This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/14L-_OxxG38yjeiZ1TSl-ksoaXY.roa File: 14L-_OxxG38yjeiZ1TSl-ksoaXY.roa (raw, json) Hash identifier: CBErwuP4hSZo2yHJXgzxIJm5yjZrB8xZLHBf/EjAUe8= Subject key identifier: D7:82:FE:FC:EC:71:1B:7F:32:8D:E8:99:D5:34:A5:FA:4B:28:69:76 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B35751608A103D6BB229FA720D19F47 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/14L-_OxxG38yjeiZ1TSl-ksoaXY.roa Signing time: Thu 01 Jan 2026 20:17:39 +0000 ROA not before: Thu 01 Jan 2026 20:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47458 IP address blocks: 85.120.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:75:16:08:a1:03:d6:bb:22:9f:a7:20:d1:9f:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d782fefcec711b7f328de899d534a5fa4b286976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:93:90:17:c2:b3:e0:93:96:56:b0:43:ad:20: a2:11:a9:16:27:2f:e6:bd:cf:9f:ef:51:a2:22:b2: ff:80:3f:e5:1f:54:fd:0e:ff:d8:3c:a0:ae:87:a2: 38:72:e3:61:c0:f4:e7:3b:ad:37:6b:fc:d4:e6:bb: b1:e5:2c:28:7d:3e:6f:33:2b:3e:55:42:00:41:d6: ef:a2:7f:3d:16:e7:35:7f:51:20:c2:c0:ca:85:56: 71:db:cf:76:56:cd:6d:85:e0:a3:1e:ac:a3:ef:5e: 82:23:a5:03:08:68:d2:41:7a:bf:01:1d:1e:2d:f6: 91:3a:f5:22:ad:14:1c:e5:48:e2:72:57:a1:a4:c1: 0a:2b:c1:5c:66:2f:39:72:41:cc:62:7f:f1:e6:d7: 54:2f:01:d0:a7:f8:e4:81:ba:0f:cf:3b:65:e9:a6: 88:55:13:d4:af:c4:0e:3e:cc:57:18:0f:bd:ec:8f: 7d:1c:8f:02:29:14:1c:27:2d:65:a8:ec:a4:8e:18: 26:f8:89:d7:c5:b8:38:ea:32:43:43:f5:8e:0e:76: 33:ab:3d:c4:84:1f:cf:a9:3b:5e:54:74:79:e7:bb: 26:89:8e:38:10:b2:38:4f:24:91:a2:69:1a:35:06: 2a:47:90:d7:09:1b:73:b2:0f:db:7c:12:d7:7c:77: 46:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:82:FE:FC:EC:71:1B:7F:32:8D:E8:99:D5:34:A5:FA:4B:28:69:76 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/14L-_OxxG38yjeiZ1TSl-ksoaXY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.120.21.0/24 Signature Algorithm: sha256WithRSAEncryption 90:50:c7:9b:88:4f:d9:5e:3d:f4:77:10:73:9b:04:35:8f:29: d6:19:96:4e:46:70:56:7b:05:a9:c7:4f:be:c2:ad:17:47:77: 3b:e5:a6:f9:d7:ac:58:82:8b:ef:c4:62:eb:34:77:1e:23:e8: 82:34:a8:64:ee:b2:cc:8f:23:13:b0:1c:50:2c:b5:4f:e4:c2: 08:58:a7:14:43:fc:df:67:00:49:33:9e:0a:13:2f:25:dd:49: bb:7f:3e:94:0c:62:73:a8:81:a6:96:0a:2e:69:bf:91:7a:1f: 34:19:73:44:8f:24:28:c9:f2:53:e7:04:4e:20:46:b6:f0:3e: 91:73:a6:63:18:81:07:9d:f7:97:7c:d2:61:b6:a9:9f:d5:aa: b1:23:89:ae:0f:6e:45:a1:c9:cb:d6:b5:64:74:c3:95:49:fc: e6:9b:ba:10:5f:ab:95:62:ac:e2:8a:a6:0f:d8:1a:db:c4:76: 1f:a3:ac:18:2f:2c:ca:84:70:b2:7e:e4:6d:5d:5e:4c:44:9c: 15:7a:0b:b4:2c:ba:8d:86:af:92:3a:7e:c7:c4:ad:f0:f8:35: 5a:3a:2a:e5:66:ac:4c:4b:08:11:22:fe:6b:ae:33:19:3e:7c: b7:bc:c5:f4:29:79:8e:47:0e:5a:b9:fa:2e:4e:db:4f:4e:41: 98:a6:5e:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NXUWCKED1rsin6cg0Z9HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzgyZmVmY2VjNzExYjdmMzI4ZGU4OTlkNTM0YTVmYTRiMjg2OTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5OQF8Kz4JOWVrBDrSCiEakWJy/m vc+f71GiIrL/gD/lH1T9Dv/YPKCuh6I4cuNhwPTnO603a/zU5rux5SwofT5vMys+ VUIAQdbvon89Fuc1f1EgwsDKhVZx2892Vs1theCjHqyj716CI6UDCGjSQXq/AR0e LfaROvUirRQc5UjiclehpMEKK8FcZi85ckHMYn/x5tdULwHQp/jkgboPzztl6aaI VRPUr8QOPsxXGA+97I99HI8CKRQcJy1lqOykjhgm+InXxbg46jJDQ/WODnYzqz3E hB/PqTteVHR557smiY44ELI4TySRomkaNQYqR5DXCRtzsg/bfBLXfHdGzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNeC/vzscRt/Mo3omdU0pfpLKGl2MB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvMTRMLV9PeHhHMzh5amVpWjFUU2wta3NvYVhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXgVMA0G CSqGSIb3DQEBCwUAA4IBAQCQUMebiE/ZXj30dxBzmwQ1jynWGZZORnBWewWpx0++ wq0XR3c75ab516xYgovvxGLrNHceI+iCNKhk7rLMjyMTsBxQLLVP5MIIWKcUQ/zf ZwBJM54KEy8l3Um7fz6UDGJzqIGmlgouab+Reh80GXNEjyQoyfJT5wROIEa28D6R c6ZjGIEHnfeXfNJhtqmf1aqxI4muD25FocnL1rVkdMOVSfzmm7oQX6uVYqziiqYP 2BrbxHYfo6wYLyzKhHCyfuRtXV5MRJwVegu0LLqNhq+SOn7HxK3w+DVaOirlZqxM SwgRIv5rrjMZPny3vMX0KXmORw5aufouTttPTkGYpl4e -----END CERTIFICATE-----Generated at Tue Jan 20 02:50:01 2026 by rpki-client