This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/1-YU8ddK2l1M3QkH1QEFkt3e9pME.roa File: 1-YU8ddK2l1M3QkH1QEFkt3e9pME.roa (raw, json) Hash identifier: Ylj++1TtQ3cHjreVmhmsXTN9laIvT5MrYknI0nCGqPw= Subject key identifier: F9:85:3C:75:D2:B6:97:53:37:42:41:F5:40:41:64:B7:77:BD:A4:C1 Certificate issuer: /CN=9e441e9e705ada3f9c1e827cd276dbd097487608 Certificate serial: 019C1DF9B6627B17E01049001EC2EFE239B1 Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/1-YU8ddK2l1M3QkH1QEFkt3e9pME.roa Signing time: Mon 02 Feb 2026 10:50:30 +0000 ROA not before: Mon 02 Feb 2026 10:50:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28889 IP address blocks: 85.255.147.0/24 maxlen: 24 85.255.152.0/24 maxlen: 24 185.135.16.0/24 maxlen: 24 185.135.17.0/24 maxlen: 24 185.135.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1d:f9:b6:62:7b:17:e0:10:49:00:1e:c2:ef:e2:39:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608 Validity Not Before: Feb 2 10:50:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9853c75d2b69753374241f5404164b777bda4c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2b:27:84:2b:1a:65:4f:4b:6f:bb:a5:4d:43: 69:6d:09:ec:ee:fc:24:c1:14:3d:4a:48:ee:4d:77: 70:f7:2a:4f:90:10:71:a3:5a:5d:34:6b:48:b6:f4: f8:b8:10:0a:90:ee:ca:85:76:8e:b4:2a:96:ea:a6: 0f:54:5e:a7:31:ea:a1:6c:5b:09:12:1a:f1:18:49: 34:ed:bd:24:cc:40:6a:8d:c9:18:c3:fb:d1:8f:9a: df:48:c5:09:d8:68:1c:0a:35:22:cd:e8:de:08:25: a1:eb:79:6e:12:6b:83:20:8e:4a:47:00:dd:94:55: 64:ed:f1:2b:88:22:57:84:dc:22:15:13:97:8a:cc: 51:03:4d:d1:86:de:ea:45:eb:ef:a6:11:9b:ef:a9: 0a:66:2e:60:72:20:a4:3e:29:f5:54:c4:7c:1f:73: 3a:8a:21:16:76:2f:ea:e8:4a:94:b2:be:ef:92:f5: 3a:e9:66:ea:fe:92:d8:f9:26:81:eb:91:f9:dd:24: 46:0d:a3:85:4d:4b:74:3e:70:69:6b:7a:66:e1:13: 6e:96:29:1f:14:da:37:6d:da:26:63:80:f3:05:70: 06:11:e6:56:c9:75:2b:56:b4:e8:8f:32:0f:02:bb: 1b:0a:fc:4e:8e:9f:8c:19:e9:e1:1e:51:57:d7:ac: 14:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:85:3C:75:D2:B6:97:53:37:42:41:F5:40:41:64:B7:77:BD:A4:C1 X509v3 Authority Key Identifier: keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/1-YU8ddK2l1M3QkH1QEFkt3e9pME.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.255.147.0/24 85.255.152.0/24 185.135.16.0/23 185.135.19.0/24 Signature Algorithm: sha256WithRSAEncryption 13:fb:cc:d8:96:a0:a8:38:02:7d:a6:c8:a3:65:55:94:19:91: bc:e8:c6:c5:9e:be:57:b2:7c:0a:de:ed:52:5c:0d:38:81:58: d8:03:19:c9:12:d3:a2:33:3c:3f:dd:ae:79:55:40:2c:6d:48: 1b:40:5b:cb:af:83:5b:81:7b:cd:f1:40:0b:1d:8d:0b:60:34: c3:ec:19:a5:37:41:af:24:13:90:e3:5b:55:5d:68:30:dd:5e: 9b:c1:ea:d1:8e:96:85:0e:52:00:00:13:d9:14:a2:e4:18:dd: a5:a2:f2:8d:9c:4c:77:0b:78:9f:19:72:4f:ff:1c:94:b9:a4: 54:4c:57:28:7b:a1:1d:8c:48:c5:ec:77:95:9f:4c:cb:52:64: 39:9d:6b:30:3f:fc:31:d3:a2:a7:d3:db:75:2d:f0:40:56:d2: 98:3a:f3:03:7e:96:ac:a0:7b:d9:40:19:97:4f:53:7d:d1:8a: e5:e6:6e:e0:38:d8:2b:44:bd:6e:76:a1:c1:ab:63:b9:9b:99: be:4f:67:75:78:b6:5d:f6:93:02:2f:61:7b:c0:06:04:e5:dc: d8:f4:bb:42:29:53:3e:17:47:a1:10:ef:e2:ba:79:14:16:e7: 04:bd:a5:0d:c3:6c:0b:d9:3a:1d:e9:a0:65:1c:be:a5:80:12: 60:da:63:fa -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZwd+bZiexfgEEkAHsLv4jmxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDQxZTllNzA1YWRhM2Y5YzFlODI3Y2QyNzZkYmQwOTc0 ODc2MDgwHhcNMjYwMjAyMTA1MDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTg1M2M3NWQyYjY5NzUzMzc0MjQxZjU0MDQxNjRiNzc3YmRhNGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSsnhCsaZU9Lb7ulTUNpbQns7vwk wRQ9SkjuTXdw9ypPkBBxo1pdNGtItvT4uBAKkO7KhXaOtCqW6qYPVF6nMeqhbFsJ EhrxGEk07b0kzEBqjckYw/vRj5rfSMUJ2GgcCjUizejeCCWh63luEmuDII5KRwDd lFVk7fEriCJXhNwiFROXisxRA03Rht7qRevvphGb76kKZi5gciCkPin1VMR8H3M6 iiEWdi/q6EqUsr7vkvU66Wbq/pLY+SaB65H53SRGDaOFTUt0PnBpa3pm4RNulikf FNo3bdomY4DzBXAGEeZWyXUrVrTojzIPArsbCvxOjp+MGenhHlFX16wUCQIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFPmFPHXStpdTN0JB9UBBZLd3vaTBMB8GA1UdIwQY MBaAFJ5EHp5wWto/nB6CfNJ229CXSHYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtRZW5uQmEyai1jSG9KODBuYmIwSmRJZGdnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9jZTE2ZjctYjg2OC00YjRjLTlkOWIt OTMyZDE2YjA4ZGYwLzEvMS1ZVThkZEsybDFNM1FrSDFRRUZrdDNlOXBNRS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMGQvY2UxNmY3LWI4NjgtNGI0Yy05ZDliLTkzMmQxNmIwOGRm MC8xL25rUWVubkJhMmotY0hvSjgwbmJiMEpkSWRnZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAFX/kwME AFX/mAMEAbmHEAMEALmHEzANBgkqhkiG9w0BAQsFAAOCAQEAE/vM2JagqDgCfabI o2VVlBmRvOjGxZ6+V7J8Ct7tUlwNOIFY2AMZyRLTojM8P92ueVVALG1IG0Bby6+D W4F7zfFACx2NC2A0w+wZpTdBryQTkONbVV1oMN1em8Hq0Y6WhQ5SAAAT2RSi5Bjd paLyjZxMdwt4nxlyT/8clLmkVExXKHuhHYxIxex3lZ9My1JkOZ1rMD/8MdOip9Pb dS3wQFbSmDrzA36WrKB72UAZl09TfdGK5eZu4DjYK0S9bnahwatjuZuZvk9ndXi2 XfaTAi9he8AGBOXc2PS7QilTPhdHoRDv4rp5FBbnBL2lDcNsC9k6HemgZRy+pYAS YNpj+g== -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:22 2026 by rpki-client