This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/kBZteb0tRq7ya0q4nvaUab2NGVc.roa File: kBZteb0tRq7ya0q4nvaUab2NGVc.roa (raw, json) Hash identifier: y9T3rJM9kOFTIOSEqDLOfroKGqUc4RIkTL5pwsLIvpA= Subject key identifier: 90:16:6D:79:BD:2D:46:AE:F2:6B:4A:B8:9E:F6:94:69:BD:8D:19:57 Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254 Certificate serial: 019B7910ACA3C0C1541AC15E039543F7A7B5 Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/kBZteb0tRq7ya0q4nvaUab2NGVc.roa Signing time: Thu 01 Jan 2026 10:18:14 +0000 ROA not before: Thu 01 Jan 2026 10:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207043 IP address blocks: 85.11.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 04:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ac:a3:c0:c1:54:1a:c1:5e:03:95:43:f7:a7:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254 Validity Not Before: Jan 1 10:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90166d79bd2d46aef26b4ab89ef69469bd8d1957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b5:33:7b:bf:ec:3d:9c:3e:c0:61:6d:4f:b4: fd:87:8e:04:91:9e:fe:00:b2:2a:56:07:ed:ff:40: 43:89:35:b7:58:04:98:b1:66:af:67:ab:40:bd:4c: 99:4a:af:d6:90:63:33:1d:7e:62:9a:f4:58:2e:40: b9:5b:e8:5b:8a:d2:9d:f6:5f:2d:02:97:ca:aa:c4: 9e:a0:30:50:f2:23:02:ad:08:a5:15:45:66:a1:ab: ee:c7:c4:76:a5:11:09:f0:1e:d3:47:b1:31:d9:49: 90:e3:05:d7:0d:4a:d7:ca:ea:55:4c:c5:f0:18:e4: ba:7e:7c:21:67:62:bb:e4:2f:8a:c6:b6:91:b1:7d: f1:4e:cb:17:b5:eb:bb:40:ff:d9:97:a4:2d:08:35: fa:db:86:59:07:00:a9:73:78:0d:56:2f:8f:1c:9a: 22:84:f0:c4:9e:93:35:76:32:b9:8f:d5:0a:f3:b9: 5f:d7:23:b9:a8:2b:e9:91:88:78:4b:cd:1c:85:f4: 82:af:fb:f5:33:af:40:4d:35:e1:12:e4:7e:c9:00: 4f:de:67:aa:da:21:43:53:07:f9:26:fb:9c:76:e4: 86:43:b5:eb:6f:2b:03:f0:1f:45:87:19:eb:1e:72: d0:08:89:da:c3:8d:84:9e:69:ff:73:ee:e0:20:17: d6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:16:6D:79:BD:2D:46:AE:F2:6B:4A:B8:9E:F6:94:69:BD:8D:19:57 X509v3 Authority Key Identifier: keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/kBZteb0tRq7ya0q4nvaUab2NGVc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.11.161.0/24 Signature Algorithm: sha256WithRSAEncryption 13:95:d9:0d:86:8c:eb:85:a2:b1:51:43:34:63:f1:9d:1a:13: f5:ed:96:89:f2:46:3e:c8:b5:78:7d:b3:2f:d6:8b:f5:5e:40: 0d:cd:14:a1:ff:1b:2b:20:da:85:d4:8c:a4:04:1a:0a:eb:9f: 96:15:5c:12:9b:c7:7f:ac:e4:e1:60:2b:5a:40:9d:c9:d9:11: 4a:25:3e:7e:56:f9:fd:16:9f:0c:27:bb:cd:c7:9b:58:e9:b2: 71:de:bb:24:42:cd:14:1f:97:fc:d8:29:f4:e3:80:db:6e:47: e4:2f:79:f2:2b:50:f4:86:c7:c2:71:8c:ec:e2:29:e0:8d:c6: 2b:ec:b7:ad:81:32:8d:6a:e5:aa:36:ff:58:27:6d:d9:41:f4: c7:bd:45:6b:82:43:d0:9e:e7:57:31:be:dd:cf:64:8b:bd:8c: 18:44:07:cd:d6:7e:f7:b4:c7:bb:2f:8e:ad:0b:4f:4b:3a:47: 15:fe:b8:ee:16:66:77:38:9f:9f:f3:f2:8f:f7:37:62:07:46: bf:dd:e8:ef:09:1a:2c:e2:df:a6:4c:96:1e:e3:fe:de:8c:1c: 89:90:03:a7:58:1e:55:3a:de:14:01:be:32:a9:2f:ff:f7:a9: 98:04:b2:54:55:60:79:70:dc:52:35:7d:3d:30:1d:c1:f4:a5: 8c:18:82:b6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EKyjwMFUGsFeA5VD96e1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NzVkNTE5ZGUyMzljZjE2NGNiOTRhNjY2MGMyNTMwY2Vh ZWYyNTQwHhcNMjYwMTAxMTAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDE2NmQ3OWJkMmQ0NmFlZjI2YjRhYjg5ZWY2OTQ2OWJkOGQxOTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLUze7/sPZw+wGFtT7T9h44EkZ7+ ALIqVgft/0BDiTW3WASYsWavZ6tAvUyZSq/WkGMzHX5imvRYLkC5W+hbitKd9l8t ApfKqsSeoDBQ8iMCrQilFUVmoavux8R2pREJ8B7TR7Ex2UmQ4wXXDUrXyupVTMXw GOS6fnwhZ2K75C+KxraRsX3xTssXteu7QP/Zl6QtCDX624ZZBwCpc3gNVi+PHJoi hPDEnpM1djK5j9UK87lf1yO5qCvpkYh4S80chfSCr/v1M69ATTXhEuR+yQBP3meq 2iFDUwf5JvucduSGQ7XrbysD8B9FhxnrHnLQCInaw42Enmn/c+7gIBfWewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJAWbXm9LUau8mtKuJ72lGm9jRlXMB8GA1UdIwQY MBaAFFl11RneI5zxZMuUpmYMJTDOrvJUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUt MmNjNjc1NzI2OTc1LzEva0JadGViMHRScTd5YTBxNG52YVVhYjJOR1ZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUtMmNjNjc1NzI2OTc1 LzEvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVQuhMA0G CSqGSIb3DQEBCwUAA4IBAQATldkNhozrhaKxUUM0Y/GdGhP17ZaJ8kY+yLV4fbMv 1ov1XkANzRSh/xsrINqF1IykBBoK65+WFVwSm8d/rOThYCtaQJ3J2RFKJT5+Vvn9 Fp8MJ7vNx5tY6bJx3rskQs0UH5f82Cn044DbbkfkL3nyK1D0hsfCcYzs4ingjcYr 7LetgTKNauWqNv9YJ23ZQfTHvUVrgkPQnudXMb7dz2SLvYwYRAfN1n73tMe7L46t C09LOkcV/rjuFmZ3OJ+f8/KP9zdiB0a/3ejvCRos4t+mTJYe4/7ejByJkAOnWB5V Ot4UAb4yqS//96mYBLJUVWB5cNxSNX09MB3B9KWMGIK2 -----END CERTIFICATE-----Generated at Fri Jan 23 12:53:51 2026 by rpki-client