This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/z8MGihCWJ1EDQKTZllTLYMjbgZg.roa File: z8MGihCWJ1EDQKTZllTLYMjbgZg.roa (raw, json) Hash identifier: ZhIBRD012FAcn76S/K0NYB70h/HSEAmrMGj220CCqCw= Subject key identifier: CF:C3:06:8A:10:96:27:51:03:40:A4:D9:96:54:CB:60:C8:DB:81:98 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B1F93DC81D048356ECA29E64F6106 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/z8MGihCWJ1EDQKTZllTLYMjbgZg.roa Signing time: Fri 02 Jan 2026 06:18:02 +0000 ROA not before: Fri 02 Jan 2026 06:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205331 IP address blocks: 5.104.183.0/24 maxlen: 24 91.191.216.0/23 maxlen: 24 185.232.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:1f:93:dc:81:d0:48:35:6e:ca:29:e6:4f:61:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfc3068a109627510340a4d99654cb60c8db8198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4c:3f:20:52:9e:da:1c:76:63:84:2c:c4:a0: 39:86:d4:f6:6b:d9:d1:54:e2:10:8f:17:4a:7d:3d: 01:97:75:3b:c0:85:ee:7b:0c:c1:11:56:47:35:5e: a0:bb:f8:24:f5:d5:ed:c8:58:71:6e:6e:ac:73:0d: a9:b8:18:50:e3:30:1e:23:61:9c:a2:d1:17:70:1e: cd:db:5b:e5:c4:9e:37:07:68:f7:6d:e0:98:b1:16: 27:31:60:f8:f5:c1:de:dc:a1:06:54:96:c2:24:6f: 2a:14:cf:8b:4d:41:7f:54:9e:14:49:cd:54:08:1d: da:42:de:bc:9a:b5:c7:8d:2b:70:63:17:77:23:5b: 52:5e:ca:bc:42:c0:11:f4:2b:56:40:04:9c:6f:1e: 44:ff:85:d7:94:2a:20:9c:be:1d:3e:4c:6a:2c:c4: 10:88:a4:0b:a4:d5:6d:00:12:8d:6e:4d:71:ed:02: 3e:08:44:51:65:41:1c:29:94:78:73:43:c1:44:bb: 11:8e:1c:36:6e:56:88:26:5c:5a:bd:c0:8e:33:5c: c1:38:1e:12:cb:29:50:7a:34:e9:3a:e7:55:96:68: 47:b8:6c:21:35:a1:f4:62:ab:1d:96:95:a9:de:51: a9:e8:44:87:a6:64:b3:b0:56:d5:a4:b9:ef:36:ac: 14:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C3:06:8A:10:96:27:51:03:40:A4:D9:96:54:CB:60:C8:DB:81:98 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/z8MGihCWJ1EDQKTZllTLYMjbgZg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.104.183.0/24 91.191.216.0/23 185.232.158.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:72:2a:c6:9c:be:7b:3c:b0:10:80:44:55:3e:d7:87:db:fb: e8:d6:f4:05:3a:cd:9a:24:cb:c0:62:5e:e7:01:c3:c1:0a:c0: e7:fa:1d:c2:c2:45:ad:d4:fc:09:45:9e:8a:a2:c5:2d:aa:94: 1b:77:5d:ef:7b:66:96:5f:bd:31:92:f5:70:5f:f1:12:5f:10: 01:3e:b2:04:3f:23:b0:82:e7:61:97:37:55:49:75:bf:59:4b: c8:d2:f0:36:cb:8e:fa:ac:ce:35:ba:bd:78:bf:f9:e0:ee:7b: 9a:cb:8b:5e:b8:07:f7:76:dc:97:15:4e:0b:7b:83:88:f9:94: ce:b7:a8:5f:c1:51:8e:3f:a4:e7:d4:f2:c6:08:d6:7d:fd:a9: ca:12:66:55:d9:cb:1b:96:00:b1:a8:4f:45:d4:b9:bc:63:ff: 5d:36:ae:31:fb:18:9b:05:03:85:bf:06:a0:4f:eb:e9:29:5e: c6:82:3e:b1:64:e6:fc:85:43:db:ca:58:e5:b3:f9:5b:47:6b: 38:9b:21:5f:28:fa:c2:21:9a:b8:c4:1b:b0:b5:3b:ad:dd:a4: dd:7b:15:ca:83:10:f3:7d:79:be:08:a1:bd:1f:5e:9d:ce:41: 55:8e:dc:ac:ec:cf:e8:7c:6a:57:9a:36:f0:32:29:c6:4e:3c: 1d:57:7e:84 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9Wx+T3IHQSDVuyinmT2EGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmMzMDY4YTEwOTYyNzUxMDM0MGE0ZDk5NjU0Y2I2MGM4ZGI4MTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0w/IFKe2hx2Y4QsxKA5htT2a9nR VOIQjxdKfT0Bl3U7wIXuewzBEVZHNV6gu/gk9dXtyFhxbm6scw2puBhQ4zAeI2Gc otEXcB7N21vlxJ43B2j3beCYsRYnMWD49cHe3KEGVJbCJG8qFM+LTUF/VJ4USc1U CB3aQt68mrXHjStwYxd3I1tSXsq8QsAR9CtWQAScbx5E/4XXlCognL4dPkxqLMQQ iKQLpNVtABKNbk1x7QI+CERRZUEcKZR4c0PBRLsRjhw2blaIJlxavcCOM1zBOB4S yylQejTpOudVlmhHuGwhNaH0YqsdlpWp3lGp6ESHpmSzsFbVpLnvNqwUiwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFM/DBooQlidRA0Ck2ZZUy2DI24GYMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvejhNR2loQ1dKMUVEUUtUWmxsVExZTWpiZ1pnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABWi3AwQB W7/YAwQBueieMA0GCSqGSIb3DQEBCwUAA4IBAQCNcirGnL57PLAQgERVPteH2/vo 1vQFOs2aJMvAYl7nAcPBCsDn+h3CwkWt1PwJRZ6KosUtqpQbd13ve2aWX70xkvVw X/ESXxABPrIEPyOwgudhlzdVSXW/WUvI0vA2y476rM41ur14v/ng7nuay4teuAf3 dtyXFU4Le4OI+ZTOt6hfwVGOP6Tn1PLGCNZ9/anKEmZV2csblgCxqE9F1Lm8Y/9d Nq4x+xibBQOFvwagT+vpKV7Ggj6xZOb8hUPbyljls/lbR2s4myFfKPrCIZq4xBuw tTut3aTdexXKgxDzfXm+CKG9H16dzkFVjtys7M/ofGpXmjbwMinGTjwdV36E -----END CERTIFICATE-----Generated at Fri Jan 23 18:49:37 2026 by rpki-client