This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/8MABlsDBV8LP0o72Ps6uS8md-EE.roa File: 8MABlsDBV8LP0o72Ps6uS8md-EE.roa (raw, json) Hash identifier: fXmqgSgl411LYZCpGZdGkCF4TgXdZdFuZkTr9EWcmVw= Subject key identifier: F0:C0:01:96:C0:C1:57:C2:CF:D2:8E:F6:3E:CE:AE:4B:C9:9D:F8:41 Certificate issuer: /CN=fae16b493d2a12897caf4757bb18a02eec2cde17 Certificate serial: 019C0FFFD52DC8E842A50187C193A3A389A7 Authority key identifier: FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/8MABlsDBV8LP0o72Ps6uS8md-EE.roa Signing time: Fri 30 Jan 2026 17:42:30 +0000 ROA not before: Fri 30 Jan 2026 17:42:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12322 IP address blocks: 82.142.0.0/18 maxlen: 18 83.152.0.0/13 maxlen: 15 83.214.0.0/16 maxlen: 16 88.120.0.0/13 maxlen: 15 91.160.0.0/12 maxlen: 15 212.62.128.0/18 maxlen: 18 213.36.0.0/16 maxlen: 18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0f:ff:d5:2d:c8:e8:42:a5:01:87:c1:93:a3:a3:89:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fae16b493d2a12897caf4757bb18a02eec2cde17 Validity Not Before: Jan 30 17:42:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0c00196c0c157c2cfd28ef63eceae4bc99df841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:61:f9:07:3a:fc:b3:64:a4:67:bd:56:0a:2d: 5b:99:0f:88:0d:3d:ef:8c:ce:07:9d:4b:81:0c:cf: ef:c7:34:66:77:a6:5a:b5:ea:7f:8b:f6:6a:79:9a: 49:00:79:8a:54:2d:b4:2e:ce:e6:bd:a4:85:38:06: dc:a8:12:70:8f:fb:94:bd:a5:00:f3:8b:cc:7f:1e: 2f:ba:44:2f:7a:41:fc:a5:26:5c:44:14:90:3d:69: f8:42:84:0f:68:9a:0c:ad:89:9f:8e:d7:e4:80:58: 8f:00:4f:10:0a:64:ae:29:14:b8:00:05:da:a3:a8: 48:dc:89:dd:b8:7e:4f:a8:03:2e:41:84:9d:91:e1: 69:23:b1:e6:fa:1d:a1:88:c1:7c:2f:a5:c5:e1:c2: 60:16:06:bc:9d:03:ca:39:88:83:ef:30:83:25:41: 8b:35:59:d4:52:3a:2e:26:fb:fc:f1:bc:10:85:01: 19:13:25:e7:3f:f1:b7:4e:19:2d:73:5f:9c:8a:05: 9b:1e:cb:03:2d:70:12:8f:f4:90:da:36:8f:32:56: ff:0d:ce:7f:3c:f6:cd:58:7d:90:95:66:51:49:40: 6c:11:b1:dd:e7:41:f0:32:d5:cd:16:2a:f4:02:fc: 92:70:a1:f6:64:a6:4e:6e:96:cb:58:0b:93:83:35: a8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C0:01:96:C0:C1:57:C2:CF:D2:8E:F6:3E:CE:AE:4B:C9:9D:F8:41 X509v3 Authority Key Identifier: keyid:FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/8MABlsDBV8LP0o72Ps6uS8md-EE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.142.0.0/18 83.152.0.0/13 83.214.0.0/16 88.120.0.0/13 91.160.0.0/12 212.62.128.0/18 213.36.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8a:0f:48:67:1b:58:4f:35:39:62:54:66:5f:81:9e:2f:d1:27: 5a:d4:f0:81:1c:27:c1:a7:91:56:3d:e4:8e:7e:88:f5:8d:5f: f6:80:17:55:46:cd:51:35:06:89:99:d4:d8:46:e5:f7:ef:21: 6e:9d:c3:53:97:36:af:bd:27:f8:53:96:d6:22:8e:4d:6a:49: 71:e8:7c:4a:cf:e5:95:4d:21:e1:49:c0:42:17:6f:46:3d:4e: 9f:4b:34:c4:68:68:32:0d:32:1e:c3:e2:6d:39:2d:67:95:93: 54:a8:bb:c2:15:32:fc:28:07:30:a7:da:92:57:94:b9:8b:c1: 34:58:a1:1e:9e:f3:85:0d:5c:f2:48:cd:98:aa:a4:53:07:64: 4e:98:6e:45:f0:1a:32:ec:9c:e3:23:a1:02:11:59:e7:ff:9d: d4:87:b4:d5:17:bc:7c:08:35:92:f5:ce:ff:ab:35:bc:ba:c6: da:4d:dd:4a:cb:b5:3d:13:e2:81:cc:89:42:d3:ee:ec:19:3d: e8:7e:63:b9:3c:79:56:7a:a0:aa:6b:0b:b0:47:e7:0a:04:fc: b7:89:3b:e6:83:95:c0:fe:0b:e1:62:6f:b7:fa:4a:70:63:93: a1:b8:6f:f4:37:aa:66:bf:e3:85:26:06:bb:05:43:21:10:ab: 30:5f:89:3d -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZwP/9UtyOhCpQGHwZOjo4mnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZTE2YjQ5M2QyYTEyODk3Y2FmNDc1N2JiMThhMDJlZWMy Y2RlMTcwHhcNMjYwMTMwMTc0MjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGMwMDE5NmMwYzE1N2MyY2ZkMjhlZjYzZWNlYWU0YmM5OWRmODQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WH5Bzr8s2SkZ71WCi1bmQ+IDT3v jM4HnUuBDM/vxzRmd6Zatep/i/ZqeZpJAHmKVC20Ls7mvaSFOAbcqBJwj/uUvaUA 84vMfx4vukQvekH8pSZcRBSQPWn4QoQPaJoMrYmfjtfkgFiPAE8QCmSuKRS4AAXa o6hI3InduH5PqAMuQYSdkeFpI7Hm+h2hiMF8L6XF4cJgFga8nQPKOYiD7zCDJUGL NVnUUjouJvv88bwQhQEZEyXnP/G3Thktc1+cigWbHssDLXASj/SQ2jaPMlb/Dc5/ PPbNWH2QlWZRSUBsEbHd50HwMtXNFir0AvyScKH2ZKZObpbLWAuTgzWorQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFPDAAZbAwVfCz9KO9j7OrkvJnfhBMB8GA1UdIwQY MBaAFPrha0k9KhKJfK9HV7sYoC7sLN4XMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS11RnJTVDBxRW9sOHIwZFh1eGlnTHV3czNoYy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvMjkzZDM2LTlkYTItNDQwNS04ZGUz LTRhZmQ4MjU0YWU0My8xLzhNQUJsc0RCVjhMUDBvNzJQczZ1UzhtZC1FRS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZTMvMjkzZDM2LTlkYTItNDQwNS04ZGUzLTRhZmQ4MjU0YWU0 My8xLzEtdUZyU1QwcUVvbDhyMGRYdXhpZ0x1d3MzaGMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwPgYIKwYBBQUHAQcBAf8ELzAtMCsEAgABMCUDBAZSjgAD AwNTmAMDAFPWAwMDWHgDAwRboAMEBtQ+gAMDANUkMA0GCSqGSIb3DQEBCwUAA4IB AQCKD0hnG1hPNTliVGZfgZ4v0Sda1PCBHCfBp5FWPeSOfoj1jV/2gBdVRs1RNQaJ mdTYRuX37yFuncNTlzavvSf4U5bWIo5Naklx6HxKz+WVTSHhScBCF29GPU6fSzTE aGgyDTIew+JtOS1nlZNUqLvCFTL8KAcwp9qSV5S5i8E0WKEenvOFDVzySM2YqqRT B2ROmG5F8Boy7JzjI6ECEVnn/53Uh7TVF7x8CDWS9c7/qzW8usbaTd1Ky7U9E+KB zIlC0+7sGT3ofmO5PHlWeqCqawuwR+cKBPy3iTvmg5XA/gvhYm+3+kpwY5OhuG/0 N6pmv+OFJga7BUMhEKswX4k9 -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:26 2026 by rpki-client