This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/j6y956Crx3TXtQzIBhhdMzeOYSg.roa File: j6y956Crx3TXtQzIBhhdMzeOYSg.roa (raw, json) Hash identifier: 3IniP2xXGgnd44wimn4fccMxSGQc1Q6aZMxOsHMk47k= Subject key identifier: 8F:AC:BD:E7:A0:AB:C7:74:D7:B5:0C:C8:06:18:5D:33:37:8E:61:28 Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019B7AC8BE5DD23C3F6C09FA8985BBE6D60A Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/j6y956Crx3TXtQzIBhhdMzeOYSg.roa Signing time: Thu 01 Jan 2026 18:18:54 +0000 ROA not before: Thu 01 Jan 2026 18:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12525 IP address blocks: 81.198.166.0/24 maxlen: 24 81.198.167.0/24 maxlen: 24 195.13.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:be:5d:d2:3c:3f:6c:09:fa:89:85:bb:e6:d6:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Jan 1 18:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8facbde7a0abc774d7b50cc806185d33378e6128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:24:9a:ed:c6:e1:bb:33:bf:f9:26:8d:ea:3b: 8c:38:e2:b8:c2:46:19:ee:ee:82:3f:3d:a3:be:77: 59:94:10:4e:5f:72:8a:90:a9:46:ca:f4:56:4c:3c: 2c:14:7e:0d:f1:ee:ee:8d:f9:39:38:c7:16:a8:92: ed:08:25:1a:84:9f:a4:d7:a9:35:9a:38:c7:c2:50: 0d:03:4c:2f:84:7b:8e:d8:b6:e1:b5:bb:09:85:72: 7f:f2:2b:82:7e:89:f7:b0:bb:15:df:db:0a:33:de: dd:a2:26:21:0a:dc:ca:8d:17:16:9b:9f:d0:68:15: 8b:d1:82:37:c7:e1:3f:8b:3f:89:eb:f0:f7:53:07: d8:28:5f:d9:56:b2:11:95:5f:03:1c:97:d2:5d:c6: da:bd:e7:d4:06:a7:13:4c:33:15:1b:3d:57:63:4d: 42:10:07:3e:9b:a6:f5:f9:0b:2d:b9:20:20:09:ef: 03:b1:5b:3d:31:6f:23:d9:f8:57:15:de:f3:5f:33: ae:05:95:b1:f8:92:14:02:ca:ac:98:8a:41:0c:be: 62:bc:cd:6d:7e:22:55:fd:62:6f:28:76:42:a2:20: 1f:37:10:7c:5e:36:be:3e:2d:d5:78:4d:16:fd:fc: be:62:c4:1c:fd:e0:1f:ec:ca:a6:f6:ba:86:72:95: b6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AC:BD:E7:A0:AB:C7:74:D7:B5:0C:C8:06:18:5D:33:37:8E:61:28 X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/j6y956Crx3TXtQzIBhhdMzeOYSg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.198.166.0/23 195.13.223.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:9a:8a:99:5c:4b:53:e9:2d:96:f5:e5:4a:90:b6:ce:af:c3: 82:76:fb:57:df:cb:d2:80:fd:b4:03:52:a2:8b:d4:c8:80:f3: 84:86:92:f7:02:46:36:8c:99:5b:4c:6e:62:d9:36:c9:07:d5: 26:b4:48:06:d3:6c:d6:84:ad:eb:f1:c9:5e:0a:f5:3c:ed:77: f2:2a:3f:b0:af:2b:55:35:ab:2a:89:fd:1b:c0:75:e0:2b:8b: ad:7b:a4:93:17:6a:84:79:a0:2f:a5:68:33:34:fd:dc:0a:c9: 31:c1:71:ff:07:ef:33:5d:5f:ef:e0:4b:78:eb:31:14:9e:1e: 17:a5:f6:77:f0:8f:22:e2:2b:56:18:ac:7e:35:73:40:6f:39: ae:45:9f:c2:c1:6b:dc:ae:1d:1f:f4:53:cf:d5:bf:3f:85:9d: bc:ad:c9:e9:0b:15:4d:bb:89:ab:1c:ce:54:2d:2f:3c:8b:47: 5a:0d:2f:86:55:1b:4d:40:9f:a9:b3:55:ef:e5:aa:d3:b1:4f: 60:eb:e2:8f:20:f9:07:f3:b9:94:81:38:aa:f3:a8:24:9a:cc: ec:4d:bb:00:9f:d3:64:4e:8c:e2:ca:85:c3:85:07:71:b7:15: 31:d1:4a:87:ce:c6:13:b3:1b:3e:86:4e:1d:7a:b6:ca:7b:1a: cf:c3:e7:86 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yL5d0jw/bAn6iYW75tYKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjYwMTAxMTgxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmFjYmRlN2EwYWJjNzc0ZDdiNTBjYzgwNjE4NWQzMzM3OGU2MTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSSa7cbhuzO/+SaN6juMOOK4wkYZ 7u6CPz2jvndZlBBOX3KKkKlGyvRWTDwsFH4N8e7ujfk5OMcWqJLtCCUahJ+k16k1 mjjHwlANA0wvhHuO2LbhtbsJhXJ/8iuCfon3sLsV39sKM97doiYhCtzKjRcWm5/Q aBWL0YI3x+E/iz+J6/D3UwfYKF/ZVrIRlV8DHJfSXcbavefUBqcTTDMVGz1XY01C EAc+m6b1+QstuSAgCe8DsVs9MW8j2fhXFd7zXzOuBZWx+JIUAsqsmIpBDL5ivM1t fiJV/WJvKHZCoiAfNxB8Xja+Pi3VeE0W/fy+YsQc/eAf7Mqm9rqGcpW2RQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI+sveegq8d017UMyAYYXTM3jmEoMB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvajZ5OTU2Q3J4M1RYdFF6SUJoaGRNemVPWVNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBUcamAwQA ww3fMA0GCSqGSIb3DQEBCwUAA4IBAQA6moqZXEtT6S2W9eVKkLbOr8OCdvtX38vS gP20A1Kii9TIgPOEhpL3AkY2jJlbTG5i2TbJB9UmtEgG02zWhK3r8cleCvU87Xfy Kj+wrytVNasqif0bwHXgK4ute6STF2qEeaAvpWgzNP3cCskxwXH/B+8zXV/v4Et4 6zEUnh4XpfZ38I8i4itWGKx+NXNAbzmuRZ/CwWvcrh0f9FPP1b8/hZ28rcnpCxVN u4mrHM5ULS88i0daDS+GVRtNQJ+ps1Xv5arTsU9g6+KPIPkH87mUgTiq86gkmszs TbsAn9NkToziyoXDhQdxtxUx0UqHzsYTsxs+hk4derbKexrPw+eG -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:06 2026 by rpki-client