This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/T0yQp3K2xpkZF_1vXLvOwf0fUcE.roa File: T0yQp3K2xpkZF_1vXLvOwf0fUcE.roa (raw, json) Hash identifier: l/ScWa5hbOuFc03i1PIPZE5HXjF1a+GrsOKXw/HjN5A= Subject key identifier: 4F:4C:90:A7:72:B6:C6:99:19:17:FD:6F:5C:BB:CE:C1:FD:1F:51:C1 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B355F2A945ED0A3D8C7795E85207264 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/T0yQp3K2xpkZF_1vXLvOwf0fUcE.roa Signing time: Thu 01 Jan 2026 20:17:33 +0000 ROA not before: Thu 01 Jan 2026 20:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13210 IP address blocks: 85.120.42.0/24 maxlen: 24 85.120.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:5f:2a:94:5e:d0:a3:d8:c7:79:5e:85:20:72:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f4c90a772b6c6991917fd6f5cbbcec1fd1f51c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a5:c2:cf:60:39:51:55:c0:0e:89:ba:98:a2: 7d:f5:f1:96:0e:82:5b:17:d9:48:77:fc:01:bd:c4: 6b:93:ea:45:58:2c:11:1b:a3:9f:c1:eb:a5:6c:44: fe:51:7a:49:ad:ba:21:d0:67:eb:73:e8:88:04:ef: ad:97:b4:eb:35:e6:e3:d1:db:ac:4b:fb:82:98:84: 73:36:f7:46:3d:8c:e4:b2:51:77:19:41:99:19:46: 0e:b5:9d:54:eb:a3:41:16:c5:4f:08:7a:cc:40:8a: 78:39:2a:49:17:a6:1b:8d:a6:85:82:a2:5d:c1:13: ac:6f:ef:b3:c4:94:b8:6f:df:c5:47:15:7f:23:b9: 3a:97:bd:1d:87:41:5a:7b:ee:10:51:a4:e0:6d:2c: 86:0a:aa:48:7d:4f:f0:58:c3:2c:f3:24:08:e6:f3: e6:52:a1:7d:e2:29:fb:04:3b:66:5b:fa:f6:e9:ce: 90:94:43:f5:6b:3c:6b:3c:92:aa:29:e2:98:57:11: b1:49:37:22:e2:f8:47:4d:bf:5d:93:56:e7:b2:4f: e1:dd:6c:9f:ca:33:63:8f:cc:2d:8c:b5:f7:ea:82: 5b:38:0b:62:df:bd:4c:68:87:52:14:68:14:06:32: 7f:f4:f8:a3:6d:fd:23:05:aa:21:ab:2f:66:24:fc: 9f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:4C:90:A7:72:B6:C6:99:19:17:FD:6F:5C:BB:CE:C1:FD:1F:51:C1 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/T0yQp3K2xpkZF_1vXLvOwf0fUcE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.120.42.0/24 85.120.180.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:42:8e:30:5c:b0:27:25:72:d0:dd:0b:a7:69:1c:c6:a4:8a: 71:f6:0b:3d:88:38:62:38:63:d7:7a:e4:9c:7e:55:0e:33:9b: 80:d0:67:c1:53:60:f5:24:0c:33:39:91:db:ad:66:24:b9:f0: 9f:22:b3:e9:a3:c6:99:33:ee:87:23:73:a1:f4:a9:e6:6b:ff: d1:43:1c:f0:5f:d6:20:50:6a:08:dc:a3:a3:cc:56:66:db:cc: 86:b9:73:f6:5e:5d:c6:b4:c4:50:1c:47:65:51:99:ce:df:f8: b8:06:fc:40:09:10:71:0a:06:69:0e:3f:50:ed:a1:bc:9d:87: d1:f2:d6:33:e7:ed:d3:f5:0d:bd:94:0f:8f:76:59:94:e7:fa: 9f:7f:dc:65:21:af:e0:d9:76:b8:33:06:c3:53:1b:4b:14:a1: 04:69:bd:93:c8:4b:3c:09:dd:79:54:5f:8b:0c:11:60:d3:44: 8a:97:34:5b:12:51:6c:14:66:82:b6:14:11:75:c0:f4:92:19: ec:c2:01:7f:1c:a4:34:45:d2:eb:e9:63:e1:41:60:ce:35:db: 6d:8b:67:3a:1e:c9:b1:49:b8:a0:7e:fa:a7:1f:53:bd:fa:fc: 4a:3b:7d:a4:fe:f9:54:b2:bc:48:c2:21:79:92:a0:ee:08:b5: c6:62:bd:c9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NV8qlF7Qo9jHeV6FIHJkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjRjOTBhNzcyYjZjNjk5MTkxN2ZkNmY1Y2JiY2VjMWZkMWY1MWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKXCz2A5UVXADom6mKJ99fGWDoJb F9lId/wBvcRrk+pFWCwRG6OfweulbET+UXpJrboh0Gfrc+iIBO+tl7TrNebj0dus S/uCmIRzNvdGPYzkslF3GUGZGUYOtZ1U66NBFsVPCHrMQIp4OSpJF6YbjaaFgqJd wROsb++zxJS4b9/FRxV/I7k6l70dh0Fae+4QUaTgbSyGCqpIfU/wWMMs8yQI5vPm UqF94in7BDtmW/r26c6QlEP1azxrPJKqKeKYVxGxSTci4vhHTb9dk1bnsk/h3Wyf yjNjj8wtjLX36oJbOAti371MaIdSFGgUBjJ/9Pijbf0jBaohqy9mJPyf2wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE9MkKdytsaZGRf9b1y7zsH9H1HBMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvVDB5UXAzSzJ4cGtaRl8xdlhMdk93ZjBmVWNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVXgqAwQA VXi0MA0GCSqGSIb3DQEBCwUAA4IBAQBMQo4wXLAnJXLQ3QunaRzGpIpx9gs9iDhi OGPXeuScflUOM5uA0GfBU2D1JAwzOZHbrWYkufCfIrPpo8aZM+6HI3Oh9Knma//R QxzwX9YgUGoI3KOjzFZm28yGuXP2Xl3GtMRQHEdlUZnO3/i4BvxACRBxCgZpDj9Q 7aG8nYfR8tYz5+3T9Q29lA+PdlmU5/qff9xlIa/g2Xa4MwbDUxtLFKEEab2TyEs8 Cd15VF+LDBFg00SKlzRbElFsFGaCthQRdcD0khnswgF/HKQ0RdLr6WPhQWDONdtt i2c6HsmxSbigfvqnH1O9+vxKO32k/vlUsrxIwiF5kqDuCLXGYr3J -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:50 2026 by rpki-client