This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/8o_Tp62d5a1mk31uSxjvAE8U7NM.roa File: 8o_Tp62d5a1mk31uSxjvAE8U7NM.roa (raw, json) Hash identifier: o9M2fvvN8d+eZvEE3qsaOmD8uOGDr1MfB48v2HZwrrI= Subject key identifier: F2:8F:D3:A7:AD:9D:E5:AD:66:93:7D:6E:4B:18:EF:00:4F:14:EC:D3 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA41466DCC013E281E77F65C5602544 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/8o_Tp62d5a1mk31uSxjvAE8U7NM.roa Signing time: Thu 01 Jan 2026 22:18:29 +0000 ROA not before: Thu 01 Jan 2026 22:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208392 IP address blocks: 45.132.253.0/24 maxlen: 24 82.115.222.0/24 maxlen: 24 185.17.1.0/24 maxlen: 24 185.112.80.0/24 maxlen: 24 185.112.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:14:66:dc:c0:13:e2:81:e7:7f:65:c5:60:25:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f28fd3a7ad9de5ad66937d6e4b18ef004f14ecd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a4:bb:92:cd:5d:ba:6e:e4:34:91:86:ec:a9: 49:50:3c:44:be:e3:29:92:d4:c5:ac:a7:6e:5c:e6: 8d:39:c3:4c:65:db:99:e3:ed:e1:32:8c:7d:e7:3e: 61:7d:f1:0a:8e:d5:bb:cd:9d:f5:4d:96:b5:d3:86: f0:1d:f8:94:4d:0c:4d:d2:f1:63:c0:ab:30:a7:fd: 9d:65:e7:79:bb:1e:70:85:b5:3a:5d:a8:b5:68:56: fb:4b:47:9c:1b:28:fc:98:90:df:80:69:2d:00:c5: 9e:d4:39:5c:c4:9f:d0:17:ae:77:29:a2:6e:f5:d1: 1d:bf:74:9c:67:8d:8d:47:b7:58:96:99:61:56:4b: b9:3c:b6:f1:42:0b:f1:4f:3f:e2:87:bc:4b:63:78: de:e0:28:3b:97:4d:f5:33:70:1d:6d:03:33:6f:33: 11:04:b7:57:24:52:e0:6b:09:e8:31:ce:15:54:a6: 08:f3:7e:7c:18:28:5d:dd:10:8c:74:a4:a6:85:0e: 28:e0:b7:72:78:64:9a:31:c9:2b:9f:57:1d:4b:55: b5:fd:75:d2:57:44:96:b8:2f:f7:11:84:9d:64:b2: f4:ef:41:3a:5c:33:19:00:96:09:f7:96:6d:67:7e: fd:df:dd:7b:7a:1d:56:74:f8:09:32:f9:36:c0:7a: 9b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:8F:D3:A7:AD:9D:E5:AD:66:93:7D:6E:4B:18:EF:00:4F:14:EC:D3 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/8o_Tp62d5a1mk31uSxjvAE8U7NM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.253.0/24 82.115.222.0/24 185.17.1.0/24 185.112.80.0/24 185.112.100.0/24 Signature Algorithm: sha256WithRSAEncryption c6:aa:11:d8:ff:63:82:17:10:13:f9:91:29:60:e7:23:e7:f0: 50:14:7d:f4:57:3e:82:33:90:af:c6:06:44:d2:5f:0f:30:75: 66:ea:d3:40:67:82:b4:83:5c:ac:8d:aa:fe:0f:f3:79:fa:de: 64:af:07:07:5b:38:57:cb:33:19:34:94:6b:d3:71:4c:66:81: 97:e3:58:85:9f:f3:a1:6f:d3:a8:42:bb:0b:4a:67:cb:a4:51: d3:0d:9b:18:0f:51:af:6b:af:dc:17:11:65:78:7a:6c:89:bd: 4c:20:da:90:bb:55:91:a1:3f:f5:94:fd:d4:59:92:e4:42:76: 7f:22:a6:fa:b5:ea:2a:0e:12:37:ae:92:bf:82:12:1b:ab:e9: b8:61:bc:7d:9d:a2:f6:aa:cb:91:37:1e:97:56:fd:17:c4:a6: c5:80:f5:be:7f:b7:73:f8:83:7c:df:3f:da:4b:e3:6f:50:53: 82:ca:72:f2:be:74:a5:98:dd:3b:1a:9d:d8:b5:88:f2:23:a0: b5:fb:a3:2b:76:12:03:40:9f:0c:7d:4a:d4:0b:1d:cf:76:ee: d0:64:38:c5:a5:7c:78:13:b4:e8:84:0b:3c:8b:5d:1d:29:d2: 9f:44:f2:3f:83:65:d4:a5:13:83:6d:fc:fa:86:52:da:95:ce: c2:ec:c9:26 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt7pBRm3MAT4oHnf2XFYCVEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjhmZDNhN2FkOWRlNWFkNjY5MzdkNmU0YjE4ZWYwMDRmMTRlY2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaS7ks1dum7kNJGG7KlJUDxEvuMp ktTFrKduXOaNOcNMZduZ4+3hMox95z5hffEKjtW7zZ31TZa104bwHfiUTQxN0vFj wKswp/2dZed5ux5whbU6Xai1aFb7S0ecGyj8mJDfgGktAMWe1DlcxJ/QF653KaJu 9dEdv3ScZ42NR7dYlplhVku5PLbxQgvxTz/ih7xLY3je4Cg7l031M3AdbQMzbzMR BLdXJFLgawnoMc4VVKYI8358GChd3RCMdKSmhQ4o4LdyeGSaMckrn1cdS1W1/XXS V0SWuC/3EYSdZLL070E6XDMZAJYJ95ZtZ3793917eh1WdPgJMvk2wHqbFwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFPKP06etneWtZpN9bksY7wBPFOzTMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvOG9fVHA2MmQ1YTFtazMxdVN4anZBRThVN05NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALYT9AwQA UnPeAwQAuREBAwQAuXBQAwQAuXBkMA0GCSqGSIb3DQEBCwUAA4IBAQDGqhHY/2OC FxAT+ZEpYOcj5/BQFH30Vz6CM5CvxgZE0l8PMHVm6tNAZ4K0g1ysjar+D/N5+t5k rwcHWzhXyzMZNJRr03FMZoGX41iFn/Ohb9OoQrsLSmfLpFHTDZsYD1Gva6/cFxFl eHpsib1MINqQu1WRoT/1lP3UWZLkQnZ/Iqb6teoqDhI3rpK/ghIbq+m4Ybx9naL2 qsuRNx6XVv0XxKbFgPW+f7dz+IN83z/aS+NvUFOCynLyvnSlmN07Gp3YtYjyI6C1 +6MrdhIDQJ8MfUrUCx3Pdu7QZDjFpXx4E7TohAs8i10dKdKfRPI/g2XUpRODbfz6 hlLalc7C7Mkm -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:24 2026 by rpki-client