This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/0pyZ3-vMnTAKCT-4LOO6eDsOhcw.roa File: 0pyZ3-vMnTAKCT-4LOO6eDsOhcw.roa (raw, json) Hash identifier: k/rzNKop48uQMb7AE0nMU7aM7Ne9RnAWwxkHE7UZejk= Subject key identifier: D2:9C:99:DF:EB:CC:9D:30:0A:09:3F:B8:2C:E3:BA:78:3B:0E:85:CC Certificate issuer: /CN=fa3c481607619c835d09f2471d976d7cf74a0439 Certificate serial: 019B7EA69BB46CAAFF2ECCF709389F69F275 Authority key identifier: FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/0pyZ3-vMnTAKCT-4LOO6eDsOhcw.roa Signing time: Fri 02 Jan 2026 12:20:06 +0000 ROA not before: Fri 02 Jan 2026 12:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12917 IP address blocks: 85.159.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:9b:b4:6c:aa:ff:2e:cc:f7:09:38:9f:69:f2:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa3c481607619c835d09f2471d976d7cf74a0439 Validity Not Before: Jan 2 12:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d29c99dfebcc9d300a093fb82ce3ba783b0e85cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:af:b0:47:10:fa:03:03:80:3b:07:b6:93:ee: 93:cb:23:1c:1d:db:03:50:de:23:b9:de:9b:4a:f7: fb:59:2b:3b:63:64:f1:28:9e:10:76:78:56:e3:a9: d4:fc:b6:54:b3:cc:21:59:b1:37:08:c8:bc:c9:64: d8:df:53:a8:cf:46:04:e1:78:19:33:e6:ea:5e:dd: 75:04:56:2a:72:ba:26:26:7b:9f:53:1a:d7:e2:51: e0:99:b7:e3:4d:e5:01:a5:a0:96:c1:cd:96:d2:44: 42:86:52:96:91:2a:6c:9c:63:57:57:af:69:16:eb: 12:41:06:e7:27:06:4c:23:77:f6:ff:01:60:f4:09: 66:1c:57:dc:cc:fc:ce:eb:b2:44:4b:8b:2b:8f:4f: 89:42:d7:5a:da:fd:89:73:6b:c7:0d:eb:fb:17:e2: 6b:c1:d6:4d:5f:47:1d:e3:d9:94:1c:f6:76:9d:fe: 3e:63:f6:44:6a:22:c0:7b:ba:b4:2c:90:b8:04:eb: 04:3e:6f:8d:ff:f4:d8:36:9c:04:ef:b8:43:3a:cb: 4e:38:2a:6f:f7:db:c0:e0:44:41:ce:09:b6:a0:e7: a4:42:f4:d8:c7:3e:4a:9e:59:67:78:d4:ce:fe:f8: 05:43:1b:ac:90:45:ca:fc:64:2f:73:03:0b:71:29: a6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9C:99:DF:EB:CC:9D:30:0A:09:3F:B8:2C:E3:BA:78:3B:0E:85:CC X509v3 Authority Key Identifier: keyid:FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/0pyZ3-vMnTAKCT-4LOO6eDsOhcw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.159.107.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:a7:39:7d:b7:95:c0:32:f0:27:78:50:24:0f:03:96:b0:33: 40:cd:db:28:32:92:b7:2c:ca:04:99:5a:a3:d6:f2:f7:d7:0d: 5b:58:01:0a:12:56:94:c0:87:4b:b3:25:99:7e:e0:37:d5:d0: d5:04:af:1f:89:3c:16:c0:c5:c8:24:ef:59:71:36:a1:79:6c: 0a:a6:5a:7d:70:0e:bf:38:d6:f4:73:b5:dd:f8:47:78:ca:8c: 90:49:9f:57:59:0e:8a:d7:61:3f:42:ff:9f:39:cc:98:0f:5d: 89:d6:64:6e:94:7c:36:cc:88:9f:7f:bf:07:15:1a:ac:b4:a9: 54:b3:f5:00:38:6a:a1:65:33:76:25:37:1a:5b:3e:d9:c4:cc: 93:68:43:46:71:7e:d1:6a:50:6e:a8:de:43:16:8d:8f:05:90: 2d:dd:05:91:34:82:62:aa:04:41:ca:5f:a6:65:d6:ac:09:5d: 9d:f9:17:7e:fc:a4:f1:a6:74:94:8b:c3:64:2c:04:87:a7:fb: 2f:15:5a:64:7a:69:7b:b1:7d:27:85:77:5a:07:50:28:81:9b: 14:ca:8e:bb:d2:55:ea:99:27:50:73:8a:74:d0:29:1f:5e:9f: 91:8c:3a:e9:9e:d1:9c:78:1a:c3:2d:31:c0:11:bb:aa:89:45: fa:1f:ac:3c -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+ppu0bKr/Lsz3CTifafJ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhM2M0ODE2MDc2MTljODM1ZDA5ZjI0NzFkOTc2ZDdjZjc0 YTA0MzkwHhcNMjYwMTAyMTIyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjljOTlkZmViY2M5ZDMwMGEwOTNmYjgyY2UzYmE3ODNiMGU4NWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAla+wRxD6AwOAOwe2k+6TyyMcHdsD UN4jud6bSvf7WSs7Y2TxKJ4QdnhW46nU/LZUs8whWbE3CMi8yWTY31Ooz0YE4XgZ M+bqXt11BFYqcromJnufUxrX4lHgmbfjTeUBpaCWwc2W0kRChlKWkSpsnGNXV69p FusSQQbnJwZMI3f2/wFg9AlmHFfczPzO67JES4srj0+JQtda2v2Jc2vHDev7F+Jr wdZNX0cd49mUHPZ2nf4+Y/ZEaiLAe7q0LJC4BOsEPm+N//TYNpwE77hDOstOOCpv 99vA4ERBzgm2oOekQvTYxz5KnllneNTO/vgFQxuskEXK/GQvcwMLcSmmrQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFNKcmd/rzJ0wCgk/uCzjung7DoXMMB8GA1UdIwQY MBaAFPo8SBYHYZyDXQnyRx2XbXz3SgQ5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1qeElGZ2RobklOZENmSkhIWmR0ZlBkS0JEay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTk4NDhiLWM0ZjgtNDZhYi04OTIz LTEzMDQ0NTRiZjI5ZC8xLzBweVozLXZNblRBS0NULTRMT082ZURzT2hjdy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNGYvOTk4NDhiLWM0ZjgtNDZhYi04OTIzLTEzMDQ0NTRiZjI5 ZC8xLzEtanhJRmdkaG5JTmRDZkpISFpkdGZQZEtCRGsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABVn2sw DQYJKoZIhvcNAQELBQADggEBAE2nOX23lcAy8Cd4UCQPA5awM0DN2ygykrcsygSZ WqPW8vfXDVtYAQoSVpTAh0uzJZl+4DfV0NUErx+JPBbAxcgk71lxNqF5bAqmWn1w Dr841vRztd34R3jKjJBJn1dZDorXYT9C/585zJgPXYnWZG6UfDbMiJ9/vwcVGqy0 qVSz9QA4aqFlM3YlNxpbPtnEzJNoQ0ZxftFqUG6o3kMWjY8FkC3dBZE0gmKqBEHK X6Zl1qwJXZ35F378pPGmdJSLw2QsBIen+y8VWmR6aXuxfSeFd1oHUCiBmxTKjrvS VeqZJ1BzinTQKR9en5GMOume0Zx4GsMtMcARu6qJRfofrDw= -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:48 2026 by rpki-client