This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/c8oXwnn5toTWitSJkpA6DmPs01c.roa File: c8oXwnn5toTWitSJkpA6DmPs01c.roa (raw, json) Hash identifier: 6kqJ5YUqqDHudEG8e5AMvFWmJFH3ql97x6sFaUhLatQ= Subject key identifier: 73:CA:17:C2:79:F9:B6:84:D6:8A:D4:89:92:90:3A:0E:63:EC:D3:57 Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 019AE522B883EFF553C225404CADE262AB4F Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/c8oXwnn5toTWitSJkpA6DmPs01c.roa Signing time: Wed 03 Dec 2025 16:54:09 +0000 ROA not before: Wed 03 Dec 2025 16:54:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 5.1.40.0/24 maxlen: 24 2a06:fe40::/32 maxlen: 32 2a06:fe41::/32 maxlen: 32 2a06:fe42::/32 maxlen: 32 2a06:fe43::/32 maxlen: 32 2a06:fe44::/32 maxlen: 32 2a06:fe45::/32 maxlen: 32 2a06:fe46::/32 maxlen: 32 2a06:fe47::/32 maxlen: 32 2a09:1d80::/29 maxlen: 29 2a09:1d80::/32 maxlen: 32 2a09:1d81::/32 maxlen: 32 2a09:1d82::/32 maxlen: 32 2a09:1d83::/32 maxlen: 32 2a09:1d84::/32 maxlen: 32 2a09:1d85::/32 maxlen: 32 2a09:1d86::/32 maxlen: 32 2a09:1d87::/32 maxlen: 32 2a0e:2c00::/29 maxlen: 29 2a0e:2c00::/32 maxlen: 32 2a0e:2c01::/32 maxlen: 32 2a0e:2c02::/32 maxlen: 32 2a0e:2c03::/32 maxlen: 32 2a0e:2c04::/32 maxlen: 32 2a0e:2c05::/32 maxlen: 32 2a0e:2c06::/32 maxlen: 32 2a0e:2c07::/32 maxlen: 32 2a0e:6c00::/29 maxlen: 29 2a0e:6c00::/32 maxlen: 32 2a0e:6c01::/32 maxlen: 32 2a0e:6c02::/32 maxlen: 32 2a0e:6c03::/32 maxlen: 32 2a0e:6c04::/32 maxlen: 32 2a0e:6c05::/32 maxlen: 32 2a0e:6c06::/32 maxlen: 32 2a0e:6c07::/32 maxlen: 32 2a0e:8400::/29 maxlen: 29 2a11:ed80::/29 maxlen: 29 2a12:f80::/29 maxlen: 29 2a12:f80::/32 maxlen: 32 2a12:f81::/32 maxlen: 32 2a12:f82::/32 maxlen: 32 2a12:f83::/32 maxlen: 32 2a12:f84::/32 maxlen: 32 2a12:f85::/32 maxlen: 32 2a12:f86::/32 maxlen: 32 2a12:f87::/32 maxlen: 32 2a12:2f00::/29 maxlen: 29 2a12:3a80::/32 maxlen: 32 2a12:3a81::/32 maxlen: 32 2a12:3a82::/32 maxlen: 32 2a12:3a83::/32 maxlen: 32 2a12:3a84::/32 maxlen: 32 2a12:3a85::/32 maxlen: 32 2a12:3a86::/32 maxlen: 32 2a12:3a87::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e5:22:b8:83:ef:f5:53:c2:25:40:4c:ad:e2:62:ab:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: Dec 3 16:54:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=73ca17c279f9b684d68ad48992903a0e63ecd357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:85:29:40:af:eb:b5:0a:18:fb:20:35:93:c1: 4f:68:3b:84:e6:91:a2:11:ec:71:0f:4d:2c:01:d6: 35:95:78:43:cc:5f:41:ec:65:45:b2:48:7c:48:34: 34:53:a6:c5:33:d1:c8:a2:9c:50:43:a2:49:45:04: 16:e9:7b:ff:4d:ac:19:50:81:f7:41:bb:f6:64:82: 22:1e:b2:94:38:99:2f:fa:11:05:67:61:74:5a:47: 49:0c:7c:3f:aa:5f:9e:5f:50:3d:4c:c3:4a:2d:fc: 09:34:10:82:10:4b:3f:10:a9:69:46:3f:da:27:e7: c1:7c:8f:5a:62:dc:33:ce:69:6b:4b:9c:d2:10:4a: 0e:af:0f:3a:5c:cc:4f:aa:11:f2:2d:f3:88:4f:9a: b2:44:82:a8:ee:f0:c7:a6:66:3e:ad:46:89:cd:7a: 5a:70:aa:87:a9:06:dd:b4:70:e5:ec:fb:14:19:74: 08:9c:00:d0:b6:d1:50:5c:1b:4f:e5:63:70:9f:45: f7:ed:d3:d4:ed:af:e9:47:4e:83:c2:11:40:a1:72: 69:b9:e9:3c:b0:80:f5:2e:65:33:31:cf:32:e4:9d: 45:21:16:b9:15:16:5b:62:b9:44:69:1f:bc:f4:f5: d6:62:23:a7:89:64:17:f3:93:4c:11:56:3c:2e:81: 7d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:CA:17:C2:79:F9:B6:84:D6:8A:D4:89:92:90:3A:0E:63:EC:D3:57 X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/c8oXwnn5toTWitSJkpA6DmPs01c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.40.0/24 IPv6: 2a06:fe40::/29 2a09:1d80::/29 2a0e:2c00::/29 2a0e:6c00::/29 2a0e:8400::/29 2a11:ed80::/29 2a12:f80::/29 2a12:2f00::/29 2a12:3a80::/29 Signature Algorithm: sha256WithRSAEncryption 21:b9:4c:49:9b:58:19:93:2c:ba:a4:cf:ec:d0:61:8d:05:88: 2c:d4:81:2d:ce:79:2e:c4:a0:58:dd:c2:15:b6:47:d0:04:64: 6b:cd:3a:75:42:1c:38:d9:70:e9:35:d9:6f:67:ee:9e:07:99: 9b:28:39:f1:74:c2:f6:6e:36:c8:c9:5d:e1:f9:6d:8a:20:d0: 5d:1c:e0:c0:24:a9:50:80:65:b9:84:8c:5a:36:ce:4d:45:1a: 2a:d6:f0:f0:b0:04:93:c3:a1:52:95:a0:a8:32:e2:7e:ed:0b: f7:a4:9a:cf:0b:da:6e:97:05:c3:9f:01:8a:d1:be:a0:28:f6: 94:9e:51:8b:95:00:5f:d4:46:c8:f6:b2:29:63:ce:2f:59:d2: b7:1a:c5:87:42:0b:00:cc:f9:19:f9:02:08:9f:9e:d6:9f:c9: f6:bd:a3:f7:40:2d:20:bb:e4:c5:a5:7b:ae:15:0e:70:7a:da: 44:76:97:b2:da:99:16:ff:79:92:db:70:f9:71:9b:e7:07:c1: 22:4d:1e:cd:23:77:be:c7:ad:75:cd:8e:3e:f0:55:1a:78:c3: b9:7f:6f:3e:18:78:1e:ca:80:dd:f3:86:e1:6d:76:6e:a9:5b: 26:6c:11:34:03:89:39:08:bd:80:35:fe:13:71:d1:81:19:57: 94:ca:61:6d -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgISAZrlIriD7/VTwiVATK3iYqtPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjUxMjAzMTY1NDA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2NhMTdjMjc5ZjliNjg0ZDY4YWQ0ODk5MjkwM2EwZTYzZWNkMzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoUpQK/rtQoY+yA1k8FPaDuE5pGi EexxD00sAdY1lXhDzF9B7GVFskh8SDQ0U6bFM9HIopxQQ6JJRQQW6Xv/TawZUIH3 Qbv2ZIIiHrKUOJkv+hEFZ2F0WkdJDHw/ql+eX1A9TMNKLfwJNBCCEEs/EKlpRj/a J+fBfI9aYtwzzmlrS5zSEEoOrw86XMxPqhHyLfOIT5qyRIKo7vDHpmY+rUaJzXpa cKqHqQbdtHDl7PsUGXQInADQttFQXBtP5WNwn0X37dPU7a/pR06DwhFAoXJpuek8 sID1LmUzMc8y5J1FIRa5FRZbYrlEaR+89PXWYiOniWQX85NMEVY8LoF9nwIDAQAB o4ICUDCCAkwwHQYDVR0OBBYEFHPKF8J5+baE1orUiZKQOg5j7NNXMB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEvYzhvWHdubjV0b1RXaXRTSmtwQTZEbVBzMDFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0 LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTAMBAIAATAGAwQABQEoMEUE AgACMD8DBQMqBv5AAwUDKgkdgAMFAyoOLAADBQMqDmwAAwUDKg6EAAMFAyoR7YAD BQMqEg+AAwUDKhIvAAMFAyoSOoAwDQYJKoZIhvcNAQELBQADggEBACG5TEmbWBmT LLqkz+zQYY0FiCzUgS3OeS7EoFjdwhW2R9AEZGvNOnVCHDjZcOk12W9n7p4HmZso OfF0wvZuNsjJXeH5bYog0F0c4MAkqVCAZbmEjFo2zk1FGirW8PCwBJPDoVKVoKgy 4n7tC/ekms8L2m6XBcOfAYrRvqAo9pSeUYuVAF/URsj2siljzi9Z0rcaxYdCCwDM +Rn5Agifntafyfa9o/dALSC75MWle64VDnB62kR2l7LamRb/eZLbcPlxm+cHwSJN Hs0jd77HrXXNjj7wVRp4w7l/bz4YeB7KgN3zhuFtdm6pWyZsETQDiTkIvYA1/hNx 0YEZV5TKYW0= -----END CERTIFICATE-----Generated at Sat Dec 6 10:48:30 2025 by rpki-client