This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/rKoSjHhvJImZNOF1L4tvqu9KSjU.roa File: rKoSjHhvJImZNOF1L4tvqu9KSjU.roa (raw, json) Hash identifier: ED11ejyoT5xPcyYKinY7Cd+nJxVa+vcQf9GFo/cbaCU= Subject key identifier: AC:AA:12:8C:78:6F:24:89:99:34:E1:75:2F:8B:6F:AA:EF:4A:4A:35 Certificate issuer: /CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b Certificate serial: 019B7A5B0809A5EC48E319FBD98B87A0215D Authority key identifier: 85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/rKoSjHhvJImZNOF1L4tvqu9KSjU.roa Signing time: Thu 01 Jan 2026 16:19:04 +0000 ROA not before: Thu 01 Jan 2026 16:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198435 IP address blocks: 85.208.248.0/24 maxlen: 24 85.208.249.0/24 maxlen: 24 85.208.250.0/24 maxlen: 24 85.208.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:08:09:a5:ec:48:e3:19:fb:d9:8b:87:a0:21:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b Validity Not Before: Jan 1 16:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=acaa128c786f24899934e1752f8b6faaef4a4a35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4a:09:c0:f9:f1:91:06:05:87:56:3c:e6:70: bd:97:4b:91:e2:fa:75:31:fa:c9:3e:d1:e0:89:af: ea:cb:7b:a2:3a:99:65:46:be:70:39:7b:7f:30:05: f9:e1:0a:12:66:01:df:19:17:b7:8c:cb:ff:12:89: f5:72:0f:51:6b:8f:48:cc:76:c4:2c:eb:71:de:be: de:7a:29:b9:3d:a4:b5:68:bf:f9:01:34:44:e6:31: 12:9f:b2:3a:fb:b5:19:7f:87:d4:b0:2d:3c:ab:ca: fd:4d:67:c7:a3:3f:95:b7:e2:29:8e:5b:62:ee:d0: c3:88:89:29:1f:bb:f8:99:2a:eb:bd:cb:c7:c0:0c: da:dd:c7:a1:f9:c9:24:7d:66:bb:13:65:cd:3e:95: 3a:93:c4:ce:5c:80:c7:f2:81:09:62:8e:93:79:1b: c5:fa:b3:19:fc:ee:e3:00:9a:3a:87:69:f8:59:26: 94:9e:f5:13:87:06:09:3c:54:87:17:2b:7e:88:13: 41:07:0e:fe:0d:5f:5f:25:e2:a4:f3:50:dd:fa:92: b7:bf:5a:35:c8:05:19:dd:db:20:28:af:14:c4:d8: 8a:dd:8c:26:0c:e2:5c:7a:4c:3b:9b:08:d8:6e:42: 4d:25:fa:c9:75:88:ce:41:a0:02:62:34:38:e6:7b: 5e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AA:12:8C:78:6F:24:89:99:34:E1:75:2F:8B:6F:AA:EF:4A:4A:35 X509v3 Authority Key Identifier: keyid:85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/rKoSjHhvJImZNOF1L4tvqu9KSjU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.208.248.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:51:e2:18:04:ae:f5:2f:34:af:ce:9c:e1:d8:d9:11:47:08: c1:c2:a5:17:95:23:13:65:9d:86:13:52:4c:03:7f:e5:10:38: 42:c8:a8:b3:75:93:90:c7:27:53:2b:84:09:d9:ac:0d:64:c3: dd:7d:f0:3e:79:eb:53:2e:26:5a:ec:31:2b:14:34:ab:ad:86: 8b:58:42:45:64:5d:41:13:29:92:87:f4:a2:c4:b3:76:db:2d: d0:4d:f2:fe:3e:cb:56:85:26:84:d7:d8:11:af:72:15:b8:a7: 12:64:b6:7d:fd:a2:29:f2:74:90:0f:44:78:3e:8d:a4:d1:ab: 06:fc:dd:e8:89:a2:e0:6c:04:94:81:2f:15:de:45:d7:ea:b7: 01:a2:50:3b:53:29:52:e3:d7:09:b4:83:89:5b:e8:c7:bb:ea: 7a:1c:fd:d7:db:ef:7b:8b:38:2c:5d:71:6f:96:ba:b8:12:3b: 86:81:cf:89:1e:ee:15:4b:3f:6e:45:85:e0:47:6b:fc:0d:d0: 82:35:92:d8:d6:22:10:d9:cb:12:f6:dd:73:cf:bf:b0:68:f8: 55:21:e5:d0:2f:5c:b0:6a:ac:b1:18:e4:50:88:f8:76:9f:43: 6e:b5:1d:a9:12:ec:5e:9c:84:66:11:bb:8d:31:5f:8e:a0:71: 3c:f7:75:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WwgJpexI4xn72YuHoCFdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NDkyZjJhNjkxMDQzM2M1YmNkODI2OWM0NDBlOGMxYzc4 MDBkNmIwHhcNMjYwMTAxMTYxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2FhMTI4Yzc4NmYyNDg5OTkzNGUxNzUyZjhiNmZhYWVmNGE0YTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0oJwPnxkQYFh1Y85nC9l0uR4vp1 MfrJPtHgia/qy3uiOpllRr5wOXt/MAX54QoSZgHfGRe3jMv/Eon1cg9Ra49IzHbE LOtx3r7eeim5PaS1aL/5ATRE5jESn7I6+7UZf4fUsC08q8r9TWfHoz+Vt+Ipjlti 7tDDiIkpH7v4mSrrvcvHwAza3ceh+ckkfWa7E2XNPpU6k8TOXIDH8oEJYo6TeRvF +rMZ/O7jAJo6h2n4WSaUnvUThwYJPFSHFyt+iBNBBw7+DV9fJeKk81Dd+pK3v1o1 yAUZ3dsgKK8UxNiK3YwmDOJcekw7mwjYbkJNJfrJdYjOQaACYjQ45nteUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKyqEox4bySJmTThdS+Lb6rvSko1MB8GA1UdIwQY MBaAFIVJLyppEEM8W82CacRA6MHHgA1rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFVrdktta1FRenhiellKcHhFRG93Y2VBRFdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iMzgyMjgtMDg3NS00OTFjLTlkNGYt ZDZhOWEyODI4NGNmLzEvcktvU2pIaHZKSW1aTk9GMUw0dHZxdTlLU2pVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9iMzgyMjgtMDg3NS00OTFjLTlkNGYtZDZhOWEyODI4NGNm LzEvaFVrdktta1FRenhiellKcHhFRG93Y2VBRFdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVdD4MA0G CSqGSIb3DQEBCwUAA4IBAQAvUeIYBK71LzSvzpzh2NkRRwjBwqUXlSMTZZ2GE1JM A3/lEDhCyKizdZOQxydTK4QJ2awNZMPdffA+eetTLiZa7DErFDSrrYaLWEJFZF1B EymSh/SixLN22y3QTfL+PstWhSaE19gRr3IVuKcSZLZ9/aIp8nSQD0R4Po2k0asG /N3oiaLgbASUgS8V3kXX6rcBolA7UylS49cJtIOJW+jHu+p6HP3X2+97izgsXXFv lrq4EjuGgc+JHu4VSz9uRYXgR2v8DdCCNZLY1iIQ2csS9t1zz7+waPhVIeXQL1yw aqyxGORQiPh2n0NutR2pEuxenIRmEbuNMV+OoHE893XO -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:16 2026 by rpki-client