This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/C-iIHFCFPPAyH44XN2FUfWFmMuQ.roa File: C-iIHFCFPPAyH44XN2FUfWFmMuQ.roa (raw, json) Hash identifier: 4EBK9TE3DKNE91PsZ8jPUioXBBKUno4c9ILnL/KNCRs= Subject key identifier: 0B:E8:88:1C:50:85:3C:F0:32:1F:8E:17:37:61:54:7D:61:66:32:E4 Certificate issuer: /CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0 Certificate serial: 019B797EDDD77B32B6EA807DF59C467D5143 Authority key identifier: B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/C-iIHFCFPPAyH44XN2FUfWFmMuQ.roa Signing time: Thu 01 Jan 2026 12:18:36 +0000 ROA not before: Thu 01 Jan 2026 12:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4755 IP address blocks: 85.158.128.0/21 maxlen: 21 85.158.128.0/24 maxlen: 24 85.158.129.0/24 maxlen: 24 85.158.130.0/24 maxlen: 24 85.158.131.0/24 maxlen: 24 85.158.132.0/24 maxlen: 24 85.158.133.0/24 maxlen: 24 85.158.134.0/24 maxlen: 24 85.158.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:dd:d7:7b:32:b6:ea:80:7d:f5:9c:46:7d:51:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0 Validity Not Before: Jan 1 12:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0be8881c50853cf0321f8e173761547d616632e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:77:13:47:cd:7d:80:48:9c:1c:75:3b:c8:b5: fe:b1:6d:77:e9:31:06:e8:40:4b:43:21:a1:72:df: 1e:33:2d:37:ab:c5:b1:3d:61:83:f5:6d:c3:b7:f2: 28:98:28:84:d7:66:17:d4:a5:d6:34:fa:3b:d1:f1: f0:6f:88:53:6f:f2:43:55:7e:a1:62:6e:9b:5b:f5: b8:6b:90:b8:b6:be:f6:71:28:cd:a6:27:37:10:5d: 5f:6f:54:24:de:03:23:fb:1a:33:2a:4a:50:dd:2b: 44:b1:19:26:0c:3e:4f:93:b5:d0:4e:9c:e1:49:53: ba:5a:ab:12:02:22:b8:bb:e8:74:1c:9f:49:8f:35: 1f:f6:bd:4c:60:40:07:ce:54:aa:97:89:49:de:4c: 86:da:dc:dc:2f:6f:dc:ac:3a:05:05:45:be:7b:60: 1a:26:e8:93:32:40:fc:46:28:36:ba:b6:41:b8:e1: c2:4a:be:42:bf:3f:59:a6:42:cb:9c:88:f2:35:79: f0:2d:ea:96:8f:4e:3a:dc:ad:c4:d2:6e:40:48:65: 8f:48:83:98:ec:40:f3:d5:77:58:d5:41:f4:4a:52: 9b:d7:21:1b:7a:b3:2e:78:51:82:62:48:57:8c:68: 50:88:9d:83:6a:c3:02:9b:c6:86:40:76:1c:ce:1e: 7a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E8:88:1C:50:85:3C:F0:32:1F:8E:17:37:61:54:7D:61:66:32:E4 X509v3 Authority Key Identifier: keyid:B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/C-iIHFCFPPAyH44XN2FUfWFmMuQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.158.128.0/21 Signature Algorithm: sha256WithRSAEncryption 6c:a9:71:6d:00:0e:14:36:ba:2f:9e:0e:f8:f6:08:27:6c:19: 15:5b:fd:49:48:5e:0e:7b:8a:e5:4b:7c:d3:60:86:d3:e1:0e: 33:5e:3f:cb:f4:20:42:b5:fc:5c:69:26:77:5d:60:15:f9:ef: 9b:b9:62:a5:11:de:bb:33:a2:56:e6:83:96:ae:30:b7:d5:41: ed:6c:0c:54:ba:67:67:cb:1c:ff:aa:86:d4:5b:67:0b:80:ee: 1a:9d:84:b6:91:9c:19:c8:19:9d:2b:11:9e:0d:ef:5d:d2:9a: 77:52:3f:2c:9c:37:b8:e1:8c:65:63:eb:6f:fd:cf:0a:e6:ff: 7f:5b:f8:99:5c:64:d7:ec:0e:d6:7f:f4:e1:4c:23:3f:1d:4f: 21:3b:b1:6f:61:be:52:d9:7f:10:93:1d:bc:37:c5:46:76:b5: 3e:ed:38:c1:ab:54:4c:f9:9c:db:6e:fe:c7:5f:6c:d6:bd:a8: e6:be:2d:fc:26:ac:fb:1a:56:78:0a:40:f8:d7:10:37:83:b8: 8c:0b:ce:57:fe:70:28:a1:39:ba:9d:f9:6c:a6:f2:1d:d0:a0: b6:ba:35:13:d8:cb:0f:92:d4:9c:2e:18:0c:da:7d:c2:6c:5c: 14:a8:57:94:03:be:96:6e:78:03:ff:d8:33:72:7d:fe:ed:2a: d5:60:64:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ft3XezK26oB99ZxGfVFDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2Y2Y0ZTU3Y2JjMTVjZTRlY2VmNDRmNTBlNWI4NTkyZmJl ZWVlYTAwHhcNMjYwMTAxMTIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmU4ODgxYzUwODUzY2YwMzIxZjhlMTczNzYxNTQ3ZDYxNjYzMmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqncTR819gEicHHU7yLX+sW136TEG 6EBLQyGhct8eMy03q8WxPWGD9W3Dt/IomCiE12YX1KXWNPo70fHwb4hTb/JDVX6h Ym6bW/W4a5C4tr72cSjNpic3EF1fb1Qk3gMj+xozKkpQ3StEsRkmDD5Pk7XQTpzh SVO6WqsSAiK4u+h0HJ9JjzUf9r1MYEAHzlSql4lJ3kyG2tzcL2/crDoFBUW+e2Aa JuiTMkD8Rig2urZBuOHCSr5Cvz9ZpkLLnIjyNXnwLeqWj0463K3E0m5ASGWPSIOY 7EDz1XdY1UH0SlKb1yEberMueFGCYkhXjGhQiJ2DasMCm8aGQHYczh56wQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAvoiBxQhTzwMh+OFzdhVH1hZjLkMB8GA1UdIwQY MBaAFLbPTlfLwVzk7O9E9Q5bhZL77u6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHM5T1Y4dkJYT1RzNzBUMURsdUZrdnZ1N3FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80ZTg5N2YtZTQzNS00NzE1LWEzYzUt ODViZTQyNWQzMTk5LzEvQy1pSUhGQ0ZQUEF5SDQ0WE4yRlVmV0ZtTXVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy80ZTg5N2YtZTQzNS00NzE1LWEzYzUtODViZTQyNWQzMTk5 LzEvdHM5T1Y4dkJYT1RzNzBUMURsdUZrdnZ1N3FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDVZ6AMA0G CSqGSIb3DQEBCwUAA4IBAQBsqXFtAA4UNrovng749ggnbBkVW/1JSF4Oe4rlS3zT YIbT4Q4zXj/L9CBCtfxcaSZ3XWAV+e+buWKlEd67M6JW5oOWrjC31UHtbAxUumdn yxz/qobUW2cLgO4anYS2kZwZyBmdKxGeDe9d0pp3Uj8snDe44YxlY+tv/c8K5v9/ W/iZXGTX7A7Wf/ThTCM/HU8hO7FvYb5S2X8Qkx28N8VGdrU+7TjBq1RM+Zzbbv7H X2zWvajmvi38Jqz7GlZ4CkD41xA3g7iMC85X/nAooTm6nflspvId0KC2ujUT2MsP ktScLhgM2n3CbFwUqFeUA76WbngD/9gzcn3+7SrVYGTz -----END CERTIFICATE-----Generated at Tue Jan 20 02:56:04 2026 by rpki-client