This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/01uypEz92w-PEtDCDrkmRt7joB0.roa File: 01uypEz92w-PEtDCDrkmRt7joB0.roa (raw, json) Hash identifier: 6Ybp9mfbJVOd/HK8t41CSRVz5fBDwLWJNUbKMQQxn7A= Subject key identifier: D3:5B:B2:A4:4C:FD:DB:0F:8F:12:D0:C2:0E:B9:26:46:DE:E3:A0:1D Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250 Certificate serial: 019B7F1288A1209DD204A60DE50390675547 Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/01uypEz92w-PEtDCDrkmRt7joB0.roa Signing time: Fri 02 Jan 2026 14:17:59 +0000 ROA not before: Fri 02 Jan 2026 14:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2116 IP address blocks: 185.85.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:12:88:a1:20:9d:d2:04:a6:0d:e5:03:90:67:55:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250 Validity Not Before: Jan 2 14:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d35bb2a44cfddb0f8f12d0c20eb92646dee3a01d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:20:9e:31:1d:06:9d:ac:f5:86:45:73:88:4a: 78:d2:5a:73:57:09:11:08:04:d5:76:5a:e4:83:30: ca:8b:21:41:77:1b:f7:ef:b0:b5:87:48:ca:39:6c: bd:2e:a8:1a:7b:40:b0:78:93:44:ce:16:3f:57:e3: d9:e8:2e:28:46:bb:aa:84:85:a4:d9:a7:e7:9a:ff: 51:08:ef:82:25:c1:97:82:46:1c:de:6e:7b:c1:3f: 98:73:82:c5:05:03:9a:5c:b1:e5:69:cf:00:46:5c: d3:a1:ee:35:48:75:e9:97:7a:67:e9:09:06:be:22: 7a:21:74:8f:38:7c:62:32:42:9d:cd:8c:88:c7:00: b5:33:7d:e3:8a:01:cd:ce:38:a6:9b:9f:73:4e:5b: d2:31:8a:73:b2:7f:b4:75:5f:d3:a9:22:1e:b5:ea: 2f:53:37:58:e4:72:b4:86:0f:45:1b:9a:72:9b:4b: 9e:77:69:88:9f:d4:19:28:22:cf:d1:5e:f9:86:4d: 43:20:a0:6b:93:40:9f:d3:49:28:82:14:12:18:a8: 66:52:60:f5:8a:8b:04:8e:6f:f9:ad:ed:45:72:48: fa:8d:a3:1f:d7:b9:b4:c2:b2:f5:5e:67:cf:14:a3: 58:ec:ec:48:c4:18:fa:a8:b9:c4:d7:df:93:38:3c: 85:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5B:B2:A4:4C:FD:DB:0F:8F:12:D0:C2:0E:B9:26:46:DE:E3:A0:1D X509v3 Authority Key Identifier: keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/01uypEz92w-PEtDCDrkmRt7joB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.85.128.0/22 Signature Algorithm: sha256WithRSAEncryption 76:63:6d:1e:00:1d:ea:7f:64:80:83:ac:e6:05:32:a3:0d:93: 50:48:b6:cc:fa:b4:39:8e:3b:8d:6f:1c:95:46:d1:ff:a0:9b: 7c:69:3c:e3:d0:72:71:f0:f2:95:41:96:c3:ac:bf:96:21:f7: 33:ba:21:b2:45:0d:b8:15:c5:ca:35:93:e8:c6:6e:5c:d2:44: 31:67:98:ec:98:d3:81:87:63:d9:21:58:02:90:01:53:98:a2: a9:44:39:e1:db:a6:51:88:60:00:3d:d8:40:b8:28:de:84:3e: 34:c6:8d:9c:3c:db:0d:5f:59:d0:6e:37:90:1b:cc:bf:6b:3d: 61:98:49:57:57:96:f7:e0:15:02:8f:50:98:53:85:ec:14:aa: 77:92:d6:02:5b:cc:2d:db:a0:37:a2:19:88:61:b4:11:c7:e9: fd:f8:92:63:13:9d:c2:a4:32:6a:b4:f5:c9:a6:37:34:d6:5e: d4:7d:65:b0:0e:67:cf:cb:3e:34:17:fe:6b:13:24:2f:a3:f1: ee:c0:ce:aa:49:e4:f5:1c:42:42:c6:c7:04:5a:45:2c:84:a9: 20:1b:a9:8d:d3:50:1a:6f:84:79:81:48:e7:01:f2:61:74:53: e5:06:d4:80:da:a8:d8:e1:eb:de:f2:66:e5:9a:6c:8f:5a:30: e5:85:ed:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/EoihIJ3SBKYN5QOQZ1VHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMzQwNjk5YzhlZDk3MGE4YzllZDhjMTYyMDg4ZjIwNjdj MzMyNTAwHhcNMjYwMTAyMTQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzViYjJhNDRjZmRkYjBmOGYxMmQwYzIwZWI5MjY0NmRlZTNhMDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CCeMR0Gnaz1hkVziEp40lpzVwkR CATVdlrkgzDKiyFBdxv377C1h0jKOWy9Lqgae0CweJNEzhY/V+PZ6C4oRruqhIWk 2afnmv9RCO+CJcGXgkYc3m57wT+Yc4LFBQOaXLHlac8ARlzToe41SHXpl3pn6QkG viJ6IXSPOHxiMkKdzYyIxwC1M33jigHNzjimm59zTlvSMYpzsn+0dV/TqSIeteov UzdY5HK0hg9FG5pym0ued2mIn9QZKCLP0V75hk1DIKBrk0Cf00koghQSGKhmUmD1 iosEjm/5re1Fckj6jaMf17m0wrL1XmfPFKNY7OxIxBj6qLnE19+TODyF2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNNbsqRM/dsPjxLQwg65Jkbe46AdMB8GA1UdIwQY MBaAFJs0BpnI7ZcKjJ7YwWIIjyBnwzJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXpRR21janRsd3FNbnRqQllnaVBJR2ZETWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82ZjQ5NDAtNWFiYy00OWI0LTk3NDct ZTA4YmUwZWRhZjc2LzEvMDF1eXBFejkydy1QRXREQ0Rya21SdDdqb0IwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi82ZjQ5NDAtNWFiYy00OWI0LTk3NDctZTA4YmUwZWRhZjc2 LzEvbXpRR21janRsd3FNbnRqQllnaVBJR2ZETWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVWAMA0G CSqGSIb3DQEBCwUAA4IBAQB2Y20eAB3qf2SAg6zmBTKjDZNQSLbM+rQ5jjuNbxyV RtH/oJt8aTzj0HJx8PKVQZbDrL+WIfczuiGyRQ24FcXKNZPoxm5c0kQxZ5jsmNOB h2PZIVgCkAFTmKKpRDnh26ZRiGAAPdhAuCjehD40xo2cPNsNX1nQbjeQG8y/az1h mElXV5b34BUCj1CYU4XsFKp3ktYCW8wt26A3ohmIYbQRx+n9+JJjE53CpDJqtPXJ pjc01l7UfWWwDmfPyz40F/5rEyQvo/HuwM6qSeT1HEJCxscEWkUshKkgG6mN01Aa b4R5gUjnAfJhdFPlBtSA2qjY4eve8mblmmyPWjDlhe2T -----END CERTIFICATE-----Generated at Mon Jan 26 16:57:54 2026 by rpki-client