This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/b8sd3kclr3NRnW8ixTQfyD2k8cw.roa File: b8sd3kclr3NRnW8ixTQfyD2k8cw.roa (raw, json) Hash identifier: iSOtNzYh5RKvcTh1Op89AGLKROhnTZWcZtig0aXGNTU= Subject key identifier: 6F:CB:1D:DE:47:25:AF:73:51:9D:6F:22:C5:34:1F:C8:3D:A4:F1:CC Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E3560B452584DACD81CD11A9A50B9 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/b8sd3kclr3NRnW8ixTQfyD2k8cw.roa Signing time: Thu 01 Jan 2026 12:17:52 +0000 ROA not before: Thu 01 Jan 2026 12:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137882 IP address blocks: 185.255.152.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:35:60:b4:52:58:4d:ac:d8:1c:d1:1a:9a:50:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fcb1dde4725af73519d6f22c5341fc83da4f1cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fd:72:2b:64:a0:52:6b:8d:cd:88:0a:d6:93: ce:82:63:96:34:55:76:62:b5:26:ed:8a:1d:b3:49: b5:e1:25:89:94:ec:c2:43:0b:c3:f7:3d:18:c2:70: 59:fe:c6:36:d3:c5:bb:d2:9b:e3:85:5e:5e:13:38: eb:62:59:01:bc:f0:1e:d1:a2:1f:b8:a9:c1:2b:88: 0d:46:7e:14:11:b3:c4:ae:16:88:d5:76:d9:7d:f3: 89:4c:3b:76:df:d6:05:6e:a8:00:3e:ee:12:26:ff: 42:ca:1e:b0:82:49:a5:66:41:02:ef:fa:75:05:41: ac:a8:3b:83:81:bd:73:57:a3:1e:e3:4a:b6:01:5b: d0:82:c6:b7:4a:1a:53:b8:9c:37:26:ae:b7:06:87: 87:24:f9:9a:dd:db:eb:a5:dc:0b:ef:7d:ff:76:5b: 7c:3d:13:2d:14:b6:be:ad:ba:c9:ed:27:3a:75:33: c5:19:f0:8e:36:d4:28:68:f3:d0:3d:d0:64:e9:40: 8f:9c:38:52:79:a5:e7:b9:c9:2d:dc:48:3c:fa:d7: 38:86:ce:88:c6:e6:39:a6:0d:b7:ca:c3:fb:f8:e1: 8d:32:ed:97:d1:27:e9:32:2a:fd:a5:5b:90:e6:f2: 14:d4:40:48:17:e7:38:93:ea:32:6c:62:54:5e:99: a5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:CB:1D:DE:47:25:AF:73:51:9D:6F:22:C5:34:1F:C8:3D:A4:F1:CC X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/b8sd3kclr3NRnW8ixTQfyD2k8cw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.255.152.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:87:61:20:1a:ac:cb:cf:23:6a:5f:08:67:c5:4c:2a:66:c9: 72:46:59:d9:4a:5c:8f:fb:28:15:39:de:da:69:27:ec:cd:13: e9:1e:40:1b:9b:99:15:2f:7d:dd:5a:fb:c1:62:0c:a1:e7:8c: 7b:bd:98:c9:4f:13:e2:8b:4e:92:1c:77:90:4e:9c:23:e7:15: 32:be:f8:f2:e6:78:92:ad:ac:06:0e:d2:ba:0e:3b:95:97:09: 9a:75:64:b5:19:4c:ce:da:b0:ce:b5:ac:6d:4f:dc:bd:8c:e7: 69:34:7e:70:10:2e:58:6b:40:6d:9a:34:d5:e2:1a:fa:66:2d: d8:0d:78:cc:34:ea:7e:8d:29:cd:e5:8d:7d:c1:49:9d:d0:07: b9:65:61:68:8f:76:e7:bd:ed:46:a4:0c:ee:42:98:0a:76:a0: d9:1d:ca:62:3d:46:9e:f0:79:22:ee:4e:dd:d8:f1:56:b5:bc: 9a:49:47:53:41:c2:0d:f6:99:10:e9:a0:12:19:07:d7:9b:26: ba:0a:9e:e9:e1:f4:d7:33:6f:58:3f:e8:02:28:aa:76:60:b7: aa:25:99:f6:b3:ec:52:f3:41:83:37:09:d8:7c:b6:bd:6a:31: bd:d2:c0:9a:e7:e9:34:35:aa:19:c6:b6:89:9f:72:1d:13:38: b7:df:e4:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fjVgtFJYTazYHNEamlC5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmNiMWRkZTQ3MjVhZjczNTE5ZDZmMjJjNTM0MWZjODNkYTRmMWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv1yK2SgUmuNzYgK1pPOgmOWNFV2 YrUm7Yods0m14SWJlOzCQwvD9z0YwnBZ/sY208W70pvjhV5eEzjrYlkBvPAe0aIf uKnBK4gNRn4UEbPErhaI1XbZffOJTDt239YFbqgAPu4SJv9Cyh6wgkmlZkEC7/p1 BUGsqDuDgb1zV6Me40q2AVvQgsa3ShpTuJw3Jq63BoeHJPma3dvrpdwL733/dlt8 PRMtFLa+rbrJ7Sc6dTPFGfCONtQoaPPQPdBk6UCPnDhSeaXnuckt3Eg8+tc4hs6I xuY5pg23ysP7+OGNMu2X0SfpMir9pVuQ5vIU1EBIF+c4k+oybGJUXpmllQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG/LHd5HJa9zUZ1vIsU0H8g9pPHMMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvYjhzZDNrY2xyM05Sblc4aXhUUWZ5RDJrOGN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf+YMA0G CSqGSIb3DQEBCwUAA4IBAQAvh2EgGqzLzyNqXwhnxUwqZslyRlnZSlyP+ygVOd7a aSfszRPpHkAbm5kVL33dWvvBYgyh54x7vZjJTxPii06SHHeQTpwj5xUyvvjy5niS rawGDtK6DjuVlwmadWS1GUzO2rDOtaxtT9y9jOdpNH5wEC5Ya0BtmjTV4hr6Zi3Y DXjMNOp+jSnN5Y19wUmd0Ae5ZWFoj3bnve1GpAzuQpgKdqDZHcpiPUae8Hki7k7d 2PFWtbyaSUdTQcIN9pkQ6aASGQfXmya6Cp7p4fTXM29YP+gCKKp2YLeqJZn2s+xS 80GDNwnYfLa9ajG90sCa5+k0NaoZxraJn3IdEzi33+Qo -----END CERTIFICATE-----Generated at Mon Jan 19 20:23:57 2026 by rpki-client