This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/8BqmL7UcN2qfYbL66pHli8JsIzY.roa File: 8BqmL7UcN2qfYbL66pHli8JsIzY.roa (raw, json) Hash identifier: pCciA+077UGjAkiMs81qTKCGq54F1nIKWaxa6mwVk+s= Subject key identifier: F0:1A:A6:2F:B5:1C:37:6A:9F:61:B2:FA:EA:91:E5:8B:C2:6C:23:36 Certificate issuer: /CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba Certificate serial: 019B797F14736BE67E7868A2C606750CB9AC Authority key identifier: E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/8BqmL7UcN2qfYbL66pHli8JsIzY.roa Signing time: Thu 01 Jan 2026 12:18:50 +0000 ROA not before: Thu 01 Jan 2026 12:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31898 IP address blocks: 155.190.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:14:73:6b:e6:7e:78:68:a2:c6:06:75:0c:b9:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba Validity Not Before: Jan 1 12:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f01aa62fb51c376a9f61b2faea91e58bc26c2336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a6:90:b9:a7:61:00:bc:df:3f:27:7e:db:8e: de:04:45:6c:90:ee:0a:91:79:50:b8:5e:6d:21:bf: 16:7d:c6:19:32:12:9b:06:1f:6d:5f:1f:d9:b5:ac: db:d7:24:69:e0:f2:8c:3f:1c:86:a8:59:5f:64:2a: 42:38:be:2e:2d:2f:22:91:ad:c5:50:f8:7b:b5:8e: f7:0c:7f:81:c1:f5:80:b8:dd:f5:e1:a2:f0:6a:26: 16:29:7c:8c:4b:f7:f8:36:5c:08:b3:d7:7a:77:9b: 16:01:bf:15:33:b0:29:1b:6b:99:6f:51:e0:fd:47: 94:37:57:1c:2d:55:42:b8:fe:73:1d:9f:13:d9:5a: ee:ee:2c:e1:2f:7f:1e:23:32:a4:8e:ea:e7:f1:07: db:e7:32:a3:4f:86:c9:09:68:99:e0:f7:57:e9:7a: 58:ee:33:d7:6e:40:51:aa:54:01:9e:37:65:4a:c4: 8f:b4:43:54:95:8c:cd:b7:a9:d1:8b:95:31:66:4f: 97:4a:cb:4d:a2:48:03:81:fa:12:e1:f0:9e:e7:08: aa:7f:b8:d2:5a:e1:03:27:16:57:81:47:e1:3c:d9: d7:e1:90:01:ff:f8:f4:7d:a2:bd:8e:0e:f8:ce:e3: 76:03:60:6f:f2:67:b1:19:ee:71:ed:76:bb:0a:13: cb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:1A:A6:2F:B5:1C:37:6A:9F:61:B2:FA:EA:91:E5:8B:C2:6C:23:36 X509v3 Authority Key Identifier: keyid:E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/8BqmL7UcN2qfYbL66pHli8JsIzY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.190.53.0/24 Signature Algorithm: sha256WithRSAEncryption 70:99:f1:4a:21:f1:2b:85:37:a2:7a:6e:9b:a3:35:e2:06:3c: 17:91:2e:70:b9:b4:65:99:ec:00:4d:54:0d:8f:7b:75:0a:15: 0e:44:45:16:06:c5:98:d7:32:8e:e6:93:7e:68:d2:05:d2:5e: 5c:58:a3:4a:96:52:7b:11:19:cd:e1:cb:37:af:57:4b:94:f8: dd:d1:2a:da:e0:c2:bb:e4:5b:e5:e9:6b:72:d8:6d:c4:f3:ce: 18:5c:09:54:c7:50:52:c0:0e:9e:07:9b:dc:be:fb:e6:1b:5f: ea:f9:76:47:6f:01:e0:17:38:a7:e7:96:68:e9:0c:cc:19:72: 2c:2b:f2:c2:8d:16:81:b7:60:c9:34:9d:17:b2:69:48:8a:e0: aa:db:c8:7c:a1:7f:61:09:44:ec:7b:6e:57:a1:d8:67:be:2f: 4e:fb:1f:70:1d:06:2a:24:65:6f:e2:2a:75:d9:a7:e3:64:1f: 66:bb:b5:19:09:22:55:cd:39:0b:4b:2b:d8:e9:76:1d:07:06: 21:55:10:26:24:4b:e1:96:bb:bb:e4:2b:ad:13:f4:02:fc:3b: 53:a5:ad:b7:49:8e:dd:4f:a9:6f:51:6e:cc:52:13:37:43:6b: d3:fd:b2:34:86:aa:a0:8e:90:c1:00:ba:e0:07:34:3f:92:52: 26:a7:c4:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fxRza+Z+eGiixgZ1DLmsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3MTMzZGNhZjJiMWViZjVkYWRlNWEzM2FhMWIyZmI5OWQy Njg5YmEwHhcNMjYwMTAxMTIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDFhYTYyZmI1MWMzNzZhOWY2MWIyZmFlYTkxZTU4YmMyNmMyMzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKaQuadhALzfPyd+247eBEVskO4K kXlQuF5tIb8WfcYZMhKbBh9tXx/Ztazb1yRp4PKMPxyGqFlfZCpCOL4uLS8ika3F UPh7tY73DH+BwfWAuN314aLwaiYWKXyMS/f4NlwIs9d6d5sWAb8VM7ApG2uZb1Hg /UeUN1ccLVVCuP5zHZ8T2Vru7izhL38eIzKkjurn8Qfb5zKjT4bJCWiZ4PdX6XpY 7jPXbkBRqlQBnjdlSsSPtENUlYzNt6nRi5UxZk+XSstNokgDgfoS4fCe5wiqf7jS WuEDJxZXgUfhPNnX4ZAB//j0faK9jg74zuN2A2Bv8mexGe5x7Xa7ChPLmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPAapi+1HDdqn2Gy+uqR5YvCbCM2MB8GA1UdIwQY MBaAFOcTPcrysev12t5aM6obL7mdJom6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXhNOXl2S3g2X1hhM2xvenFoc3Z1WjBtaWJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi81ZTRkZjgtYWU4Yy00NGE3LWJkNmUt MTljZTQ2YTQyZmE0LzEvOEJxbUw3VWNOMnFmWWJMNjZwSGxpOEpzSXpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi81ZTRkZjgtYWU4Yy00NGE3LWJkNmUtMTljZTQ2YTQyZmE0 LzEvNXhNOXl2S3g2X1hhM2xvenFoc3Z1WjBtaWJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAm741MA0G CSqGSIb3DQEBCwUAA4IBAQBwmfFKIfErhTeiem6bozXiBjwXkS5wubRlmewATVQN j3t1ChUOREUWBsWY1zKO5pN+aNIF0l5cWKNKllJ7ERnN4cs3r1dLlPjd0Sra4MK7 5Fvl6Wty2G3E884YXAlUx1BSwA6eB5vcvvvmG1/q+XZHbwHgFzin55Zo6QzMGXIs K/LCjRaBt2DJNJ0XsmlIiuCq28h8oX9hCUTse25Xodhnvi9O+x9wHQYqJGVv4ip1 2afjZB9mu7UZCSJVzTkLSyvY6XYdBwYhVRAmJEvhlru75CutE/QC/DtTpa23SY7d T6lvUW7MUhM3Q2vT/bI0hqqgjpDBALrgBzQ/klImp8Tz -----END CERTIFICATE-----Generated at Fri Jan 2 21:07:29 2026 by rpki-client