This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/z8hJl8rGyd_56TuV5GLYx9xFhho.roa File: z8hJl8rGyd_56TuV5GLYx9xFhho.roa (raw, json) Hash identifier: XAMtoMHmL3C5zB92ZcL52Exd5SlTcXF5KJm8ioosamE= Subject key identifier: CF:C8:49:97:CA:C6:C9:DF:F9:E9:3B:95:E4:62:D8:C7:DC:45:86:1A Certificate issuer: /CN=8252c4c372327fdc2c17b495b85891a76de42510 Certificate serial: 019B77C752F894ECEB5351885F0C0482761B Authority key identifier: 82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/z8hJl8rGyd_56TuV5GLYx9xFhho.roa Signing time: Thu 01 Jan 2026 04:18:30 +0000 ROA not before: Thu 01 Jan 2026 04:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39637 IP address blocks: 193.203.225.0/24 maxlen: 24 193.203.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:52:f8:94:ec:eb:53:51:88:5f:0c:04:82:76:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8252c4c372327fdc2c17b495b85891a76de42510 Validity Not Before: Jan 1 04:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfc84997cac6c9dff9e93b95e462d8c7dc45861a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ba:e5:29:48:1f:8b:eb:08:1b:ab:a7:fd:6f: 1d:cd:be:ac:65:88:c7:f4:94:bc:05:28:c0:21:46: 14:e7:82:d6:40:fd:71:61:c6:b9:76:dc:c3:31:ac: b4:5e:af:a5:86:03:17:bf:cc:23:09:cf:3b:72:8e: 83:e6:b4:47:33:ca:de:45:66:4a:b8:b5:8b:81:35: 7d:32:a8:1e:4d:81:bf:7e:38:9e:58:c2:de:a4:e0: 9e:49:23:fc:1a:e3:f0:da:13:b0:d8:40:45:4a:21: 85:78:05:0d:65:00:0b:7c:30:b1:a4:c5:b4:e9:58: 0e:79:81:1d:bd:58:9f:79:18:73:e8:de:9b:78:9e: d6:47:95:85:13:24:6e:b4:5d:63:76:8a:0a:ae:13: 45:db:fa:51:26:e4:74:e3:0e:e8:35:d3:66:ce:f6: 5e:31:d0:33:d3:23:c8:e2:3f:ab:03:51:9e:1c:fe: 1d:1f:7e:28:52:30:18:f3:0c:29:2d:0d:3d:91:66: 3f:9c:7b:52:d8:cf:9d:1e:2c:d5:ce:ce:26:38:4b: e8:56:b7:ed:52:80:74:91:9d:0a:aa:14:f4:e1:48: 22:ac:67:75:64:b1:7e:8f:af:67:94:da:8e:f3:9e: 50:d3:f4:bf:53:85:17:3c:98:db:01:a2:ef:a5:0e: 69:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C8:49:97:CA:C6:C9:DF:F9:E9:3B:95:E4:62:D8:C7:DC:45:86:1A X509v3 Authority Key Identifier: keyid:82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/z8hJl8rGyd_56TuV5GLYx9xFhho.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.203.225.0-193.203.226.255 Signature Algorithm: sha256WithRSAEncryption 52:6b:2f:49:d3:94:39:42:97:ea:d4:68:2f:6f:1f:53:0c:b1: c3:4f:ca:ba:d4:5b:d7:e7:50:c3:65:4b:6d:52:4f:ba:95:48: c9:6a:b3:85:7a:62:80:c5:a6:96:75:a5:7a:ba:bc:d0:93:80: c4:b5:84:f1:0d:bf:ef:a1:e9:b6:1e:97:da:0a:69:35:1e:d9: c3:39:1c:da:57:2c:2b:7e:f9:4f:d3:b5:4a:2b:d2:b6:ee:b8: cb:25:c4:e4:b3:0b:07:93:a1:61:b9:37:57:bc:c1:0b:3a:4a: 67:df:e3:6c:3e:8f:5f:b9:19:b5:69:6d:0c:32:18:cd:7b:87: 37:b5:4d:9a:e8:87:54:1d:09:63:e9:33:3b:09:1d:51:f5:1e: 51:07:37:d3:a2:a0:ac:81:85:07:78:e3:e9:f7:9a:76:3a:ff: e1:a3:04:14:2e:77:b2:43:dc:24:cd:14:11:c4:2b:0b:18:5f: a2:8c:98:ab:9e:d7:9e:e3:c1:48:21:16:bf:ed:c0:f0:77:fd: 54:cb:a4:2b:ea:8c:3a:c8:b7:0d:e9:d1:1d:b3:08:34:b4:35: c0:5d:7d:60:9e:5f:d0:0d:b9:91:c2:59:63:7b:1d:de:95:5a: 03:c9:55:07:32:4f:5f:28:ed:cc:da:1f:76:16:a3:5e:8b:5e: 69:fe:db:da -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3x1L4lOzrU1GIXwwEgnYbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNTJjNGMzNzIzMjdmZGMyYzE3YjQ5NWI4NTg5MWE3NmRl NDI1MTAwHhcNMjYwMTAxMDQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmM4NDk5N2NhYzZjOWRmZjllOTNiOTVlNDYyZDhjN2RjNDU4NjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbrlKUgfi+sIG6un/W8dzb6sZYjH 9JS8BSjAIUYU54LWQP1xYca5dtzDMay0Xq+lhgMXv8wjCc87co6D5rRHM8reRWZK uLWLgTV9MqgeTYG/fjieWMLepOCeSSP8GuPw2hOw2EBFSiGFeAUNZQALfDCxpMW0 6VgOeYEdvVifeRhz6N6beJ7WR5WFEyRutF1jdooKrhNF2/pRJuR04w7oNdNmzvZe MdAz0yPI4j+rA1GeHP4dH34oUjAY8wwpLQ09kWY/nHtS2M+dHizVzs4mOEvoVrft UoB0kZ0KqhT04UgirGd1ZLF+j69nlNqO855Q0/S/U4UXPJjbAaLvpQ5poQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFM/ISZfKxsnf+ek7leRi2MfcRYYaMB8GA1UdIwQY MBaAFIJSxMNyMn/cLBe0lbhYkadt5CUQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2xMRXczSXlmOXdzRjdTVnVGaVJwMjNrSlJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82YzQ1MzItMDdkOC00ZGIzLTliNTUt ZmVlMWQwMmYxMzAzLzEvejhoSmw4ckd5ZF81NlR1VjVHTFl4OXhGaGhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy82YzQ1MzItMDdkOC00ZGIzLTliNTUtZmVlMWQwMmYxMzAz LzEvZ2xMRXczSXlmOXdzRjdTVnVGaVJwMjNrSlJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADBy+ED BADBy+IwDQYJKoZIhvcNAQELBQADggEBAFJrL0nTlDlCl+rUaC9vH1MMscNPyrrU W9fnUMNlS21ST7qVSMlqs4V6YoDFppZ1pXq6vNCTgMS1hPENv++h6bYel9oKaTUe 2cM5HNpXLCt++U/TtUor0rbuuMslxOSzCweToWG5N1e8wQs6Smff42w+j1+5GbVp bQwyGM17hze1TZroh1QdCWPpMzsJHVH1HlEHN9OioKyBhQd44+n3mnY6/+GjBBQu d7JD3CTNFBHEKwsYX6KMmKue157jwUghFr/twPB3/VTLpCvqjDrItw3p0R2zCDS0 NcBdfWCeX9ANuZHCWWN7Hd6VWgPJVQcyT18o7czaH3YWo16LXmn+29o= -----END CERTIFICATE-----Generated at Mon Jan 26 11:43:10 2026 by rpki-client