This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/oRQTVeCLrTTTzfJ67dReUWLDCuU.roa File: oRQTVeCLrTTTzfJ67dReUWLDCuU.roa (raw, json) Hash identifier: /eM7XPOjt4Cp3cJqu1C5iylPG4rBHTXbpv1SlfnYHws= Subject key identifier: A1:14:13:55:E0:8B:AD:34:D3:CD:F2:7A:ED:D4:5E:51:62:C3:0A:E5 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B3568766DFF93C63FFD4D5CD00F6D0A Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/oRQTVeCLrTTTzfJ67dReUWLDCuU.roa Signing time: Thu 01 Jan 2026 20:17:36 +0000 ROA not before: Thu 01 Jan 2026 20:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39081 IP address blocks: 85.120.48.0/24 maxlen: 24 85.120.55.0/24 maxlen: 24 85.120.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:68:76:6d:ff:93:c6:3f:fd:4d:5c:d0:0f:6d:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1141355e08bad34d3cdf27aedd45e5162c30ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:41:29:a8:16:fb:17:00:19:37:47:14:1f:92: 26:cd:5a:23:51:03:7c:f5:46:3a:38:14:ee:eb:b3: 93:91:b0:73:21:b4:b2:15:de:59:62:9c:a4:14:c2: 46:17:65:43:ce:c8:5d:9c:9c:70:23:25:48:c5:ab: 1f:a8:0b:f7:74:3c:fd:d2:d8:83:76:21:55:95:ff: 1d:21:23:60:f5:09:cb:9f:fc:be:86:66:af:d3:3b: 9e:fd:8a:e7:97:f4:3a:8d:0e:99:40:8d:7a:af:e1: ea:b6:d7:a7:c4:ce:25:9a:32:5d:70:00:81:68:d3: 64:8d:8f:88:52:bd:b6:56:3d:bc:6c:54:b7:9e:7a: 3d:1f:aa:17:05:ee:be:e7:8a:65:8f:f5:5b:f9:80: f0:ae:c4:fe:c8:a0:cc:e9:d5:06:52:22:90:95:0c: 6a:34:00:f7:d3:a9:c5:e2:21:dc:57:48:df:57:5f: 25:81:90:d7:89:7f:5f:43:0c:5b:59:b0:34:c0:4c: e0:bd:45:51:15:cf:6f:6c:47:01:22:8e:08:28:cd: 6a:f4:9b:54:0a:fa:e9:dc:06:22:51:f7:ee:8b:17: fa:a6:93:04:39:f7:6b:2c:be:8c:03:9e:13:d3:02: 77:60:0b:5a:79:5d:c8:c5:79:9f:d6:6b:82:f2:2a: b4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:14:13:55:E0:8B:AD:34:D3:CD:F2:7A:ED:D4:5E:51:62:C3:0A:E5 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/oRQTVeCLrTTTzfJ67dReUWLDCuU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.120.48.0/24 85.120.55.0-85.120.56.255 Signature Algorithm: sha256WithRSAEncryption 7d:e5:cc:1e:6a:3c:26:95:3b:aa:02:3d:e8:d0:02:c8:e8:4f: 99:cb:de:66:57:98:c6:dc:ed:2a:a8:00:fb:c8:6d:91:cf:76: f5:f0:e4:f9:5d:c8:10:16:04:10:d7:b4:ec:d9:be:8a:04:ea: 0c:b2:43:ef:60:78:6e:22:cc:85:7e:ac:ab:f1:ee:f8:53:b2: 5f:12:1a:1a:1e:83:53:29:a8:21:cf:b7:0c:e3:48:3e:e7:42: dd:ea:90:2e:75:f7:43:4a:c4:25:43:24:ac:07:f8:08:af:63: c9:d4:ea:d5:8c:5b:b6:d5:f5:ec:56:3f:8a:fc:85:da:d1:e1: 17:2d:83:4f:5f:08:d6:e7:22:8d:a6:8b:c9:6b:ba:1f:2e:b1: 59:00:69:36:9a:55:d8:1b:56:cf:01:d6:3b:9f:92:15:9b:4f: dc:45:65:ea:16:3e:e5:19:cd:79:65:5b:d6:e2:20:17:00:1b: 40:b1:6e:93:58:19:70:a0:99:df:28:9a:32:3d:47:0f:8b:7c: 74:a4:d7:47:bc:47:8e:88:6c:88:87:27:c8:68:90:35:99:64: b4:12:f3:a9:13:63:64:37:d6:8e:5a:ba:48:81:ee:a0:91:0b: 4f:3d:d6:f3:b2:ad:e0:0f:18:97:e4:1c:0f:bc:4f:25:7c:38: 0d:4d:95:60 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt7NWh2bf+Txj/9TVzQD20KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTE0MTM1NWUwOGJhZDM0ZDNjZGYyN2FlZGQ0NWU1MTYyYzMwYWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kEpqBb7FwAZN0cUH5ImzVojUQN8 9UY6OBTu67OTkbBzIbSyFd5ZYpykFMJGF2VDzshdnJxwIyVIxasfqAv3dDz90tiD diFVlf8dISNg9QnLn/y+hmav0zue/Yrnl/Q6jQ6ZQI16r+HqttenxM4lmjJdcACB aNNkjY+IUr22Vj28bFS3nno9H6oXBe6+54plj/Vb+YDwrsT+yKDM6dUGUiKQlQxq NAD306nF4iHcV0jfV18lgZDXiX9fQwxbWbA0wEzgvUVRFc9vbEcBIo4IKM1q9JtU Cvrp3AYiUffuixf6ppMEOfdrLL6MA54T0wJ3YAtaeV3IxXmf1muC8iq0TwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFKEUE1Xgi600083yeu3UXlFiwwrlMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvb1JRVFZlQ0xyVFRUemZKNjdkUmVVV0xEQ3VVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAVXgwMAwD BABVeDcDBABVeDgwDQYJKoZIhvcNAQELBQADggEBAH3lzB5qPCaVO6oCPejQAsjo T5nL3mZXmMbc7SqoAPvIbZHPdvXw5PldyBAWBBDXtOzZvooE6gyyQ+9geG4izIV+ rKvx7vhTsl8SGhoeg1MpqCHPtwzjSD7nQt3qkC5190NKxCVDJKwH+AivY8nU6tWM W7bV9exWP4r8hdrR4Rctg09fCNbnIo2mi8lruh8usVkAaTaaVdgbVs8B1jufkhWb T9xFZeoWPuUZzXllW9biIBcAG0CxbpNYGXCgmd8omjI9Rw+LfHSk10e8R46IbIiH J8hokDWZZLQS86kTY2Q31o5aukiB7qCRC0891vOyreAPGJfkHA+8TyV8OA1NlWA= -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:04 2026 by rpki-client