This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/1--5uI7-lFA1vLc5OGC-ol-YopyQ.roa File: 1--5uI7-lFA1vLc5OGC-ol-YopyQ.roa (raw, json) Hash identifier: oRVTaOt3U0YoXKj3+Sn3M9/Gmc3MrUZYmaGBPKb5vvw= Subject key identifier: FB:EE:6E:23:BF:A5:14:0D:6F:2D:CE:4E:18:2F:A8:97:E6:28:A7:24 Certificate issuer: /CN=8d3e594bb26e9c08e6fc4736caa5d3c200854dea Certificate serial: 019B775931682AAD8F6DA65F872169308DE0 Authority key identifier: 8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/1--5uI7-lFA1vLc5OGC-ol-YopyQ.roa Signing time: Thu 01 Jan 2026 02:18:12 +0000 ROA not before: Thu 01 Jan 2026 02:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 185.149.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:31:68:2a:ad:8f:6d:a6:5f:87:21:69:30:8d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3e594bb26e9c08e6fc4736caa5d3c200854dea Validity Not Before: Jan 1 02:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbee6e23bfa5140d6f2dce4e182fa897e628a724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e1:22:da:af:a2:0b:50:b8:58:73:cd:79:32: ca:ba:19:d6:0f:13:be:79:2c:b9:3a:77:5a:cc:de: 80:37:94:f5:12:71:0b:51:ac:59:b4:2d:7a:17:b7: e9:8a:d2:cf:37:a0:64:fc:a2:f2:f2:40:8a:0b:de: 2e:56:fc:ec:c7:99:10:5f:bd:9a:1b:be:62:0c:81: 87:a1:3d:4d:fd:98:5e:e1:6f:71:43:cc:a7:14:32: 49:f7:07:08:61:0a:26:97:9a:3e:a4:55:63:71:10: 24:b3:38:df:e7:7f:48:65:10:7a:2e:ad:a2:a5:66: 32:06:d8:bf:02:25:3a:72:f1:af:3e:21:cb:c4:c9: 93:19:74:e6:12:57:17:54:db:62:08:af:63:de:f4: 87:a9:99:c8:d8:22:0c:c0:96:3e:58:3b:46:23:21: 29:23:8c:2b:89:4f:53:78:95:64:b9:a2:98:a3:e5: d8:4e:96:6a:cd:0d:63:cf:55:f3:e5:8c:e4:68:55: 62:24:c6:12:1a:f2:90:31:37:09:30:c5:b6:c3:1e: 09:9c:a2:8b:64:bb:5a:cc:e7:79:72:3d:a0:5c:8a: 78:6c:36:94:53:b1:e3:11:e5:fa:ee:e6:d1:c8:09: 08:01:17:3f:6e:55:43:d1:36:f2:b3:43:5a:94:07: 3f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:EE:6E:23:BF:A5:14:0D:6F:2D:CE:4E:18:2F:A8:97:E6:28:A7:24 X509v3 Authority Key Identifier: keyid:8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/1--5uI7-lFA1vLc5OGC-ol-YopyQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.149.54.0/24 Signature Algorithm: sha256WithRSAEncryption 67:e1:82:da:f3:65:93:ea:5b:65:dc:5d:0f:69:19:c4:68:80: d8:80:ce:71:fe:5f:57:69:85:b8:b9:03:f4:69:6a:15:48:cb: 8b:5b:fe:5c:ae:c4:38:c2:c4:06:d0:77:c6:03:4c:37:19:7d: ae:ae:c2:e8:04:3a:1e:06:36:c4:e7:bd:71:ab:8c:66:77:3d: 6b:4b:27:0e:a3:8e:ed:4a:95:44:7c:e1:c9:5c:70:ba:5a:61: fb:2a:63:9a:a5:c5:69:1b:65:1f:42:4c:04:f3:f8:2e:c3:f0: 81:6c:b0:81:23:a3:b5:56:6b:22:6e:c6:0f:13:ae:74:b6:ff: a0:fd:c4:b2:01:1e:ee:b5:a4:50:4c:d6:02:aa:32:c0:6d:4f: 4f:78:c7:d7:72:0d:a3:1f:29:00:ff:0c:d3:0a:70:3f:8a:8d: 55:a7:b2:0a:67:14:be:55:ad:9e:08:7d:e3:22:33:61:e3:70: 46:8a:06:7d:ef:ba:7d:2c:d4:d2:e8:83:6a:2e:68:78:43:04: 35:ea:8a:7a:20:84:23:90:89:15:bb:0e:cf:8a:49:57:58:2d: 73:11:cf:2b:85:c0:07:01:f2:c1:0e:ab:a0:7d:70:df:32:98: 9a:56:e6:2e:d5:1b:90:50:ee:da:f8:ef:8a:a8:35:1b:58:8a: dd:3a:6e:13 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3WTFoKq2PbaZfhyFpMI3gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkM2U1OTRiYjI2ZTljMDhlNmZjNDczNmNhYTVkM2MyMDA4 NTRkZWEwHhcNMjYwMTAxMDIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmVlNmUyM2JmYTUxNDBkNmYyZGNlNGUxODJmYTg5N2U2MjhhNzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOEi2q+iC1C4WHPNeTLKuhnWDxO+ eSy5OndazN6AN5T1EnELUaxZtC16F7fpitLPN6Bk/KLy8kCKC94uVvzsx5kQX72a G75iDIGHoT1N/Zhe4W9xQ8ynFDJJ9wcIYQoml5o+pFVjcRAkszjf539IZRB6Lq2i pWYyBti/AiU6cvGvPiHLxMmTGXTmElcXVNtiCK9j3vSHqZnI2CIMwJY+WDtGIyEp I4wriU9TeJVkuaKYo+XYTpZqzQ1jz1Xz5YzkaFViJMYSGvKQMTcJMMW2wx4JnKKL ZLtazOd5cj2gXIp4bDaUU7HjEeX67ubRyAkIARc/blVD0Tbys0NalAc/hQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPvubiO/pRQNby3OThgvqJfmKKckMB8GA1UdIwQY MBaAFI0+WUuybpwI5vxHNsql08IAhU3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalQ1WlM3SnVuQWptX0VjMnlxWFR3Z0NGVGVvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9jNzUzMTctZDVmZC00YTI0LTg3MTQt ZTdkZWU5YTdjYWQ1LzEvMS0tNXVJNy1sRkExdkxjNU9HQy1vbC1Zb3B5US5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOGIvYzc1MzE3LWQ1ZmQtNGEyNC04NzE0LWU3ZGVlOWE3Y2Fk NS8xL2pUNVpTN0p1bkFqbV9FYzJ5cVhUd2dDRlRlby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmVNjAN BgkqhkiG9w0BAQsFAAOCAQEAZ+GC2vNlk+pbZdxdD2kZxGiA2IDOcf5fV2mFuLkD 9GlqFUjLi1v+XK7EOMLEBtB3xgNMNxl9rq7C6AQ6HgY2xOe9cauMZnc9a0snDqOO 7UqVRHzhyVxwulph+ypjmqXFaRtlH0JMBPP4LsPwgWywgSOjtVZrIm7GDxOudLb/ oP3EsgEe7rWkUEzWAqoywG1PT3jH13INox8pAP8M0wpwP4qNVaeyCmcUvlWtngh9 4yIzYeNwRooGfe+6fSzU0uiDai5oeEMENeqKeiCEI5CJFbsOz4pJV1gtcxHPK4XA BwHywQ6roH1w3zKYmlbmLtUbkFDu2vjviqg1G1iK3TpuEw== -----END CERTIFICATE-----Generated at Sun Jan 18 16:37:45 2026 by rpki-client