This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/8CC9XG9ENZD8uSBjBaV6IrcWRcU.roa File: 8CC9XG9ENZD8uSBjBaV6IrcWRcU.roa (raw, json) Hash identifier: +cFHBDI2vSe8qYQNG7SSN4dtten2bWEf/OgE/4boopY= Subject key identifier: F0:20:BD:5C:6F:44:35:90:FC:B9:20:63:05:A5:7A:22:B7:16:45:C5 Certificate issuer: /CN=3bad9cd5034f81558f83d238eca406332bd7ba85 Certificate serial: 019B7AC831597E7EA9B4F9D4569048F95A2A Authority key identifier: 3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/8CC9XG9ENZD8uSBjBaV6IrcWRcU.roa Signing time: Thu 01 Jan 2026 18:18:18 +0000 ROA not before: Thu 01 Jan 2026 18:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13054 IP address blocks: 185.253.12.0/22 maxlen: 22 213.164.64.0/19 maxlen: 24 2a03:3500::/32 maxlen: 32 2a0c:3040::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:31:59:7e:7e:a9:b4:f9:d4:56:90:48:f9:5a:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bad9cd5034f81558f83d238eca406332bd7ba85 Validity Not Before: Jan 1 18:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f020bd5c6f443590fcb9206305a57a22b71645c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:51:84:b0:70:fc:09:dc:94:30:81:aa:a7:c3: 70:37:54:fd:59:09:0f:7c:5e:93:4c:74:d5:c2:2d: 3a:d2:e9:47:24:30:dc:8d:2f:da:0c:84:d7:78:ee: 70:d5:90:30:38:35:95:16:a7:c2:ac:f9:c2:12:d6: fb:19:b4:78:77:d5:fe:f1:6b:2b:61:c0:0a:bb:21: 6d:30:7d:de:cd:41:3c:cf:bc:1d:5e:7b:57:42:26: fe:90:e0:87:1a:85:c9:32:a6:3d:09:21:d3:28:f9: c1:e9:43:ba:d2:93:e5:7d:85:ce:40:4b:bc:c2:3e: 52:b9:66:b6:6f:56:65:1f:01:9b:5d:e8:40:d8:be: 66:02:41:d7:1e:39:3b:0e:4c:a7:55:f2:e5:aa:ec: fd:1d:90:e5:db:ba:55:7a:a8:84:7f:4d:77:20:81: 50:41:a8:00:b3:3c:36:e0:07:71:d7:2f:db:31:d7: 67:f1:5d:1b:71:92:03:da:9b:f7:f7:f7:f1:c8:03: ea:f2:d3:e9:c5:65:18:ac:39:bc:70:62:00:18:03: d2:55:2e:d1:aa:52:89:24:aa:c3:3c:4f:ab:89:bb: a8:5e:ef:c2:1c:d2:54:e5:4e:9b:78:ff:96:5a:c8: d7:ec:d2:8f:13:22:a3:0f:91:6f:e3:f3:c0:f7:af: 4a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:20:BD:5C:6F:44:35:90:FC:B9:20:63:05:A5:7A:22:B7:16:45:C5 X509v3 Authority Key Identifier: keyid:3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/8CC9XG9ENZD8uSBjBaV6IrcWRcU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.253.12.0/22 213.164.64.0/19 IPv6: 2a03:3500::/32 2a0c:3040::/29 Signature Algorithm: sha256WithRSAEncryption 59:e3:5a:22:d4:a1:ac:a1:0f:dd:24:55:54:fe:1d:e4:59:be: c1:36:04:70:9c:8e:b9:11:66:01:52:38:f5:23:db:94:c3:10: 7c:c9:55:97:cf:2c:62:43:12:cd:1e:b9:2a:08:91:f0:63:ce: a6:4f:2f:43:d8:af:5c:ae:27:c5:54:d4:11:61:4f:c5:45:3a: 03:a9:ed:98:8e:cb:60:cd:21:57:ce:7d:cc:dc:55:64:d9:50: c7:ca:61:ff:8b:d3:4f:55:63:04:4e:f4:e6:03:22:7e:75:a1: b8:ea:34:ea:ec:19:45:fb:b1:8a:68:44:0d:04:52:d4:32:bc: 1f:7f:d5:26:71:70:c1:97:7a:61:87:2a:9a:d9:9a:cb:93:5b: e9:21:be:ad:dd:02:58:c3:87:f4:75:46:de:e9:ae:1f:21:f5: 8b:52:a5:b5:36:e3:ff:3c:6b:10:4a:ff:89:69:ee:50:c1:b6: 13:a1:2a:3a:7a:7b:86:02:d1:8b:27:b1:0c:e5:07:d0:b2:26: 82:ac:8e:b8:c1:11:d5:df:49:cf:18:6f:2f:21:d8:a8:de:18: e1:45:0b:29:a5:72:12:29:35:86:fd:ce:f6:52:dd:93:44:e1: 66:8f:23:ea:54:c9:e8:36:72:6a:e2:4c:cc:7b:cd:34:42:f7: b0:15:56:37 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt6yDFZfn6ptPnUVpBI+VoqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiYWQ5Y2Q1MDM0ZjgxNTU4ZjgzZDIzOGVjYTQwNjMzMmJk N2JhODUwHhcNMjYwMTAxMTgxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDIwYmQ1YzZmNDQzNTkwZmNiOTIwNjMwNWE1N2EyMmI3MTY0NWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlGEsHD8CdyUMIGqp8NwN1T9WQkP fF6TTHTVwi060ulHJDDcjS/aDITXeO5w1ZAwODWVFqfCrPnCEtb7GbR4d9X+8Wsr YcAKuyFtMH3ezUE8z7wdXntXQib+kOCHGoXJMqY9CSHTKPnB6UO60pPlfYXOQEu8 wj5SuWa2b1ZlHwGbXehA2L5mAkHXHjk7DkynVfLlquz9HZDl27pVeqiEf013IIFQ QagAszw24Adx1y/bMddn8V0bcZID2pv39/fxyAPq8tPpxWUYrDm8cGIAGAPSVS7R qlKJJKrDPE+ribuoXu/CHNJU5U6beP+WWsjX7NKPEyKjD5Fv4/PA969KiQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPAgvVxvRDWQ/LkgYwWleiK3FkXFMB8GA1UdIwQY MBaAFDutnNUDT4FVj4PSOOykBjMr17qFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzYyYzFRTlBnVldQZzlJNDdLUUdNeXZYdW9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80MTZiYzctY2U4Ny00MmI2LThjNjgt NGJhNWYyMDZmNjVhLzEvOENDOVhHOUVOWkQ4dVNCakJhVjZJcmNXUmNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80MTZiYzctY2U4Ny00MmI2LThjNjgtNGJhNWYyMDZmNjVh LzEvTzYyYzFRTlBnVldQZzlJNDdLUUdNeXZYdW9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCuf0MAwQF 1aRAMBQEAgACMA4DBQAqAzUAAwUDKgwwQDANBgkqhkiG9w0BAQsFAAOCAQEAWeNa ItShrKEP3SRVVP4d5Fm+wTYEcJyOuRFmAVI49SPblMMQfMlVl88sYkMSzR65KgiR 8GPOpk8vQ9ivXK4nxVTUEWFPxUU6A6ntmI7LYM0hV859zNxVZNlQx8ph/4vTT1Vj BE705gMifnWhuOo06uwZRfuximhEDQRS1DK8H3/VJnFwwZd6YYcqmtmay5Nb6SG+ rd0CWMOH9HVG3umuHyH1i1KltTbj/zxrEEr/iWnuUMG2E6EqOnp7hgLRiyexDOUH 0LImgqyOuMER1d9JzxhvLyHYqN4Y4UULKaVyEik1hv3O9lLdk0ThZo8j6lTJ6DZy auJMzHvNNEL3sBVWNw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:19 2026 by rpki-client