This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/B8WZmrTIa2ia6GnyZAc3UYzn6nU.roa File: B8WZmrTIa2ia6GnyZAc3UYzn6nU.roa (raw, json) Hash identifier: aDzq92qdJqLonxrkAlG+0ptE83HlOqTUO72kLOAz1Z0= Subject key identifier: 07:C5:99:9A:B4:C8:6B:68:9A:E8:69:F2:64:07:37:51:8C:E7:EA:75 Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca Certificate serial: 019B7834541E3A95B10D5D084D6DCFDA15CA Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/B8WZmrTIa2ia6GnyZAc3UYzn6nU.roa Signing time: Thu 01 Jan 2026 06:17:33 +0000 ROA not before: Thu 01 Jan 2026 06:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15510 IP address blocks: 84.19.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:54:1e:3a:95:b1:0d:5d:08:4d:6d:cf:da:15:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca Validity Not Before: Jan 1 06:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07c5999ab4c86b689ae869f2640737518ce7ea75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cb:07:0d:bb:d8:ac:48:ff:be:9b:b0:36:9e: 2d:b1:42:d9:2d:5e:e1:9e:7a:fc:76:35:20:df:28: 39:34:79:65:2f:d9:ee:df:45:0f:e9:4d:07:2c:58: 4a:6f:f6:51:78:af:ea:51:57:ec:5d:10:2f:a2:ab: aa:e1:bd:67:b2:0f:5c:79:ec:e8:71:83:e9:20:c1: e8:cf:20:4b:28:67:c9:94:1e:10:60:a6:e7:1d:ad: fd:88:e6:f5:0b:e1:59:1f:2b:83:1a:0e:ad:64:4e: b1:8e:1a:26:f0:05:54:68:99:6d:64:85:8f:8c:4b: 33:3f:0d:ca:3a:7e:9f:65:9c:6d:57:df:0c:94:ac: b4:30:cc:4d:d7:c0:22:2a:35:85:32:49:83:1b:e4: 2c:2b:86:5c:6a:75:5b:ec:a5:2d:9a:82:2f:e4:c4: 7e:66:f7:69:44:1f:5e:65:c3:d9:22:be:d3:b3:ef: 23:ca:a1:7f:3d:88:32:ed:38:d3:bc:d9:db:40:8e: da:b1:1d:f7:8e:10:66:a7:07:d9:ba:cb:68:35:4d: 18:63:a3:d6:66:ac:90:18:c9:d2:df:6f:b5:c6:19: e6:c7:7d:6b:c2:29:e4:e5:e4:65:82:8d:1f:00:0b: 0a:ee:65:3a:42:94:4c:65:31:65:5b:e2:28:95:97: e9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C5:99:9A:B4:C8:6B:68:9A:E8:69:F2:64:07:37:51:8C:E7:EA:75 X509v3 Authority Key Identifier: keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/B8WZmrTIa2ia6GnyZAc3UYzn6nU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.19.112.0/21 Signature Algorithm: sha256WithRSAEncryption 8e:df:ee:8b:ba:33:f4:a5:c9:83:2e:da:09:56:cb:0b:30:51: 52:d7:da:d0:d2:6d:53:99:57:78:52:bb:2e:3e:4b:fc:d5:b5: 74:ac:e5:5a:14:ba:ab:56:62:59:9f:81:86:6f:88:72:79:1b: fa:c3:8b:90:1b:fa:13:74:03:d6:b7:c4:b6:4d:e6:44:d3:68: 3a:40:25:ef:7f:69:53:34:e2:bd:b2:88:2a:85:83:f6:69:1d: 63:93:a7:a7:65:7f:7a:1d:6a:25:77:ec:3a:97:55:2e:88:2e: 0a:36:03:f9:8e:fc:68:4d:69:8f:1e:29:66:85:36:71:2f:8a: 56:fc:55:c4:ec:aa:1d:ff:2c:2c:c7:6c:0f:b7:9c:dd:b4:1f: b2:4d:20:1a:cd:dc:df:72:41:2c:8d:35:b7:4c:97:2e:86:e7: 41:fc:57:e2:22:e1:a7:d6:da:09:3b:f4:b6:b3:2d:9c:a0:b7: 8a:82:68:39:10:c3:da:bb:c9:6f:52:3d:50:5f:e8:9d:88:9b: 9e:2f:be:0b:bb:a7:9b:76:31:a6:11:18:7a:66:27:4f:64:d8: 4d:01:e7:4e:5f:ab:78:c4:4e:f4:4f:ca:8a:e3:5f:11:08:86: 0c:1e:bf:f6:19:25:1b:10:10:f1:9c:c0:92:9a:35:6b:86:e4: d8:91:e2:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NFQeOpWxDV0ITW3P2hXKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MzA3ZDI5ZjU1NDNmMjFlYTMwMDliOTUyM2ZlNzFiOGYx MzY5Y2EwHhcNMjYwMTAxMDYxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2M1OTk5YWI0Yzg2YjY4OWFlODY5ZjI2NDA3Mzc1MThjZTdlYTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAossHDbvYrEj/vpuwNp4tsULZLV7h nnr8djUg3yg5NHllL9nu30UP6U0HLFhKb/ZReK/qUVfsXRAvoquq4b1nsg9ceezo cYPpIMHozyBLKGfJlB4QYKbnHa39iOb1C+FZHyuDGg6tZE6xjhom8AVUaJltZIWP jEszPw3KOn6fZZxtV98MlKy0MMxN18AiKjWFMkmDG+QsK4ZcanVb7KUtmoIv5MR+ ZvdpRB9eZcPZIr7Ts+8jyqF/PYgy7TjTvNnbQI7asR33jhBmpwfZustoNU0YY6PW ZqyQGMnS32+1xhnmx31rwink5eRlgo0fAAsK7mU6QpRMZTFlW+IolZfpBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAfFmZq0yGtomuhp8mQHN1GM5+p1MB8GA1UdIwQY MBaAFBYwfSn1VD8h6jAJuVI/5xuPE2nKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2Yt NGNmZTQwZjA3YTZiLzEvQjhXWm1yVElhMmlhNkdueVpBYzNVWXpuNm5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2YtNGNmZTQwZjA3YTZi LzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDVBNwMA0G CSqGSIb3DQEBCwUAA4IBAQCO3+6LujP0pcmDLtoJVssLMFFS19rQ0m1TmVd4Ursu Pkv81bV0rOVaFLqrVmJZn4GGb4hyeRv6w4uQG/oTdAPWt8S2TeZE02g6QCXvf2lT NOK9sogqhYP2aR1jk6enZX96HWold+w6l1UuiC4KNgP5jvxoTWmPHilmhTZxL4pW /FXE7Kod/ywsx2wPt5zdtB+yTSAazdzfckEsjTW3TJcuhudB/FfiIuGn1toJO/S2 sy2coLeKgmg5EMPau8lvUj1QX+idiJueL74Lu6ebdjGmERh6ZidPZNhNAedOX6t4 xE70T8qK418RCIYMHr/2GSUbEBDxnMCSmjVrhuTYkeIN -----END CERTIFICATE-----Generated at Tue Jan 20 07:47:13 2026 by rpki-client