This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/u8VLd__LhC89PUm-bBou8g1XjCk.roa File: u8VLd__LhC89PUm-bBou8g1XjCk.roa (raw, json) Hash identifier: FAOfHdJRje+Re0ts4CPoL2wF4WdKlrbROQeiewEd2a4= Subject key identifier: BB:C5:4B:77:FF:CB:84:2F:3D:3D:49:BE:6C:1A:2E:F2:0D:57:8C:29 Certificate issuer: /CN=085787e65eb4fcd66e3340b62ade47ca00919dce Certificate serial: 019B7D5CB5B13E84CAF966AB89E28EFB8E3F Authority key identifier: 08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/u8VLd__LhC89PUm-bBou8g1XjCk.roa Signing time: Fri 02 Jan 2026 06:19:46 +0000 ROA not before: Fri 02 Jan 2026 06:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215602 IP address blocks: 164.138.201.0/24 maxlen: 24 194.164.244.0/24 maxlen: 24 2a0c:28c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.mft rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b5:b1:3e:84:ca:f9:66:ab:89:e2:8e:fb:8e:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=085787e65eb4fcd66e3340b62ade47ca00919dce Validity Not Before: Jan 2 06:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbc54b77ffcb842f3d3d49be6c1a2ef20d578c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d6:6a:9c:22:2a:93:ea:ac:ae:ed:e1:b3:a1: e5:19:18:35:7b:02:6b:cf:07:75:41:e5:62:d9:b8: ab:ee:a9:40:6e:00:1a:6b:ad:9e:02:9e:71:1a:15: 01:48:74:41:48:24:5f:bf:68:2b:a9:db:47:54:5d: b1:27:f5:0c:41:66:26:ef:00:dd:50:fe:ba:55:ca: d8:d6:91:08:fd:09:ee:ab:f3:33:ac:5c:cc:86:47: fd:0c:17:c1:fd:35:cc:82:8d:6d:7b:10:b7:11:ac: 79:40:9d:69:ca:a4:db:22:03:af:16:b2:b7:15:96: 7e:61:1b:6f:0f:4c:46:46:5f:63:1b:5e:bd:dc:d1: 09:3f:1f:ca:a6:d5:f1:0c:72:46:1e:85:b7:3e:ed: 02:12:c0:04:cb:a9:5a:12:a7:ac:2c:34:c1:1a:7d: 65:a8:f3:9a:47:c2:4c:b9:7f:38:fd:88:f2:19:e5: 38:77:39:9b:0a:cd:78:84:90:51:12:2d:12:56:22: fa:74:7f:ef:ef:e6:d9:11:64:ec:1f:4e:88:9a:8d: 01:17:8b:52:83:4f:77:e0:eb:72:8b:72:e0:be:42: 66:be:ea:6e:f8:bc:ba:ac:cf:0d:eb:10:76:16:3e: ff:4f:c2:2f:f9:17:6c:a1:27:c3:15:19:f1:39:04: c7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C5:4B:77:FF:CB:84:2F:3D:3D:49:BE:6C:1A:2E:F2:0D:57:8C:29 X509v3 Authority Key Identifier: keyid:08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/u8VLd__LhC89PUm-bBou8g1XjCk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.138.201.0/24 194.164.244.0/24 IPv6: 2a0c:28c0::/29 Signature Algorithm: sha256WithRSAEncryption 50:50:1c:50:e5:29:0e:05:1a:f1:8e:46:48:7a:4e:d5:85:e3: 56:4d:5f:e1:dd:c4:42:d7:b4:71:88:bf:52:be:0f:3f:d0:eb: bf:42:cd:85:30:32:0f:61:6b:11:57:9a:b5:24:33:b5:77:ff: 91:8f:44:00:99:aa:2c:8d:a1:ca:9a:33:b9:89:51:36:81:e5: 19:23:80:35:72:0f:64:da:fa:f7:8e:1e:02:4b:8e:d4:37:7e: e5:2c:81:47:8f:38:d9:e2:34:1f:df:f2:bd:88:84:d8:0a:ed: 6e:54:e0:b9:13:c1:64:8f:86:48:43:c6:b5:42:7f:a0:2a:1e: 44:f1:be:29:8a:d1:3e:ca:69:c5:63:6d:87:10:fb:c0:6a:b9: 1d:0d:21:29:d4:c8:91:25:43:32:12:e5:bc:a4:c5:79:85:b8: e1:dc:0e:7e:e0:2d:ed:ff:bd:f4:8d:59:c7:e1:a4:b3:6f:4f: 8e:70:f2:23:c6:d8:43:cc:3b:9b:a3:94:d4:aa:c7:00:7d:89: f9:25:c4:2c:22:e6:f5:75:20:e7:ed:67:b9:66:0b:48:8a:71: 04:7c:8f:0b:1c:18:79:47:ae:f7:21:76:fa:4b:ea:6f:af:3b: da:1a:ab:03:52:6c:90:86:63:7c:64:b8:d0:36:13:e0:64:c4: 76:08:a3:ec -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9XLWxPoTK+WarieKO+44/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NTc4N2U2NWViNGZjZDY2ZTMzNDBiNjJhZGU0N2NhMDA5 MTlkY2UwHhcNMjYwMTAyMDYxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmM1NGI3N2ZmY2I4NDJmM2QzZDQ5YmU2YzFhMmVmMjBkNTc4YzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tZqnCIqk+qsru3hs6HlGRg1ewJr zwd1QeVi2bir7qlAbgAaa62eAp5xGhUBSHRBSCRfv2grqdtHVF2xJ/UMQWYm7wDd UP66VcrY1pEI/Qnuq/MzrFzMhkf9DBfB/TXMgo1texC3Eax5QJ1pyqTbIgOvFrK3 FZZ+YRtvD0xGRl9jG1693NEJPx/KptXxDHJGHoW3Pu0CEsAEy6laEqesLDTBGn1l qPOaR8JMuX84/YjyGeU4dzmbCs14hJBREi0SViL6dH/v7+bZEWTsH06Imo0BF4tS g0934Otyi3LgvkJmvupu+Ly6rM8N6xB2Fj7/T8Iv+RdsoSfDFRnxOQTH1QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFLvFS3f/y4QvPT1JvmwaLvINV4wpMB8GA1UdIwQY MBaAFAhXh+ZetPzWbjNAtireR8oAkZ3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0ZlSDVsNjBfTlp1TTBDMkt0NUh5Z0NSbmM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9kMmJiZjYtM2I2OS00NDJlLWI0OTAt N2U1NGMzMmFiZWQ4LzEvdThWTGRfX0xoQzg5UFVtLWJCb3U4ZzFYakNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9kMmJiZjYtM2I2OS00NDJlLWI0OTAtN2U1NGMzMmFiZWQ4 LzEvQ0ZlSDVsNjBfTlp1TTBDMkt0NUh5Z0NSbmM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQApIrJAwQA wqT0MA0EAgACMAcDBQMqDCjAMA0GCSqGSIb3DQEBCwUAA4IBAQBQUBxQ5SkOBRrx jkZIek7VheNWTV/h3cRC17RxiL9Svg8/0Ou/Qs2FMDIPYWsRV5q1JDO1d/+Rj0QA maosjaHKmjO5iVE2geUZI4A1cg9k2vr3jh4CS47UN37lLIFHjzjZ4jQf3/K9iITY Cu1uVOC5E8Fkj4ZIQ8a1Qn+gKh5E8b4pitE+ymnFY22HEPvAarkdDSEp1MiRJUMy EuW8pMV5hbjh3A5+4C3t/730jVnH4aSzb0+OcPIjxthDzDubo5TUqscAfYn5JcQs Iub1dSDn7We5ZgtIinEEfI8LHBh5R673IXb6S+pvrzvaGqsDUmyQhmN8ZLjQNhPg ZMR2CKPs -----END CERTIFICATE-----Generated at Tue Feb 10 02:26:48 2026 by rpki-client