This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/267NH16MzH47Zyj0K4t3Pr0uSro.roa File: 267NH16MzH47Zyj0K4t3Pr0uSro.roa (raw, json) Hash identifier: mBBDPMXvF9insE4ynTzv2acZX93bp3bRK4WTLefzCSs= Subject key identifier: DB:AE:CD:1F:5E:8C:CC:7E:3B:67:28:F4:2B:8B:77:3E:BD:2E:4A:BA Certificate issuer: /CN=2b976275547b75df2b04c4f9b291c0710c507740 Certificate serial: 019B78A29A67522C47EF3A25992A25B49689 Authority key identifier: 2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/267NH16MzH47Zyj0K4t3Pr0uSro.roa Signing time: Thu 01 Jan 2026 08:18:00 +0000 ROA not before: Thu 01 Jan 2026 08:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30848 IP address blocks: 85.116.128.0/23 maxlen: 23 85.116.130.0/23 maxlen: 23 185.89.220.0/23 maxlen: 23 185.135.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:9a:67:52:2c:47:ef:3a:25:99:2a:25:b4:96:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b976275547b75df2b04c4f9b291c0710c507740 Validity Not Before: Jan 1 08:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbaecd1f5e8ccc7e3b6728f42b8b773ebd2e4aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:2f:5e:6e:e4:23:1d:53:35:02:c1:db:65:3d: 04:8b:81:26:a8:2e:54:c1:3d:35:e0:46:1e:7c:6b: fd:8a:8c:d5:88:28:1d:28:84:4f:e1:45:7b:6f:df: b6:6b:71:0d:ee:37:fd:66:e9:1e:32:dc:40:fd:f7: 74:07:70:00:02:b9:b3:c7:4e:29:5f:80:00:5d:9a: b6:d9:65:db:db:15:1e:50:af:08:57:11:1e:ce:18: 50:bb:af:b1:7d:c8:f0:98:b8:dc:4b:f6:6a:b0:1f: 70:38:d1:ca:3d:10:08:91:c9:65:cf:5b:fc:46:07: f4:f4:e4:d4:19:2c:a4:8a:53:c8:6a:99:72:66:d7: 34:19:34:10:25:56:c1:82:5d:3f:25:6d:b4:3c:30: 81:06:39:0d:f0:57:f4:db:f0:c4:60:3a:22:d6:95: a8:bf:aa:3e:1c:2a:79:76:4a:4d:33:31:42:99:4c: 27:69:d8:14:b5:55:3b:cb:7d:19:33:0a:96:71:c3: a3:a3:b6:22:48:0a:35:a4:e2:dc:13:c9:64:dd:36: 16:6b:48:9b:2c:ba:f7:bd:52:86:f0:cc:25:b0:96: c9:5c:fe:2e:43:64:b2:0e:f6:78:c4:4a:de:ed:57: 0f:03:df:1c:ac:c3:7f:22:95:66:09:42:e0:e0:66: d3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:AE:CD:1F:5E:8C:CC:7E:3B:67:28:F4:2B:8B:77:3E:BD:2E:4A:BA X509v3 Authority Key Identifier: keyid:2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/267NH16MzH47Zyj0K4t3Pr0uSro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.116.128.0/22 185.89.220.0/23 185.135.103.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:e1:2e:07:53:79:93:20:62:0c:30:dc:b2:ca:9c:3f:7c:ba: bd:58:f4:1b:43:81:b7:f9:a5:26:b3:61:24:ab:ce:49:a2:e7: f9:1d:bd:57:d0:29:ce:57:6f:b3:1e:cc:37:16:ad:79:52:0f: 90:be:1a:3a:88:aa:8d:70:07:b6:0e:b5:ab:24:bf:13:34:df: 6b:8a:42:e2:9f:54:9b:d2:e0:1e:e3:d4:4b:c0:3b:bb:e3:0f: 57:2a:69:3a:f7:56:10:f9:77:e8:37:b9:5a:fe:46:18:a4:9c: 48:31:fd:85:60:77:97:02:f0:84:c7:f8:37:05:a8:07:21:78: 9c:94:06:53:68:15:9f:04:87:a5:2d:1b:17:0a:15:cd:45:2e: cc:c7:61:b8:b6:77:f4:e9:5b:86:10:27:b0:50:d5:7b:ed:8f: 40:8b:71:6c:c2:e9:92:7c:9d:d5:c5:2e:82:c5:11:4e:91:a9: 8a:ca:e1:4d:53:14:a4:16:f9:d4:61:32:26:43:e2:70:26:28: 1f:de:65:77:d4:e0:74:98:d7:01:10:0a:17:84:0e:0a:00:a2: dd:7d:1b:3e:e5:ab:58:c6:94:f0:90:aa:df:84:19:39:7f:ef: d4:1c:57:01:7e:83:f4:e1:0f:4d:10:ac:06:5a:cd:f6:e2:25: 97:6a:e7:79 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4oppnUixH7zolmSoltJaJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiOTc2Mjc1NTQ3Yjc1ZGYyYjA0YzRmOWIyOTFjMDcxMGM1 MDc3NDAwHhcNMjYwMTAxMDgxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmFlY2QxZjVlOGNjYzdlM2I2NzI4ZjQyYjhiNzczZWJkMmU0YWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6C9ebuQjHVM1AsHbZT0Ei4EmqC5U wT014EYefGv9iozViCgdKIRP4UV7b9+2a3EN7jf9ZukeMtxA/fd0B3AAArmzx04p X4AAXZq22WXb2xUeUK8IVxEezhhQu6+xfcjwmLjcS/ZqsB9wONHKPRAIkcllz1v8 Rgf09OTUGSykilPIaplyZtc0GTQQJVbBgl0/JW20PDCBBjkN8Ff02/DEYDoi1pWo v6o+HCp5dkpNMzFCmUwnadgUtVU7y30ZMwqWccOjo7YiSAo1pOLcE8lk3TYWa0ib LLr3vVKG8MwlsJbJXP4uQ2SyDvZ4xEre7VcPA98crMN/IpVmCULg4GbTPQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNuuzR9ejMx+O2co9CuLdz69Lkq6MB8GA1UdIwQY MBaAFCuXYnVUe3XfKwTE+bKRwHEMUHdAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzVkaWRWUjdkZDhyQk1UNXNwSEFjUXhRZDBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81OGY0NWYtOGIwNy00ZTZhLTk1NDgt ZDViMGY5MWQ5N2MyLzEvMjY3TkgxNk16SDQ3WnlqMEs0dDNQcjB1U3JvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi81OGY0NWYtOGIwNy00ZTZhLTk1NDgtZDViMGY5MWQ5N2My LzEvSzVkaWRWUjdkZDhyQk1UNXNwSEFjUXhRZDBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCVXSAAwQB uVncAwQAuYdnMA0GCSqGSIb3DQEBCwUAA4IBAQAM4S4HU3mTIGIMMNyyypw/fLq9 WPQbQ4G3+aUms2Ekq85Jouf5Hb1X0CnOV2+zHsw3Fq15Ug+Qvho6iKqNcAe2DrWr JL8TNN9rikLin1Sb0uAe49RLwDu74w9XKmk691YQ+XfoN7la/kYYpJxIMf2FYHeX AvCEx/g3BagHIXiclAZTaBWfBIelLRsXChXNRS7Mx2G4tnf06VuGECewUNV77Y9A i3FswumSfJ3VxS6CxRFOkamKyuFNUxSkFvnUYTImQ+JwJigf3mV31OB0mNcBEAoX hA4KAKLdfRs+5atYxpTwkKrfhBk5f+/UHFcBfoP04Q9NEKwGWs324iWXaud5 -----END CERTIFICATE-----Generated at Tue Jan 27 08:30:43 2026 by rpki-client