This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/1-8yART7xM2-_6XMTd_NQPcz65zM.roa File: 1-8yART7xM2-_6XMTd_NQPcz65zM.roa (raw, json) Hash identifier: tQW6oVAcsw1dq1koaqtzJ35SlN0zgIfaKPB7+0DEfrg= Subject key identifier: FB:CC:80:45:3E:F1:33:6F:BF:E9:73:13:77:F3:50:3D:CC:FA:E7:33 Certificate issuer: /CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2 Certificate serial: 019B76EB0F26322BD5158F40837A81A1214D Authority key identifier: 65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/1-8yART7xM2-_6XMTd_NQPcz65zM.roa Signing time: Thu 01 Jan 2026 00:17:54 +0000 ROA not before: Thu 01 Jan 2026 00:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.219.146.0/23 maxlen: 24 2a0a:640::/29 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:0f:26:32:2b:d5:15:8f:40:83:7a:81:a1:21:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2 Validity Not Before: Jan 1 00:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbcc80453ef1336fbfe9731377f3503dccfae733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2c:95:ea:b7:41:91:10:e7:ed:e3:98:04:e7: 67:e2:92:f1:92:b2:c2:26:38:d4:97:b7:22:56:5f: 9e:02:e8:73:d4:cb:d4:0b:6a:da:de:36:08:d6:55: ef:3a:97:ab:8c:37:2e:55:19:0e:55:3a:21:e1:39: af:e1:04:0f:e0:6c:dd:01:8b:47:f1:e3:a2:51:4e: 0e:01:74:c3:12:19:c5:85:91:d2:03:a0:01:20:c8: fc:97:de:41:98:8b:88:c7:f9:4f:6e:ce:bb:f9:54: 17:cb:d8:ae:c2:ec:ee:c3:25:48:5d:cd:07:0b:e0: ae:b3:19:76:9d:5a:c4:0d:8c:14:f1:a3:1c:c2:cc: b5:f1:8e:08:95:62:89:16:d9:d8:8e:77:73:a6:e6: 3a:d3:b2:24:8d:f6:03:fe:d9:7f:9a:b2:82:2a:be: d2:30:44:b5:57:a2:ab:0f:e1:18:27:15:38:f7:7b: a5:6c:4c:8a:4a:d8:b8:37:27:bf:a4:e5:82:49:37: 14:0d:3b:26:03:20:8c:df:02:9c:a4:ca:37:64:33: 37:50:e4:6e:92:27:bb:4f:b4:33:07:92:72:5f:52: 09:ed:d6:2a:89:1d:25:6e:f8:5c:88:b6:b9:dc:c1: 14:a7:c8:c4:08:15:df:39:79:00:4c:62:52:04:aa: f9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:CC:80:45:3E:F1:33:6F:BF:E9:73:13:77:F3:50:3D:CC:FA:E7:33 X509v3 Authority Key Identifier: keyid:65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/1-8yART7xM2-_6XMTd_NQPcz65zM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.219.146.0/23 IPv6: 2a0a:640::/29 Signature Algorithm: sha256WithRSAEncryption 2d:9e:f8:09:c6:a2:5b:77:95:e0:88:c1:c1:5b:39:a4:c3:3d: c3:31:01:32:d0:79:fc:ba:88:53:4a:55:21:45:cd:3e:20:10: 7d:15:df:77:cc:a0:fc:45:e7:54:f0:c5:00:d5:14:8e:99:5a: ef:52:2f:90:bc:bc:f3:fb:66:9d:07:1e:41:77:48:01:de:04: fa:a0:04:db:12:fa:3a:f2:d6:ed:9b:d3:2e:23:31:a6:08:71: 6f:ff:90:4d:5b:08:f2:dd:f6:6c:55:03:1a:c4:b5:cc:ba:a2: 3d:ad:df:53:e0:84:63:39:60:95:ee:9f:07:10:0c:13:0d:d8: 48:0e:fd:58:9d:55:3e:7c:c1:a0:eb:22:42:2a:10:6a:cc:b1: df:6b:b2:88:77:8a:16:3c:65:43:21:07:95:e2:29:40:48:53: b7:83:9f:50:8f:ae:aa:8f:8c:f4:aa:98:31:45:40:7c:da:d8: 4f:3d:47:7c:d9:e3:2e:05:bb:34:cd:f6:9c:9a:ff:f8:4d:0e: a9:ab:ab:e7:ac:15:6f:48:bc:77:b5:e9:26:70:4b:5b:36:8b: bd:b4:0b:19:55:16:f2:7c:0d:fe:d8:f7:90:fd:3e:b7:ac:73: ad:7b:b1:ad:6b:64:18:26:eb:4b:b6:92:14:21:82:e9:61:c8: ff:55:99:88 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt26w8mMivVFY9Ag3qBoSFNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NmQzM2M1ZjE2ZTNjZGQ5NjBhZTA1YzgwZDlmNmYzNmZj NTUzZjIwHhcNMjYwMTAxMDAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmNjODA0NTNlZjEzMzZmYmZlOTczMTM3N2YzNTAzZGNjZmFlNzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSyV6rdBkRDn7eOYBOdn4pLxkrLC JjjUl7ciVl+eAuhz1MvUC2ra3jYI1lXvOperjDcuVRkOVToh4Tmv4QQP4GzdAYtH 8eOiUU4OAXTDEhnFhZHSA6ABIMj8l95BmIuIx/lPbs67+VQXy9iuwuzuwyVIXc0H C+Cusxl2nVrEDYwU8aMcwsy18Y4IlWKJFtnYjndzpuY607IkjfYD/tl/mrKCKr7S MES1V6KrD+EYJxU493ulbEyKSti4Nye/pOWCSTcUDTsmAyCM3wKcpMo3ZDM3UORu kie7T7QzB5JyX1IJ7dYqiR0lbvhciLa53MEUp8jECBXfOXkATGJSBKr5EQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFPvMgEU+8TNvv+lzE3fzUD3M+uczMB8GA1UdIwQY MBaAFGVtM8XxbjzdlgrgXIDZ9vNvxVPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlcwenhmRnVQTjJXQ3VCY2dObjI4Ml9GVV9JLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83Y2M2ZWEtNzc0YS00ODc2LTg0Zjkt MzA0ZDIxOTFhNGYzLzEvMS04eUFSVDd4TTItXzZYTVRkX05RUGN6NjV6TS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZTcvN2NjNmVhLTc3NGEtNDg3Ni04NGY5LTMwNGQyMTkxYTRm My8xL1pXMHp4ZkZ1UE4yV0N1QmNnTm4yODJfRlVfSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAbnbkjAN BAIAAjAHAwUDKgoGQDANBgkqhkiG9w0BAQsFAAOCAQEALZ74CcaiW3eV4IjBwVs5 pMM9wzEBMtB5/LqIU0pVIUXNPiAQfRXfd8yg/EXnVPDFANUUjpla71IvkLy88/tm nQceQXdIAd4E+qAE2xL6OvLW7ZvTLiMxpghxb/+QTVsI8t32bFUDGsS1zLqiPa3f U+CEYzlgle6fBxAMEw3YSA79WJ1VPnzBoOsiQioQasyx32uyiHeKFjxlQyEHleIp QEhTt4OfUI+uqo+M9KqYMUVAfNrYTz1HfNnjLgW7NM32nJr/+E0Oqaur56wVb0i8 d7XpJnBLWzaLvbQLGVUW8nwN/tj3kP0+t6xzrXuxrWtkGCbrS7aSFCGC6WHI/1WZ iA== -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:44 2026 by rpki-client