This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/p8xrYoE8jgCdAonYCfT-ApjsEIQ.roa File: p8xrYoE8jgCdAonYCfT-ApjsEIQ.roa (raw, json) Hash identifier: f7jnATXq/oP3S34j8++EJHwq/uX1I51J0Ibdj4DXw3g= Subject key identifier: A7:CC:6B:62:81:3C:8E:00:9D:02:89:D8:09:F4:FE:02:98:EC:10:84 Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Certificate serial: 019BC702AA8753229EB2E5A3E13983C116CC Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/p8xrYoE8jgCdAonYCfT-ApjsEIQ.roa Signing time: Fri 16 Jan 2026 13:33:19 +0000 ROA not before: Fri 16 Jan 2026 13:33:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41745 IP address blocks: 193.68.88.0/24 maxlen: 24 193.68.89.0/24 maxlen: 24 213.21.237.0/24 maxlen: 24 213.21.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c7:02:aa:87:53:22:9e:b2:e5:a3:e1:39:83:c1:16:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Validity Not Before: Jan 16 13:33:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7cc6b62813c8e009d0289d809f4fe0298ec1084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:86:b8:c9:b8:bc:05:b6:f6:17:49:de:8b:59: 3b:57:d2:75:49:98:19:71:5f:c2:3f:78:05:f2:5a: c3:b4:6c:66:1e:44:cd:9a:0d:f0:cf:5f:c2:4a:4e: 16:7a:a2:da:3e:6d:ea:99:ff:53:50:41:3a:77:91: 05:dc:0a:33:68:38:e6:19:d4:c5:80:95:dd:d0:84: f7:56:de:52:b0:e3:2d:53:c3:6b:a2:e3:9b:15:93: aa:52:3d:4b:70:50:95:f9:b5:f6:6e:8a:f9:ec:b7: e6:d0:54:87:41:6e:d5:50:89:ed:cf:59:cc:18:b4: 07:0a:5d:fa:5e:16:4a:0b:96:59:81:57:89:8d:1f: f0:84:51:ff:6d:fa:52:d0:d1:67:9c:ac:76:ee:f3: 71:a4:74:da:0c:0e:62:e3:52:cf:72:85:bc:31:3a: cd:df:44:73:4b:57:27:02:1c:d4:26:39:28:a1:49: d1:a6:7e:70:b4:38:e0:60:f4:32:8b:72:9d:21:45: 65:7c:97:84:e0:0b:b7:75:a0:6d:35:93:86:16:d6: 63:1e:03:24:a5:2d:10:18:7a:8d:80:ce:20:70:05: 46:47:c3:c1:16:b0:59:e5:a6:0a:f3:aa:85:6b:48: 78:97:af:a3:76:46:2c:74:e8:41:36:6f:30:a9:de: 69:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:CC:6B:62:81:3C:8E:00:9D:02:89:D8:09:F4:FE:02:98:EC:10:84 X509v3 Authority Key Identifier: keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/p8xrYoE8jgCdAonYCfT-ApjsEIQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.68.88.0/23 213.21.237.0/24 213.21.240.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:e3:bd:7f:2c:ec:f8:eb:2c:0b:37:cf:9c:a1:c3:7c:ab:17: bd:81:71:40:f2:0c:0e:20:fa:28:ac:05:c5:10:03:7d:98:75: 96:95:01:fa:87:ea:c8:b3:08:44:d4:c7:37:ec:9b:e8:e1:50: 80:0e:17:d5:0a:a5:77:c3:e9:0a:dc:68:fc:4f:9c:aa:6b:c3: 34:b4:0e:48:07:32:48:7d:53:80:d6:42:bd:25:46:83:8d:0e: d5:58:d4:4b:6f:61:f9:e1:2e:0e:f0:70:44:71:a5:01:7c:9d: 0e:bf:14:92:3e:34:54:4f:69:37:2b:57:84:ee:4c:eb:e8:67: 02:89:18:0c:eb:ce:fb:67:7d:b1:70:d3:9b:a9:59:0d:f7:00: da:66:03:36:65:fe:3c:71:4c:b8:1a:30:9b:c3:be:d8:a9:37: ad:e6:0a:4b:d2:46:27:7f:15:98:84:e9:85:fd:68:48:0e:be: 21:4a:46:da:21:76:eb:a2:36:2e:df:01:13:48:94:86:48:bf: 1d:fe:82:36:8c:db:cb:52:e2:e8:a9:86:8f:65:d3:ee:24:cc: 2b:97:ae:15:6c:b5:48:3b:f3:12:c7:e0:71:8c:56:1c:a4:b5: 2d:42:6c:71:a6:37:40:5c:00:78:9f:e6:4f:48:7b:88:4a:ca: 28:52:5c:f0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZvHAqqHUyKesuWj4TmDwRbMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw MmFjZDkwHhcNMjYwMTE2MTMzMzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2NjNmI2MjgxM2M4ZTAwOWQwMjg5ZDgwOWY0ZmUwMjk4ZWMxMDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYa4ybi8Bbb2F0nei1k7V9J1SZgZ cV/CP3gF8lrDtGxmHkTNmg3wz1/CSk4WeqLaPm3qmf9TUEE6d5EF3AozaDjmGdTF gJXd0IT3Vt5SsOMtU8NrouObFZOqUj1LcFCV+bX2bor57Lfm0FSHQW7VUIntz1nM GLQHCl36XhZKC5ZZgVeJjR/whFH/bfpS0NFnnKx27vNxpHTaDA5i41LPcoW8MTrN 30RzS1cnAhzUJjkooUnRpn5wtDjgYPQyi3KdIUVlfJeE4Au3daBtNZOGFtZjHgMk pS0QGHqNgM4gcAVGR8PBFrBZ5aYK86qFa0h4l6+jdkYsdOhBNm8wqd5pewIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKfMa2KBPI4AnQKJ2An0/gKY7BCEMB8GA1UdIwQY MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt MWFmMjQ2NWE4ZWVjLzEvcDh4cllvRThqZ0NkQW9uWUNmVC1BcGpzRUlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBwURYAwQA 1RXtAwQA1RXwMA0GCSqGSIb3DQEBCwUAA4IBAQCa471/LOz46ywLN8+cocN8qxe9 gXFA8gwOIPoorAXFEAN9mHWWlQH6h+rIswhE1Mc37Jvo4VCADhfVCqV3w+kK3Gj8 T5yqa8M0tA5IBzJIfVOA1kK9JUaDjQ7VWNRLb2H54S4O8HBEcaUBfJ0OvxSSPjRU T2k3K1eE7kzr6GcCiRgM6877Z32xcNObqVkN9wDaZgM2Zf48cUy4GjCbw77YqTet 5gpL0kYnfxWYhOmF/WhIDr4hSkbaIXbrojYu3wETSJSGSL8d/oI2jNvLUuLoqYaP ZdPuJMwrl64VbLVIO/MSx+BxjFYcpLUtQmxxpjdAXAB4n+ZPSHuISsooUlzw -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:51 2026 by rpki-client