This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/M8FcOyl5S71P4BDwQGuYwnYx-wA.roa File: M8FcOyl5S71P4BDwQGuYwnYx-wA.roa (raw, json) Hash identifier: 9YwFh61p98/WMnxYA76qqqiE44JU8SyNIdwsoH61lvE= Subject key identifier: 33:C1:5C:3B:29:79:4B:BD:4F:E0:10:F0:40:6B:98:C2:76:31:FB:00 Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Certificate serial: 019B77590D4721F7CC74DD6CEDD24B685A04 Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/M8FcOyl5S71P4BDwQGuYwnYx-wA.roa Signing time: Thu 01 Jan 2026 02:18:03 +0000 ROA not before: Thu 01 Jan 2026 02:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206589 IP address blocks: 85.202.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:0d:47:21:f7:cc:74:dd:6c:ed:d2:4b:68:5a:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Validity Not Before: Jan 1 02:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33c15c3b29794bbd4fe010f0406b98c27631fb00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:58:60:49:9c:8e:eb:46:c6:2e:20:c6:36:c2: 0b:57:39:80:dd:86:bb:28:c3:46:36:51:35:e8:ab: e4:66:30:1e:4b:a2:62:9c:58:58:a6:32:6e:04:11: 9e:2e:a7:a3:95:96:c3:fa:85:4d:cb:dc:b4:75:6e: 6f:b3:f1:80:f1:48:15:ab:17:ad:14:aa:e4:fa:ea: c0:44:97:30:da:4f:99:0b:55:79:c0:87:6c:bb:7d: e3:38:e8:72:25:cb:d8:e3:00:b1:8b:7b:b0:11:d0: 56:91:da:9e:c3:5d:70:00:46:f9:41:91:6f:9c:d7: 6c:76:9c:6d:51:1c:95:89:b3:f0:13:a5:3a:41:18: b4:b9:9e:c5:37:d3:41:a3:08:a0:87:4e:ec:c1:35: bd:0e:db:3d:8d:a8:1d:44:99:25:49:07:8f:6f:25: 2f:b0:d1:2f:af:09:34:55:83:7b:b0:53:31:9f:3d: 27:2a:c1:26:41:88:35:20:54:4b:0e:e6:54:2f:bc: cd:df:f2:a1:1c:90:b6:36:eb:4f:21:c5:48:ee:62: 2e:cd:01:de:bf:6f:2d:43:14:7a:23:f7:6d:52:ff: 1a:e1:2d:b8:31:c3:58:ae:b2:c7:3d:45:ed:9c:1a: 09:fb:ea:a4:55:d2:71:1d:95:d6:9a:a1:75:a9:ef: be:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C1:5C:3B:29:79:4B:BD:4F:E0:10:F0:40:6B:98:C2:76:31:FB:00 X509v3 Authority Key Identifier: keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/M8FcOyl5S71P4BDwQGuYwnYx-wA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.202.50.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:49:3e:1d:dc:cc:2b:96:03:7e:76:8a:5a:82:6f:7e:d2:54: b7:71:6c:aa:4a:0a:a3:c6:fd:bf:55:a6:7e:58:23:6f:3c:58: a3:4a:36:e8:31:36:65:24:ff:99:95:89:49:49:57:49:d4:48: a7:25:51:82:34:8e:e5:0c:3b:c5:4b:30:fa:bf:fb:0f:71:30: 0b:60:d7:a2:11:81:69:17:b1:e6:81:a7:14:98:99:ce:32:9b: d4:3e:01:88:35:a4:cf:6a:65:90:ed:8a:d4:bb:78:1b:ca:ac: ed:82:8e:2f:ce:aa:1e:9a:b1:3c:f2:c5:00:b7:af:6a:7a:08: ba:0d:2b:51:f8:8d:db:f1:04:a5:4f:5a:f1:21:bb:18:f7:01: 1e:40:f3:cd:36:47:20:97:c1:91:b9:c6:07:d0:7d:0c:06:ec: e7:1d:1e:6e:1c:d2:80:7e:1b:63:ff:cb:42:1d:41:47:d0:13: 61:01:a4:9f:a8:07:d6:be:da:16:aa:c1:df:32:45:13:77:6d: 22:fd:64:bc:e8:fc:c9:6e:4a:aa:3c:f8:97:ee:c3:05:00:7e: a8:47:e2:79:13:cc:f1:78:22:f9:7a:ae:8f:1c:97:4e:64:0e: c9:d1:7f:60:c9:82:aa:68:eb:1b:f0:83:ec:12:b5:40:da:14: b5:9a:37:b7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WQ1HIffMdN1s7dJLaFoEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx YjM2ZTgwHhcNMjYwMTAxMDIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2MxNWMzYjI5Nzk0YmJkNGZlMDEwZjA0MDZiOThjMjc2MzFmYjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVhgSZyO60bGLiDGNsILVzmA3Ya7 KMNGNlE16KvkZjAeS6JinFhYpjJuBBGeLqejlZbD+oVNy9y0dW5vs/GA8UgVqxet FKrk+urARJcw2k+ZC1V5wIdsu33jOOhyJcvY4wCxi3uwEdBWkdqew11wAEb5QZFv nNdsdpxtURyVibPwE6U6QRi0uZ7FN9NBowigh07swTW9Dts9jagdRJklSQePbyUv sNEvrwk0VYN7sFMxnz0nKsEmQYg1IFRLDuZUL7zN3/KhHJC2NutPIcVI7mIuzQHe v28tQxR6I/dtUv8a4S24McNYrrLHPUXtnBoJ++qkVdJxHZXWmqF1qe++UwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDPBXDspeUu9T+AQ8EBrmMJ2MfsAMB8GA1UdIwQY MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt MDI0YjE2NTVjMjQ3LzEvTThGY095bDVTNzFQNEJEd1FHdVl3bll4LXdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3 LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVcoyMA0G CSqGSIb3DQEBCwUAA4IBAQBtST4d3MwrlgN+dopagm9+0lS3cWyqSgqjxv2/VaZ+ WCNvPFijSjboMTZlJP+ZlYlJSVdJ1EinJVGCNI7lDDvFSzD6v/sPcTALYNeiEYFp F7HmgacUmJnOMpvUPgGINaTPamWQ7YrUu3gbyqztgo4vzqoemrE88sUAt69qegi6 DStR+I3b8QSlT1rxIbsY9wEeQPPNNkcgl8GRucYH0H0MBuznHR5uHNKAfhtj/8tC HUFH0BNhAaSfqAfWvtoWqsHfMkUTd20i/WS86PzJbkqqPPiX7sMFAH6oR+J5E8zx eCL5eq6PHJdOZA7J0X9gyYKqaOsb8IPsErVA2hS1mje3 -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:36 2026 by rpki-client