This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/799p01cEpzh1fQudfMPgpFjsRRs.roa File: 799p01cEpzh1fQudfMPgpFjsRRs.roa (raw, json) Hash identifier: 3it2zEjViG3F2eFLSck6rxqal5N5/dkSQ/Mjqrk2jOw= Subject key identifier: EF:DF:69:D3:57:04:A7:38:75:7D:0B:9D:7C:C3:E0:A4:58:EC:45:1B Certificate issuer: /CN=9e441e9e705ada3f9c1e827cd276dbd097487608 Certificate serial: 019B7D5B757CC9CE150D719DF27B7B504257 Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/799p01cEpzh1fQudfMPgpFjsRRs.roa Signing time: Fri 02 Jan 2026 06:18:24 +0000 ROA not before: Fri 02 Jan 2026 06:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208350 IP address blocks: 85.255.146.0/24 maxlen: 24 85.255.147.0/24 maxlen: 24 85.255.152.0/24 maxlen: 24 185.135.18.0/24 maxlen: 24 185.135.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:75:7c:c9:ce:15:0d:71:9d:f2:7b:7b:50:42:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608 Validity Not Before: Jan 2 06:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=efdf69d35704a738757d0b9d7cc3e0a458ec451b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6a:c7:00:e7:60:2b:42:14:39:87:78:81:c7: 56:b2:ab:84:5f:ac:11:56:1a:e9:8b:90:bb:85:41: 4d:c2:ea:86:7e:75:be:d6:df:a2:16:74:78:be:e5: af:e2:e7:e9:4d:cd:2a:46:aa:93:67:52:55:71:95: d4:68:14:91:49:9a:35:15:08:f2:2d:2b:ad:f4:5b: bb:87:a6:ba:05:f4:04:4b:96:cd:75:92:56:d4:d6: 9b:ce:77:69:c2:86:b3:94:5f:f6:be:6a:a2:63:cd: c0:1f:5d:a0:dc:d4:46:c1:b5:d7:95:84:ad:5a:72: da:15:d7:24:f9:fa:d3:57:24:d2:aa:69:f4:fb:82: a4:1b:cf:7a:09:48:9f:5e:28:55:d7:1a:41:db:96: 2d:1a:63:05:f6:b5:7c:2a:c8:38:2a:7f:44:16:d8: 5f:34:20:57:87:90:08:67:96:10:74:6e:85:f1:e5: cb:10:27:f8:9d:8c:b7:62:b4:74:44:74:1f:e7:4f: b1:35:3f:76:6f:61:1d:66:68:af:b8:69:14:ce:50: 78:1f:61:8b:0b:87:dc:86:3a:86:6b:01:1b:6d:ee: e7:d8:36:30:ea:b7:24:f7:e8:8f:71:2a:16:e6:da: 98:fe:fa:d1:96:06:df:6e:44:3d:29:b4:d6:02:40: 5e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DF:69:D3:57:04:A7:38:75:7D:0B:9D:7C:C3:E0:A4:58:EC:45:1B X509v3 Authority Key Identifier: keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/799p01cEpzh1fQudfMPgpFjsRRs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.255.146.0/23 85.255.152.0/24 185.135.18.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:ce:33:70:9a:1c:a6:53:e9:53:02:35:94:ef:b1:d2:b6:c5: fe:69:fd:f7:bd:f5:58:44:bd:1d:12:42:1e:06:35:19:46:89: 2b:7e:a3:c3:ab:f1:42:ad:5c:2a:fc:0e:3c:9e:83:a1:d1:a9: ff:ba:83:a1:6b:15:b7:64:29:ff:00:1d:7f:30:89:58:4b:74: 93:86:70:0d:f3:07:0b:09:6a:b6:bd:6d:33:6f:32:98:ac:b7: 37:62:aa:d0:9a:8b:79:b4:a7:33:3f:5a:17:6a:b0:8c:0c:7d: bc:6e:8c:cc:8a:05:4b:91:d3:31:7d:36:a0:86:04:f5:f3:36: 67:23:da:ad:1f:9a:5d:f9:3e:8d:46:ac:08:2b:bf:67:7c:94: ca:14:4f:2e:a3:fc:46:14:d9:a4:b5:21:e4:2a:04:04:69:8b: 03:d3:c5:8c:c1:9c:19:9c:e9:74:36:a8:8f:87:2b:0c:3a:3f: 07:d8:0f:1d:ac:d2:6e:c9:16:cc:0f:7d:09:55:fb:35:d1:ac: 1a:b4:bd:87:33:20:e8:73:41:af:66:79:c0:81:00:75:06:53: de:ac:b8:5e:26:36:ae:18:bd:ef:d0:a0:72:91:7d:74:91:ab: f4:ea:36:7d:1c:b5:49:87:f2:03:17:ae:27:40:f4:0e:01:71: d8:59:e5:b5 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9W3V8yc4VDXGd8nt7UEJXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDQxZTllNzA1YWRhM2Y5YzFlODI3Y2QyNzZkYmQwOTc0 ODc2MDgwHhcNMjYwMTAyMDYxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmRmNjlkMzU3MDRhNzM4NzU3ZDBiOWQ3Y2MzZTBhNDU4ZWM0NTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmrHAOdgK0IUOYd4gcdWsquEX6wR Vhrpi5C7hUFNwuqGfnW+1t+iFnR4vuWv4ufpTc0qRqqTZ1JVcZXUaBSRSZo1FQjy LSut9Fu7h6a6BfQES5bNdZJW1NabzndpwoazlF/2vmqiY83AH12g3NRGwbXXlYSt WnLaFdck+frTVyTSqmn0+4KkG896CUifXihV1xpB25YtGmMF9rV8Ksg4Kn9EFthf NCBXh5AIZ5YQdG6F8eXLECf4nYy3YrR0RHQf50+xNT92b2EdZmivuGkUzlB4H2GL C4fchjqGawEbbe7n2DYw6rck9+iPcSoW5tqY/vrRlgbfbkQ9KbTWAkBeNwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFO/fadNXBKc4dX0LnXzD4KRY7EUbMB8GA1UdIwQY MBaAFJ5EHp5wWto/nB6CfNJ229CXSHYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtRZW5uQmEyai1jSG9KODBuYmIwSmRJZGdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9jZTE2ZjctYjg2OC00YjRjLTlkOWIt OTMyZDE2YjA4ZGYwLzEvNzk5cDAxY0VwemgxZlF1ZGZNUGdwRmpzUlJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9jZTE2ZjctYjg2OC00YjRjLTlkOWItOTMyZDE2YjA4ZGYw LzEvbmtRZW5uQmEyai1jSG9KODBuYmIwSmRJZGdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBVf+SAwQA Vf+YAwQBuYcSMA0GCSqGSIb3DQEBCwUAA4IBAQAMzjNwmhymU+lTAjWU77HStsX+ af33vfVYRL0dEkIeBjUZRokrfqPDq/FCrVwq/A48noOh0an/uoOhaxW3ZCn/AB1/ MIlYS3SThnAN8wcLCWq2vW0zbzKYrLc3YqrQmot5tKczP1oXarCMDH28bozMigVL kdMxfTaghgT18zZnI9qtH5pd+T6NRqwIK79nfJTKFE8uo/xGFNmktSHkKgQEaYsD 08WMwZwZnOl0NqiPhysMOj8H2A8drNJuyRbMD30JVfs10awatL2HMyDoc0GvZnnA gQB1BlPerLheJjauGL3v0KBykX10kav06jZ9HLVJh/IDF64nQPQOAXHYWeW1 -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:45 2026 by rpki-client