This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/j8EQoO-MFJxIyUrWWVh8xZJfwf0.roa File: j8EQoO-MFJxIyUrWWVh8xZJfwf0.roa (raw, json) Hash identifier: 5TgJY/51sZ3zuY+vHNTStO0X7tDdmTzCrMeoxfHzgyE= Subject key identifier: 8F:C1:10:A0:EF:8C:14:9C:48:C9:4A:D6:59:58:7C:C5:92:5F:C1:FD Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019B20D15AD2A9B99BCD612241BE6424274E Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/j8EQoO-MFJxIyUrWWVh8xZJfwf0.roa Signing time: Mon 15 Dec 2025 07:02:29 +0000 ROA not before: Mon 15 Dec 2025 07:02:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137235 IP address blocks: 85.239.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 02:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:d1:5a:d2:a9:b9:9b:cd:61:22:41:be:64:24:27:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Dec 15 07:02:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8fc110a0ef8c149c48c94ad659587cc5925fc1fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ed:ab:e2:40:bb:71:95:f3:78:55:8a:72:48: 56:a3:a6:0a:31:b0:91:03:b7:6a:05:97:a6:0f:16: 81:fa:d8:e0:60:ce:59:cd:c9:bc:7e:35:67:7b:17: ce:37:e4:2c:ac:0d:5d:0e:17:f1:72:4e:ce:f0:b7: 20:ee:92:7a:f7:bc:76:3e:f5:f4:e3:85:e9:4a:00: 3e:bc:10:d4:a9:e6:00:a0:be:ba:f4:35:ba:1c:d2: 20:0f:4e:31:fd:5e:05:36:41:41:4c:83:a3:64:b6: 08:29:b4:81:e8:34:79:ed:30:98:cf:c9:5b:78:4d: 99:8a:20:1e:90:17:2f:07:10:ce:71:d8:b4:ec:62: f3:c7:0c:5d:70:13:24:f3:89:d0:eb:b8:45:cb:94: 1b:55:59:02:3c:81:a6:89:91:f3:9e:5c:a7:10:e9: 28:22:e9:cc:35:3b:67:6d:d9:e0:fe:dc:d3:6e:5e: c9:a2:b8:92:ac:2d:e5:45:c8:8c:16:59:73:5f:b1: bf:5b:35:7c:2e:f2:cf:f8:fa:33:cc:bd:3a:fc:a4: 60:ed:7c:6c:f7:b1:20:3b:3f:6d:3c:f2:c9:43:86: 24:8e:d0:bb:ad:11:82:f9:5e:f3:cb:f5:87:55:84: c4:f8:f6:5f:ab:07:78:48:82:e7:2d:88:4d:d4:4c: d4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C1:10:A0:EF:8C:14:9C:48:C9:4A:D6:59:58:7C:C5:92:5F:C1:FD X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/j8EQoO-MFJxIyUrWWVh8xZJfwf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.239.145.0/24 Signature Algorithm: sha256WithRSAEncryption 97:b8:f6:3a:b2:33:5e:4f:04:99:4c:89:08:ab:82:2b:34:3a: 33:ac:fb:e4:55:da:9a:79:32:0d:ca:61:d0:20:d7:69:40:af: 6e:e9:85:7b:14:c5:ba:f6:3d:44:9f:00:df:12:e9:16:8b:e8: f3:33:e2:fb:71:04:b6:3a:fa:da:6a:02:3a:9e:bf:53:31:31: 90:30:48:c7:b0:82:40:36:f3:25:d8:33:86:db:1b:e0:71:fa: e9:88:a0:7a:9d:f3:3a:9d:e7:92:b8:04:55:09:8b:bc:03:6e: 71:8d:8c:69:a9:05:79:1f:f7:80:65:4b:44:2a:c4:bf:ee:55: cb:d8:d2:62:8e:75:0e:c1:36:df:ed:e0:e2:80:00:6b:62:b4: e0:49:05:75:9c:d2:71:e8:e6:38:e0:95:74:56:ac:56:01:18: 61:99:d4:37:50:4e:b6:97:98:5d:9c:4d:7a:bf:67:3e:ce:a5: d8:0b:8f:a1:24:e9:3b:b9:6b:30:b2:75:fa:7a:e8:ee:6e:a6: 76:fa:79:d0:56:d8:cf:01:21:93:df:e4:06:b9:2a:52:ca:2d: da:3a:d8:e1:f3:28:2b:98:ea:6c:c1:43:d6:ed:bd:a1:6c:a2: a9:a6:9b:99:7a:7d:4f:66:84:ea:36:b1:88:9d:33:96:48:75: 7f:ea:ce:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsg0VrSqbmbzWEiQb5kJCdOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjUxMjE1MDcwMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmMxMTBhMGVmOGMxNDljNDhjOTRhZDY1OTU4N2NjNTkyNWZjMWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu2r4kC7cZXzeFWKckhWo6YKMbCR A7dqBZemDxaB+tjgYM5Zzcm8fjVnexfON+QsrA1dDhfxck7O8Lcg7pJ697x2PvX0 44XpSgA+vBDUqeYAoL669DW6HNIgD04x/V4FNkFBTIOjZLYIKbSB6DR57TCYz8lb eE2ZiiAekBcvBxDOcdi07GLzxwxdcBMk84nQ67hFy5QbVVkCPIGmiZHznlynEOko IunMNTtnbdng/tzTbl7JoriSrC3lRciMFllzX7G/WzV8LvLP+PozzL06/KRg7Xxs 97EgOz9tPPLJQ4YkjtC7rRGC+V7zy/WHVYTE+PZfqwd4SILnLYhN1EzUlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI/BEKDvjBScSMlK1llYfMWSX8H9MB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvajhFUW9PLU1GSnhJeVVyV1dWaDh4Wkpmd2YwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVe+RMA0G CSqGSIb3DQEBCwUAA4IBAQCXuPY6sjNeTwSZTIkIq4IrNDozrPvkVdqaeTINymHQ INdpQK9u6YV7FMW69j1EnwDfEukWi+jzM+L7cQS2OvraagI6nr9TMTGQMEjHsIJA NvMl2DOG2xvgcfrpiKB6nfM6neeSuARVCYu8A25xjYxpqQV5H/eAZUtEKsS/7lXL 2NJijnUOwTbf7eDigABrYrTgSQV1nNJx6OY44JV0VqxWARhhmdQ3UE62l5hdnE16 v2c+zqXYC4+hJOk7uWswsnX6eujubqZ2+nnQVtjPASGT3+QGuSpSyi3aOtjh8ygr mOpswUPW7b2hbKKpppuZen1PZoTqNrGInTOWSHV/6s4L -----END CERTIFICATE-----Generated at Fri Dec 19 12:02:23 2025 by rpki-client