This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/8zWkLs5MayVp3_SzYbBPRAvFDTs.roa File: 8zWkLs5MayVp3_SzYbBPRAvFDTs.roa (raw, json) Hash identifier: UellUSwtPKZmjJ1D+Fmg+BloHauGtQEDG+FE5/v9Mm8= Subject key identifier: F3:35:A4:2E:CE:4C:6B:25:69:DF:F4:B3:61:B0:4F:44:0B:C5:0D:3B Certificate issuer: /CN=d1d78826e1717ec993eb64dd1187876b065e8f58 Certificate serial: 019B7D5D39EE697506514DDD0ACD91956963 Authority key identifier: D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/8zWkLs5MayVp3_SzYbBPRAvFDTs.roa Signing time: Fri 02 Jan 2026 06:20:20 +0000 ROA not before: Fri 02 Jan 2026 06:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51415 IP address blocks: 185.195.204.0/23 maxlen: 23 185.195.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:39:ee:69:75:06:51:4d:dd:0a:cd:91:95:69:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1d78826e1717ec993eb64dd1187876b065e8f58 Validity Not Before: Jan 2 06:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f335a42ece4c6b2569dff4b361b04f440bc50d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:19:e4:69:f7:0b:f4:cf:ff:38:e5:2f:91:bc: 0d:d3:8e:2e:65:5c:e1:4e:67:96:ae:64:48:49:58: ea:f1:62:68:ec:8b:5d:4b:eb:59:18:84:37:ba:e7: a6:7e:54:47:e4:0b:9d:18:82:e9:f5:67:c4:33:a3: 69:21:44:b6:67:9b:89:25:fa:6e:ef:17:00:7b:47: ab:4d:43:67:60:51:16:6f:9b:c5:8b:8e:79:f4:e9: 5b:b1:f0:ba:a3:03:95:e3:ac:2c:eb:1b:e2:e8:d7: 7e:f2:e6:22:9f:3d:f0:41:f9:b3:be:26:03:a1:24: 69:54:4a:0f:0b:cb:a6:49:8e:16:82:cd:62:81:d9: c4:ce:84:91:79:91:b2:84:96:66:70:51:40:22:57: b3:34:72:49:d0:14:7d:05:07:5e:57:46:bb:9c:15: a8:77:63:67:b4:7d:fe:35:aa:70:3d:93:d0:cd:47: ad:65:e0:8c:54:3b:6a:9f:3d:93:2c:87:72:86:17: 09:c8:31:86:37:d1:57:00:3d:05:1b:16:0b:37:c6: 2f:54:d7:9d:c3:c1:76:99:4a:dd:b0:df:f7:16:b1: 90:d7:cb:91:de:51:12:58:c1:80:f0:01:ed:b8:9b: 3c:1e:03:1e:78:dc:a5:53:0d:b0:83:8a:72:5d:e5: a7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:35:A4:2E:CE:4C:6B:25:69:DF:F4:B3:61:B0:4F:44:0B:C5:0D:3B X509v3 Authority Key Identifier: keyid:D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/8zWkLs5MayVp3_SzYbBPRAvFDTs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.195.204.0/22 Signature Algorithm: sha256WithRSAEncryption c4:39:5c:2c:c0:d6:ce:19:c4:a7:93:26:8c:1b:fd:09:30:8f: d5:03:84:07:34:60:5d:84:95:c5:d6:b4:0c:d8:4a:d5:3c:ae: cf:0d:10:50:a3:6f:07:86:55:e0:07:85:ee:61:ba:ad:d2:f5: dd:c6:5a:09:f4:91:7c:c5:ab:bd:78:c0:ee:20:14:41:25:a4: 3f:42:ee:0e:d8:77:f4:cb:41:eb:cd:12:3d:37:8b:ca:d0:b2: d3:a1:15:b8:b3:b9:e0:92:5f:48:49:41:24:e1:54:99:46:06: d7:71:a5:10:74:50:00:42:72:b3:26:e5:c3:6f:e5:35:b6:9b: 08:4c:df:17:b5:fe:3a:e0:eb:e6:8d:d8:51:ce:3d:e6:18:dd: 98:d1:f6:f3:93:02:f4:65:3c:8e:9d:29:12:62:9d:9e:b4:9a: 12:a3:cf:8d:3d:db:66:e6:a4:90:eb:15:e2:a0:00:5f:96:43: f4:3c:d0:71:90:a0:0a:7d:c4:c9:17:84:30:db:49:38:ad:a0: ae:fe:55:62:01:75:75:4c:5c:51:58:d7:46:84:e9:f4:38:13: b3:f9:8a:aa:dc:0b:cf:ba:fc:61:9d:23:68:cd:27:88:6a:39: 34:cc:5f:7a:2e:68:cf:35:3f:67:1f:41:90:3f:95:e4:0f:18: e8:02:6f:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XTnuaXUGUU3dCs2RlWljMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZDc4ODI2ZTE3MTdlYzk5M2ViNjRkZDExODc4NzZiMDY1 ZThmNTgwHhcNMjYwMTAyMDYyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzM1YTQyZWNlNGM2YjI1NjlkZmY0YjM2MWIwNGY0NDBiYzUwZDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRnkafcL9M//OOUvkbwN044uZVzh TmeWrmRISVjq8WJo7ItdS+tZGIQ3uuemflRH5AudGILp9WfEM6NpIUS2Z5uJJfpu 7xcAe0erTUNnYFEWb5vFi4559OlbsfC6owOV46ws6xvi6Nd+8uYinz3wQfmzviYD oSRpVEoPC8umSY4Wgs1igdnEzoSReZGyhJZmcFFAIlezNHJJ0BR9BQdeV0a7nBWo d2NntH3+NapwPZPQzUetZeCMVDtqnz2TLIdyhhcJyDGGN9FXAD0FGxYLN8YvVNed w8F2mUrdsN/3FrGQ18uR3lESWMGA8AHtuJs8HgMeeNylUw2wg4pyXeWnaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPM1pC7OTGslad/0s2GwT0QLxQ07MB8GA1UdIwQY MBaAFNHXiCbhcX7Jk+tk3RGHh2sGXo9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGRlSUp1Rnhmc21UNjJUZEVZZUhhd1plajFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wZWViMmYtMWFhMC00NzYyLWI0ZTgt YjU5YzJhYzk1MWNiLzEvOHpXa0xzNU1heVZwM19TelliQlBSQXZGRFRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8wZWViMmYtMWFhMC00NzYyLWI0ZTgtYjU5YzJhYzk1MWNi LzEvMGRlSUp1Rnhmc21UNjJUZEVZZUhhd1plajFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucPMMA0G CSqGSIb3DQEBCwUAA4IBAQDEOVwswNbOGcSnkyaMG/0JMI/VA4QHNGBdhJXF1rQM 2ErVPK7PDRBQo28HhlXgB4XuYbqt0vXdxloJ9JF8xau9eMDuIBRBJaQ/Qu4O2Hf0 y0HrzRI9N4vK0LLToRW4s7ngkl9ISUEk4VSZRgbXcaUQdFAAQnKzJuXDb+U1tpsI TN8Xtf464OvmjdhRzj3mGN2Y0fbzkwL0ZTyOnSkSYp2etJoSo8+NPdtm5qSQ6xXi oABflkP0PNBxkKAKfcTJF4Qw20k4raCu/lViAXV1TFxRWNdGhOn0OBOz+Yqq3AvP uvxhnSNozSeIajk0zF96LmjPNT9nH0GQP5XkDxjoAm/l -----END CERTIFICATE-----Generated at Sun Jan 25 10:27:01 2026 by rpki-client