This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/cMVqOn9_O511UMJeh_8L-Q0ryD4.roa File: cMVqOn9_O511UMJeh_8L-Q0ryD4.roa (raw, json) Hash identifier: GPsJ34P/KBtvf2V8PpxfXTPLlIXgJHes62O2Gn8/mMM= Subject key identifier: 70:C5:6A:3A:7F:7F:3B:9D:75:50:C2:5E:87:FF:0B:F9:0D:2B:C8:3E Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Certificate serial: 019B7DCA315632E04A24E88DFB23623563F4 Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/cMVqOn9_O511UMJeh_8L-Q0ryD4.roa Signing time: Fri 02 Jan 2026 08:19:21 +0000 ROA not before: Fri 02 Jan 2026 08:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48400 IP address blocks: 85.140.92.0/23 maxlen: 23 85.140.92.0/24 maxlen: 24 85.140.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:31:56:32:e0:4a:24:e8:8d:fb:23:62:35:63:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Validity Not Before: Jan 2 08:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70c56a3a7f7f3b9d7550c25e87ff0bf90d2bc83e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:17:2b:c0:16:00:43:41:79:35:dc:b0:1c:1e: b7:7f:07:6c:cf:a9:d5:37:09:a0:48:99:2e:c6:85: 9a:d4:ca:ca:1d:47:55:1f:ad:1b:23:2b:14:36:a8: ed:9d:21:a3:70:84:e6:07:63:57:2b:58:93:c9:ce: bb:82:29:df:2e:ad:4c:05:8a:fd:84:c4:dd:dd:30: c2:b0:62:7b:aa:77:92:02:02:94:de:01:66:df:14: 61:7e:fc:38:2d:13:db:9b:06:2d:00:42:ba:29:e6: e5:7d:8c:25:0a:52:7e:73:28:23:bb:93:1e:50:ed: 1f:70:31:3f:9d:27:22:2d:03:50:90:f1:aa:a0:fb: 16:d1:89:aa:46:79:cd:d0:cd:78:cd:0a:08:5d:88: 0a:0a:bf:0e:a9:75:9f:f1:f1:39:1a:0b:1e:bb:d2: 04:5c:92:cc:aa:74:53:56:5b:2e:8a:31:ec:fa:f2: d8:60:cb:91:50:75:40:e9:57:f8:ce:91:3f:87:1d: c1:8b:ae:c1:42:67:82:f2:af:d6:38:5e:91:9e:1e: 09:77:bc:d9:07:5e:a6:2e:d5:40:5b:cf:ca:c4:49: ef:f7:dc:f6:3d:f2:91:ce:de:3f:86:55:af:db:fa: 62:8a:f6:e8:d0:12:70:68:8f:bc:79:12:83:39:be: 72:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C5:6A:3A:7F:7F:3B:9D:75:50:C2:5E:87:FF:0B:F9:0D:2B:C8:3E X509v3 Authority Key Identifier: keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/cMVqOn9_O511UMJeh_8L-Q0ryD4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.140.92.0/23 Signature Algorithm: sha256WithRSAEncryption 10:e9:96:dd:31:3c:f4:33:7a:53:11:1b:58:01:aa:04:ba:88: 70:e3:c8:12:fa:c3:1c:ec:89:9c:f0:0c:6c:a7:57:73:c3:45: 32:ef:db:0d:10:69:6e:87:4c:77:af:21:c9:a9:1e:cf:1c:3c: 0a:a5:dd:6b:36:89:69:36:bb:b6:48:6d:df:0a:34:f4:f2:64: 03:e4:ba:93:e1:93:c7:05:90:ad:02:52:71:77:0a:45:98:44: 96:60:fb:52:e2:98:b0:c5:30:a2:1c:c1:b5:46:f0:cd:db:c6: 21:2b:5a:5b:27:73:0f:37:51:ef:78:0c:f9:a4:28:4a:93:20: 98:bc:10:f5:eb:be:50:d6:fa:70:e6:e1:49:82:bd:51:6d:90: 37:bf:c8:93:1e:3e:4d:fe:e9:cc:47:04:96:6b:1f:fe:57:44: 40:03:fa:2d:0b:7e:81:ff:5c:45:97:b6:0e:53:3d:38:89:b7: 62:33:51:a7:ea:f4:41:cb:0d:a1:38:4d:56:41:dd:08:a0:6e: 89:a0:aa:45:5d:1e:45:92:43:00:ee:5c:c2:33:04:1a:c6:5d: 77:58:34:fe:c0:47:12:93:dc:44:eb:65:a7:20:a7:e2:00:95: 3e:19:8b:5b:08:20:01:e5:2d:c5:4b:11:af:07:7e:69:3a:62: fd:b9:3a:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yjFWMuBKJOiN+yNiNWP0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl NmI3ZTUwHhcNMjYwMTAyMDgxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGM1NmEzYTdmN2YzYjlkNzU1MGMyNWU4N2ZmMGJmOTBkMmJjODNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhcrwBYAQ0F5NdywHB63fwdsz6nV NwmgSJkuxoWa1MrKHUdVH60bIysUNqjtnSGjcITmB2NXK1iTyc67ginfLq1MBYr9 hMTd3TDCsGJ7qneSAgKU3gFm3xRhfvw4LRPbmwYtAEK6KeblfYwlClJ+cygju5Me UO0fcDE/nSciLQNQkPGqoPsW0YmqRnnN0M14zQoIXYgKCr8OqXWf8fE5Ggseu9IE XJLMqnRTVlsuijHs+vLYYMuRUHVA6Vf4zpE/hx3Bi67BQmeC8q/WOF6Rnh4Jd7zZ B16mLtVAW8/KxEnv99z2PfKRzt4/hlWv2/piivbo0BJwaI+8eRKDOb5y/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHDFajp/fzuddVDCXof/C/kNK8g+MB8GA1UdIwQY MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt NDI4NDU4Njc5Y2U0LzEvY01WcU9uOV9PNTExVU1KZWhfOEwtUTByeUQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0 LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVYxcMA0G CSqGSIb3DQEBCwUAA4IBAQAQ6ZbdMTz0M3pTERtYAaoEuohw48gS+sMc7Imc8Axs p1dzw0Uy79sNEGluh0x3ryHJqR7PHDwKpd1rNolpNru2SG3fCjT08mQD5LqT4ZPH BZCtAlJxdwpFmESWYPtS4piwxTCiHMG1RvDN28YhK1pbJ3MPN1HveAz5pChKkyCY vBD1675Q1vpw5uFJgr1RbZA3v8iTHj5N/unMRwSWax/+V0RAA/otC36B/1xFl7YO Uz04ibdiM1Gn6vRByw2hOE1WQd0IoG6JoKpFXR5FkkMA7lzCMwQaxl13WDT+wEcS k9xE62WnIKfiAJU+GYtbCCAB5S3FSxGvB35pOmL9uTpC -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:25 2026 by rpki-client