This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/8OEz7nuy3BemipvDM1-tZ23HukE.roa File: 8OEz7nuy3BemipvDM1-tZ23HukE.roa (raw, json) Hash identifier: BRulW1bRM9MBdiccRfP7/N7hhP6rYb4eggnI59hjZ9s= Subject key identifier: F0:E1:33:EE:7B:B2:DC:17:A6:8A:9B:C3:33:5F:AD:67:6D:C7:BA:41 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C1343E94308CF09089C7CC66A489C9A Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/8OEz7nuy3BemipvDM1-tZ23HukE.roa Signing time: Fri 02 Jan 2026 00:19:55 +0000 ROA not before: Fri 02 Jan 2026 00:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 273163 IP address blocks: 185.225.244.0/23 maxlen: 23 185.225.244.0/24 maxlen: 24 185.225.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:43:e9:43:08:cf:09:08:9c:7c:c6:6a:48:9c:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0e133ee7bb2dc17a68a9bc3335fad676dc7ba41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:64:5a:87:9a:ec:44:98:c1:6b:c5:e6:09:29: 34:ab:5a:00:41:8a:a7:2f:56:c2:f8:5f:0a:cb:8c: 15:db:59:65:56:5c:f9:4e:72:15:87:97:d3:34:f1: 1c:73:41:83:4c:bd:b8:b4:1f:41:09:fa:1d:71:16: 90:87:b6:d5:24:66:8b:9b:22:a2:44:00:95:30:94: 98:25:b7:5b:8c:c1:1a:04:8e:ca:9a:59:6b:67:a6: 98:bc:4b:1f:78:aa:1b:c9:fc:9b:2c:66:0c:f6:e9: e2:cd:3f:fa:e7:f3:b9:89:c0:08:40:02:6e:70:48: 79:37:b4:e4:a8:26:ac:c7:5e:f3:b5:f5:d0:d9:37: 58:ab:08:d0:16:88:28:eb:52:9f:4b:86:6b:4a:26: 93:f9:61:fb:49:c5:41:03:3d:07:2b:42:88:8c:86: 54:48:c8:87:c1:c0:10:95:64:fa:27:98:7c:c3:2f: dd:b1:f4:1f:19:83:cb:7b:58:f8:50:f3:80:3c:4a: a1:fd:db:c0:ea:03:01:28:25:51:d9:6f:26:02:e8: 6d:bb:71:48:48:d2:f0:11:bc:c1:47:fc:83:f1:09: 49:30:1c:cd:c8:b9:e0:0d:53:6f:0d:5e:37:b9:47: 98:90:0b:4c:1e:67:1e:53:38:4a:88:f4:22:6a:4b: 52:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E1:33:EE:7B:B2:DC:17:A6:8A:9B:C3:33:5F:AD:67:6D:C7:BA:41 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/8OEz7nuy3BemipvDM1-tZ23HukE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.244.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:8f:27:d8:af:c7:fe:56:4d:71:c9:ee:ac:e7:05:33:5f:a6: f7:c7:2c:d9:a9:aa:0c:d7:81:79:a2:f0:3c:72:49:34:28:b8: 51:13:da:89:4a:86:6f:80:e2:2a:e9:04:7e:23:0c:35:80:69: ff:85:08:8d:17:c0:bf:46:d1:28:af:76:85:a1:bc:b9:39:e1: 0e:7d:f9:a5:95:9c:1e:da:af:81:16:75:24:8a:a7:97:03:d3: ce:13:a0:d8:3f:63:82:02:45:30:ee:c1:cc:25:b1:f0:7d:21: 31:8d:f3:43:5f:76:ca:91:0d:f1:55:a9:4c:b2:f6:41:e9:9b: 7b:0e:7e:cc:b1:05:91:fe:d0:1e:48:f9:70:93:c9:f6:b3:bd: 6e:27:06:5f:c7:07:70:19:41:71:69:87:fc:df:16:d9:6f:09: 7c:a8:c4:4b:02:40:d8:fd:59:cb:ef:13:7a:31:47:81:b1:31: 6a:93:c8:8a:7a:fd:84:d6:c0:8e:6f:20:4c:6d:08:30:c8:c9: fa:c6:f8:1d:7f:cc:53:2a:35:40:1e:c8:25:18:f8:9a:88:7f: d6:49:f8:f2:2c:5a:83:67:07:cf:5f:6d:7d:27:c4:ad:29:62: 80:6f:1d:28:d5:df:87:2f:b9:c4:d7:8e:82:8d:59:d1:a6:ab: f0:49:28:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E0PpQwjPCQicfMZqSJyaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGUxMzNlZTdiYjJkYzE3YTY4YTliYzMzMzVmYWQ2NzZkYzdiYTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2Rah5rsRJjBa8XmCSk0q1oAQYqn L1bC+F8Ky4wV21llVlz5TnIVh5fTNPEcc0GDTL24tB9BCfodcRaQh7bVJGaLmyKi RACVMJSYJbdbjMEaBI7KmllrZ6aYvEsfeKobyfybLGYM9unizT/65/O5icAIQAJu cEh5N7TkqCasx17ztfXQ2TdYqwjQFogo61KfS4ZrSiaT+WH7ScVBAz0HK0KIjIZU SMiHwcAQlWT6J5h8wy/dsfQfGYPLe1j4UPOAPEqh/dvA6gMBKCVR2W8mAuhtu3FI SNLwEbzBR/yD8QlJMBzNyLngDVNvDV43uUeYkAtMHmceUzhKiPQiaktSJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPDhM+57stwXpoqbwzNfrWdtx7pBMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvOE9FejdudXkzQmVtaXB2RE0xLXRaMjNIdWtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBueH0MA0G CSqGSIb3DQEBCwUAA4IBAQCcjyfYr8f+Vk1xye6s5wUzX6b3xyzZqaoM14F5ovA8 ckk0KLhRE9qJSoZvgOIq6QR+Iww1gGn/hQiNF8C/RtEor3aFoby5OeEOffmllZwe 2q+BFnUkiqeXA9POE6DYP2OCAkUw7sHMJbHwfSExjfNDX3bKkQ3xValMsvZB6Zt7 Dn7MsQWR/tAeSPlwk8n2s71uJwZfxwdwGUFxaYf83xbZbwl8qMRLAkDY/VnL7xN6 MUeBsTFqk8iKev2E1sCObyBMbQgwyMn6xvgdf8xTKjVAHsglGPiaiH/WSfjyLFqD ZwfPX219J8StKWKAbx0o1d+HL7nE146CjVnRpqvwSSi1 -----END CERTIFICATE-----Generated at Fri Jan 23 21:38:52 2026 by rpki-client