This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/C8dp2i69GRLoZ571uB2mWbfCLdg.roa File: C8dp2i69GRLoZ571uB2mWbfCLdg.roa (raw, json) Hash identifier: MHYNsBeT4icxCR72ie9j2XP7AldXHV3qsJ+q6TfnhAA= Subject key identifier: 0B:C7:69:DA:2E:BD:19:12:E8:67:9E:F5:B8:1D:A6:59:B7:C2:2D:D8 Certificate issuer: /CN=64e7553292af595426ee1d7dc919a2104894752b Certificate serial: 019B7E39216D629EAF24C5DBF598B7F9426B Authority key identifier: 64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/C8dp2i69GRLoZ571uB2mWbfCLdg.roa Signing time: Fri 02 Jan 2026 10:20:31 +0000 ROA not before: Fri 02 Jan 2026 10:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25003 IP address blocks: 141.226.250.0/23 maxlen: 24 185.223.0.0/22 maxlen: 24 2a0d:2800::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:21:6d:62:9e:af:24:c5:db:f5:98:b7:f9:42:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64e7553292af595426ee1d7dc919a2104894752b Validity Not Before: Jan 2 10:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0bc769da2ebd1912e8679ef5b81da659b7c22dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:da:70:33:3a:e8:90:a8:62:49:30:b1:ef:9c: 79:36:fc:62:36:21:e5:90:b9:ce:42:e4:85:44:1a: 9a:62:7f:67:66:02:ef:8e:8e:e4:fc:a0:a1:bb:ea: c3:3d:15:ce:f7:56:d7:0e:35:25:6c:a5:58:2b:3b: c7:55:23:f1:23:48:04:c9:22:d2:40:57:2f:87:a3: a9:ed:d7:da:83:d0:0d:e9:63:a7:99:cb:8b:67:50: 18:d9:b1:a8:27:0c:c6:09:ff:fe:42:32:45:7a:13: 93:6b:93:92:c5:44:01:22:72:a6:97:cd:34:35:76: 26:c5:5f:01:59:f0:0a:cf:53:e6:5f:42:79:c0:9f: 71:7f:d5:3c:ce:43:f4:b9:30:88:20:b8:c5:90:bc: fb:03:b5:e7:89:56:8b:77:56:9e:c8:dd:a2:ee:cd: b8:7a:14:1d:c5:6e:ea:e5:b6:67:3e:74:75:c6:a3: f6:26:90:34:3f:98:01:f2:a5:bb:b4:a3:e9:bb:e3: 52:aa:27:a2:e7:1f:5c:e0:f0:b3:dc:f0:63:a7:86: c7:28:83:06:58:1c:ee:b3:e0:7a:64:07:aa:35:64: 5e:ab:0c:19:da:e5:97:52:e2:ea:d6:d9:94:8e:68: 91:4b:2a:0f:e3:d2:fb:52:69:07:78:aa:e3:6c:b4: ad:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C7:69:DA:2E:BD:19:12:E8:67:9E:F5:B8:1D:A6:59:B7:C2:2D:D8 X509v3 Authority Key Identifier: keyid:64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/C8dp2i69GRLoZ571uB2mWbfCLdg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.226.250.0/23 185.223.0.0/22 IPv6: 2a0d:2800::/29 Signature Algorithm: sha256WithRSAEncryption 12:7b:dd:ca:fa:76:3c:18:aa:03:73:83:63:d0:00:c1:8b:85: a8:ea:b1:0a:1d:9c:28:69:3e:86:3c:51:28:6a:c1:bf:51:62: 5e:61:e6:14:a9:1c:72:95:52:63:19:c4:0a:54:d2:47:1a:b5: 97:1a:38:94:63:0e:4c:4e:b6:72:b2:7e:da:33:2c:f4:da:46: 69:b7:a2:25:57:69:ad:4c:2d:55:a8:ea:36:70:57:18:b3:89: 6f:8b:06:75:4e:18:f0:35:61:f9:56:38:17:08:ab:06:15:32: 06:80:79:4d:dc:d7:d4:c9:cc:cd:68:55:1b:0d:c3:86:65:c7: ad:ed:3d:8f:c5:64:a8:f2:b2:37:b0:72:d8:12:63:0b:8c:7c: 54:4c:2c:3f:f5:1d:d3:88:cb:79:63:68:67:4c:a0:21:7f:66: c8:26:83:e7:0d:19:40:ab:24:7b:34:79:8f:e2:5e:c0:59:9a: a5:a0:fb:a2:1b:0f:04:f9:50:74:4c:1e:2c:79:33:b7:08:77: ad:fc:86:3f:38:59:3e:23:e6:23:e7:50:2d:42:66:a6:d0:01: 9d:3c:55:c9:45:fb:4b:c4:ff:34:b5:9c:68:dc:fd:5f:90:7d: 82:9e:00:31:e9:a1:35:c8:bd:a5:9b:30:f1:03:eb:b8:55:fb: 38:0f:d5:65 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+OSFtYp6vJMXb9Zi3+UJrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZTc1NTMyOTJhZjU5NTQyNmVlMWQ3ZGM5MTlhMjEwNDg5 NDc1MmIwHhcNMjYwMTAyMTAyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmM3NjlkYTJlYmQxOTEyZTg2NzllZjViODFkYTY1OWI3YzIyZGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdpwMzrokKhiSTCx75x5NvxiNiHl kLnOQuSFRBqaYn9nZgLvjo7k/KChu+rDPRXO91bXDjUlbKVYKzvHVSPxI0gEySLS QFcvh6Op7dfag9AN6WOnmcuLZ1AY2bGoJwzGCf/+QjJFehOTa5OSxUQBInKml800 NXYmxV8BWfAKz1PmX0J5wJ9xf9U8zkP0uTCIILjFkLz7A7XniVaLd1aeyN2i7s24 ehQdxW7q5bZnPnR1xqP2JpA0P5gB8qW7tKPpu+NSqiei5x9c4PCz3PBjp4bHKIMG WBzus+B6ZAeqNWReqwwZ2uWXUuLq1tmUjmiRSyoP49L7UmkHeKrjbLStzQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAvHadouvRkS6Gee9bgdplm3wi3YMB8GA1UdIwQY MBaAFGTnVTKSr1lUJu4dfckZohBIlHUrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk9kVk1wS3ZXVlFtN2gxOXlSbWlFRWlVZFNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lNjZhNTctNjVlZi00NjQ0LThmNTAt YzE0ZmFmNDNiZTE0LzEvQzhkcDJpNjlHUkxvWjU3MXVCMm1XYmZDTGRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lNjZhNTctNjVlZi00NjQ0LThmNTAtYzE0ZmFmNDNiZTE0 LzEvWk9kVk1wS3ZXVlFtN2gxOXlSbWlFRWlVZFNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBjeL6AwQC ud8AMA0EAgACMAcDBQMqDSgAMA0GCSqGSIb3DQEBCwUAA4IBAQASe93K+nY8GKoD c4Nj0ADBi4Wo6rEKHZwoaT6GPFEoasG/UWJeYeYUqRxylVJjGcQKVNJHGrWXGjiU Yw5MTrZysn7aMyz02kZpt6IlV2mtTC1VqOo2cFcYs4lviwZ1ThjwNWH5VjgXCKsG FTIGgHlN3NfUyczNaFUbDcOGZcet7T2PxWSo8rI3sHLYEmMLjHxUTCw/9R3TiMt5 Y2hnTKAhf2bIJoPnDRlAqyR7NHmP4l7AWZqloPuiGw8E+VB0TB4seTO3CHet/IY/ OFk+I+Yj51AtQmam0AGdPFXJRftLxP80tZxo3P1fkH2CngAx6aE1yL2lmzDxA+u4 Vfs4D9Vl -----END CERTIFICATE-----Generated at Sun Jan 25 16:11:23 2026 by rpki-client