This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/8GRdJBxAs0_FXOI6LdkwTzPcfw8.roa File: 8GRdJBxAs0_FXOI6LdkwTzPcfw8.roa (raw, json) Hash identifier: /+kE4h00r/rNQF2qkF3Rbnzzg5WTJLtCWIFfPXld1Uc= Subject key identifier: F0:64:5D:24:1C:40:B3:4F:C5:5C:E2:3A:2D:D9:30:4F:33:DC:7F:0F Certificate issuer: /CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2 Certificate serial: 019B7EA6F8966F29D4F156C45455E98548DF Authority key identifier: 53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/8GRdJBxAs0_FXOI6LdkwTzPcfw8.roa Signing time: Fri 02 Jan 2026 12:20:30 +0000 ROA not before: Fri 02 Jan 2026 12:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198022 IP address blocks: 185.92.160.0/23 maxlen: 23 185.211.220.0/23 maxlen: 23 185.211.222.0/24 maxlen: 24 185.211.223.0/24 maxlen: 24 212.79.200.0/21 maxlen: 21 212.79.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f8:96:6f:29:d4:f1:56:c4:54:55:e9:85:48:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2 Validity Not Before: Jan 2 12:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0645d241c40b34fc55ce23a2dd9304f33dc7f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:71:60:cf:a0:57:22:f1:07:4a:6b:70:9d:0a: 6b:a3:1c:1b:2b:02:49:8f:61:e3:8d:d2:68:08:93: 67:d4:31:11:b1:ca:cb:c7:61:ac:98:4a:15:f2:97: c8:b5:ea:6d:f4:f4:ed:7f:db:b4:37:2c:13:4a:3a: 14:74:55:e4:7c:18:30:e0:d3:9f:e8:01:a8:76:d2: e3:2e:c4:d0:f8:bf:29:51:5f:e1:c8:76:39:e0:92: fe:1b:a9:b0:17:c8:03:72:ae:7a:6e:8f:4b:3b:9d: a2:c5:23:99:bb:fb:1e:85:a8:e7:0b:38:c0:7c:72: 00:8a:06:50:d5:ff:b6:b8:5a:e1:18:40:04:ca:69: b4:03:fb:01:ad:6e:c4:80:23:76:1f:96:91:c6:f3: 12:d3:eb:ae:0d:78:a3:34:ca:fb:ec:e0:8b:e2:88: e5:7c:9a:c3:00:12:f1:1f:39:88:c2:9f:24:32:d5: 22:80:19:c7:a6:c6:7d:15:63:97:ef:1b:b4:b0:e4: b9:ad:32:f5:2e:79:4e:7d:e9:55:9b:2d:96:73:d1: 0b:58:75:a7:2d:7b:26:1f:36:43:bb:a4:17:66:c2: e9:a4:e0:5c:c7:12:ba:1a:7a:37:76:64:2b:53:ae: d7:2b:03:c1:a2:95:d9:5a:63:9c:9b:e2:62:62:73: 8f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:64:5D:24:1C:40:B3:4F:C5:5C:E2:3A:2D:D9:30:4F:33:DC:7F:0F X509v3 Authority Key Identifier: keyid:53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/8GRdJBxAs0_FXOI6LdkwTzPcfw8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.92.160.0/23 185.211.220.0/22 212.79.200.0-212.79.211.255 Signature Algorithm: sha256WithRSAEncryption c9:1e:71:d4:11:ed:18:22:f5:69:66:92:94:80:5b:ff:9e:3a: e3:2f:ef:82:13:d2:cd:5e:04:80:f0:bd:f1:b8:1f:98:bc:87: 46:8a:9b:65:ec:12:52:e7:55:87:94:56:2c:14:41:7f:1d:2b: f2:38:1c:73:f5:25:ce:ed:ed:d2:47:a0:dd:e9:b0:68:ac:92: 94:03:85:04:12:b0:8b:d5:84:66:3c:b2:1a:e6:35:8f:27:df: 1b:58:f1:b5:a0:54:26:47:de:c7:8f:2b:9c:de:25:50:ca:2f: 86:a0:cb:60:dc:6f:d4:32:d1:f5:5d:a6:9a:38:89:11:2c:42: 68:8d:e5:1f:3e:3d:53:ab:55:00:d7:4c:85:59:62:cc:a5:14: 0a:ad:9f:04:6a:1b:e9:56:d4:8e:6e:f0:bf:58:42:04:a1:cb: 6b:f7:6f:cc:6f:2e:c6:3e:3b:d9:ce:7e:9e:3a:e4:85:36:1d: ad:b0:a0:12:0a:d8:e3:f0:e9:90:cf:6e:2e:31:68:33:e7:a8: 1f:ed:57:f6:6a:ed:7e:32:b1:76:31:63:5c:9c:25:63:28:70: 04:5b:85:ad:37:cf:ae:79:44:ea:70:ad:fc:6b:97:32:dc:cb: c7:eb:7e:56:14:f1:ee:4f:3f:0e:5a:8b:4d:22:8c:82:18:a2: ca:58:4b:7c -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt+pviWbynU8VbEVFXphUjfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYmJiYmFhM2VlMjRjN2FkOWIyYzYwNDMyZTE0ZWRhMzg0 OWI1ZTIwHhcNMjYwMTAyMTIyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDY0NWQyNDFjNDBiMzRmYzU1Y2UyM2EyZGQ5MzA0ZjMzZGM3ZjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHFgz6BXIvEHSmtwnQproxwbKwJJ j2HjjdJoCJNn1DERscrLx2GsmEoV8pfItept9PTtf9u0NywTSjoUdFXkfBgw4NOf 6AGodtLjLsTQ+L8pUV/hyHY54JL+G6mwF8gDcq56bo9LO52ixSOZu/sehajnCzjA fHIAigZQ1f+2uFrhGEAEymm0A/sBrW7EgCN2H5aRxvMS0+uuDXijNMr77OCL4ojl fJrDABLxHzmIwp8kMtUigBnHpsZ9FWOX7xu0sOS5rTL1LnlOfelVmy2Wc9ELWHWn LXsmHzZDu6QXZsLppOBcxxK6Gno3dmQrU67XKwPBopXZWmOcm+JiYnOPlwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFPBkXSQcQLNPxVziOi3ZME8z3H8PMB8GA1UdIwQY MBaAFFO7u6o+4kx62bLGBDLhTto4SbXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zMzk0YzAtNDU4Ny00NDRlLTlhMjUt MDBlY2YwYzRkMGVmLzEvOEdSZEpCeEFzMF9GWE9JNkxka3dUelBjZnc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8zMzk0YzAtNDU4Ny00NDRlLTlhMjUtMDBlY2YwYzRkMGVm LzEvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBuVygAwQC udPcMAwDBAPUT8gDBALUT9AwDQYJKoZIhvcNAQELBQADggEBAMkecdQR7Rgi9Wlm kpSAW/+eOuMv74IT0s1eBIDwvfG4H5i8h0aKm2XsElLnVYeUViwUQX8dK/I4HHP1 Jc7t7dJHoN3psGiskpQDhQQSsIvVhGY8shrmNY8n3xtY8bWgVCZH3sePK5zeJVDK L4agy2Dcb9Qy0fVdppo4iREsQmiN5R8+PVOrVQDXTIVZYsylFAqtnwRqG+lW1I5u 8L9YQgShy2v3b8xvLsY+O9nOfp465IU2Ha2woBIK2OPw6ZDPbi4xaDPnqB/tV/Zq 7X4ysXYxY1ycJWMocARbha03z655ROpwrfxrlzLcy8frflYU8e5PPw5ai00ijIIY ospYS3w= -----END CERTIFICATE-----Generated at Mon Jan 12 01:42:30 2026 by rpki-client