This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/8py-_jOGtG165vRai_Wtlc6EJtw.roa File: 8py-_jOGtG165vRai_Wtlc6EJtw.roa (raw, json) Hash identifier: MiTWtTuzmfpvf7lJFRzmz7SzBmsWeVuI/L+U0mXLD/c= Subject key identifier: F2:9C:BE:FE:33:86:B4:6D:7A:E6:F4:5A:8B:F5:AD:95:CE:84:26:DC Certificate issuer: /CN=3016b10d0ac218017c749394e4f2519cf2c0514e Certificate serial: 019B7D5AB2EA169033BD426696B641F54A93 Authority key identifier: 30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/8py-_jOGtG165vRai_Wtlc6EJtw.roa Signing time: Fri 02 Jan 2026 06:17:34 +0000 ROA not before: Fri 02 Jan 2026 06:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47834 IP address blocks: 45.85.172.0/22 maxlen: 22 95.129.240.0/21 maxlen: 21 213.129.128.0/21 maxlen: 21 213.129.136.0/21 maxlen: 21 213.129.144.0/21 maxlen: 21 213.129.152.0/21 maxlen: 21 2a03:f300::/29 maxlen: 29 2a03:f300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:b2:ea:16:90:33:bd:42:66:96:b6:41:f5:4a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3016b10d0ac218017c749394e4f2519cf2c0514e Validity Not Before: Jan 2 06:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f29cbefe3386b46d7ae6f45a8bf5ad95ce8426dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:53:7e:bf:ca:8e:2d:30:45:89:6f:f9:04:a7: 28:2e:8e:27:5c:c2:23:8c:1f:e7:e1:98:5b:bf:07: 76:8a:a8:53:82:fb:1b:e6:3b:c2:fa:f2:00:7c:aa: 4c:56:03:03:4e:89:2d:e4:a4:36:08:c2:42:9d:5b: 0c:01:b0:7f:e6:13:81:80:fd:4b:7f:f7:f2:af:7d: c9:cd:a7:c9:57:39:da:37:62:f6:b2:d2:f9:dd:11: be:d4:68:4b:78:bb:fd:09:a8:56:74:2d:87:36:31: 6b:0b:0f:96:ad:81:8c:fe:31:4c:6a:ea:16:69:b1: 83:ae:c0:df:08:2f:b3:82:1a:ec:08:35:b0:88:52: 04:49:73:f4:6a:1c:a0:63:ef:64:09:e0:c7:a4:4b: a9:8b:e7:6b:b1:39:80:b8:d0:be:8b:79:86:78:7e: 77:20:45:5a:a5:c8:ad:40:a7:49:e9:ae:3f:89:df: f5:82:ba:58:99:6b:e4:b9:a2:3c:d7:af:2d:87:e4: 92:68:c8:77:4f:b7:7c:a8:e3:af:ab:43:26:07:48: 66:00:5d:0d:6e:62:21:4d:89:95:b0:50:13:6a:c5: 07:dd:f9:08:e6:29:cd:2c:a3:40:f5:59:5e:11:ed: 1e:b8:26:c6:5f:64:46:54:1a:bd:cb:dc:e2:23:72: b8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:9C:BE:FE:33:86:B4:6D:7A:E6:F4:5A:8B:F5:AD:95:CE:84:26:DC X509v3 Authority Key Identifier: keyid:30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/8py-_jOGtG165vRai_Wtlc6EJtw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.172.0/22 95.129.240.0/21 213.129.128.0/19 IPv6: 2a03:f300::/29 Signature Algorithm: sha256WithRSAEncryption 3d:c4:c0:4d:66:2b:a4:3c:92:d7:01:ef:49:3a:3b:51:da:e3: ee:94:a2:82:4e:b9:8a:20:2e:9c:ca:5e:8c:69:ff:bb:d5:5b: 14:4b:b7:95:80:e5:c9:e3:6b:4b:db:29:42:76:50:56:d6:31: 7b:85:83:b4:cf:d4:63:65:b6:46:d8:3c:7c:db:0d:49:5a:fc: ed:50:b2:3d:8d:2d:20:5e:d0:91:54:a2:90:b7:20:5e:4e:d1: 6d:67:ce:1b:81:ae:60:fd:d2:49:64:f1:a5:cb:70:c6:b8:bd: 33:2a:ee:37:79:f5:92:09:4d:0e:cc:5a:03:bb:93:c9:d6:d9: 72:d4:a6:0d:30:06:34:9f:83:e6:4f:ba:5d:f9:b4:d0:10:23: fe:80:c7:2a:8d:6e:89:df:8a:a6:4b:18:a1:c3:ea:07:27:8b: 66:68:ab:ec:a2:8e:51:bd:de:e3:ca:fc:ad:33:0d:c2:8c:b0: 32:61:29:5f:db:2e:ae:1a:d9:f7:5d:30:ef:c3:00:e0:90:c7: 23:31:d9:18:05:ef:03:3c:98:75:f3:fe:40:bf:0c:97:03:70: 22:66:50:ac:6d:4a:5f:2b:9c:36:fd:31:15:fa:95:c1:3e:a9: 21:5d:fb:d2:b9:42:26:35:4b:88:2d:cf:f5:b0:a3:58:2e:09: fb:e7:42:9a -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9WrLqFpAzvUJmlrZB9UqTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMTZiMTBkMGFjMjE4MDE3Yzc0OTM5NGU0ZjI1MTljZjJj MDUxNGUwHhcNMjYwMTAyMDYxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjljYmVmZTMzODZiNDZkN2FlNmY0NWE4YmY1YWQ5NWNlODQyNmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFN+v8qOLTBFiW/5BKcoLo4nXMIj jB/n4Zhbvwd2iqhTgvsb5jvC+vIAfKpMVgMDTokt5KQ2CMJCnVsMAbB/5hOBgP1L f/fyr33JzafJVznaN2L2stL53RG+1GhLeLv9CahWdC2HNjFrCw+WrYGM/jFMauoW abGDrsDfCC+zghrsCDWwiFIESXP0ahygY+9kCeDHpEupi+drsTmAuNC+i3mGeH53 IEVapcitQKdJ6a4/id/1grpYmWvkuaI8168th+SSaMh3T7d8qOOvq0MmB0hmAF0N bmIhTYmVsFATasUH3fkI5inNLKNA9VleEe0euCbGX2RGVBq9y9ziI3K4MQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFPKcvv4zhrRteub0Wov1rZXOhCbcMB8GA1UdIwQY MBaAFDAWsQ0KwhgBfHSTlOTyUZzywFFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUJheERRckNHQUY4ZEpPVTVQSlJuUExBVVU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zZWI2NGEtZTZkZS00NWY1LWI2OGMt NjkzNjc2MmQyZmNlLzEvOHB5LV9qT0d0RzE2NXZSYWlfV3RsYzZFSnR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zZWI2NGEtZTZkZS00NWY1LWI2OGMtNjkzNjc2MmQyZmNl LzEvTUJheERRckNHQUY4ZEpPVTVQSlJuUExBVVU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLVWsAwQD X4HwAwQF1YGAMA0EAgACMAcDBQMqA/MAMA0GCSqGSIb3DQEBCwUAA4IBAQA9xMBN ZiukPJLXAe9JOjtR2uPulKKCTrmKIC6cyl6Maf+71VsUS7eVgOXJ42tL2ylCdlBW 1jF7hYO0z9RjZbZG2Dx82w1JWvztULI9jS0gXtCRVKKQtyBeTtFtZ84bga5g/dJJ ZPGly3DGuL0zKu43efWSCU0OzFoDu5PJ1tly1KYNMAY0n4PmT7pd+bTQECP+gMcq jW6J34qmSxihw+oHJ4tmaKvsoo5Rvd7jyvytMw3CjLAyYSlf2y6uGtn3XTDvwwDg kMcjMdkYBe8DPJh18/5AvwyXA3AiZlCsbUpfK5w2/TEV+pXBPqkhXfvSuUImNUuI Lc/1sKNYLgn750Ka -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:20 2026 by rpki-client