This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/8fWTt6cJxJRR6lpcH98MO8AAoVo.roa File: 8fWTt6cJxJRR6lpcH98MO8AAoVo.roa (raw, json) Hash identifier: bBUdQFotb6rNdoP1cKGwDOmS1wnSSTPDUXaLQMuQy50= Subject key identifier: F1:F5:93:B7:A7:09:C4:94:51:EA:5A:5C:1F:DF:0C:3B:C0:00:A1:5A Certificate issuer: /CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e Certificate serial: 019B07AFF1F7442D8FD70088423F17A66114 Authority key identifier: 76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/8fWTt6cJxJRR6lpcH98MO8AAoVo.roa Signing time: Wed 10 Dec 2025 09:55:29 +0000 ROA not before: Wed 10 Dec 2025 09:55:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59651 IP address blocks: 185.68.152.0/22 maxlen: 22 185.94.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:af:f1:f7:44:2d:8f:d7:00:88:42:3f:17:a6:61:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e Validity Not Before: Dec 10 09:55:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f1f593b7a709c49451ea5a5c1fdf0c3bc000a15a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cb:2a:65:6d:2e:6e:36:1d:d8:a3:54:a0:ba: f5:4d:1f:6f:e6:5b:0d:55:f6:75:14:cc:e2:0f:f9: 54:a9:9f:e0:7a:b2:35:ba:38:a6:00:29:8c:7c:57: 91:f2:44:52:b8:ee:47:6c:20:bf:5d:2e:e5:51:91: 12:cf:ac:9e:5d:af:c5:22:f7:c3:d7:c9:68:ad:40: 82:1e:7a:f8:eb:7c:4a:d7:2f:f2:4e:1e:1c:d3:63: da:40:07:14:e8:fa:3c:88:91:59:ac:9f:da:ab:c2: 94:41:d0:a2:91:6a:8b:fc:26:a2:2a:84:60:20:fe: 91:0f:7e:7b:80:dd:02:52:3b:ce:63:6e:5d:b9:6d: 1c:c9:51:8c:23:5c:e7:94:10:86:a2:d6:78:6c:d5: 68:e3:6e:53:58:83:d5:40:7e:66:27:23:eb:c6:f6: ba:69:01:cf:1c:ea:61:07:0c:03:06:e5:ad:04:94: 5e:34:62:bb:af:07:73:87:62:8b:f3:e5:bf:e8:24: f4:35:5b:8d:53:11:5a:5c:88:96:4a:c9:85:9c:ca: 30:f1:2f:9d:51:48:08:e8:05:7c:1b:3d:23:20:56: 06:fb:7d:e0:7b:c1:da:5a:ab:82:80:44:7b:4f:8b: 4d:62:e4:99:fb:2e:22:37:3a:2a:e9:79:1f:21:3b: 91:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F5:93:B7:A7:09:C4:94:51:EA:5A:5C:1F:DF:0C:3B:C0:00:A1:5A X509v3 Authority Key Identifier: keyid:76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/8fWTt6cJxJRR6lpcH98MO8AAoVo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.68.152.0/22 185.94.32.0/22 Signature Algorithm: sha256WithRSAEncryption c9:0e:4b:95:77:42:84:30:6e:fa:3c:fb:d7:eb:1f:f5:6d:f6: 88:e5:31:ea:dc:9c:d1:d7:d0:02:3d:c1:22:d0:55:c7:18:07: 31:dd:b4:df:8a:ca:38:fa:86:8b:78:7f:bc:68:a9:13:27:9c: c1:88:a3:7a:94:59:58:bc:12:d7:0a:a4:90:86:fc:4e:11:ef: 9d:ed:c3:6a:c2:57:db:c2:b5:30:28:aa:36:12:27:99:f1:2a: ef:9c:26:cb:e6:5c:e2:50:c2:c1:e6:f0:ab:da:f8:e1:73:dc: 46:aa:f5:91:19:eb:40:dc:54:b9:de:17:4f:e2:08:5e:f4:8e: f2:94:00:bd:23:1a:ef:51:ba:96:7c:25:7a:b1:3e:fc:71:80: b8:77:ab:59:37:72:1e:47:9b:8b:ad:1a:cf:73:62:73:a4:69: 0d:60:c5:42:f2:1a:0e:d9:7a:47:4a:5c:5f:16:41:5b:9f:3f: 57:46:1f:c6:e4:17:57:4f:a3:8f:4b:e3:52:b5:87:fc:85:cd: 1b:3c:79:74:27:9b:2a:0b:4a:b6:a4:fb:85:3a:78:44:e7:c8: 6e:e5:61:6a:94:28:48:fe:b3:c0:83:bd:71:a3:77:6e:c7:a2: e3:ef:de:43:a5:21:81:be:13:4c:01:a6:2e:3c:11:66:32:65: f3:f1:e8:bd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsHr/H3RC2P1wCIQj8XpmEUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NzJjMGZlMDgzNzE3NjQwNThjNmFiODVkZmI1ZGNkYzEw OWY3N2UwHhcNMjUxMjEwMDk1NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWY1OTNiN2E3MDljNDk0NTFlYTVhNWMxZmRmMGMzYmMwMDBhMTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8sqZW0ubjYd2KNUoLr1TR9v5lsN VfZ1FMziD/lUqZ/gerI1ujimACmMfFeR8kRSuO5HbCC/XS7lUZESz6yeXa/FIvfD 18lorUCCHnr463xK1y/yTh4c02PaQAcU6Po8iJFZrJ/aq8KUQdCikWqL/CaiKoRg IP6RD357gN0CUjvOY25duW0cyVGMI1znlBCGotZ4bNVo425TWIPVQH5mJyPrxva6 aQHPHOphBwwDBuWtBJReNGK7rwdzh2KL8+W/6CT0NVuNUxFaXIiWSsmFnMow8S+d UUgI6AV8Gz0jIFYG+33ge8HaWquCgER7T4tNYuSZ+y4iNzoq6XkfITuRmQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPH1k7enCcSUUepaXB/fDDvAAKFaMB8GA1UdIwQY MBaAFHZywP4INxdkBYxquF37Xc3BCfd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG5MQV9nZzNGMlFGakdxNFhmdGR6Y0VKOTM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOWYyZjYtMTkxZC00ZjBmLWEzYzQt YzNjODBlNDcwNGU0LzEvOGZXVHQ2Y0p4SlJSNmxwY0g5OE1POEFBb1ZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jOWYyZjYtMTkxZC00ZjBmLWEzYzQtYzNjODBlNDcwNGU0 LzEvZG5MQV9nZzNGMlFGakdxNFhmdGR6Y0VKOTM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuUSYAwQC uV4gMA0GCSqGSIb3DQEBCwUAA4IBAQDJDkuVd0KEMG76PPvX6x/1bfaI5THq3JzR 19ACPcEi0FXHGAcx3bTfiso4+oaLeH+8aKkTJ5zBiKN6lFlYvBLXCqSQhvxOEe+d 7cNqwlfbwrUwKKo2EieZ8SrvnCbL5lziUMLB5vCr2vjhc9xGqvWRGetA3FS53hdP 4ghe9I7ylAC9IxrvUbqWfCV6sT78cYC4d6tZN3IeR5uLrRrPc2JzpGkNYMVC8hoO 2XpHSlxfFkFbnz9XRh/G5BdXT6OPS+NStYf8hc0bPHl0J5sqC0q2pPuFOnhE58hu 5WFqlChI/rPAg71xo3dux6Lj795DpSGBvhNMAaYuPBFmMmXz8ei9 -----END CERTIFICATE-----Generated at Sat Dec 20 05:09:25 2025 by rpki-client