:19:7f:ea:af: ab:e1:16:bf:06:55:2d:b4:fb:8e:94:1f:47:56:d9:00:32:33: 36:75:9b:a1:7a:48:e8:54:05:40:ba:1e:f6:68:03:70:e9:e3: 66:2a:ba:09:18:b8:53:2c:69:7d:1e:c3:de:93:58:e8:c1:aa: 7f:48:69:7a:0b:a2:8b:0a:f4:54:b6:21:e7:28:e9:41:8f:e8: 3e:79:22:cf:b8:d8:eb:ef:13:7e:c7:e8:78:9b:31:27:e4:c3: 63:1f:07:b0:a3:4c:d0:60:8a:5b:80:8a:67:e7:9d:de:b3:d1: ec:49:64:4b:45:c9:e2:e9:70:bb:56:20:08:11:ef:11:37:12: 43:4e:3e:95:ec:a3:6a:9e:62:c3:75:b3:1d:11:84:b7:f0:10: 3f:0e:db:6b:fe:59:5a:07:02:47:8c:d7:be:27:bf:ac:b9:f7: 32:46:3f:d7:fd:c8:e5:7d:de:2a:bd:82:79:83:27:16:fb:8f: a5:7a:49:38:57:3b:2c:f3:8f:8a:72:e9:54:4d:c5:e2:fc:97: c9:5a:69:6a:0a:1c:9e:ae:43:d7:f8:69:bb:f0:17:69:e3:89: 24:6b:d5:cd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pUW1B+xIfK89hn2rz7HtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYzExNjhkYTE2MDIwMjg3ZWVhMWZkZWNhMDU0MTkzMGE5 ZDM2ODkwHhcNMjYwMTAxMjIxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGM2MDY5ZDlmMTVkZjM5ZjVjMmNjMDM5MDdmNmUwNzk5MTA5ZGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+6+/PuuFZUF1063sQ1i2eP2afhL h3OGRvuCaYwmydmevmBY7Er6cbN0fb4uCjyY9fUjPxXClymMLwChgjesgv9BKi83 0B3IqPMUJlqNQaCUGTVUwZ1nf2zzpozh8fwdztl7/iWosTQXD262oa/EpglHBKZ6 xbtXm/uYh79PRiXu2e/hosGMR7I8j4D3NTFGIDHeoroxxKt1YV5FDbarYNO2IXn3 XDG+I2jyloKFz+pRFqU++pxqAyJ5k6GosPM1WdcU1NqJN8Mj3EvpOf862kLO5VDf JIE7NUbw/W3ZBLkl/HIptK32p0dxx+QplQ/MuGr3Ir9IWNKAME4z5BW0XQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFITGBp2fFd859cLMA5B/bgeZEJ23MB8GA1UdIwQY MBaAFIvBFo2hYCAofuof3soFQZMKnTaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaThFV2phRmdJQ2gtNmhfZXlnVkJrd3FkTm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8xOGJjNjAtZWNhNi00OGRkLWFlOTkt MjZjZTA3MWIwYzM2LzEvaE1ZR25aOFYzem4xd3N3RGtIOXVCNWtRbmJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8xOGJjNjAtZWNhNi00OGRkLWFlOTktMjZjZTA3MWIwYzM2 LzEvaThFV2phRmdJQ2gtNmhfZXlnVkJrd3FkTm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwanIAwQA wclDMA0GCSqGSIb3DQEBCwUAA4IBAQBaDMm0Mrdef3k0rT0fMozLtxteQZOkxjDL Zd/zNg4zNBl/6q+r4Ra/BlUttPuOlB9HVtkAMjM2dZuhekjoVAVAuh72aANw6eNm KroJGLhTLGl9HsPek1jowap/SGl6C6KLCvRUtiHnKOlBj+g+eSLPuNjr7xN+x+h4 mzEn5MNjHwewo0zQYIpbgIpn553es9HsSWRLRcni6XC7ViAIEe8RNxJDTj6V7KNq nmLDdbMdEYS38BA/Dttr/llaBwJHjNe+J7+sufcyRj/X/cjlfd4qvYJ5gycW+4+l ekk4Vzss84+KculUTcXi/JfJWmlqChyerkPX+Gm78Bdp44kka9XN -----END CERTIFICATE-----Generated at Tue Feb 10 08:38:23 2026 by rpki-client