This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/8BMqVx4B0N35BRy2vE6yMO9RaoM.roa File: 8BMqVx4B0N35BRy2vE6yMO9RaoM.roa (raw, json) Hash identifier: mitZN8wlhQ8ZKpaaPxfGKHBhDao8dPMdBIQ9VZqQD+g= Subject key identifier: F0:13:2A:57:1E:01:D0:DD:F9:05:1C:B6:BC:4E:B2:30:EF:51:6A:83 Certificate issuer: /CN=fb79c26f31575345159c840ed278a878a9256615 Certificate serial: 019AC4E72C93DB5D608ACE5568E4DBACB41F Authority key identifier: FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/8BMqVx4B0N35BRy2vE6yMO9RaoM.roa Signing time: Thu 27 Nov 2025 10:41:15 +0000 ROA not before: Thu 27 Nov 2025 10:41:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207604 IP address blocks: 185.7.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c4:e7:2c:93:db:5d:60:8a:ce:55:68:e4:db:ac:b4:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb79c26f31575345159c840ed278a878a9256615 Validity Not Before: Nov 27 10:41:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f0132a571e01d0ddf9051cb6bc4eb230ef516a83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:87:b1:46:b7:45:95:ca:16:fa:84:33:ad:ee: e4:00:9d:b9:59:94:a3:43:78:58:1e:9d:96:97:ca: 40:d0:3b:ff:f8:51:d0:2d:e0:de:84:94:29:d0:e0: b0:dc:c1:59:61:00:a7:a7:ca:3d:ed:b1:53:91:b9: 14:c7:9c:89:3a:50:9b:4b:dd:ed:f1:68:0c:5a:e0: 4b:c1:30:e1:c2:67:3b:49:47:1c:4c:cf:92:0d:12: 18:ff:5e:06:b5:8a:f4:6f:00:a2:2d:50:9d:61:fe: e4:0d:0b:a1:38:4d:04:e7:2b:38:f6:ef:95:d4:94: dd:65:88:a0:63:2d:78:ac:10:f6:91:1d:40:0d:01: 10:79:49:c0:58:4b:e7:1d:8c:d1:23:88:45:4b:bb: e2:10:e4:e9:3a:7e:14:65:e2:29:a3:b0:c8:a2:08: b0:85:70:3a:61:5e:b4:89:79:6a:75:58:36:67:31: 1f:c5:91:ab:ef:d0:e6:8a:d1:67:3a:f1:03:3f:e6: 19:97:6f:12:29:ae:3d:c0:37:ff:24:7a:8a:83:08: 66:6f:5b:78:d6:b0:4b:38:34:c7:ae:07:28:e1:84: f8:d0:56:e8:b6:1b:71:67:e3:86:32:7a:7e:e2:82: c6:4a:be:3f:76:6e:5f:98:ea:ab:5d:73:28:ed:d4: 7f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:13:2A:57:1E:01:D0:DD:F9:05:1C:B6:BC:4E:B2:30:EF:51:6A:83 X509v3 Authority Key Identifier: keyid:FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/8BMqVx4B0N35BRy2vE6yMO9RaoM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.7.32.0/24 Signature Algorithm: sha256WithRSAEncryption 81:f9:73:c8:b0:51:85:e8:40:ca:15:60:7d:34:f8:34:07:93: 45:10:45:4e:df:85:79:2d:fe:7a:e1:54:04:52:03:47:1e:33: 42:2d:8a:87:09:cf:9c:fa:08:ba:58:b6:10:f2:8f:46:62:19: b7:a2:35:a9:7f:f3:0e:5a:89:70:d3:ce:df:62:81:37:02:92: be:a2:5e:fa:1f:63:30:4f:f7:d9:cc:55:04:13:b6:d9:58:86: 53:86:bd:6b:2b:77:ad:d2:75:e1:83:34:8d:a0:e1:f6:52:c3: a5:5b:89:b6:dd:2e:44:3c:ff:25:aa:e6:de:14:44:0d:a5:60: 95:f4:3a:81:b8:9a:70:8f:23:de:99:0d:e1:31:a4:30:06:7b: 31:c7:dc:c3:68:58:72:db:4f:d2:dc:ff:cc:da:3c:77:61:44: ed:3b:0e:e5:30:4b:db:f0:c3:63:0b:fc:28:05:93:72:06:9e: a6:27:93:c1:34:43:b1:4f:b5:75:38:a7:ce:ec:52:00:ca:1d: d3:64:d0:11:cb:68:dd:d4:cf:eb:2c:30:bf:4d:78:f9:57:1e: e4:4e:30:43:2e:b8:33:2e:5a:56:2d:b8:bf:91:31:9e:28:c6: 5e:41:9e:d0:50:97:e3:ac:61:75:95:60:ff:52:95:ce:15:a9: 9c:0d:c7:2c -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZrE5yyT211gis5VaOTbrLQfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNzljMjZmMzE1NzUzNDUxNTljODQwZWQyNzhhODc4YTky NTY2MTUwHhcNMjUxMTI3MTA0MTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDEzMmE1NzFlMDFkMGRkZjkwNTFjYjZiYzRlYjIzMGVmNTE2YTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYexRrdFlcoW+oQzre7kAJ25WZSj Q3hYHp2Wl8pA0Dv/+FHQLeDehJQp0OCw3MFZYQCnp8o97bFTkbkUx5yJOlCbS93t 8WgMWuBLwTDhwmc7SUccTM+SDRIY/14GtYr0bwCiLVCdYf7kDQuhOE0E5ys49u+V 1JTdZYigYy14rBD2kR1ADQEQeUnAWEvnHYzRI4hFS7viEOTpOn4UZeIpo7DIogiw hXA6YV60iXlqdVg2ZzEfxZGr79DmitFnOvEDP+YZl28SKa49wDf/JHqKgwhmb1t4 1rBLODTHrgco4YT40FbothtxZ+OGMnp+4oLGSr4/dm5fmOqrXXMo7dR/UQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPATKlceAdDd+QUctrxOsjDvUWqDMB8GA1UdIwQY MBaAFPt5wm8xV1NFFZyEDtJ4qHipJWYVMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0zbkNiekZYVTBVVm5JUU8wbmlvZUtrbFpoVS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvMTJkNjkxLTM3YTQtNGIxNS1hN2Vh LWJkMzdkYTBlNDQ3Yy8xLzhCTXFWeDRCME4zNUJSeTJ2RTZ5TU85UmFvTS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODAvMTJkNjkxLTM3YTQtNGIxNS1hN2VhLWJkMzdkYTBlNDQ3 Yy8xLzEtM25DYnpGWFUwVVZuSVFPMG5pb2VLa2xaaFUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5ByAw DQYJKoZIhvcNAQELBQADggEBAIH5c8iwUYXoQMoVYH00+DQHk0UQRU7fhXkt/nrh VARSA0ceM0ItiocJz5z6CLpYthDyj0ZiGbeiNal/8w5aiXDTzt9igTcCkr6iXvof YzBP99nMVQQTttlYhlOGvWsrd63SdeGDNI2g4fZSw6VbibbdLkQ8/yWq5t4URA2l YJX0OoG4mnCPI96ZDeExpDAGezHH3MNoWHLbT9Lc/8zaPHdhRO07DuUwS9vww2ML /CgFk3IGnqYnk8E0Q7FPtXU4p87sUgDKHdNk0BHLaN3Uz+ssML9NePlXHuROMEMu uDMuWlYtuL+RMZ4oxl5BntBQl+OsYXWVYP9Slc4VqZwNxyw= -----END CERTIFICATE-----Generated at Sat Dec 6 14:06:33 2025 by rpki-client