This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/v8cGXi_NSEn4R2Pj8ik0gEWzS6g.roa File: v8cGXi_NSEn4R2Pj8ik0gEWzS6g.roa (raw, json) Hash identifier: Tc7POOVIwZMXLz0qNFWoVFFcyKsqMyAM9BmZSJShLfc= Subject key identifier: BF:C7:06:5E:2F:CD:48:49:F8:47:63:E3:F2:29:34:80:45:B3:4B:A8 Certificate issuer: /CN=cdea4adee80b06519ce40dd3d13f28ba9f575957 Certificate serial: 019B7AC860B938D01D54A352BF30FF777B71 Authority key identifier: CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/v8cGXi_NSEn4R2Pj8ik0gEWzS6g.roa Signing time: Thu 01 Jan 2026 18:18:30 +0000 ROA not before: Thu 01 Jan 2026 18:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 91.227.208.0/24 maxlen: 24 185.64.72.0/24 maxlen: 24 185.64.73.0/24 maxlen: 24 185.64.74.0/24 maxlen: 24 185.64.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:60:b9:38:d0:1d:54:a3:52:bf:30:ff:77:7b:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdea4adee80b06519ce40dd3d13f28ba9f575957 Validity Not Before: Jan 1 18:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfc7065e2fcd4849f84763e3f229348045b34ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2d:44:93:42:75:6e:23:0a:e6:d0:f1:17:b7: 6d:2a:c7:dc:2e:7e:57:e7:05:c2:88:66:35:d3:cd: 3b:4e:3f:dc:89:ca:ca:3f:c1:78:08:2f:92:f6:6d: 72:24:cc:8d:3c:93:a2:d4:34:ad:ea:04:7f:f7:fd: 68:b5:14:79:2c:d6:1d:22:75:19:8a:60:15:c1:ae: ce:b9:06:cc:1f:24:bd:ab:29:5f:73:88:d6:bf:78: 90:91:d6:1d:d9:ed:ba:87:41:34:8c:c9:01:4d:56: 33:fc:d1:c5:cd:30:67:1c:0f:6c:8d:cb:97:89:6b: 79:24:17:d3:96:de:aa:1e:f0:79:3b:44:f0:75:16: f1:93:f4:4f:ce:43:96:34:b6:60:f4:23:5c:eb:b3: 18:0e:e5:bb:f1:00:0b:db:f2:15:d4:10:27:c7:87: 8b:fb:e3:ab:50:4d:36:8b:5b:22:fe:fd:42:75:06: 67:e0:37:d1:91:08:26:44:d0:e1:4b:d9:30:e4:d4: 77:25:dc:04:5d:35:df:0f:2c:ae:00:8d:e4:dd:78: af:5b:9c:76:7b:ff:ef:0d:b9:8b:8c:ae:ce:4f:b9: c2:81:7f:b1:35:2b:34:7d:e5:1c:e8:4b:02:1a:70: 62:ea:5a:f8:1c:15:22:ae:2a:46:cb:68:85:9a:bd: fb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C7:06:5E:2F:CD:48:49:F8:47:63:E3:F2:29:34:80:45:B3:4B:A8 X509v3 Authority Key Identifier: keyid:CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/v8cGXi_NSEn4R2Pj8ik0gEWzS6g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.227.208.0/24 185.64.72.0/22 Signature Algorithm: sha256WithRSAEncryption 79:5a:29:16:6d:4d:ce:2f:26:f2:04:b8:7b:32:cc:ed:5f:f5: 1b:44:66:c3:8f:3d:69:e4:03:6f:d6:9a:37:43:34:d9:b3:f2: fd:45:cd:ea:c2:96:06:b1:cf:1c:a8:47:68:a7:71:72:86:36: 7f:82:25:96:28:00:40:37:2e:bd:9b:49:b7:45:33:1a:68:4c: 47:80:fc:34:f0:e8:5d:f4:8f:d6:e4:08:34:94:1f:08:da:a1: cc:b3:3c:68:83:d1:55:47:a0:31:32:1a:8e:a6:4b:7a:eb:bd: 0e:f9:80:a8:26:cd:e0:3a:eb:f7:e9:d1:b0:2f:c0:ff:dd:93: e5:3b:92:99:5f:10:a7:f6:4d:81:29:8e:f3:36:85:ca:7b:ca: 7e:2a:8c:b5:7c:b2:8e:e6:a4:31:3d:2e:80:ac:0a:8b:fd:4b: 0a:ab:28:28:c4:39:23:2e:29:ef:a6:ca:d4:df:0a:d6:45:e8: bd:f2:45:1c:d5:70:15:fa:24:28:35:86:4b:75:91:21:8b:c2: 27:60:58:76:9f:b0:a0:b0:26:65:8b:cd:56:7b:b8:72:ba:c8: d9:0c:c3:be:ed:a3:f7:b3:59:24:90:8f:f8:bf:ea:42:cf:fa: 59:81:80:ac:fe:97:07:1e:4b:07:94:a1:69:d3:b1:6a:20:44: 2d:de:0a:2c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yGC5ONAdVKNSvzD/d3txMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZWE0YWRlZTgwYjA2NTE5Y2U0MGRkM2QxM2YyOGJhOWY1 NzU5NTcwHhcNMjYwMTAxMTgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmM3MDY1ZTJmY2Q0ODQ5Zjg0NzYzZTNmMjI5MzQ4MDQ1YjM0YmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi1Ek0J1biMK5tDxF7dtKsfcLn5X 5wXCiGY10807Tj/cicrKP8F4CC+S9m1yJMyNPJOi1DSt6gR/9/1otRR5LNYdInUZ imAVwa7OuQbMHyS9qylfc4jWv3iQkdYd2e26h0E0jMkBTVYz/NHFzTBnHA9sjcuX iWt5JBfTlt6qHvB5O0TwdRbxk/RPzkOWNLZg9CNc67MYDuW78QAL2/IV1BAnx4eL ++OrUE02i1si/v1CdQZn4DfRkQgmRNDhS9kw5NR3JdwEXTXfDyyuAI3k3XivW5x2 e//vDbmLjK7OT7nCgX+xNSs0feUc6EsCGnBi6lr4HBUiripGy2iFmr37awIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL/HBl4vzUhJ+Edj4/IpNIBFs0uoMB8GA1UdIwQY MBaAFM3qSt7oCwZRnOQN09E/KLqfV1lXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemVwSzN1Z0xCbEdjNUEzVDBUOG91cDlYV1ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81YjVmMGMtM2MzZC00ZTIwLWIwMzUt MDU2YzdiZjZkN2Q4LzEvdjhjR1hpX05TRW40UjJQajhpazBnRVd6UzZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81YjVmMGMtM2MzZC00ZTIwLWIwMzUtMDU2YzdiZjZkN2Q4 LzEvemVwSzN1Z0xCbEdjNUEzVDBUOG91cDlYV1ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+PQAwQC uUBIMA0GCSqGSIb3DQEBCwUAA4IBAQB5WikWbU3OLybyBLh7MsztX/UbRGbDjz1p 5ANv1po3QzTZs/L9Rc3qwpYGsc8cqEdop3FyhjZ/giWWKABANy69m0m3RTMaaExH gPw08Ohd9I/W5Ag0lB8I2qHMszxog9FVR6AxMhqOpkt6670O+YCoJs3gOuv36dGw L8D/3ZPlO5KZXxCn9k2BKY7zNoXKe8p+Koy1fLKO5qQxPS6ArAqL/UsKqygoxDkj LinvpsrU3wrWRei98kUc1XAV+iQoNYZLdZEhi8InYFh2n7CgsCZli81We7hyusjZ DMO+7aP3s1kkkI/4v+pCz/pZgYCs/pcHHksHlKFp07FqIEQt3gos -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:45 2026 by rpki-client