This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/8xy5rUcaiuIUBakSTQsgG3rSQVI.roa File: 8xy5rUcaiuIUBakSTQsgG3rSQVI.roa (raw, json) Hash identifier: xa6+9/r3YYHcUx8lzSCbtlOFi79wzElE5PSXHJiDLnE= Subject key identifier: F3:1C:B9:AD:47:1A:8A:E2:14:05:A9:12:4D:0B:20:1B:7A:D2:41:52 Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b Certificate serial: 019A90EE262908AEF8D761BBE82E2A9D96F2 Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/8xy5rUcaiuIUBakSTQsgG3rSQVI.roa Signing time: Mon 17 Nov 2025 08:28:37 +0000 ROA not before: Mon 17 Nov 2025 08:28:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 185.38.26.0/24 maxlen: 24 194.31.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 23:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:90:ee:26:29:08:ae:f8:d7:61:bb:e8:2e:2a:9d:96:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b Validity Not Before: Nov 17 08:28:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f31cb9ad471a8ae21405a9124d0b201b7ad24152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:af:a8:ad:43:a9:94:b8:ea:b4:1f:eb:31:24: 0c:63:93:c2:39:f0:ca:db:db:a2:cb:1d:10:9f:91: c5:ff:da:00:a3:97:22:7c:fd:70:d9:4a:4c:fc:ea: a8:b1:a3:a7:a5:83:50:3f:6f:79:60:6e:46:b0:29: d1:5a:01:e1:c8:11:93:ed:b0:b5:1d:88:21:e7:e6: 1a:fb:4d:a6:dd:60:ab:cc:3d:71:42:7a:a4:e3:6f: 91:c6:a1:80:2d:ff:80:3c:92:ff:a6:32:a1:93:48: 5d:5e:d6:58:6a:56:af:6e:e2:32:28:45:37:6a:1c: fa:79:7f:59:b9:f1:f0:1e:0b:9b:e4:c7:9b:de:01: 0a:f2:94:82:fa:c6:36:55:bf:ec:eb:03:4c:57:be: 1a:06:95:a0:30:c0:5a:18:03:a3:05:db:bd:f7:2c: d7:3b:0c:bb:7c:b3:d0:86:32:9a:15:57:53:6e:34: 67:e5:83:89:6a:91:ce:46:e0:2c:7d:92:98:22:62: 29:ce:7d:10:e4:ec:c2:c1:e3:f2:24:73:9f:68:62: e2:26:19:e7:c4:77:bb:e9:d0:75:2a:ea:67:84:51: 2c:4a:bd:25:7f:c0:a1:ec:bf:5c:b7:72:a8:d8:8a: e4:c3:77:e8:da:79:64:57:07:f0:3d:13:ab:ea:30: e0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1C:B9:AD:47:1A:8A:E2:14:05:A9:12:4D:0B:20:1B:7A:D2:41:52 X509v3 Authority Key Identifier: keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/8xy5rUcaiuIUBakSTQsgG3rSQVI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.38.26.0/24 194.31.165.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:f3:a2:1e:b8:08:fe:df:6e:7f:ac:9e:88:35:a3:c4:58:d4: 9b:f5:91:c9:4c:41:14:a7:c9:a6:09:0b:f9:b3:4e:d6:ed:65: 30:74:03:1c:7a:ca:04:48:4a:19:b3:98:39:a7:16:b9:e1:f3: 1e:62:f0:f5:e1:46:a6:b8:26:4e:c5:5c:d8:cc:2f:f1:ad:a8: f3:72:e2:db:1d:a7:33:02:33:18:df:d8:de:a6:a9:e5:2f:29: 54:4c:7b:c4:9b:b1:8a:e6:9b:ac:42:3a:56:06:5f:ee:55:5b: 0b:be:1f:7d:dd:97:4b:3e:f9:70:3e:92:ac:4b:bd:74:f0:87: 3e:24:06:32:8b:89:ef:5f:98:93:61:d7:3d:54:5e:79:5c:4b: 11:b9:5d:49:2d:1d:c7:cc:78:02:6b:cb:e3:75:02:64:2a:25: 4d:5b:38:5d:b8:bd:a9:dd:af:72:82:d1:9c:2b:c8:a6:17:cf: 80:a4:23:6d:a3:ff:9a:b2:f5:c3:21:36:48:06:10:91:4d:9e: f3:ef:64:9f:cb:25:ca:4f:5e:9e:97:9d:10:e8:22:f5:f0:97: 06:52:51:a6:2c:0b:86:d7:a4:70:51:cf:93:04:08:3e:5d:0b: 5c:4d:08:39:69:ad:86:bc:17:c8:11:b5:9e:4f:7f:5a:29:98: bf:6a:c6:b4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqQ7iYpCK7412G76C4qnZbyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTc3MGY0N2ZkOTAzOTI1ZDgwYWM1OGUwNWUwNzZmM2Jh YTExMGIwHhcNMjUxMTE3MDgyODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzFjYjlhZDQ3MWE4YWUyMTQwNWE5MTI0ZDBiMjAxYjdhZDI0MTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq+orUOplLjqtB/rMSQMY5PCOfDK 29uiyx0Qn5HF/9oAo5cifP1w2UpM/OqosaOnpYNQP295YG5GsCnRWgHhyBGT7bC1 HYgh5+Ya+02m3WCrzD1xQnqk42+RxqGALf+APJL/pjKhk0hdXtZYalavbuIyKEU3 ahz6eX9ZufHwHgub5Meb3gEK8pSC+sY2Vb/s6wNMV74aBpWgMMBaGAOjBdu99yzX Owy7fLPQhjKaFVdTbjRn5YOJapHORuAsfZKYImIpzn0Q5OzCwePyJHOfaGLiJhnn xHe76dB1KupnhFEsSr0lf8Ch7L9ct3Ko2Irkw3fo2nlkVwfwPROr6jDg6QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPMcua1HGoriFAWpEk0LIBt60kFSMB8GA1UdIwQY MBaAFD7ncPR/2QOSXYCsWOBeB287qhELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTIt NjI0ZjgzNjgyMTY5LzEvOHh5NXJVY2FpdUlVQmFrU1RRc2dHM3JTUVZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi80MzQzNDQtMzIzZS00OGY4LWFkZTItNjI0ZjgzNjgyMTY5 LzEvUHVkdzlIX1pBNUpkZ0t4WTRGNEhienVxRVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuSYaAwQA wh+lMA0GCSqGSIb3DQEBCwUAA4IBAQAt86IeuAj+325/rJ6INaPEWNSb9ZHJTEEU p8mmCQv5s07W7WUwdAMcesoESEoZs5g5pxa54fMeYvD14UamuCZOxVzYzC/xrajz cuLbHaczAjMY39jepqnlLylUTHvEm7GK5pusQjpWBl/uVVsLvh993ZdLPvlwPpKs S7108Ic+JAYyi4nvX5iTYdc9VF55XEsRuV1JLR3HzHgCa8vjdQJkKiVNWzhduL2p 3a9ygtGcK8imF8+ApCNto/+asvXDITZIBhCRTZ7z72SfyyXKT16el50Q6CL18JcG UlGmLAuG16RwUc+TBAg+XQtcTQg5aa2GvBfIEbWeT39aKZi/asa0 -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:21 2025 by rpki-client