This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/8T5_5kR36jRH32IXTEnKZGeDxA0.roa File: 8T5_5kR36jRH32IXTEnKZGeDxA0.roa (raw, json) Hash identifier: Y2gnsuSC7My99ZKFIHaLVXQ6ht40j8S36323bLP1PhU= Subject key identifier: F1:3E:7F:E6:44:77:EA:34:47:DF:62:17:4C:49:CA:64:67:83:C4:0D Certificate issuer: /CN=c98b825f36e9cc330315c940de800cbabce3397b Certificate serial: 019B791090B0E69B774FDA20741A2E628EF7 Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/8T5_5kR36jRH32IXTEnKZGeDxA0.roa Signing time: Thu 01 Jan 2026 10:18:07 +0000 ROA not before: Thu 01 Jan 2026 10:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49097 IP address blocks: 80.70.167.0/24 maxlen: 24 185.55.232.0/22 maxlen: 24 185.170.24.0/22 maxlen: 24 188.95.0.0/21 maxlen: 24 193.28.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:90:b0:e6:9b:77:4f:da:20:74:1a:2e:62:8e:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b Validity Not Before: Jan 1 10:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f13e7fe64477ea3447df62174c49ca646783c40d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1d:da:0a:c9:64:8b:83:90:d3:d0:d9:f5:aa: bc:df:ea:4f:ab:1e:e2:d1:31:69:07:3d:e5:fd:3b: 22:4b:e3:a4:fd:78:84:33:aa:d3:ed:52:c8:1f:47: df:c5:23:43:11:2a:3e:bd:e8:1f:a4:68:b8:20:d6: e9:dd:2b:19:de:c2:a7:29:92:8a:60:4f:ae:04:a4: 6a:f7:ec:da:4a:25:94:46:59:fb:4f:09:4f:5e:aa: a9:71:b6:2e:3a:7e:29:7d:c5:e5:66:12:f1:3b:44: b6:68:d8:c4:f9:99:91:48:9e:5e:34:23:70:7f:07: a1:5e:31:8e:0d:24:f0:ca:0f:77:10:64:b4:3b:cb: 8b:af:a6:9b:53:5d:b0:a3:91:c6:26:02:a5:8e:b5: de:ae:ed:60:4b:b7:d4:38:ba:f5:14:cc:cf:e8:ab: ff:3e:cb:f6:6b:d2:fb:ba:fa:eb:d0:9f:1f:23:4f: 36:ac:4b:f2:aa:84:29:b7:8d:d4:4c:45:fa:70:57: e4:9f:a9:cb:46:70:5a:86:dd:67:21:75:89:4d:dd: 72:c0:90:35:d7:94:f8:cc:65:da:74:b3:c3:6c:a6: ba:9a:6b:cf:fe:9f:4f:77:22:c9:a9:7f:27:0a:b5: cd:b1:98:13:c3:9f:ad:37:ae:2b:0b:e9:f5:b6:5d: 86:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:3E:7F:E6:44:77:EA:34:47:DF:62:17:4C:49:CA:64:67:83:C4:0D X509v3 Authority Key Identifier: keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/8T5_5kR36jRH32IXTEnKZGeDxA0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.70.167.0/24 185.55.232.0/22 185.170.24.0/22 188.95.0.0/21 193.28.96.0/21 Signature Algorithm: sha256WithRSAEncryption 86:a5:41:cf:59:b8:04:88:e2:30:fc:d0:78:ef:f0:cb:c2:54: a0:2c:38:0e:e2:ec:cb:9e:04:05:f8:0b:bd:5a:37:dd:38:9c: 6a:46:05:d3:1c:08:ec:3a:6e:05:fa:16:cb:9e:04:c2:c1:5d: df:f0:59:f5:61:95:8d:f1:ec:bf:71:59:eb:86:18:a3:5c:8e: a7:83:2e:93:c5:0f:a7:f1:70:48:40:7a:e8:0d:aa:e2:e7:a8: 7e:38:56:cd:f0:3c:d2:e0:09:53:24:3d:de:25:66:03:9d:4a: e5:80:ff:6c:f5:0a:7b:60:7f:32:96:5a:67:b1:6a:7f:63:a7: 1c:d0:ef:2c:bd:de:6e:8e:86:bb:a9:17:18:7d:c5:68:ab:4b: 0a:98:e1:8a:1b:8f:94:d1:f0:df:f1:3f:c1:40:1d:2f:17:06: 61:c1:d8:30:e8:0b:80:77:92:44:f4:b6:ae:81:72:db:00:37: e7:d9:83:3b:43:08:ac:82:58:ec:e8:b1:dd:b3:ca:e2:d4:1a: 49:da:ac:f0:f9:c3:d3:ec:2f:78:47:f7:7f:57:8b:23:44:33: 10:ad:7d:83:fc:9e:1b:3f:09:a4:7d:20:2f:18:cb:63:42:af: 5a:9a:46:12:c8:17:35:2b:f4:e4:eb:73:33:09:f0:fd:47:66: 62:93:63:8c -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt5EJCw5pt3T9ogdBouYo73MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5OGI4MjVmMzZlOWNjMzMwMzE1Yzk0MGRlODAwY2JhYmNl MzM5N2IwHhcNMjYwMTAxMTAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTNlN2ZlNjQ0NzdlYTM0NDdkZjYyMTc0YzQ5Y2E2NDY3ODNjNDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlh3aCslki4OQ09DZ9aq83+pPqx7i 0TFpBz3l/TsiS+Ok/XiEM6rT7VLIH0ffxSNDESo+vegfpGi4INbp3SsZ3sKnKZKK YE+uBKRq9+zaSiWURln7TwlPXqqpcbYuOn4pfcXlZhLxO0S2aNjE+ZmRSJ5eNCNw fwehXjGODSTwyg93EGS0O8uLr6abU12wo5HGJgKljrXeru1gS7fUOLr1FMzP6Kv/ Psv2a9L7uvrr0J8fI082rEvyqoQpt43UTEX6cFfkn6nLRnBaht1nIXWJTd1ywJA1 15T4zGXadLPDbKa6mmvP/p9PdyLJqX8nCrXNsZgTw5+tN64rC+n1tl2GbwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFPE+f+ZEd+o0R99iF0xJymRng8QNMB8GA1UdIwQY MBaAFMmLgl826cwzAxXJQN6ADLq84zl7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVl1Q1h6YnB6RE1ERmNsQTNvQU11cnpqT1hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lYTM2MTQtZjA5MC00YTJiLTkzNTUt Yjg5YTUxMWMzYmJkLzEvOFQ1XzVrUjM2alJIMzJJWFRFbktaR2VEeEEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9lYTM2MTQtZjA5MC00YTJiLTkzNTUtYjg5YTUxMWMzYmJk LzEveVl1Q1h6YnB6RE1ERmNsQTNvQU11cnpqT1hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAUEanAwQC uTfoAwQCuaoYAwQDvF8AAwQDwRxgMA0GCSqGSIb3DQEBCwUAA4IBAQCGpUHPWbgE iOIw/NB47/DLwlSgLDgO4uzLngQF+Au9WjfdOJxqRgXTHAjsOm4F+hbLngTCwV3f 8Fn1YZWN8ey/cVnrhhijXI6ngy6TxQ+n8XBIQHroDari56h+OFbN8DzS4AlTJD3e JWYDnUrlgP9s9Qp7YH8yllpnsWp/Y6cc0O8svd5ujoa7qRcYfcVoq0sKmOGKG4+U 0fDf8T/BQB0vFwZhwdgw6AuAd5JE9LaugXLbADfn2YM7Qwisgljs6LHds8ri1BpJ 2qzw+cPT7C94R/d/V4sjRDMQrX2D/J4bPwmkfSAvGMtjQq9amkYSyBc1K/Tk63Mz CfD9R2Zik2OM -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:42 2026 by rpki-client