This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/D7nbbz5w9TvljgtZwfcuLrPh2tc.roa File: D7nbbz5w9TvljgtZwfcuLrPh2tc.roa (raw, json) Hash identifier: el99KJTZt5wgqCZx3a9vNq/RaN8yZUR8gNdFSk9oBg4= Subject key identifier: 0F:B9:DB:6F:3E:70:F5:3B:E5:8E:0B:59:C1:F7:2E:2E:B3:E1:DA:D7 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82B0675CB476927503B4774D231276 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/D7nbbz5w9TvljgtZwfcuLrPh2tc.roa Signing time: Fri 02 Jan 2026 16:20:29 +0000 ROA not before: Fri 02 Jan 2026 16:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1004 IP address blocks: 85.202.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:b0:67:5c:b4:76:92:75:03:b4:77:4d:23:12:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0fb9db6f3e70f53be58e0b59c1f72e2eb3e1dad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a2:25:57:96:7a:0b:ab:c7:e8:96:87:13:94: d4:f2:92:3a:8b:ab:34:5d:fa:f7:7a:34:34:5c:77: 36:ff:0d:d3:bc:54:aa:77:df:b8:59:63:66:c9:4a: f2:de:61:85:08:be:05:b1:39:8b:04:38:72:45:28: af:97:c3:1c:a6:a7:34:e1:04:34:04:40:af:54:5a: a4:4c:b7:5d:4a:3e:18:e2:48:93:1e:2e:d1:f4:f1: 8c:a3:7f:72:76:fc:d9:ca:cc:7f:73:f1:ce:6e:ba: ed:46:1a:bf:30:0e:5c:e4:9d:5a:de:51:0d:cc:88: db:a2:80:26:70:f8:6c:8d:65:03:ad:fc:78:c9:1b: 24:8b:cd:83:e7:2a:aa:f5:75:92:5d:2f:db:a4:34: c3:e1:fe:c5:c7:d9:3b:25:9a:3d:9c:6f:a7:db:26: 92:19:86:04:03:a0:26:bf:f5:d1:65:2c:d0:db:3b: 81:49:ae:9d:79:12:82:33:50:f0:c7:c5:67:89:22: 02:bb:19:8e:1e:7c:82:c5:b8:0a:bb:78:7c:ec:68: 4b:7d:25:c6:86:2a:3c:d1:dc:fe:d1:bf:1a:6b:83: 1e:22:fe:61:3f:e2:5b:fe:47:6a:6c:08:d8:e2:f0: 3b:5e:62:5f:9b:f9:5b:6a:be:4d:1e:05:08:60:ba: 19:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B9:DB:6F:3E:70:F5:3B:E5:8E:0B:59:C1:F7:2E:2E:B3:E1:DA:D7 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/D7nbbz5w9TvljgtZwfcuLrPh2tc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.202.160.0/24 Signature Algorithm: sha256WithRSAEncryption a1:e4:51:18:cb:84:e0:a1:b0:e1:a6:51:5c:8e:d1:45:d0:19: 4c:7b:1f:1a:70:12:90:e5:31:be:ee:19:bd:d4:9a:b2:0a:a9: bd:18:2d:5b:d6:6b:58:ea:ae:9c:04:cb:be:02:69:29:f4:aa: 32:d3:75:ca:fc:c0:a7:c7:7c:5b:a8:5c:e3:61:c3:ca:00:47: d4:58:2b:d0:39:ce:02:43:5f:1e:3e:48:8e:07:44:fc:ee:85: 8b:16:81:aa:cd:01:db:34:1f:41:03:f0:c9:d8:f5:4b:bc:68: 94:4c:00:e8:d0:d2:e2:2b:11:30:2b:64:9c:01:a6:28:6c:b9: fc:07:40:db:5c:ec:13:02:b0:97:08:2c:d6:e2:be:b4:4d:94: b2:d1:34:31:a4:c6:d0:f9:b0:ba:56:48:59:79:5e:80:37:e3: 16:ed:50:75:2e:28:f8:30:83:40:d9:78:0a:23:f7:9e:3e:93: 56:27:61:0f:fa:6f:ec:b9:e9:2a:3e:7f:c5:78:9c:a6:9a:30: 8e:62:95:23:44:e2:e5:d6:0e:7c:16:d9:73:35:e5:57:e7:36: 8b:c4:ee:85:6b:72:ac:81:bc:1a:eb:61:36:ca:a7:73:34:2a: cf:85:e7:17:c5:70:5e:af:59:e5:c4:bf:64:b3:0e:bb:a8:91: ee:e6:da:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/grBnXLR2knUDtHdNIxJ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmI5ZGI2ZjNlNzBmNTNiZTU4ZTBiNTljMWY3MmUyZWIzZTFkYWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaIlV5Z6C6vH6JaHE5TU8pI6i6s0 Xfr3ejQ0XHc2/w3TvFSqd9+4WWNmyUry3mGFCL4FsTmLBDhyRSivl8Mcpqc04QQ0 BECvVFqkTLddSj4Y4kiTHi7R9PGMo39ydvzZysx/c/HObrrtRhq/MA5c5J1a3lEN zIjbooAmcPhsjWUDrfx4yRski82D5yqq9XWSXS/bpDTD4f7Fx9k7JZo9nG+n2yaS GYYEA6Amv/XRZSzQ2zuBSa6deRKCM1Dwx8VniSICuxmOHnyCxbgKu3h87GhLfSXG hio80dz+0b8aa4MeIv5hP+Jb/kdqbAjY4vA7XmJfm/lbar5NHgUIYLoZawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA+5228+cPU75Y4LWcH3Li6z4drXMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvRDduYmJ6NXc5VHZsamd0WndmY3VMclBoMnRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVcqgMA0G CSqGSIb3DQEBCwUAA4IBAQCh5FEYy4TgobDhplFcjtFF0BlMex8acBKQ5TG+7hm9 1JqyCqm9GC1b1mtY6q6cBMu+Amkp9Koy03XK/MCnx3xbqFzjYcPKAEfUWCvQOc4C Q18ePkiOB0T87oWLFoGqzQHbNB9BA/DJ2PVLvGiUTADo0NLiKxEwK2ScAaYobLn8 B0DbXOwTArCXCCzW4r60TZSy0TQxpMbQ+bC6VkhZeV6AN+MW7VB1Lij4MINA2XgK I/eePpNWJ2EP+m/suekqPn/FeJymmjCOYpUjROLl1g58FtlzNeVX5zaLxO6Fa3Ks gbwa62E2yqdzNCrPhecXxXBer1nlxL9ksw67qJHu5toi -----END CERTIFICATE-----Generated at Tue Jan 20 15:19:39 2026 by rpki-client