This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/8f6ryTvzxsgcz7a1VrDaHfr6K-s.roa File: 8f6ryTvzxsgcz7a1VrDaHfr6K-s.roa (raw, json) Hash identifier: RW6Oi5z/RcWRGaIQCUZbkdEin/DlQFbS+I/SqrTulAA= Subject key identifier: F1:FE:AB:C9:3B:F3:C6:C8:1C:CF:B6:B5:56:B0:DA:1D:FA:FA:2B:EB Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593 Certificate serial: 019B7FF28360EA24E18689526222E1F28BD0 Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/8f6ryTvzxsgcz7a1VrDaHfr6K-s.roa Signing time: Fri 02 Jan 2026 18:22:38 +0000 ROA not before: Fri 02 Jan 2026 18:22:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205076 IP address blocks: 5.129.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:83:60:ea:24:e1:86:89:52:62:22:e1:f2:8b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593 Validity Not Before: Jan 2 18:22:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1feabc93bf3c6c81ccfb6b556b0da1dfafa2beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:09:a3:cc:b8:d6:87:34:7b:54:9b:ec:1d:22: 1d:a6:7d:f8:0c:57:c7:ed:ca:6d:6b:62:ec:7b:05: 91:39:04:a1:c2:c3:a7:7d:8a:3d:a6:89:23:6f:04: 02:1b:08:c9:df:a5:7e:73:72:03:85:2e:f7:c3:8d: 38:03:0f:a8:1e:7f:23:7e:d2:30:d4:8f:d5:5c:ad: b9:1c:42:ca:9e:0f:0f:84:03:01:07:c8:77:37:e1: 42:c2:ea:78:8a:53:84:2a:f5:53:b1:4b:c4:3d:90: 5e:48:35:53:cb:ff:d7:00:a0:bd:06:f4:8d:97:73: ec:d5:01:8e:0b:2d:20:72:ae:8e:60:fb:e2:10:a8: 01:a4:e7:21:44:c0:c1:1c:3a:e0:b8:35:be:08:6e: 5f:3b:6d:9f:53:5e:26:a6:7c:7f:6e:4f:2c:c9:f5: 9e:83:5a:a1:3e:dd:5b:30:cf:bf:bb:2a:d8:08:fe: ed:c6:8d:97:2e:57:d6:a7:51:f3:d8:73:8b:63:a9: 89:df:41:37:52:4d:90:8c:64:5e:41:67:7c:08:48: 7f:5e:f3:76:bc:8f:37:bb:c9:32:37:15:f0:5d:92: ce:66:57:78:c0:30:6e:d8:96:3f:fa:5a:2b:0f:ed: 69:e7:dd:79:38:8d:14:14:d3:d0:74:3d:96:02:98: f8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:FE:AB:C9:3B:F3:C6:C8:1C:CF:B6:B5:56:B0:DA:1D:FA:FA:2B:EB X509v3 Authority Key Identifier: keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/8f6ryTvzxsgcz7a1VrDaHfr6K-s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.129.187.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:32:58:9c:67:90:e6:99:4c:87:95:01:78:90:17:21:28:38: 55:84:52:de:c2:ae:53:14:91:96:de:b1:a2:b2:f9:83:9d:e3: 10:b9:4c:95:41:02:ee:47:41:30:a1:82:b1:b5:6f:63:f6:31: f5:25:0f:91:44:1a:00:8e:1b:21:5d:2e:fe:08:39:9f:42:8d: 65:d8:07:a2:b8:63:99:6b:10:98:c1:f1:c6:d3:a1:6e:a1:b1: d5:21:5f:0f:d6:1f:af:30:1f:af:85:48:4c:f2:ad:4c:c6:92: 3d:9d:09:bd:53:00:9c:fb:1b:7d:b4:2e:8b:3d:d8:35:4a:bc: c4:bf:79:a7:48:54:bb:38:54:f2:56:ca:14:d7:85:5a:be:4f: b5:d9:8e:6c:aa:71:83:1d:6a:0a:bc:1c:00:e8:92:d8:a6:1f: 48:14:d9:a1:45:88:23:39:b9:1d:87:4b:7f:87:15:0c:eb:f5: f8:1d:d3:50:2d:fe:6d:f4:f0:8f:cb:7f:2c:bd:e6:12:d3:4a: 5b:12:b4:d2:3d:84:f7:ed:8f:56:24:c6:f3:70:b7:27:5c:1b: ee:61:93:52:02:c6:4a:a6:b3:00:f4:44:f4:70:4b:36:f1:fb: 46:73:05:c5:b7:fa:20:11:93:dd:9f:b0:ab:c9:d8:c7:69:75: da:a0:a1:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8oNg6iThholSYiLh8ovQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZGIzZGNkZjVlNmJlZTA5ODI1YzM3YmYzYjhiZGYyOGI2 ZmI1OTMwHhcNMjYwMTAyMTgyMjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWZlYWJjOTNiZjNjNmM4MWNjZmI2YjU1NmIwZGExZGZhZmEyYmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAmjzLjWhzR7VJvsHSIdpn34DFfH 7cpta2LsewWROQShwsOnfYo9pokjbwQCGwjJ36V+c3IDhS73w404Aw+oHn8jftIw 1I/VXK25HELKng8PhAMBB8h3N+FCwup4ilOEKvVTsUvEPZBeSDVTy//XAKC9BvSN l3Ps1QGOCy0gcq6OYPviEKgBpOchRMDBHDrguDW+CG5fO22fU14mpnx/bk8syfWe g1qhPt1bMM+/uyrYCP7txo2XLlfWp1Hz2HOLY6mJ30E3Uk2QjGReQWd8CEh/XvN2 vI83u8kyNxXwXZLOZld4wDBu2JY/+lorD+1p5915OI0UFNPQdD2WApj4EwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPH+q8k788bIHM+2tVaw2h36+ivrMB8GA1UdIwQY MBaAFE3bPc315r7gmCXDe/O4vfKLb7WTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEt MjE3MGM1YzFkM2VkLzEvOGY2cnlUdnp4c2djejdhMVZyRGFIZnI2Sy1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEtMjE3MGM1YzFkM2Vk LzEvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABYG7MA0G CSqGSIb3DQEBCwUAA4IBAQBPMlicZ5DmmUyHlQF4kBchKDhVhFLewq5TFJGW3rGi svmDneMQuUyVQQLuR0EwoYKxtW9j9jH1JQ+RRBoAjhshXS7+CDmfQo1l2AeiuGOZ axCYwfHG06FuobHVIV8P1h+vMB+vhUhM8q1MxpI9nQm9UwCc+xt9tC6LPdg1SrzE v3mnSFS7OFTyVsoU14Vavk+12Y5sqnGDHWoKvBwA6JLYph9IFNmhRYgjObkdh0t/ hxUM6/X4HdNQLf5t9PCPy38sveYS00pbErTSPYT37Y9WJMbzcLcnXBvuYZNSAsZK prMA9ET0cEs28ftGcwXFt/ogEZPdn7CrydjHaXXaoKHn -----END CERTIFICATE-----Generated at Sun Jan 25 22:16:55 2026 by rpki-client