This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/o25brRT35PQQTxAbPaDAC1qCbs0.roa File: o25brRT35PQQTxAbPaDAC1qCbs0.roa (raw, json) Hash identifier: rJyPNW15ukUlAPAy2zm9lVpgff4++kMCrXKJIi7Zi3s= Subject key identifier: A3:6E:5B:AD:14:F7:E4:F4:10:4F:10:1B:3D:A0:C0:0B:5A:82:6E:CD Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Certificate serial: 019B7F1597C9500FC8EE59306AFD48F34501 Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/o25brRT35PQQTxAbPaDAC1qCbs0.roa Signing time: Fri 02 Jan 2026 14:21:20 +0000 ROA not before: Fri 02 Jan 2026 14:21:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5065 IP address blocks: 85.208.44.0/23 maxlen: 24 185.104.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 02:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:97:c9:50:0f:c8:ee:59:30:6a:fd:48:f3:45:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Validity Not Before: Jan 2 14:21:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a36e5bad14f7e4f4104f101b3da0c00b5a826ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:24:ae:10:72:1f:c7:81:66:32:ec:49:83:ca: 6e:5b:42:15:9b:a3:02:67:de:68:c3:3e:08:8a:78: d5:e4:e8:fa:13:b3:65:9f:42:a0:2f:aa:f1:e0:35: 69:3a:09:8c:6e:f3:ac:05:ff:a5:e5:67:ac:72:69: 82:4d:35:43:d1:23:2a:c7:c6:f2:be:d6:48:5b:5a: 47:1e:61:7d:3b:c4:a9:ef:d2:7c:0f:86:81:2e:7b: 25:82:ae:19:73:47:96:1e:d7:7a:e7:ae:4c:4a:24: e6:48:22:33:b9:4f:01:05:33:04:cf:de:70:d8:3d: 79:64:58:eb:7b:3c:6b:6a:c9:6b:10:fd:9e:4c:e0: 3f:75:b4:63:72:f7:0f:e7:b1:6f:7e:ae:df:a0:e4: 16:05:96:4a:94:ed:9e:a6:76:3d:34:85:5c:fa:78: b2:19:a3:cc:af:06:a0:29:b4:0b:c9:42:f4:47:c0: 8b:b2:70:ac:c0:38:a6:ea:84:3a:70:cd:0d:bf:f5: 4c:c9:c1:5a:51:80:a1:87:d3:53:3d:3e:ab:ef:9d: c7:e2:6f:92:63:68:ee:82:67:40:8b:24:7a:35:b9: 32:e9:69:1a:09:96:49:01:8f:70:a7:20:85:d6:24: ae:1b:22:c7:fa:09:74:54:f0:a6:6a:72:d4:cb:5d: d7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:6E:5B:AD:14:F7:E4:F4:10:4F:10:1B:3D:A0:C0:0B:5A:82:6E:CD X509v3 Authority Key Identifier: keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/o25brRT35PQQTxAbPaDAC1qCbs0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.208.44.0/23 185.104.13.0/24 Signature Algorithm: sha256WithRSAEncryption 58:f7:0c:50:fb:e5:ce:30:02:1e:47:05:72:40:58:fb:ba:1e: 49:3d:e2:27:af:3b:5c:c3:c6:c6:60:bb:03:7f:31:16:00:f9: 4e:a0:d2:de:5c:41:d6:14:b3:33:53:ff:f1:a7:80:58:be:ff: 54:7a:a5:0b:60:e4:4e:77:6b:ec:1d:5b:8e:16:63:0d:7f:89: ce:da:cc:32:78:41:ab:49:88:09:51:92:fb:90:f9:2c:4d:de: e1:81:58:fc:57:22:90:ef:5a:af:3f:2f:fd:32:f7:8e:dd:24: d0:57:9e:46:df:bb:8b:39:90:c4:0b:65:32:c4:f9:d0:b6:c1: ed:d9:63:b9:94:6f:b8:98:9a:e9:f0:4e:9d:88:6e:8b:71:2f: d3:c6:b3:e3:da:3b:3d:22:04:19:f5:db:1f:6a:b6:6e:2d:e5: ed:10:2a:13:b9:f8:cc:9c:57:f3:da:7a:0f:66:df:b9:84:54: bc:41:68:60:33:b8:fb:23:6d:69:0b:39:d8:d2:fc:09:cd:5c: c2:b4:e5:91:96:b9:4a:6a:50:56:23:29:f1:38:82:6d:ec:99: cb:d7:8b:0d:e0:98:9f:94:89:70:9e:94:b9:43:0a:1f:47:00: cb:2e:3a:8a:0f:85:5a:48:38:0a:00:3c:40:e8:f6:39:7a:0f: 8b:5c:3e:d3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FZfJUA/I7lkwav1I80UBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy NzJiYTYwHhcNMjYwMTAyMTQyMTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzZlNWJhZDE0ZjdlNGY0MTA0ZjEwMWIzZGEwYzAwYjVhODI2ZWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCSuEHIfx4FmMuxJg8puW0IVm6MC Z95owz4IinjV5Oj6E7Nln0KgL6rx4DVpOgmMbvOsBf+l5WescmmCTTVD0SMqx8by vtZIW1pHHmF9O8Sp79J8D4aBLnslgq4Zc0eWHtd6565MSiTmSCIzuU8BBTMEz95w 2D15ZFjrezxraslrEP2eTOA/dbRjcvcP57Fvfq7foOQWBZZKlO2epnY9NIVc+niy GaPMrwagKbQLyUL0R8CLsnCswDim6oQ6cM0Nv/VMycFaUYChh9NTPT6r753H4m+S Y2jugmdAiyR6Nbky6WkaCZZJAY9wpyCF1iSuGyLH+gl0VPCmanLUy13XXQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKNuW60U9+T0EE8QGz2gwAtagm7NMB8GA1UdIwQY MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt MDc3OWY0OGVjZWEwLzEvbzI1YnJSVDM1UFFRVHhBYlBhREFDMXFDYnMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBVdAsAwQA uWgNMA0GCSqGSIb3DQEBCwUAA4IBAQBY9wxQ++XOMAIeRwVyQFj7uh5JPeInrztc w8bGYLsDfzEWAPlOoNLeXEHWFLMzU//xp4BYvv9UeqULYOROd2vsHVuOFmMNf4nO 2swyeEGrSYgJUZL7kPksTd7hgVj8VyKQ71qvPy/9MveO3STQV55G37uLOZDEC2Uy xPnQtsHt2WO5lG+4mJrp8E6diG6LcS/TxrPj2js9IgQZ9dsfarZuLeXtECoTufjM nFfz2noPZt+5hFS8QWhgM7j7I21pCznY0vwJzVzCtOWRlrlKalBWIynxOIJt7JnL 14sN4JiflIlwnpS5QwofRwDLLjqKD4VaSDgKADxA6PY5eg+LXD7T -----END CERTIFICATE-----Generated at Mon Jan 19 11:29:53 2026 by rpki-client