This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/_I8E8Wo8JUE4aFVllTxE37Q-A5s.roa File: _I8E8Wo8JUE4aFVllTxE37Q-A5s.roa (raw, json) Hash identifier: LcewGkLxCajDvhSewLF8Euu+mPt5LX1wP8wYrQEIo04= Subject key identifier: FC:8F:04:F1:6A:3C:25:41:38:68:55:65:95:3C:44:DF:B4:3E:03:9B Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA4A3BEAD02BF0799FE54AD1C134D65 Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/_I8E8Wo8JUE4aFVllTxE37Q-A5s.roa Signing time: Thu 01 Jan 2026 22:19:05 +0000 ROA not before: Thu 01 Jan 2026 22:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209847 IP address blocks: 45.153.230.0/24 maxlen: 24 193.38.54.0/24 maxlen: 24 193.38.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:a3:be:ad:02:bf:07:99:fe:54:ad:1c:13:4d:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc8f04f16a3c254138685565953c44dfb43e039b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:71:1b:5b:0a:42:53:6e:e1:0d:0c:bc:39:b0: 56:88:d5:d3:7d:6b:db:21:6b:8d:59:9c:8e:d4:13: 6d:61:0f:b6:40:b5:7e:5a:d3:43:3a:ed:15:d2:5c: a4:68:06:c7:cb:04:38:c2:45:cb:53:c0:ef:cf:1f: 51:f4:63:31:fc:20:f9:ab:15:58:d7:59:6b:bb:bd: 68:27:34:13:6e:b9:67:37:c7:49:47:a4:fc:38:33: fa:34:08:b3:05:8a:57:f1:e8:38:4e:c5:af:a1:35: 7b:fb:34:4b:66:8f:41:da:f0:08:f4:e0:4d:0f:b6: 4b:b0:cc:dd:64:57:1e:5c:43:d8:8d:0d:b6:b7:51: cd:c5:53:b9:5e:41:24:f2:ec:b7:8e:85:50:1f:e5: ca:c8:17:bc:cf:82:3a:18:43:c7:5d:e0:92:54:e7: 89:8e:cc:b3:5f:db:50:6d:82:a4:92:46:2e:fd:b4: 2f:31:a2:b6:ab:46:aa:8d:b1:00:0f:6a:65:a9:48: d2:cc:36:83:8b:6a:6c:55:55:d8:f9:ac:50:cf:ac: 04:5c:e2:50:90:72:94:6b:1e:42:5f:93:6a:14:70: e7:05:54:9a:a1:27:c7:cc:aa:38:0b:d3:78:f5:30: e2:5b:26:35:3e:14:77:82:f9:30:f1:33:f3:c0:e1: e6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:8F:04:F1:6A:3C:25:41:38:68:55:65:95:3C:44:DF:B4:3E:03:9B X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/_I8E8Wo8JUE4aFVllTxE37Q-A5s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.230.0/24 193.38.54.0/23 Signature Algorithm: sha256WithRSAEncryption 53:26:f1:dc:f8:ae:64:e5:05:9a:0e:10:72:e6:cb:d3:65:17: 7f:67:f5:fd:42:d0:50:a0:05:8a:06:e6:55:44:d1:ae:e6:14: 24:a5:b9:43:0f:aa:1f:3c:9d:83:64:78:b3:da:07:31:7e:6d: 72:95:7e:f3:99:a5:09:65:b3:cb:87:af:7c:23:31:6b:68:4a: 4c:13:90:4c:0d:df:dd:c7:5b:55:e8:a6:08:cd:9e:09:69:6a: e1:7e:02:10:7b:a4:4f:e6:aa:0f:ef:55:a9:0d:b3:f1:04:81: 93:61:f5:f9:82:7c:c9:2b:88:99:a2:5e:61:13:c8:7b:31:93: a8:47:e5:13:45:f7:6d:e1:3f:b8:bd:db:a4:bb:16:62:fc:5c: c2:84:8b:61:69:0b:04:74:4d:ad:f7:ac:46:ad:b0:dd:0c:3d: d7:2d:91:11:f6:44:e6:65:b4:f5:df:6a:1e:c4:d2:58:05:e7: 94:dc:0c:f2:03:94:86:f5:dd:9c:7c:50:8e:be:bd:c7:3d:cd: ea:32:ab:2b:16:43:dd:aa:fe:22:30:1e:c8:6f:63:e8:b7:4f: aa:b6:54:bb:90:3c:29:f5:05:b8:40:5f:b5:d1:31:05:b1:23: 8f:f5:d3:5a:d0:65:fc:ca:48:13:b3:a5:3e:59:5a:2e:ef:e8: b5:f0:01:3b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pKO+rQK/B5n+VK0cE01lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzhmMDRmMTZhM2MyNTQxMzg2ODU1NjU5NTNjNDRkZmI0M2UwMzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHEbWwpCU27hDQy8ObBWiNXTfWvb IWuNWZyO1BNtYQ+2QLV+WtNDOu0V0lykaAbHywQ4wkXLU8Dvzx9R9GMx/CD5qxVY 11lru71oJzQTbrlnN8dJR6T8ODP6NAizBYpX8eg4TsWvoTV7+zRLZo9B2vAI9OBN D7ZLsMzdZFceXEPYjQ22t1HNxVO5XkEk8uy3joVQH+XKyBe8z4I6GEPHXeCSVOeJ jsyzX9tQbYKkkkYu/bQvMaK2q0aqjbEAD2plqUjSzDaDi2psVVXY+axQz6wEXOJQ kHKUax5CX5NqFHDnBVSaoSfHzKo4C9N49TDiWyY1PhR3gvkw8TPzwOHmuwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPyPBPFqPCVBOGhVZZU8RN+0PgObMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvX0k4RThXbzhKVUU0YUZWbGxUeEUzN1EtQTVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZnmAwQB wSY2MA0GCSqGSIb3DQEBCwUAA4IBAQBTJvHc+K5k5QWaDhBy5svTZRd/Z/X9QtBQ oAWKBuZVRNGu5hQkpblDD6ofPJ2DZHiz2gcxfm1ylX7zmaUJZbPLh698IzFraEpM E5BMDd/dx1tV6KYIzZ4JaWrhfgIQe6RP5qoP71WpDbPxBIGTYfX5gnzJK4iZol5h E8h7MZOoR+UTRfdt4T+4vdukuxZi/FzChIthaQsEdE2t96xGrbDdDD3XLZER9kTm ZbT132oexNJYBeeU3AzyA5SG9d2cfFCOvr3HPc3qMqsrFkPdqv4iMB7Ib2Pot0+q tlS7kDwp9QW4QF+10TEFsSOP9dNa0GX8ykgTs6U+WVou7+i18AE7 -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:10 2026 by rpki-client