This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/8Hgg7PrGAUqoQ2u3DLHM2X1ZtEo.roa File: 8Hgg7PrGAUqoQ2u3DLHM2X1ZtEo.roa (raw, json) Hash identifier: ZCvbYnwhk97Csz5gtNwxvItsTIFKupRDzbGZu2sLnLA= Subject key identifier: F0:78:20:EC:FA:C6:01:4A:A8:43:6B:B7:0C:B1:CC:D9:7D:59:B4:4A Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9 Certificate serial: 019B7D5C0F48FE98D3ED8DBF4936342F6605 Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/8Hgg7PrGAUqoQ2u3DLHM2X1ZtEo.roa Signing time: Fri 02 Jan 2026 06:19:03 +0000 ROA not before: Fri 02 Jan 2026 06:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31246 IP address blocks: 193.176.32.0/24 maxlen: 24 194.164.239.0/24 maxlen: 24 195.200.23.0/24 maxlen: 24 2a14:2040::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:0f:48:fe:98:d3:ed:8d:bf:49:36:34:2f:66:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9 Validity Not Before: Jan 2 06:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f07820ecfac6014aa8436bb70cb1ccd97d59b44a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5d:94:27:76:69:a5:4e:8b:bc:2c:86:82:03: a3:d0:ab:24:c4:b2:e6:41:85:9d:77:06:79:43:0d: c0:20:80:d3:e1:06:9a:95:3c:97:6d:0d:b9:f5:76: 42:ad:d7:f1:21:f0:2c:7c:93:82:b6:2c:cd:1b:fc: 03:63:78:62:da:36:00:1c:0e:b0:9d:5e:14:30:75: 05:a9:1d:57:c6:9b:76:34:22:15:e7:fb:a2:ea:61: dc:12:83:31:97:52:ea:7f:39:1f:c7:a6:de:0e:ee: 59:25:01:74:01:8b:eb:d9:a8:09:e9:5c:54:fd:c2: be:e3:d7:14:3f:26:06:84:22:a6:60:0e:ea:29:d9: a6:ec:1b:51:a1:95:59:85:4f:5f:df:bf:d5:e3:e0: fd:c9:b8:88:83:1f:9e:56:a9:9e:54:f5:2c:b5:02: 2e:90:a8:91:73:7b:1d:13:45:69:8f:43:3d:2c:44: 19:33:a2:28:54:1b:c2:c8:90:3d:2f:9f:a4:20:5c: 7e:ad:53:67:78:99:36:6a:67:3d:c2:7a:b7:96:a2: fb:3f:3e:d4:c5:72:36:c1:03:4c:c9:a9:cf:50:82: d2:09:00:06:d8:af:a5:ef:f1:e2:a9:b2:21:db:06: f4:6c:d7:ec:48:6b:d5:ad:1e:50:d9:32:98:08:c5: ef:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:78:20:EC:FA:C6:01:4A:A8:43:6B:B7:0C:B1:CC:D9:7D:59:B4:4A X509v3 Authority Key Identifier: keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/8Hgg7PrGAUqoQ2u3DLHM2X1ZtEo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.176.32.0/24 194.164.239.0/24 195.200.23.0/24 IPv6: 2a14:2040::/29 Signature Algorithm: sha256WithRSAEncryption 02:0b:9e:6a:27:85:21:f7:02:b5:16:a7:22:fa:6d:a0:cf:cd: 46:9d:8c:4f:bd:d0:15:8f:1b:dd:8b:12:d1:6d:bb:ee:84:ab: f6:e0:0a:59:06:36:eb:dd:1f:14:c9:73:f4:01:34:5b:65:50: 4c:93:dc:96:c2:67:0d:c9:8c:4d:5f:f8:b2:2b:87:47:d2:6a: 1c:e2:d3:9f:d2:a1:e9:40:dc:2b:3d:29:15:3f:50:63:f4:24: f6:17:c2:35:23:0d:34:4b:05:8d:bf:30:9a:d5:4a:40:70:18: 0c:d8:e9:57:3a:e6:ca:76:8e:35:7d:3f:fc:df:9d:ef:d9:a7: 62:e8:d2:c1:61:7c:57:9d:dc:79:84:f6:b4:c9:1e:42:a1:33: 8f:23:b4:57:35:ee:0c:2e:a3:f4:0d:4e:b0:07:ea:4a:25:94: a8:48:8e:bf:8d:85:7e:1a:25:f5:37:b4:d7:ea:95:23:5c:39: fb:7d:17:b7:bc:5b:8a:72:0a:85:bd:64:0e:a6:50:e3:33:87: ac:88:e5:b6:ae:4c:ac:82:b6:05:74:3f:21:1c:0c:5e:b8:f3: ed:f6:a9:04:60:dd:1a:b8:ac:b4:d7:0c:1c:71:8e:bf:27:39: f6:a5:b1:3c:ad:0b:9e:a7:67:7b:53:bc:03:7d:4a:9f:ee:5c: 16:7e:55:3f -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt9XA9I/pjT7Y2/STY0L2YFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MTVlMDJiZGE3YTkwNzE0ODc4MzdkMzE1NThiNWUwMjIx ZDNjZjkwHhcNMjYwMTAyMDYxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDc4MjBlY2ZhYzYwMTRhYTg0MzZiYjcwY2IxY2NkOTdkNTliNDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl2UJ3ZppU6LvCyGggOj0KskxLLm QYWddwZ5Qw3AIIDT4QaalTyXbQ259XZCrdfxIfAsfJOCtizNG/wDY3hi2jYAHA6w nV4UMHUFqR1Xxpt2NCIV5/ui6mHcEoMxl1Lqfzkfx6beDu5ZJQF0AYvr2agJ6VxU /cK+49cUPyYGhCKmYA7qKdmm7BtRoZVZhU9f37/V4+D9ybiIgx+eVqmeVPUstQIu kKiRc3sdE0Vpj0M9LEQZM6IoVBvCyJA9L5+kIFx+rVNneJk2amc9wnq3lqL7Pz7U xXI2wQNMyanPUILSCQAG2K+l7/HiqbIh2wb0bNfsSGvVrR5Q2TKYCMXv8QIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFPB4IOz6xgFKqENrtwyxzNl9WbRKMB8GA1UdIwQY MBaAFPgV4CvaepBxSHg30xVYteAiHTz5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1CWGdLOXA2a0hGSWVEZlRGVmkxNENJZFBQay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvY2Q0NzJjLTQyNTYtNDBmZi05OGUy LWQ5ODM4NDM5NzkyOS8xLzhIZ2c3UHJHQVVxb1EydTNETEhNMlgxWnRFby5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMjgvY2Q0NzJjLTQyNTYtNDBmZi05OGUyLWQ5ODM4NDM5Nzky OS8xLzEtQlhnSzlwNmtIRkllRGZURlZpMTRDSWRQUGsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBADBsCAD BADCpO8DBADDyBcwDQQCAAIwBwMFAyoUIEAwDQYJKoZIhvcNAQELBQADggEBAAIL nmonhSH3ArUWpyL6baDPzUadjE+90BWPG92LEtFtu+6Eq/bgClkGNuvdHxTJc/QB NFtlUEyT3JbCZw3JjE1f+LIrh0fSahzi05/SoelA3Cs9KRU/UGP0JPYXwjUjDTRL BY2/MJrVSkBwGAzY6Vc65sp2jjV9P/zfne/Zp2Lo0sFhfFed3HmE9rTJHkKhM48j tFc17gwuo/QNTrAH6kollKhIjr+NhX4aJfU3tNfqlSNcOft9F7e8W4pyCoW9ZA6m UOMzh6yI5bauTKyCtgV0PyEcDF648+32qQRg3Rq4rLTXDBxxjr8nOfalsTytC56n Z3tTvAN9Sp/uXBZ+VT8= -----END CERTIFICATE-----Generated at Sat Jan 3 02:31:09 2026 by rpki-client