This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/8-GooV5TAxKdFjFhaWz2PUvGsuA.roa File: 8-GooV5TAxKdFjFhaWz2PUvGsuA.roa (raw, json) Hash identifier: b6Xa2ccXpxI5otp+9VG+BLBYAPmLH8i33HGV6Lw4iJI= Subject key identifier: F3:E1:A8:A1:5E:53:03:12:9D:16:31:61:69:6C:F6:3D:4B:C6:B2:E0 Certificate issuer: /CN=d1122a5cb0643f736c7ec7961809a25938668f0e Certificate serial: 019A6DFF4687263DFFE3D2E7B30859E1D3EB Authority key identifier: D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/8-GooV5TAxKdFjFhaWz2PUvGsuA.roa Signing time: Mon 10 Nov 2025 13:40:37 +0000 ROA not before: Mon 10 Nov 2025 13:40:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 54528 IP address blocks: 185.251.113.0/24 maxlen: 32 2a0c:1940:10::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6d:ff:46:87:26:3d:ff:e3:d2:e7:b3:08:59:e1:d3:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1122a5cb0643f736c7ec7961809a25938668f0e Validity Not Before: Nov 10 13:40:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f3e1a8a15e5303129d163161696cf63d4bc6b2e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:18:5a:24:b4:65:31:f0:49:10:08:04:49:5c: 62:32:b1:32:91:ed:c6:0f:17:96:2c:b1:4e:ff:66: 35:74:5d:f3:d9:23:a6:ac:9e:2f:3b:fe:7d:b4:99: 24:0f:3d:46:eb:3c:8d:32:c8:13:d1:79:d3:78:85: 56:01:ea:20:41:ff:73:e7:44:52:b2:37:8c:05:11: b0:96:7e:ac:90:97:be:ad:9e:ac:61:2c:73:8a:cd: b8:35:f2:5e:78:b3:42:8f:b8:93:c9:f2:63:2c:43: 9a:8f:6f:3b:57:43:18:37:1a:5c:ea:27:a2:ab:32: bd:0b:28:10:6e:95:d9:5c:d1:09:fc:f1:5f:08:2f: fe:58:c8:e6:3f:fb:96:d7:cf:07:0e:c9:23:19:1f: c5:be:6c:15:5f:6c:e3:b5:58:5a:3f:60:ae:c3:47: ac:24:87:ae:cf:1c:18:66:ec:6c:11:26:c0:09:09: b1:22:f7:43:00:28:95:cd:cb:3b:8b:dc:a6:85:da: b4:58:25:61:31:8b:3f:0d:c3:6c:f4:97:73:51:6e: 0d:bc:47:63:b4:83:2b:cf:1a:48:f3:2b:2f:f6:3b: 7a:f4:85:14:5c:f0:af:06:25:a8:36:48:3f:40:a9: 76:df:01:4b:41:ad:bd:29:78:95:1b:c6:3d:38:2c: 62:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E1:A8:A1:5E:53:03:12:9D:16:31:61:69:6C:F6:3D:4B:C6:B2:E0 X509v3 Authority Key Identifier: keyid:D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/8-GooV5TAxKdFjFhaWz2PUvGsuA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.251.113.0/24 IPv6: 2a0c:1940:10::/44 Signature Algorithm: sha256WithRSAEncryption 4a:d5:3d:a0:f5:ef:3e:57:a4:dc:b3:6a:aa:e5:62:0a:50:3f: 77:ee:59:06:be:59:6b:07:35:d7:61:4e:34:ae:21:6e:d1:ea: 37:a6:eb:68:71:07:3b:2d:02:83:11:8a:3e:32:34:4f:14:0d: 81:cc:2b:ab:d1:d6:71:fe:c3:45:04:4b:44:e6:0c:b0:85:35: 8b:77:eb:aa:60:49:5a:0f:69:9e:25:b5:fc:fe:80:35:25:15: 71:1c:70:e8:a0:ec:ee:9c:40:82:cf:c0:ad:49:67:d1:9f:32: 37:14:7c:89:ba:fe:74:9d:17:17:88:65:a6:1a:6c:72:f5:00: 5e:47:a5:6a:f8:ee:68:97:7b:6e:31:18:5c:4a:d1:05:ea:e3: e5:f3:07:cd:cf:85:c2:d0:fd:42:e1:7e:75:fb:f0:26:fb:80: 36:a2:86:c9:95:9a:67:97:53:cf:00:6e:27:95:2b:66:fd:9b: 1f:a5:02:ac:91:df:5f:72:4a:19:0b:68:ab:2e:ea:4c:cb:ce: 1c:4d:7e:48:1b:10:a9:81:3e:7e:13:a0:5f:91:99:1d:de:3e: 08:7e:77:5c:ba:15:e0:1a:b8:e0:17:b3:d5:8c:ba:0c:e4:86: 94:6f:a5:9d:87:fe:24:04:ac:09:dd:bf:0a:37:02:0f:b4:b3: f3:33:c8:8b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZpt/0aHJj3/49LnswhZ4dPrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMTIyYTVjYjA2NDNmNzM2YzdlYzc5NjE4MDlhMjU5Mzg2 NjhmMGUwHhcNMjUxMTEwMTM0MDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2UxYThhMTVlNTMwMzEyOWQxNjMxNjE2OTZjZjYzZDRiYzZiMmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRhaJLRlMfBJEAgESVxiMrEyke3G DxeWLLFO/2Y1dF3z2SOmrJ4vO/59tJkkDz1G6zyNMsgT0XnTeIVWAeogQf9z50RS sjeMBRGwln6skJe+rZ6sYSxzis24NfJeeLNCj7iTyfJjLEOaj287V0MYNxpc6iei qzK9CygQbpXZXNEJ/PFfCC/+WMjmP/uW188HDskjGR/FvmwVX2zjtVhaP2Cuw0es JIeuzxwYZuxsESbACQmxIvdDACiVzcs7i9ymhdq0WCVhMYs/DcNs9JdzUW4NvEdj tIMrzxpI8ysv9jt69IUUXPCvBiWoNkg/QKl23wFLQa29KXiVG8Y9OCxiBQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFPPhqKFeUwMSnRYxYWls9j1LxrLgMB8GA1UdIwQY MBaAFNESKlywZD9zbH7HlhgJolk4Zo8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFJJcVhMQmtQM05zZnNlV0dBbWlXVGhtanc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hY2NkMzgtMGFlNi00YjQzLWExNjgt MTE1MmY0MzkzMDIwLzEvOC1Hb29WNVRBeEtkRmpGaGFXejJQVXZHc3VBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9hY2NkMzgtMGFlNi00YjQzLWExNjgtMTE1MmY0MzkzMDIw LzEvMFJJcVhMQmtQM05zZnNlV0dBbWlXVGhtanc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuftxMA8E AgACMAkDBwQqDBlAABAwDQYJKoZIhvcNAQELBQADggEBAErVPaD17z5XpNyzaqrl YgpQP3fuWQa+WWsHNddhTjSuIW7R6jem62hxBzstAoMRij4yNE8UDYHMK6vR1nH+ w0UES0TmDLCFNYt366pgSVoPaZ4ltfz+gDUlFXEccOig7O6cQILPwK1JZ9GfMjcU fIm6/nSdFxeIZaYabHL1AF5HpWr47miXe24xGFxK0QXq4+XzB83PhcLQ/ULhfnX7 8Cb7gDaihsmVmmeXU88AbieVK2b9mx+lAqyR319yShkLaKsu6kzLzhxNfkgbEKmB Pn4ToF+RmR3ePgh+d1y6FeAauOAXs9WMugzkhpRvpZ2H/iQErAndvwo3Ag+0s/Mz yIs= -----END CERTIFICATE-----Generated at Sat Dec 6 14:53:49 2025 by rpki-client