This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/RrB7te-yfSFDexPw6XiRefksdoA.roa File: RrB7te-yfSFDexPw6XiRefksdoA.roa (raw, json) Hash identifier: /17vtJ1tPPWq1hnvQZi76RIPhO9latq/1qlHdoUyF/M= Subject key identifier: 46:B0:7B:B5:EF:B2:7D:21:43:7B:13:F0:E9:78:91:79:F9:2C:76:80 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B35766678A1898B6CB065105170C928 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/RrB7te-yfSFDexPw6XiRefksdoA.roa Signing time: Thu 01 Jan 2026 20:17:39 +0000 ROA not before: Thu 01 Jan 2026 20:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48453 IP address blocks: 85.122.52.0/23 maxlen: 23 85.122.54.0/24 maxlen: 24 85.122.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:76:66:78:a1:89:8b:6c:b0:65:10:51:70:c9:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46b07bb5efb27d21437b13f0e9789179f92c7680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3b:f7:57:7b:21:5e:39:c5:b6:32:08:8f:79: f3:28:f0:47:e0:fc:43:5b:db:70:fb:aa:63:5f:04: 87:dd:45:f7:12:30:97:9d:6c:80:8e:4d:77:68:80: 44:ee:77:7e:4d:61:31:c9:ea:8b:73:65:1a:aa:10: 85:d4:ac:04:14:74:82:71:7b:75:a0:b7:4a:12:3a: ed:80:d1:6a:87:96:ff:42:b0:69:f0:77:9a:9c:14: 55:5f:02:db:de:50:8f:9d:9e:f6:d0:be:38:ff:c8: e8:00:04:40:81:ac:4a:a1:72:fb:81:50:47:b4:15: 2f:3b:75:8d:db:d7:40:7e:dc:44:18:97:cf:a6:62: 92:21:cc:ed:dd:01:f5:b0:e2:e1:79:33:af:58:20: dd:1a:6b:70:78:8a:cc:8a:ea:65:55:0c:a6:1f:86: dd:41:c8:c9:94:3c:a9:78:a9:3e:e9:e3:64:c6:45: 00:16:2c:c5:e4:c3:b3:fc:bf:f5:79:98:1e:5c:c5: ba:e9:1c:af:5e:1b:95:ef:bd:d1:96:34:70:47:db: df:1d:a1:de:b0:69:6b:9c:f6:4b:c4:43:50:8e:ca: 9f:02:c6:fc:fc:03:c8:b5:f7:84:00:b9:76:59:ac: 80:81:ba:f9:ed:75:46:52:f7:b6:d0:21:2a:fd:45: b8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B0:7B:B5:EF:B2:7D:21:43:7B:13:F0:E9:78:91:79:F9:2C:76:80 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/RrB7te-yfSFDexPw6XiRefksdoA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.122.52.0/22 Signature Algorithm: sha256WithRSAEncryption 93:df:54:04:f2:c9:56:b3:82:8e:df:c3:a9:07:5a:fd:c0:89: 1d:ce:0a:f4:8d:3d:5e:e3:4f:8b:bb:4e:43:be:80:65:25:39: b5:e6:f1:1a:cb:f9:c5:5b:6c:23:fb:07:6b:4a:ff:66:4b:93: 74:4c:07:f1:47:51:60:8f:ab:f5:4b:8e:9a:38:54:6a:08:aa: 88:a6:a1:30:e8:6c:45:6e:81:b5:ac:14:75:2a:b9:50:2a:b5: db:d1:81:0e:1e:c3:e6:2f:8d:ba:fb:5f:03:78:7f:ed:f4:1f: f6:e2:81:dd:b9:87:78:cc:ac:b4:01:b2:b0:38:fa:10:aa:29: 0d:b1:e1:54:4c:61:7a:94:6d:66:08:c9:c6:d4:18:2c:97:6b: 0d:45:f3:d2:35:31:e4:b4:1d:16:45:93:e5:d5:4f:0f:8f:94: 80:e5:9b:29:d7:00:9d:ed:20:11:6c:7f:b9:26:db:8b:2e:e8: 0c:c5:3d:9f:75:3a:93:42:bc:39:95:9b:60:d2:8b:fd:9c:dd: 2a:49:91:1c:ad:51:50:d6:81:d2:54:3c:b0:e8:7d:39:79:4b: 85:04:62:e7:c3:e5:a3:f4:c6:58:92:ba:e0:7e:f1:54:14:65: 37:7a:af:8f:f5:8d:c6:9b:39:42:61:76:70:47:90:6b:96:2f: 50:4e:a5:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NXZmeKGJi2ywZRBRcMkoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmIwN2JiNWVmYjI3ZDIxNDM3YjEzZjBlOTc4OTE3OWY5MmM3NjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojv3V3shXjnFtjIIj3nzKPBH4PxD W9tw+6pjXwSH3UX3EjCXnWyAjk13aIBE7nd+TWExyeqLc2UaqhCF1KwEFHSCcXt1 oLdKEjrtgNFqh5b/QrBp8HeanBRVXwLb3lCPnZ720L44/8joAARAgaxKoXL7gVBH tBUvO3WN29dAftxEGJfPpmKSIczt3QH1sOLheTOvWCDdGmtweIrMiuplVQymH4bd QcjJlDypeKk+6eNkxkUAFizF5MOz/L/1eZgeXMW66RyvXhuV773RljRwR9vfHaHe sGlrnPZLxENQjsqfAsb8/APItfeEALl2WayAgbr57XVGUve20CEq/UW48QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEawe7Xvsn0hQ3sT8Ol4kXn5LHaAMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvUnJCN3RlLXlmU0ZEZXhQdzZYaVJlZmtzZG9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVXo0MA0G CSqGSIb3DQEBCwUAA4IBAQCT31QE8slWs4KO38OpB1r9wIkdzgr0jT1e40+Lu05D voBlJTm15vEay/nFW2wj+wdrSv9mS5N0TAfxR1Fgj6v1S46aOFRqCKqIpqEw6GxF boG1rBR1KrlQKrXb0YEOHsPmL426+18DeH/t9B/24oHduYd4zKy0AbKwOPoQqikN seFUTGF6lG1mCMnG1Bgsl2sNRfPSNTHktB0WRZPl1U8Pj5SA5Zsp1wCd7SARbH+5 JtuLLugMxT2fdTqTQrw5lZtg0ov9nN0qSZEcrVFQ1oHSVDyw6H05eUuFBGLnw+Wj 9MZYkrrgfvFUFGU3eq+P9Y3GmzlCYXZwR5Brli9QTqVS -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:28 2026 by rpki-client