This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/1-LEPBz6i6hImn3mV_S1v00A4A9I.roa File: 1-LEPBz6i6hImn3mV_S1v00A4A9I.roa (raw, json) Hash identifier: n8X2YxrArW/csdR8L4lSuYzNuaLlfUpgcoHhlnq7ZqA= Subject key identifier: F8:B1:0F:07:3E:A2:EA:12:26:9F:79:95:FD:2D:6F:D3:40:38:03:D2 Certificate issuer: /CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3 Certificate serial: 019B121E892C4AAA8C0F9F4E3DEBE26107C8 Authority key identifier: C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/1-LEPBz6i6hImn3mV_S1v00A4A9I.roa Signing time: Fri 12 Dec 2025 10:32:29 +0000 ROA not before: Fri 12 Dec 2025 10:32:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212077 IP address blocks: 185.101.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:1e:89:2c:4a:aa:8c:0f:9f:4e:3d:eb:e2:61:07:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3 Validity Not Before: Dec 12 10:32:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f8b10f073ea2ea12269f7995fd2d6fd3403803d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:67:1a:9d:d0:29:fd:62:82:60:ed:87:23:93: 61:4e:8a:7e:e0:61:0a:2c:72:cb:76:a8:e1:b4:94: b2:43:f2:32:7a:1c:61:59:b5:c7:4b:7b:55:12:2b: 40:18:70:ac:a7:6c:74:79:0c:2e:45:80:29:36:00: c2:48:68:f4:e4:08:95:c8:31:16:a1:90:f4:59:9a: 71:82:32:02:1c:7a:65:65:60:75:42:aa:fe:20:69: e2:01:4d:a0:ef:1d:ae:93:ee:a1:ff:5b:0c:40:bb: 1a:17:53:4d:be:83:73:ff:2c:c0:99:a8:5f:c7:7a: bb:53:e0:56:e9:d0:36:d9:22:de:c9:7b:71:02:ec: 23:66:42:6a:1f:ad:c4:dd:1f:8e:ee:10:8c:12:10: 09:e4:7d:d9:c5:c1:f7:32:e9:5b:f3:e1:b9:8a:15: 7f:da:ad:be:1f:ba:94:32:59:65:c5:2c:41:96:52: 26:e0:78:da:ce:a1:ee:21:be:91:2b:7c:e5:2b:9d: 41:47:10:20:33:bb:68:9a:16:ba:94:0b:8f:54:65: b6:a5:da:4c:e8:55:a7:f9:4e:34:86:f7:fc:82:21: 4a:06:4b:cb:17:51:8c:76:fc:b1:41:1f:00:76:01: 65:09:c9:a8:72:65:9e:be:17:c8:f2:62:dc:32:ee: 2e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B1:0F:07:3E:A2:EA:12:26:9F:79:95:FD:2D:6F:D3:40:38:03:D2 X509v3 Authority Key Identifier: keyid:C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/1-LEPBz6i6hImn3mV_S1v00A4A9I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.101.39.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:8d:75:68:85:a7:03:2b:5c:a9:4b:a5:ce:53:0a:7c:bc:c8: ed:64:ab:1f:ba:ed:01:00:80:03:04:83:44:0e:90:d2:22:90: a4:02:98:68:1b:d7:40:cf:7a:f9:23:a8:0c:19:35:aa:8e:74: e5:b0:51:1c:56:bd:c2:84:68:74:3c:7b:0d:06:81:3e:0f:2c: 56:0a:1b:ba:39:47:8b:fe:f7:dc:78:20:98:e5:3b:dd:99:27: 24:1a:46:7c:06:42:16:17:a9:ae:d7:36:90:94:be:ff:17:84: cd:5f:94:b2:41:c1:30:7d:ca:f1:53:e3:cf:17:9c:e0:46:b4: 73:c9:6e:dd:69:57:2f:2c:60:b2:77:e5:1b:f7:87:4e:16:13: a6:e8:ac:86:fd:23:69:62:06:f0:74:e3:b9:4d:47:05:33:da: f2:10:9d:b5:84:8f:10:85:32:03:4b:3c:56:34:91:d5:f9:78: 40:31:de:28:b5:d8:48:f4:da:ef:3d:7e:b9:e8:c1:8a:bf:79: 55:29:10:47:bd:39:e7:8d:eb:43:8d:4e:57:3a:eb:d2:a6:db: 5f:60:63:3d:d9:7b:e9:9b:9b:4c:8e:29:14:a6:8e:f4:fe:3d: 26:f8:d3:82:86:90:fc:a0:b3:35:79:d8:39:23:93:4c:1a:24: a5:8f:e8:67 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZsSHoksSqqMD59OPeviYQfIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YTNhNWU0MTFkZWFmMjI4NGZmZDAxNTMwYmZiNDFmODE2 Y2JiYTMwHhcNMjUxMjEyMTAzMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGIxMGYwNzNlYTJlYTEyMjY5Zjc5OTVmZDJkNmZkMzQwMzgwM2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmcandAp/WKCYO2HI5NhTop+4GEK LHLLdqjhtJSyQ/IyehxhWbXHS3tVEitAGHCsp2x0eQwuRYApNgDCSGj05AiVyDEW oZD0WZpxgjICHHplZWB1Qqr+IGniAU2g7x2uk+6h/1sMQLsaF1NNvoNz/yzAmahf x3q7U+BW6dA22SLeyXtxAuwjZkJqH63E3R+O7hCMEhAJ5H3ZxcH3Mulb8+G5ihV/ 2q2+H7qUMlllxSxBllIm4HjazqHuIb6RK3zlK51BRxAgM7tomha6lAuPVGW2pdpM 6FWn+U40hvf8giFKBkvLF1GMdvyxQR8AdgFlCcmocmWevhfI8mLcMu4uQQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPixDwc+ouoSJp95lf0tb9NAOAPSMB8GA1UdIwQY MBaAFMmjpeQR3q8ihP/QFTC/tB+BbLujMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWFPbDVCSGVyeUtFXzlBVk1MLTBINEZzdTZNLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iOGVhODMtNDc2NS00M2E2LWE1NGYt MjBkMjQ5MDAxMzBhLzEvMS1MRVBCejZpNmhJbW4zbVZfUzF2MDBBNEE5SS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNWMvYjhlYTgzLTQ3NjUtNDNhNi1hNTRmLTIwZDI0OTAwMTMw YS8xL3lhT2w1QkhlcnlLRV85QVZNTC0wSDRGc3U2TS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALllJzAN BgkqhkiG9w0BAQsFAAOCAQEAao11aIWnAytcqUulzlMKfLzI7WSrH7rtAQCAAwSD RA6Q0iKQpAKYaBvXQM96+SOoDBk1qo505bBRHFa9woRodDx7DQaBPg8sVgobujlH i/733HggmOU73ZknJBpGfAZCFheprtc2kJS+/xeEzV+UskHBMH3K8VPjzxec4Ea0 c8lu3WlXLyxgsnflG/eHThYTpuishv0jaWIG8HTjuU1HBTPa8hCdtYSPEIUyA0s8 VjSR1fl4QDHeKLXYSPTa7z1+uejBir95VSkQR705543rQ41OVzrr0qbbX2BjPdl7 6ZubTI4pFKaO9P49JvjTgoaQ/KCzNXnYOSOTTBokpY/oZw== -----END CERTIFICATE-----Generated at Thu Dec 18 00:07:26 2025 by rpki-client