This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/i32O4Awpk6Wzuhz_6gXZHvrJAF4.roa File: i32O4Awpk6Wzuhz_6gXZHvrJAF4.roa (raw, json) Hash identifier: 0Vd7At1cP4C2ac+N+tPKbasTa+c3bTWjDl/QX9YCn48= Subject key identifier: 8B:7D:8E:E0:0C:29:93:A5:B3:BA:1C:FF:EA:05:D9:1E:FA:C9:00:5E Certificate issuer: /CN=b90dfc2a651b5efab2c0cd59322d6d3b55906563 Certificate serial: 019BFFC7EC3CB34C643B141CDC5ACFEFADD2 Authority key identifier: B9:0D:FC:2A:65:1B:5E:FA:B2:C0:CD:59:32:2D:6D:3B:55:90:65:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQ38KmUbXvqywM1ZMi1tO1WQZWM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/i32O4Awpk6Wzuhz_6gXZHvrJAF4.roa Signing time: Tue 27 Jan 2026 14:07:30 +0000 ROA not before: Tue 27 Jan 2026 14:07:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201783 IP address blocks: 46.19.215.0/24 maxlen: 24 185.238.172.0/24 maxlen: 24 2a01:ad00:7::/48 maxlen: 48 2a01:ad00:128::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft rsync://rpki.ripe.net/repository/DEFAULT/uQ38KmUbXvqywM1ZMi1tO1WQZWM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:c7:ec:3c:b3:4c:64:3b:14:1c:dc:5a:cf:ef:ad:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b90dfc2a651b5efab2c0cd59322d6d3b55906563 Validity Not Before: Jan 27 14:07:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b7d8ee00c2993a5b3ba1cffea05d91efac9005e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0c:7d:9a:73:58:d7:f7:26:d9:36:58:14:c7: 1c:ca:ec:d4:48:77:85:62:3e:03:6a:54:2c:53:c0: 37:5a:58:0c:f1:3c:d8:b6:6f:53:40:5c:0c:04:73: a0:da:b2:1f:2e:cf:4b:5e:8d:01:07:1c:04:d6:4c: cc:79:3d:67:32:52:a3:f9:5e:27:29:65:44:a2:a6: d5:0c:55:6d:03:e4:4f:36:ad:ad:ff:ae:44:c9:68: 03:75:3a:50:22:56:20:ae:01:04:ea:25:70:52:3b: 0c:bf:3a:73:db:63:f4:ba:e4:4d:7c:2a:dc:7d:43: 61:3c:55:6e:fa:a9:fd:fb:c5:a2:7e:b7:33:f9:50: 2b:2b:0f:5b:b6:7c:97:a1:1a:03:cd:28:b6:2a:29: 6a:72:57:b8:05:ba:06:32:a1:db:81:5f:c8:7d:01: c6:39:9e:fd:f6:4a:41:71:0b:e2:14:5b:1d:3e:c6: 54:91:c6:9d:c6:0d:a6:2a:e1:43:78:9e:40:1e:cf: 2c:a4:38:0f:b7:d2:7c:39:d1:1e:d8:3b:55:ed:51: 22:df:1f:17:52:31:19:5a:0c:49:ca:7e:be:ac:a0: 42:7e:74:e6:3a:2d:08:7b:93:87:63:73:02:59:58: c4:26:e0:24:9c:87:ff:87:3f:2e:6c:a2:40:9e:0b: aa:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:7D:8E:E0:0C:29:93:A5:B3:BA:1C:FF:EA:05:D9:1E:FA:C9:00:5E X509v3 Authority Key Identifier: keyid:B9:0D:FC:2A:65:1B:5E:FA:B2:C0:CD:59:32:2D:6D:3B:55:90:65:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ38KmUbXvqywM1ZMi1tO1WQZWM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/i32O4Awpk6Wzuhz_6gXZHvrJAF4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.19.215.0/24 185.238.172.0/24 IPv6: 2a01:ad00:7::/48 2a01:ad00:128::/48 Signature Algorithm: sha256WithRSAEncryption 0c:6e:3e:6b:06:ad:bb:89:62:6e:90:fe:ae:ec:5e:48:f7:b1: 4b:c7:e0:ed:2b:af:f6:bd:62:24:92:63:c7:29:98:6b:a5:91: de:ee:9a:4f:7a:88:bf:16:7f:86:4e:08:c7:20:9c:58:72:dd: 01:a9:9a:96:fe:29:4a:f7:eb:fc:78:c5:e5:53:91:b0:e4:85: 21:f4:5b:ed:0a:ad:a7:1c:20:99:64:b4:f7:98:71:e3:22:a7: 91:df:1e:fd:1b:f6:88:30:23:58:94:c3:f0:86:3e:8d:4c:9f: 62:ed:4b:97:5f:d5:21:c6:f2:40:52:0a:f5:1c:55:cf:60:e8: 84:4d:b1:18:fc:3b:49:38:3c:af:06:5c:a4:dd:27:dc:67:f7: 40:f3:2d:8f:65:1a:c1:78:5a:11:16:f4:f0:ec:17:b9:c0:db: df:78:04:f9:91:2a:64:7f:5a:98:84:33:cf:4a:0e:ea:20:60: 16:1c:ae:3e:c6:1d:1a:d0:09:a4:bd:61:d2:91:04:e3:ea:75: 26:15:7c:67:8d:b0:4c:aa:19:e9:4c:05:6a:72:b4:10:cf:af: ba:58:6b:d1:e5:65:0e:e3:12:d1:fe:e5:a6:7b:08:25:02:e2: c8:03:19:1d:d4:97:ab:00:ce:ec:0b:7d:2f:5c:fc:e0:cf:46: 70:1e:d1:51 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZv/x+w8s0xkOxQc3FrP763SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MGRmYzJhNjUxYjVlZmFiMmMwY2Q1OTMyMmQ2ZDNiNTU5 MDY1NjMwHhcNMjYwMTI3MTQwNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjdkOGVlMDBjMjk5M2E1YjNiYTFjZmZlYTA1ZDkxZWZhYzkwMDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAx9mnNY1/cm2TZYFMccyuzUSHeF Yj4DalQsU8A3WlgM8TzYtm9TQFwMBHOg2rIfLs9LXo0BBxwE1kzMeT1nMlKj+V4n KWVEoqbVDFVtA+RPNq2t/65EyWgDdTpQIlYgrgEE6iVwUjsMvzpz22P0uuRNfCrc fUNhPFVu+qn9+8Wifrcz+VArKw9btnyXoRoDzSi2Kilqcle4BboGMqHbgV/IfQHG OZ799kpBcQviFFsdPsZUkcadxg2mKuFDeJ5AHs8spDgPt9J8OdEe2DtV7VEi3x8X UjEZWgxJyn6+rKBCfnTmOi0Ie5OHY3MCWVjEJuAknIf/hz8ubKJAnguqmQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFIt9juAMKZOls7oc/+oF2R76yQBeMB8GA1UdIwQY MBaAFLkN/CplG176ssDNWTItbTtVkGVjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVEzOEttVWJYdnF5d00xWk1pMXRPMVdRWldNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84NDdiYzgtZjdlNi00M2UwLWE1Y2Yt ZDNlMTZhMTYzZGQzLzEvaTMyTzRBd3BrNld6dWh6XzZnWFpIdnJKQUY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC84NDdiYzgtZjdlNi00M2UwLWE1Y2YtZDNlMTZhMTYzZGQz LzEvdVEzOEttVWJYdnF5d00xWk1pMXRPMVdRWldNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQALhPXAwQA ue6sMBgEAgACMBIDBwAqAa0AAAcDBwAqAa0AASgwDQYJKoZIhvcNAQELBQADggEB AAxuPmsGrbuJYm6Q/q7sXkj3sUvH4O0rr/a9YiSSY8cpmGulkd7umk96iL8Wf4ZO CMcgnFhy3QGpmpb+KUr36/x4xeVTkbDkhSH0W+0KraccIJlktPeYceMip5HfHv0b 9ogwI1iUw/CGPo1Mn2LtS5df1SHG8kBSCvUcVc9g6IRNsRj8O0k4PK8GXKTdJ9xn 90DzLY9lGsF4WhEW9PDsF7nA2994BPmRKmR/WpiEM89KDuogYBYcrj7GHRrQCaS9 YdKRBOPqdSYVfGeNsEyqGelMBWpytBDPr7pYa9HlZQ7jEtH+5aZ7CCUC4sgDGR3U l6sAzuwLfS9c/ODPRnAe0VE= -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:08 2026 by rpki-client