This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/8yAZGDwl6Q5NdW6_5msXiHDy6v0.roa File: 8yAZGDwl6Q5NdW6_5msXiHDy6v0.roa (raw, json) Hash identifier: hTQqJteeaF5ZjxlYrkjPbZjafNKCCRD7RpYTaq51+Q4= Subject key identifier: F3:20:19:18:3C:25:E9:0E:4D:75:6E:BF:E6:6B:17:88:70:F2:EA:FD Certificate issuer: /CN=69ca7c17232db063491cfa585203369ffbeb76ed Certificate serial: 019B79ED58BDEB7E02D815DD39902EFA8C09 Authority key identifier: 69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/8yAZGDwl6Q5NdW6_5msXiHDy6v0.roa Signing time: Thu 01 Jan 2026 14:19:16 +0000 ROA not before: Thu 01 Jan 2026 14:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51020 IP address blocks: 185.65.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:58:bd:eb:7e:02:d8:15:dd:39:90:2e:fa:8c:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69ca7c17232db063491cfa585203369ffbeb76ed Validity Not Before: Jan 1 14:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f32019183c25e90e4d756ebfe66b178870f2eafd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:98:1b:06:8d:24:f4:f7:4a:f7:33:7b:a1:6a: e5:51:8f:b8:8f:c5:7a:a5:0a:76:04:1a:60:d8:a5: 90:c1:1d:9f:1e:a0:6d:ec:84:10:dc:16:03:0e:05: d3:96:f8:57:ad:96:ed:e2:37:2a:17:0d:f2:2b:cf: 6c:96:2c:81:9d:45:fd:f1:ba:d2:33:a1:db:5f:03: 79:3c:6d:df:02:6b:8c:ed:2e:54:d2:69:ef:55:59: c3:2b:3a:9e:5e:f2:66:e6:52:b9:94:6b:94:15:59: 57:c3:dd:97:ff:6f:0a:01:25:6b:eb:6c:58:c3:e0: 8f:93:53:e8:d5:62:38:29:c6:fd:a6:b0:f4:d1:2c: 70:62:82:c3:c6:6e:50:be:c7:7d:a7:dd:96:1f:40: b0:c2:f1:42:29:0b:c0:27:26:7d:34:26:47:da:8c: 72:9b:a9:70:5a:c1:d0:b6:22:fe:bf:6c:84:b9:c9: 47:40:19:f4:d0:fe:7d:ec:c0:6d:57:b9:64:99:90: 42:ec:5f:cb:1c:24:5c:53:10:22:8e:4e:71:56:09: f6:05:72:32:e2:8f:43:10:ab:f9:ee:31:10:08:96: 58:6f:a0:4d:c4:92:09:79:35:0c:55:76:6b:d4:6d: b6:39:4b:0d:2b:1c:60:c3:3c:aa:72:8a:5a:9e:f5: bd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:20:19:18:3C:25:E9:0E:4D:75:6E:BF:E6:6B:17:88:70:F2:EA:FD X509v3 Authority Key Identifier: keyid:69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/8yAZGDwl6Q5NdW6_5msXiHDy6v0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.65.252.0/24 Signature Algorithm: sha256WithRSAEncryption b1:65:6c:b7:f2:d5:b2:b9:3b:46:f9:e1:9c:3a:bb:f1:8f:98: fe:ac:1d:1f:a6:e8:5f:24:8d:11:33:96:13:6d:55:9e:65:1e: 5c:06:5b:64:75:ed:9e:6c:dd:9e:a4:dc:2b:ef:d2:e0:b4:7b: 6b:1b:56:80:be:bd:35:ae:8a:7b:ff:f4:fc:ec:a0:6b:75:5f: ec:bd:20:d6:32:fe:5e:f8:28:28:88:18:55:d1:6d:bd:3a:d2: 28:3a:a5:72:c2:7d:3d:45:7c:f4:98:d7:3e:24:bf:4a:7f:fd: f4:ff:b3:21:d3:f4:a6:eb:81:3d:de:25:b2:44:6d:22:a9:f1: 9a:be:30:61:90:6e:bc:d8:80:07:a0:e7:4e:43:a7:8f:67:5d: d0:1f:be:66:cd:d3:15:74:1d:31:3b:06:4a:01:2d:82:f7:1a: 18:7f:27:f9:b8:38:bd:27:30:57:52:18:8d:df:77:37:44:f3: 2f:c2:c1:ac:dc:01:19:11:a8:6f:23:38:10:d0:60:2f:e6:51: e1:1a:12:88:91:55:b4:d4:79:6b:8f:df:cd:ed:27:47:9b:bd: d5:cf:63:93:36:f5:dd:c2:b0:6e:1e:b1:5d:f5:2b:d9:f8:dd: 5f:ac:82:86:85:4d:ff:23:f8:4e:92:97:ff:94:9d:db:2a:1d: 8e:66:f5:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Vi9634C2BXdOZAu+owJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5Y2E3YzE3MjMyZGIwNjM0OTFjZmE1ODUyMDMzNjlmZmJl Yjc2ZWQwHhcNMjYwMTAxMTQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzIwMTkxODNjMjVlOTBlNGQ3NTZlYmZlNjZiMTc4ODcwZjJlYWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpgbBo0k9PdK9zN7oWrlUY+4j8V6 pQp2BBpg2KWQwR2fHqBt7IQQ3BYDDgXTlvhXrZbt4jcqFw3yK89sliyBnUX98brS M6HbXwN5PG3fAmuM7S5U0mnvVVnDKzqeXvJm5lK5lGuUFVlXw92X/28KASVr62xY w+CPk1Po1WI4Kcb9prD00SxwYoLDxm5Qvsd9p92WH0CwwvFCKQvAJyZ9NCZH2oxy m6lwWsHQtiL+v2yEuclHQBn00P597MBtV7lkmZBC7F/LHCRcUxAijk5xVgn2BXIy 4o9DEKv57jEQCJZYb6BNxJIJeTUMVXZr1G22OUsNKxxgwzyqcopanvW9CwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPMgGRg8JekOTXVuv+ZrF4hw8ur9MB8GA1UdIwQY MBaAFGnKfBcjLbBjSRz6WFIDNp/763btMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUt ZjQ3YWU3ZGRhZWMwLzEvOHlBWkdEd2w2UTVOZFc2XzVtc1hpSER5NnYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUtZjQ3YWU3ZGRhZWMw LzEvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUH8MA0G CSqGSIb3DQEBCwUAA4IBAQCxZWy38tWyuTtG+eGcOrvxj5j+rB0fpuhfJI0RM5YT bVWeZR5cBltkde2ebN2epNwr79LgtHtrG1aAvr01rop7//T87KBrdV/svSDWMv5e +CgoiBhV0W29OtIoOqVywn09RXz0mNc+JL9Kf/30/7Mh0/Sm64E93iWyRG0iqfGa vjBhkG682IAHoOdOQ6ePZ13QH75mzdMVdB0xOwZKAS2C9xoYfyf5uDi9JzBXUhiN 33c3RPMvwsGs3AEZEahvIzgQ0GAv5lHhGhKIkVW01Hlrj9/N7SdHm73Vz2OTNvXd wrBuHrFd9SvZ+N1frIKGhU3/I/hOkpf/lJ3bKh2OZvXx -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:23 2026 by rpki-client