This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/8_NH5RQ_YbQ811u9QoCYY95gJeE.roa File: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (raw, json) Hash identifier: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI= Subject key identifier: F3:F3:47:E5:14:3F:61:B4:3C:D7:5B:BD:42:80:98:63:DE:60:25:E1 Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019B7A5B0D2063F96346D4DF11A09DC2002C Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/8_NH5RQ_YbQ811u9QoCYY95gJeE.roa Signing time: Thu 01 Jan 2026 16:19:05 +0000 ROA not before: Thu 01 Jan 2026 16:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205217 IP address blocks: 185.201.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:0d:20:63:f9:63:46:d4:df:11:a0:9d:c2:00:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Jan 1 16:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3f347e5143f61b43cd75bbd42809863de6025e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8f:ec:1c:19:90:6e:f3:d8:1c:48:70:41:d2: fc:75:94:df:4b:f9:5f:b5:f3:42:b0:20:a0:ff:34: 44:38:2b:7c:49:9f:ad:36:a1:c5:30:33:93:56:02: 0c:dc:75:6b:37:9c:b1:27:db:e1:4c:99:62:12:31: a5:a7:10:90:82:cc:a2:c1:3d:f0:54:ee:31:23:f4: 71:12:db:70:9e:d0:b2:a0:10:f6:a0:38:65:af:52: 03:84:cb:6f:04:71:24:a7:e0:ab:62:75:15:80:8c: e5:8e:ba:35:3c:31:e8:05:85:25:a0:c5:04:79:e6: 6b:bd:02:25:ea:02:4d:c2:7b:cb:8e:23:99:c4:79: 0d:40:f5:dc:38:78:9c:f3:bc:05:0e:1d:b1:a8:d6: 52:1c:44:fa:5a:da:75:37:c2:ae:4d:2d:e2:c9:f1: ea:0e:07:e3:c9:66:97:e8:ca:26:4f:7c:c0:47:d5: 8f:9a:b0:8d:d5:3a:ac:d0:32:43:a3:86:6c:3e:a7: 4c:9e:0c:77:95:5b:7c:bf:75:8d:d4:18:7c:55:36: d6:fb:bb:1b:be:6b:85:f8:b6:c2:a9:07:1c:bf:e6: e4:f3:21:5f:e5:67:1a:db:e9:d3:de:e3:fe:a9:90: 81:82:63:a0:76:e1:5b:4b:25:0b:c8:28:c2:0a:65: cf:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F3:47:E5:14:3F:61:B4:3C:D7:5B:BD:42:80:98:63:DE:60:25:E1 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/8_NH5RQ_YbQ811u9QoCYY95gJeE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.201.50.0/24 Signature Algorithm: sha256WithRSAEncryption 64:73:71:d6:b2:c1:c1:4e:e2:f0:37:da:5b:72:24:dc:17:d9: f2:e3:7c:99:f5:cb:61:90:6f:eb:16:0a:67:6f:e9:bc:e3:5e: 46:35:3b:d0:e4:44:fb:5e:ac:1f:43:98:e1:22:b6:53:4f:bb: 80:be:af:26:d7:15:36:77:08:f0:a4:85:19:2b:88:90:da:b9: b6:c1:53:e9:b2:dd:4c:75:97:22:3c:fc:42:45:d5:34:d0:c7: b9:f2:59:bd:d1:03:71:21:7d:60:f7:db:bf:83:f2:5e:ca:58: ad:36:0e:6c:21:75:11:1d:cb:cf:b7:ab:80:16:26:f9:83:f4: a7:6a:d9:78:25:f5:53:9e:dc:df:9d:d7:f6:74:34:db:dd:28: 25:95:74:83:8a:ef:c5:41:71:bf:c3:52:f1:42:b3:fd:d0:2b: 39:dd:fb:01:b3:fc:df:53:62:b5:ef:8f:d4:37:cd:73:7b:19: df:2f:fe:52:a5:91:13:2f:52:26:9b:a0:33:14:41:e4:c0:1a: df:a2:29:6f:04:6c:d2:2b:85:c0:05:35:b8:92:8e:54:f5:ad: 1d:24:6c:b8:4f:cd:e7:5c:5b:20:fd:2b:f4:f7:5f:97:32:91: 5a:0e:62:9b:db:0f:2e:64:aa:95:75:38:ce:1d:8c:47:63:65: 01:24:80:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Ww0gY/ljRtTfEaCdwgAsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwMTAxMTYxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2YzNDdlNTE0M2Y2MWI0M2NkNzViYmQ0MjgwOTg2M2RlNjAyNWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0o/sHBmQbvPYHEhwQdL8dZTfS/lf tfNCsCCg/zREOCt8SZ+tNqHFMDOTVgIM3HVrN5yxJ9vhTJliEjGlpxCQgsyiwT3w VO4xI/RxEttwntCyoBD2oDhlr1IDhMtvBHEkp+CrYnUVgIzljro1PDHoBYUloMUE eeZrvQIl6gJNwnvLjiOZxHkNQPXcOHic87wFDh2xqNZSHET6Wtp1N8KuTS3iyfHq DgfjyWaX6MomT3zAR9WPmrCN1Tqs0DJDo4ZsPqdMngx3lVt8v3WN1Bh8VTbW+7sb vmuF+LbCqQccv+bk8yFf5Wca2+nT3uP+qZCBgmOgduFbSyULyCjCCmXP1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPPzR+UUP2G0PNdbvUKAmGPeYCXhMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvOF9OSDVSUV9ZYlE4MTF1OVFvQ1lZOTVnSmVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuckyMA0G CSqGSIb3DQEBCwUAA4IBAQBkc3HWssHBTuLwN9pbciTcF9ny43yZ9cthkG/rFgpn b+m8415GNTvQ5ET7XqwfQ5jhIrZTT7uAvq8m1xU2dwjwpIUZK4iQ2rm2wVPpst1M dZciPPxCRdU00Me58lm90QNxIX1g99u/g/JeylitNg5sIXURHcvPt6uAFib5g/Sn atl4JfVTntzfndf2dDTb3SgllXSDiu/FQXG/w1LxQrP90Cs53fsBs/zfU2K174/U N81zexnfL/5SpZETL1Imm6AzFEHkwBrfoilvBGzSK4XABTW4ko5U9a0dJGy4T83n XFsg/Sv091+XMpFaDmKb2w8uZKqVdTjOHYxHY2UBJIBf -----END CERTIFICATE-----Generated at Mon Jan 5 13:06:13 2026 by rpki-client