This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/c8FU8IlEAOdvntJIHy0ItaZdOhs.roa File: c8FU8IlEAOdvntJIHy0ItaZdOhs.roa (raw, json) Hash identifier: KkzTKPSTQ7S8XEiV0czmvnh+d+qBGKX4Bc+ANaJ+zBU= Subject key identifier: 73:C1:54:F0:89:44:00:E7:6F:9E:D2:48:1F:2D:08:B5:A6:5D:3A:1B Certificate issuer: /CN=44f4c5a61978549b248388f9df449d2a95e10a07 Certificate serial: 019B77C6A53FDDBA8FCDEC2FC65340647CD5 Authority key identifier: 44:F4:C5:A6:19:78:54:9B:24:83:88:F9:DF:44:9D:2A:95:E1:0A:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/c8FU8IlEAOdvntJIHy0ItaZdOhs.roa Signing time: Thu 01 Jan 2026 04:17:45 +0000 ROA not before: Thu 01 Jan 2026 04:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203361 IP address blocks: 185.105.152.0/22 maxlen: 22 2a06:f1c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a5:3f:dd:ba:8f:cd:ec:2f:c6:53:40:64:7c:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44f4c5a61978549b248388f9df449d2a95e10a07 Validity Not Before: Jan 1 04:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73c154f0894400e76f9ed2481f2d08b5a65d3a1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:37:0e:bc:44:04:e8:cb:e3:1c:81:b4:25:ff: 60:34:64:7d:54:b1:2c:94:db:de:69:6a:a4:39:3b: 24:f1:32:25:13:68:2d:01:44:d9:4b:11:b6:46:be: ce:24:9f:b4:09:2a:e7:eb:96:e0:45:49:6a:f3:b9: e3:00:bc:87:80:5b:83:96:59:f6:56:d4:41:4e:82: ba:a5:25:bf:6a:6f:39:72:ab:84:1d:c6:00:22:56: 10:c2:63:7a:d3:e2:da:25:ca:8a:ed:25:9e:d7:63: 36:0a:f6:7d:f1:08:22:e5:b7:cb:f6:93:a4:b1:eb: 10:ef:8b:d3:df:3b:3c:dc:a5:06:6e:80:e9:45:ba: e4:b7:e8:4c:63:a1:d1:7a:dd:ac:43:38:d0:98:1f: cc:0e:4e:6b:a8:05:00:da:df:3d:34:57:62:fa:c3: 8e:f1:ce:cd:b6:b4:94:b5:2a:75:7a:61:e2:a9:ad: 74:ba:ad:2a:5b:90:4e:a9:41:68:28:d7:66:05:18: 5c:8b:07:9c:8f:8d:49:91:d2:a7:00:45:b5:f2:c7: 02:e8:d2:92:45:82:2f:5b:0c:b2:77:90:57:60:e5: a5:c4:f2:b1:b4:77:ad:2f:b7:5c:f3:af:41:56:da: 59:09:46:1c:a5:8c:04:22:6a:79:7b:84:0d:fe:2c: ee:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C1:54:F0:89:44:00:E7:6F:9E:D2:48:1F:2D:08:B5:A6:5D:3A:1B X509v3 Authority Key Identifier: keyid:44:F4:C5:A6:19:78:54:9B:24:83:88:F9:DF:44:9D:2A:95:E1:0A:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/c8FU8IlEAOdvntJIHy0ItaZdOhs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.105.152.0/22 IPv6: 2a06:f1c0::/29 Signature Algorithm: sha256WithRSAEncryption 74:91:76:1b:a5:cd:a6:2f:3f:64:d8:42:19:cc:47:5f:af:52: b1:e9:c1:bf:34:ac:02:c2:7a:11:33:a6:39:1c:3f:49:13:82: ec:88:54:2d:c2:dd:10:49:bd:dd:d3:8b:65:d7:f1:18:b7:8b: d1:5e:db:db:5d:b0:50:0e:11:11:c5:65:36:96:73:54:63:4f: e6:59:0d:e8:86:06:7a:c3:65:1b:5d:37:ff:ac:47:73:ac:6a: 06:c7:3f:06:f8:69:2c:ef:86:d0:5b:2f:30:c5:68:e1:d6:d2: 8a:d4:b4:49:11:91:ca:b5:16:0f:6b:20:df:62:28:e3:63:74: 48:dc:34:3b:5b:75:0e:0d:09:1c:1c:cd:9c:71:56:f0:59:3f: fe:3c:41:8d:be:b6:04:5a:e8:25:cd:2a:76:92:fa:c7:db:51: 37:ce:ac:dd:b5:1f:03:2f:b6:50:ee:65:1c:be:c9:7d:1d:cd: 22:61:78:a7:f1:e8:d4:46:61:41:a3:d4:c9:03:10:6f:ef:cc: 8d:8d:dd:a8:83:5b:97:36:f6:e2:6c:57:a5:3f:f9:59:ed:8f: 67:2f:ce:99:56:06:b9:b6:34:3d:a1:c8:05:63:cb:69:bc:ef: b0:0e:f0:48:3f:e9:98:91:0c:6b:c2:20:7f:1d:be:35:57:a8: 04:2c:49:65 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xqU/3bqPzewvxlNAZHzVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZjRjNWE2MTk3ODU0OWIyNDgzODhmOWRmNDQ5ZDJhOTVl MTBhMDcwHhcNMjYwMTAxMDQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2MxNTRmMDg5NDQwMGU3NmY5ZWQyNDgxZjJkMDhiNWE2NWQzYTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DcOvEQE6MvjHIG0Jf9gNGR9VLEs lNveaWqkOTsk8TIlE2gtAUTZSxG2Rr7OJJ+0CSrn65bgRUlq87njALyHgFuDlln2 VtRBToK6pSW/am85cquEHcYAIlYQwmN60+LaJcqK7SWe12M2CvZ98Qgi5bfL9pOk sesQ74vT3zs83KUGboDpRbrkt+hMY6HRet2sQzjQmB/MDk5rqAUA2t89NFdi+sOO 8c7NtrSUtSp1emHiqa10uq0qW5BOqUFoKNdmBRhciwecj41JkdKnAEW18scC6NKS RYIvWwyyd5BXYOWlxPKxtHetL7dc869BVtpZCUYcpYwEImp5e4QN/izukwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHPBVPCJRADnb57SSB8tCLWmXTobMB8GA1UdIwQY MBaAFET0xaYZeFSbJIOI+d9EnSqV4QoHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlBURnBobDRWSnNrZzRqNTMwU2RLcFhoQ2djLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9lNWM4ZGYtNGVmOC00ZDkwLWE0OTAt MzU4MDBlOWYxNzBlLzEvYzhGVThJbEVBT2R2bnRKSUh5MEl0YVpkT2hzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9lNWM4ZGYtNGVmOC00ZDkwLWE0OTAtMzU4MDBlOWYxNzBl LzEvUlBURnBobDRWSnNrZzRqNTMwU2RLcFhoQ2djLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWmYMA0E AgACMAcDBQMqBvHAMA0GCSqGSIb3DQEBCwUAA4IBAQB0kXYbpc2mLz9k2EIZzEdf r1Kx6cG/NKwCwnoRM6Y5HD9JE4LsiFQtwt0QSb3d04tl1/EYt4vRXtvbXbBQDhER xWU2lnNUY0/mWQ3ohgZ6w2UbXTf/rEdzrGoGxz8G+Gks74bQWy8wxWjh1tKK1LRJ EZHKtRYPayDfYijjY3RI3DQ7W3UODQkcHM2ccVbwWT/+PEGNvrYEWuglzSp2kvrH 21E3zqzdtR8DL7ZQ7mUcvsl9Hc0iYXin8ejURmFBo9TJAxBv78yNjd2og1uXNvbi bFelP/lZ7Y9nL86ZVga5tjQ9ocgFY8tpvO+wDvBIP+mYkQxrwiB/Hb41V6gELEll -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:12 2026 by rpki-client