This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/s8RwLaAcYW-FcVFkTHdO592EBJw.roa File: s8RwLaAcYW-FcVFkTHdO592EBJw.roa (raw, json) Hash identifier: 23Vx3ChhQtBmCL55miGjdzYucRN+3e2NsCi7uSICISw= Subject key identifier: B3:C4:70:2D:A0:1C:61:6F:85:71:51:64:4C:77:4E:E7:DD:84:04:9C Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139 Certificate serial: 019B7CEE5C4460BECA8CEC7F2C9EAC05C975 Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/s8RwLaAcYW-FcVFkTHdO592EBJw.roa Signing time: Fri 02 Jan 2026 04:19:14 +0000 ROA not before: Fri 02 Jan 2026 04:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34315 IP address blocks: 46.227.8.0/21 maxlen: 21 85.93.96.0/19 maxlen: 19 151.237.224.0/21 maxlen: 21 2a00:c40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 00:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:5c:44:60:be:ca:8c:ec:7f:2c:9e:ac:05:c9:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139 Validity Not Before: Jan 2 04:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3c4702da01c616f857151644c774ee7dd84049c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7c:3f:66:63:8f:cf:85:e2:ae:bc:8b:ff:d0: 47:95:71:4e:4c:b3:71:80:00:a0:f1:12:77:e0:12: c9:c7:2e:4c:70:eb:0d:2b:61:6f:12:b1:68:2e:97: de:26:3a:65:1b:4e:4e:fc:a9:a0:d5:3d:6b:52:04: 32:b9:32:13:1d:31:08:02:25:c0:27:33:88:45:55: 9f:d8:4f:8c:a9:1a:6a:b0:33:a1:9e:57:a3:90:df: 05:06:1b:02:51:f0:31:57:10:c1:2d:e1:d8:b8:0b: 33:e2:f8:da:53:d9:1a:1e:7f:eb:95:ed:7d:bd:c2: cd:66:23:33:18:3a:85:82:09:f6:f4:9d:16:ec:3e: a0:44:3d:64:3f:06:02:dc:83:39:be:30:55:78:f9: 2b:b7:82:b2:ba:7e:92:96:6d:c5:85:95:03:9f:7b: e9:28:6a:3a:8c:56:8d:86:51:91:dc:0c:92:c1:7a: 09:5f:12:af:8d:db:d0:8a:d4:3d:fb:da:b2:f0:c9: c3:fd:5c:fd:0d:ac:51:80:78:58:69:ff:da:b1:b4: 17:3a:9d:fe:35:03:4a:95:92:01:ac:73:eb:7e:4b: 31:c7:98:c8:5a:dc:fe:35:cb:b4:cf:a2:07:23:bc: 4b:ff:61:05:ad:37:5a:32:b6:e3:5a:dd:3a:90:0f: be:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C4:70:2D:A0:1C:61:6F:85:71:51:64:4C:77:4E:E7:DD:84:04:9C X509v3 Authority Key Identifier: keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/s8RwLaAcYW-FcVFkTHdO592EBJw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.227.8.0/21 85.93.96.0/19 151.237.224.0/21 IPv6: 2a00:c40::/32 Signature Algorithm: sha256WithRSAEncryption 66:c7:76:2a:94:93:f6:ab:dd:d3:ff:57:38:4e:5b:91:fd:0f: 39:af:61:e5:22:25:e5:e8:3e:91:c5:7f:da:8a:4f:6b:59:39: e0:6e:bf:de:fb:5d:91:94:4a:f9:0b:76:7a:34:96:24:9b:03: 7a:b7:8c:c1:de:69:ab:21:82:6c:0b:ef:63:ce:fc:a5:b0:1c: 4d:6f:fb:7c:f6:84:ec:37:f2:c1:25:7d:6c:52:02:11:7e:66: f1:d1:15:f2:8f:0d:8e:09:27:b5:15:e7:15:f4:94:76:0e:2a: 56:78:8a:f7:97:bd:f6:7d:1e:59:2c:72:91:20:88:e9:e5:32: 19:49:3a:2f:04:4d:d8:b3:2a:1d:66:ae:b2:1c:94:01:de:58: 3d:b9:0a:ad:b9:53:eb:a1:9a:24:01:50:b7:65:2b:58:10:ce: 85:58:45:3f:17:49:c6:fe:db:ff:33:92:2d:32:80:2f:ef:30: 52:bf:37:83:ce:cd:c3:cc:20:33:74:62:fc:3d:62:6c:1a:ee: 71:37:cb:60:2b:46:65:01:bb:d6:9e:ca:3e:2b:c8:5d:45:89: 8b:09:87:ec:e9:93:f9:d5:77:c3:f0:47:b9:31:b1:c8:f7:6b: 74:2e:c0:a6:3f:f4:aa:77:1d:97:f5:94:09:d6:f5:14:67:d3: 28:85:70:44 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt87lxEYL7KjOx/LJ6sBcl1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyOTM1MmE4ZDJkZDcwYzkxZmZjZWM4ZTMyM2ZlNjlmMWU5 YTQxMzkwHhcNMjYwMTAyMDQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2M0NzAyZGEwMWM2MTZmODU3MTUxNjQ0Yzc3NGVlN2RkODQwNDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Hw/ZmOPz4XirryL/9BHlXFOTLNx gACg8RJ34BLJxy5McOsNK2FvErFoLpfeJjplG05O/Kmg1T1rUgQyuTITHTEIAiXA JzOIRVWf2E+MqRpqsDOhnlejkN8FBhsCUfAxVxDBLeHYuAsz4vjaU9kaHn/rle19 vcLNZiMzGDqFggn29J0W7D6gRD1kPwYC3IM5vjBVePkrt4Kyun6Slm3FhZUDn3vp KGo6jFaNhlGR3AySwXoJXxKvjdvQitQ9+9qy8MnD/Vz9DaxRgHhYaf/asbQXOp3+ NQNKlZIBrHPrfksxx5jIWtz+Ncu0z6IHI7xL/2EFrTdaMrbjWt06kA++7wIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFLPEcC2gHGFvhXFRZEx3TufdhAScMB8GA1UdIwQY MBaAFJKTUqjS3XDJH/zsjjI/5p8emkE5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3BOU3FOTGRjTWtmX095T01qX21ueDZhUVRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83YjZlZGMtYWQyMy00ZDczLWFiNTYt MGExYTM1ODk3ZjEwLzEvczhSd0xhQWNZVy1GY1ZGa1RIZE81OTJFQkp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi83YjZlZGMtYWQyMy00ZDczLWFiNTYtMGExYTM1ODk3ZjEw LzEva3BOU3FOTGRjTWtmX095T01qX21ueDZhUVRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDLuMIAwQF VV1gAwQDl+3gMA0EAgACMAcDBQAqAAxAMA0GCSqGSIb3DQEBCwUAA4IBAQBmx3Yq lJP2q93T/1c4TluR/Q85r2HlIiXl6D6RxX/aik9rWTngbr/e+12RlEr5C3Z6NJYk mwN6t4zB3mmrIYJsC+9jzvylsBxNb/t89oTsN/LBJX1sUgIRfmbx0RXyjw2OCSe1 FecV9JR2DipWeIr3l732fR5ZLHKRIIjp5TIZSTovBE3YsyodZq6yHJQB3lg9uQqt uVProZokAVC3ZStYEM6FWEU/F0nG/tv/M5ItMoAv7zBSvzeDzs3DzCAzdGL8PWJs Gu5xN8tgK0ZlAbvWnso+K8hdRYmLCYfs6ZP51XfD8Ee5MbHI92t0LsCmP/Sqdx2X 9ZQJ1vUUZ9MohXBE -----END CERTIFICATE-----Generated at Mon Feb 2 09:53:06 2026 by rpki-client