This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/D_Lw5Nuhisyd1zrxWWRbLBdS1Fg.roa File: D_Lw5Nuhisyd1zrxWWRbLBdS1Fg.roa (raw, json) Hash identifier: I42hG8V+2aBQY+0/lvCrV7tCzh7/HmkHr1yIQu/HYmY= Subject key identifier: 0F:F2:F0:E4:DB:A1:8A:CC:9D:D7:3A:F1:59:64:5B:2C:17:52:D4:58 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82D7DE991F5BD78A9645D65CF3855B Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/D_Lw5Nuhisyd1zrxWWRbLBdS1Fg.roa Signing time: Fri 02 Jan 2026 16:20:39 +0000 ROA not before: Fri 02 Jan 2026 16:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211266 IP address blocks: 85.202.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:d7:de:99:1f:5b:d7:8a:96:45:d6:5c:f3:85:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ff2f0e4dba18acc9dd73af159645b2c1752d458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:93:64:f2:fa:87:6f:b9:88:62:16:5e:a4:ff: ae:9a:ca:13:b2:1c:46:cc:6c:26:f7:8b:7e:d2:c5: 87:03:c2:ad:0d:a1:72:9e:29:7c:19:b4:47:ba:c3: 3a:4f:76:53:24:fc:c0:81:b0:fb:40:05:0b:23:31: 48:4b:e8:79:e5:95:09:e6:3f:99:e3:d0:ba:76:bd: 9d:66:9a:a9:28:dc:3e:23:c4:08:38:c9:50:9c:69: 3b:89:76:2b:cf:08:9b:df:57:3d:9e:5a:8d:01:23: 5f:1a:54:ab:1f:45:96:35:5a:5b:5d:2a:ff:5d:1e: 3e:d5:21:c3:ae:13:60:5d:9c:4a:e6:bf:d0:a1:e8: 97:23:91:49:3f:bd:9b:12:0b:9e:91:81:75:bc:4f: 37:b7:8d:1b:7e:82:69:8e:a9:27:68:8a:47:9b:c1: b8:a4:26:bc:98:22:4e:83:1f:dd:dc:63:4a:8b:ff: 79:e6:8b:6d:21:06:24:7b:d2:4f:72:21:d3:c6:c2: d2:3d:32:b2:21:1d:6e:d8:6c:76:82:6a:9c:df:1e: 24:4d:d9:75:15:26:3f:1e:1b:bf:22:43:a5:2e:80: 3f:f2:8b:3f:ae:c6:20:76:00:06:46:34:59:be:9c: 71:c8:86:00:34:33:11:de:3a:88:6a:d2:70:4f:6c: 20:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F2:F0:E4:DB:A1:8A:CC:9D:D7:3A:F1:59:64:5B:2C:17:52:D4:58 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/D_Lw5Nuhisyd1zrxWWRbLBdS1Fg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.202.160.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:6e:06:8e:f5:41:7c:d7:33:1d:1a:6b:a1:fd:41:5a:5b:ea: 39:e6:65:19:74:0c:6a:f3:81:35:04:17:ab:04:be:ef:e9:f4: f0:ea:83:3c:92:87:ba:a6:3f:4a:e0:a0:64:b8:1e:85:fd:b6: 5c:b5:f5:0e:15:47:a8:7b:c7:79:7d:2b:31:63:11:b6:df:cf: 1c:87:c4:6a:1c:78:1c:4f:e7:58:da:70:1d:02:ec:0a:24:23: 54:ab:58:d9:2b:45:fa:fa:92:9b:de:92:c1:0f:3c:36:6e:12: 0a:77:66:91:4b:3a:24:13:44:3b:b7:dc:23:f1:d5:3b:ab:41: be:86:a2:22:43:6f:22:19:31:50:4f:35:70:71:63:c4:7b:9b: bf:c4:73:97:da:93:28:e2:a0:64:54:38:75:21:a4:ff:dc:97: 92:2e:8d:dd:a2:e0:47:31:cc:77:36:b3:46:1e:d1:58:b8:5a: a2:d5:af:65:35:47:32:a5:37:9b:c5:89:92:7d:b9:7e:58:89: bd:0f:a4:79:ff:0e:92:ca:54:0c:0d:4b:9c:d1:4e:d3:17:60: b0:cd:0d:db:cc:8d:c9:a8:64:85:8c:34:9b:32:3c:9f:79:d9: 7e:cb:9f:59:8f:e8:71:79:2c:c9:5f:b5:a8:46:61:5e:be:29: ac:1d:c1:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gtfemR9b14qWRdZc84VbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmYyZjBlNGRiYTE4YWNjOWRkNzNhZjE1OTY0NWIyYzE3NTJkNDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZNk8vqHb7mIYhZepP+umsoTshxG zGwm94t+0sWHA8KtDaFynil8GbRHusM6T3ZTJPzAgbD7QAULIzFIS+h55ZUJ5j+Z 49C6dr2dZpqpKNw+I8QIOMlQnGk7iXYrzwib31c9nlqNASNfGlSrH0WWNVpbXSr/ XR4+1SHDrhNgXZxK5r/QoeiXI5FJP72bEguekYF1vE83t40bfoJpjqknaIpHm8G4 pCa8mCJOgx/d3GNKi/955ottIQYke9JPciHTxsLSPTKyIR1u2Gx2gmqc3x4kTdl1 FSY/Hhu/IkOlLoA/8os/rsYgdgAGRjRZvpxxyIYANDMR3jqIatJwT2wgaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA/y8OTboYrMndc68VlkWywXUtRYMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvRF9MdzVOdWhpc3lkMXpyeFdXUmJMQmRTMUZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVcqgMA0G CSqGSIb3DQEBCwUAA4IBAQBebgaO9UF81zMdGmuh/UFaW+o55mUZdAxq84E1BBer BL7v6fTw6oM8koe6pj9K4KBkuB6F/bZctfUOFUeoe8d5fSsxYxG2388ch8RqHHgc T+dY2nAdAuwKJCNUq1jZK0X6+pKb3pLBDzw2bhIKd2aRSzokE0Q7t9wj8dU7q0G+ hqIiQ28iGTFQTzVwcWPEe5u/xHOX2pMo4qBkVDh1IaT/3JeSLo3douBHMcx3NrNG HtFYuFqi1a9lNUcypTebxYmSfbl+WIm9D6R5/w6SylQMDUuc0U7TF2CwzQ3bzI3J qGSFjDSbMjyfedl+y59Zj+hxeSzJX7WoRmFevimsHcGR -----END CERTIFICATE-----Generated at Tue Jan 20 15:17:47 2026 by rpki-client