This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/t8izt-wfKXdr7JwhozS1_DXrgRA.roa File: t8izt-wfKXdr7JwhozS1_DXrgRA.roa (raw, json) Hash identifier: KFnujnGyvau8zQJIRTkedY8/LzT+TVg5O/EpVAskMqI= Subject key identifier: B7:C8:B3:B7:EC:1F:29:77:6B:EC:9C:21:A3:34:B5:FC:35:EB:81:10 Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 019B694B6F52E77BD8AD0D8B44FD34E65555 Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/t8izt-wfKXdr7JwhozS1_DXrgRA.roa Signing time: Mon 29 Dec 2025 08:48:29 +0000 ROA not before: Mon 29 Dec 2025 08:48:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214025 IP address blocks: 144.56.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 22:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:4b:6f:52:e7:7b:d8:ad:0d:8b:44:fd:34:e6:55:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Dec 29 08:48:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b7c8b3b7ec1f29776bec9c21a334b5fc35eb8110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:14:83:73:d9:cf:41:c2:56:bc:b5:62:63:96: e9:ad:ed:77:ae:a3:05:08:da:63:a7:61:88:87:82: 46:10:72:f3:e9:b8:b9:92:67:3a:c1:c0:a6:e2:c5: 0e:f8:a7:66:57:4d:40:87:6d:9d:77:a0:bc:c3:74: b5:68:e7:13:01:1f:65:f9:69:f9:d0:76:54:81:81: 8a:6b:d8:15:60:ff:4b:44:97:d2:e8:2c:1f:ff:16: f1:56:11:9a:15:79:38:f6:83:c5:9f:88:a3:cf:48: 4b:2c:4b:85:e0:93:3a:87:6f:f4:82:57:f2:1a:d6: ec:32:86:1f:22:7f:a6:87:58:64:ff:db:b9:87:07: 9f:6b:b1:d8:2f:7b:96:c7:c1:9b:e3:bf:cb:24:66: 54:57:02:2f:90:a7:ba:b4:bf:2c:4a:6c:2e:b0:3b: 19:f7:bf:34:f5:66:8a:ca:22:f1:51:59:cb:68:10: f5:6c:38:8c:bf:eb:e4:c2:aa:6d:5e:ca:b5:e1:60: b1:05:e7:b7:80:6b:f4:73:76:2a:a4:11:73:ba:ef: 9d:22:e1:24:a7:ca:ce:70:e0:09:98:8a:71:d6:30: 7d:a2:ef:ce:e3:53:be:6d:0d:d3:a0:d7:3a:7c:7c: 1f:df:0e:5c:91:38:83:ce:0e:df:44:ee:9b:e3:cf: 26:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C8:B3:B7:EC:1F:29:77:6B:EC:9C:21:A3:34:B5:FC:35:EB:81:10 X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/t8izt-wfKXdr7JwhozS1_DXrgRA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.56.81.0/24 Signature Algorithm: sha256WithRSAEncryption 13:d6:35:46:89:ca:43:c9:87:cd:ba:b6:f8:4e:9d:ac:30:98: 2d:3d:a7:e6:ed:24:99:f8:dc:96:21:d0:d8:ec:69:25:65:a0: 25:54:fb:d0:d1:56:80:70:74:fb:3f:fe:06:3c:e5:bf:00:e7: 1d:b2:75:a9:a4:91:9c:c6:44:ac:d6:cc:69:74:07:83:00:b3: b5:9a:34:da:c3:5a:9b:30:a0:c3:87:3c:69:2a:89:b8:c3:67: d5:09:de:a4:3a:c4:7c:2a:62:45:d9:12:b0:3c:b9:01:5d:2d: 25:46:44:85:e1:c1:82:e9:0c:42:d2:9b:e8:a6:c8:13:68:95: 89:c3:ff:a8:28:d3:f9:9a:06:92:e6:07:3e:52:b5:56:ec:91: fa:e1:5a:b3:39:c4:f2:6f:64:4b:40:2a:14:e3:10:af:b6:71: c9:da:db:21:07:56:c2:41:66:a6:5e:58:6b:55:7b:77:74:2f: 61:e3:91:ea:ff:1f:4b:7a:f7:f9:49:09:46:76:81:a8:c7:5a: 22:cf:36:15:95:aa:ad:99:9e:94:41:59:31:e6:27:01:9b:d0: 76:f0:bd:29:24:46:32:2d:32:41:12:27:0b:0d:80:ce:d3:c5: 0a:c3:b1:aa:46:ac:b3:7f:9b:d9:95:24:12:da:8e:50:a6:b1: b1:0a:c2:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtpS29S53vYrQ2LRP005lVVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjUxMjI5MDg0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2M4YjNiN2VjMWYyOTc3NmJlYzljMjFhMzM0YjVmYzM1ZWI4MTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBSDc9nPQcJWvLViY5bpre13rqMF CNpjp2GIh4JGEHLz6bi5kmc6wcCm4sUO+KdmV01Ah22dd6C8w3S1aOcTAR9l+Wn5 0HZUgYGKa9gVYP9LRJfS6Cwf/xbxVhGaFXk49oPFn4ijz0hLLEuF4JM6h2/0glfy GtbsMoYfIn+mh1hk/9u5hwefa7HYL3uWx8Gb47/LJGZUVwIvkKe6tL8sSmwusDsZ 97809WaKyiLxUVnLaBD1bDiMv+vkwqptXsq14WCxBee3gGv0c3YqpBFzuu+dIuEk p8rOcOAJmIpx1jB9ou/O41O+bQ3ToNc6fHwf3w5ckTiDzg7fRO6b488mSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLfIs7fsHyl3a+ycIaM0tfw164EQMB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvdDhpenQtd2ZLWGRyN0p3aG96UzFfRFhyZ1JBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkDhRMA0G CSqGSIb3DQEBCwUAA4IBAQAT1jVGicpDyYfNurb4Tp2sMJgtPafm7SSZ+NyWIdDY 7GklZaAlVPvQ0VaAcHT7P/4GPOW/AOcdsnWppJGcxkSs1sxpdAeDALO1mjTaw1qb MKDDhzxpKom4w2fVCd6kOsR8KmJF2RKwPLkBXS0lRkSF4cGC6QxC0pvopsgTaJWJ w/+oKNP5mgaS5gc+UrVW7JH64VqzOcTyb2RLQCoU4xCvtnHJ2tshB1bCQWamXlhr VXt3dC9h45Hq/x9Levf5SQlGdoGox1oizzYVlaqtmZ6UQVkx5icBm9B28L0pJEYy LTJBEicLDYDO08UKw7GqRqyzf5vZlSQS2o5QprGxCsL8 -----END CERTIFICATE-----Generated at Wed Dec 31 03:39:35 2025 by rpki-client