This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/t8rmw7mSDW9MiV2EcpPaS1bITvc.roa File: t8rmw7mSDW9MiV2EcpPaS1bITvc.roa (raw, json) Hash identifier: Iyft63jM+Cb/U6FfTqru+57KqeWI6Oo5cFlnak/0OrE= Subject key identifier: B7:CA:E6:C3:B9:92:0D:6F:4C:89:5D:84:72:93:DA:4B:56:C8:4E:F7 Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7 Certificate serial: 019B78349063192CC5E62D410F3EADA3CC98 Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/t8rmw7mSDW9MiV2EcpPaS1bITvc.roa Signing time: Thu 01 Jan 2026 06:17:49 +0000 ROA not before: Thu 01 Jan 2026 06:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204770 IP address blocks: 5.199.165.0/24 maxlen: 32 185.8.106.0/23 maxlen: 32 2a02:ae02::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:90:63:19:2c:c5:e6:2d:41:0f:3e:ad:a3:cc:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7 Validity Not Before: Jan 1 06:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7cae6c3b9920d6f4c895d847293da4b56c84ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9d:0c:54:09:4e:06:76:d8:d7:f0:7d:8d:f1: 29:4f:41:e5:9f:ec:4e:31:92:4c:6a:3c:fe:bd:44: a5:fb:9c:0b:5c:10:8a:9f:7c:60:04:2a:84:a7:b8: 5c:db:1e:96:a8:41:1f:91:76:2e:b6:88:52:39:02: f2:ad:f7:02:f0:5c:d1:d6:7e:3e:e4:0a:68:55:ba: e3:e0:a1:83:3e:4f:c2:3a:9f:3f:9c:0b:77:db:05: 10:8a:ef:bd:c5:96:a9:d0:25:eb:ed:80:04:41:5a: c4:af:88:b5:9a:ba:07:37:4b:8b:87:20:17:1e:c5: b8:a9:5a:b7:d1:06:c8:90:5c:cd:07:4e:26:d3:f9: 46:19:f3:e7:18:dc:cc:d8:69:6f:6b:c7:5b:78:c5: 4f:44:0c:4b:18:77:42:88:06:d7:96:63:fe:4a:d3: 90:a6:d1:3d:55:64:35:ca:2b:74:38:6d:9c:15:d2: ea:2a:b8:b2:15:90:94:69:e5:c3:f9:2f:89:81:5a: c3:d9:36:41:31:aa:34:1c:2c:c1:74:6f:b9:ea:a1: 20:a7:3a:de:5f:3c:56:bc:ad:90:a5:22:91:27:31: af:0a:10:a2:18:a0:a7:63:f5:be:9a:80:8d:d7:f1: 99:47:6b:32:f7:9c:a5:ae:56:01:69:f1:99:ac:e2: 6c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CA:E6:C3:B9:92:0D:6F:4C:89:5D:84:72:93:DA:4B:56:C8:4E:F7 X509v3 Authority Key Identifier: keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/t8rmw7mSDW9MiV2EcpPaS1bITvc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.165.0/24 185.8.106.0/23 IPv6: 2a02:ae02::/36 Signature Algorithm: sha256WithRSAEncryption cf:1d:1f:8f:1a:84:40:e2:b7:c7:8d:62:15:4b:bd:8f:fa:d3: 8b:a3:25:8f:53:b0:74:72:60:cb:69:4c:77:dd:08:b3:7b:7a: 42:cb:1f:5a:37:8a:1f:74:d7:62:70:6b:ce:c8:a0:9a:bd:5d: 92:0f:6c:07:cc:a2:78:70:8b:e9:fa:67:70:a6:24:ac:f3:57: ce:c1:80:9b:f2:1c:36:b6:8c:0e:db:20:02:1f:e1:89:1c:5d: 5f:70:26:4d:c5:e5:9b:53:5a:b4:e2:12:83:6b:0e:09:b5:18: ad:18:25:56:a3:29:ea:9c:a8:b9:3a:5d:a8:98:7d:d0:e9:25: fb:91:dd:08:0f:75:60:3e:59:b5:4b:ec:47:94:25:60:2f:df: bf:dd:93:62:85:bc:25:50:29:08:81:f9:fe:bd:a3:43:37:f0: e8:9a:66:b3:75:88:e0:2e:fe:7b:ce:25:8e:57:f1:d5:41:d8: c9:ef:94:4c:1c:20:cd:ba:ba:37:6b:b8:ff:b0:09:ac:13:90: 21:12:39:88:0c:47:82:da:38:21:ec:d3:43:14:77:25:f2:3b: 45:22:db:13:1c:5f:ad:3f:da:77:5c:59:11:ae:68:a8:28:ce: 3b:2f:01:e8:c7:43:32:9b:6d:d4:9e:89:3c:c7:3c:f9:08:da: fe:bb:2c:eb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt4NJBjGSzF5i1BDz6to8yYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MzNhZTFjNjA2NzJjNzU5MWE4Zjk3ZDY4Zjc5ZmIyYTVl ZThkYTcwHhcNMjYwMTAxMDYxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2NhZTZjM2I5OTIwZDZmNGM4OTVkODQ3MjkzZGE0YjU2Yzg0ZWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ0MVAlOBnbY1/B9jfEpT0Hln+xO MZJMajz+vUSl+5wLXBCKn3xgBCqEp7hc2x6WqEEfkXYutohSOQLyrfcC8FzR1n4+ 5ApoVbrj4KGDPk/COp8/nAt32wUQiu+9xZap0CXr7YAEQVrEr4i1mroHN0uLhyAX HsW4qVq30QbIkFzNB04m0/lGGfPnGNzM2Glva8dbeMVPRAxLGHdCiAbXlmP+StOQ ptE9VWQ1yit0OG2cFdLqKriyFZCUaeXD+S+JgVrD2TZBMao0HCzBdG+56qEgpzre XzxWvK2QpSKRJzGvChCiGKCnY/W+moCN1/GZR2sy95ylrlYBafGZrOJsVQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFLfK5sO5kg1vTIldhHKT2ktWyE73MB8GA1UdIwQY MBaAFDQzrhxgZyx1kaj5fWj3n7Kl7o2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85Y2E0NDYtZmM1Yy00NzQ2LWIyNmYt MzBjZTgzNzAxYjM5LzEvdDhybXc3bVNEVzlNaVYyRWNwUGFTMWJJVHZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My85Y2E0NDYtZmM1Yy00NzQ2LWIyNmYtMzBjZTgzNzAxYjM5 LzEvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQABcelAwQB uQhqMA4EAgACMAgDBgQqAq4CADANBgkqhkiG9w0BAQsFAAOCAQEAzx0fjxqEQOK3 x41iFUu9j/rTi6Mlj1OwdHJgy2lMd90Is3t6QssfWjeKH3TXYnBrzsigmr1dkg9s B8yieHCL6fpncKYkrPNXzsGAm/IcNraMDtsgAh/hiRxdX3AmTcXlm1NatOISg2sO CbUYrRglVqMp6pyouTpdqJh90Okl+5HdCA91YD5ZtUvsR5QlYC/fv92TYoW8JVAp CIH5/r2jQzfw6Jpms3WI4C7+e84ljlfx1UHYye+UTBwgzbq6N2u4/7AJrBOQIRI5 iAxHgto4IezTQxR3JfI7RSLbExxfrT/ad1xZEa5oqCjOOy8B6MdDMptt1J6JPMc8 +Qja/rss6w== -----END CERTIFICATE-----Generated at Sun Jan 25 16:55:54 2026 by rpki-client