This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/84qtyRzdn5we4xBoW1LVDrbiPAw.roa File: 84qtyRzdn5we4xBoW1LVDrbiPAw.roa (raw, json) Hash identifier: JOwq7LPQbha4BiSwQqjqrt8Dw3BVTVdv+eQ1EbJP8Xk= Subject key identifier: F3:8A:AD:C9:1C:DD:9F:9C:1E:E3:10:68:5B:52:D5:0E:B6:E2:3C:0C Certificate issuer: /CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412 Certificate serial: 019B77C7425CD2A5A40C6B31AFC21F0FAF7C Authority key identifier: 6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/84qtyRzdn5we4xBoW1LVDrbiPAw.roa Signing time: Thu 01 Jan 2026 04:18:25 +0000 ROA not before: Thu 01 Jan 2026 04:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 85.116.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:42:5c:d2:a5:a4:0c:6b:31:af:c2:1f:0f:af:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412 Validity Not Before: Jan 1 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f38aadc91cdd9f9c1ee310685b52d50eb6e23c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e7:94:85:41:53:28:ad:18:eb:d3:a7:4e:bb: 3d:ab:45:5c:20:dd:6c:22:39:98:60:7d:77:08:75: b0:08:60:60:f8:89:38:34:87:56:33:84:b9:29:65: ca:df:4f:b7:09:f2:1f:a8:94:de:b5:39:73:b1:14: 61:1b:17:c3:69:49:20:10:f8:48:4d:51:86:3a:0b: 55:29:3f:2e:94:a7:72:0f:14:f4:83:93:c4:15:e4: 85:8c:eb:ed:4a:22:6e:6f:f7:9d:84:de:99:9b:70: 07:23:af:f3:cd:38:29:6b:ad:c2:a2:65:4c:6a:53: 1e:26:7d:e2:43:d3:d9:9a:de:dc:3d:0f:79:3c:b5: 04:06:26:0e:ad:7e:5b:3e:17:b8:fc:0b:68:ca:a5: 7d:61:b3:7e:c4:0a:f8:2d:16:bc:15:09:52:bc:7e: 00:62:36:58:ed:b9:7b:e4:0b:e7:71:d3:54:67:44: aa:4c:9b:b7:ec:52:bd:a2:6f:83:bb:f9:e4:48:8a: 9a:70:5d:55:c5:ad:10:19:ef:63:5f:65:ce:81:da: 33:ed:28:19:c7:80:da:b7:7d:ab:25:00:0a:f5:83: d9:5d:f6:20:0d:44:ba:6d:30:51:ac:1f:5c:8b:0a: d4:f8:3d:68:6d:08:31:80:12:54:33:6e:40:c6:bb: 4f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:8A:AD:C9:1C:DD:9F:9C:1E:E3:10:68:5B:52:D5:0E:B6:E2:3C:0C X509v3 Authority Key Identifier: keyid:6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/84qtyRzdn5we4xBoW1LVDrbiPAw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.116.192.0/22 Signature Algorithm: sha256WithRSAEncryption b5:c5:a9:04:0e:16:89:f4:5a:e9:6b:35:98:f8:57:b9:2c:44: d7:bb:99:e0:ee:ad:80:02:1c:74:46:d4:7d:73:7c:bc:bf:39: fc:17:b6:fc:33:68:4d:03:93:dc:b2:d6:4b:ab:d3:6e:0a:f2: ec:4e:79:77:91:80:f3:6c:7c:b0:50:da:17:ef:05:65:75:dc: 98:c6:5b:1f:89:77:29:f8:68:68:36:45:a9:16:76:a0:08:ce: fd:a1:73:a3:d1:85:94:bc:98:f7:d4:0b:9c:a0:a7:0b:3d:33: 66:98:a5:aa:88:b8:3c:90:f1:75:85:7a:11:de:0e:72:a0:3b: 6d:f6:90:4a:32:90:c3:13:a0:a8:2a:92:3e:35:ac:cc:30:ab: e0:54:8d:1e:f1:d0:13:e1:67:f1:49:1a:fb:fd:4c:30:d9:84: cd:29:e1:7a:5d:a1:29:61:33:2d:10:e4:d2:98:d4:65:d5:ff: 8f:8c:50:5c:ec:b9:6c:11:c1:07:68:51:5d:2e:53:ce:0a:7f: 81:2f:60:17:1d:e8:bd:6b:43:11:76:e4:a8:9a:6a:8a:47:66: 38:82:da:ea:e7:d0:51:c0:0e:6b:f9:75:b8:c4:94:7f:87:80: de:74:7d:c1:b8:2e:80:20:43:35:b2:f7:a1:c5:50:88:56:c1: 8e:fd:39:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x0Jc0qWkDGsxr8IfD698MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlZDAzOTJhYzc2NjBiZDE0NjBmYTFkNTAzMWQxODQwZDAx Yjk0MTIwHhcNMjYwMTAxMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzhhYWRjOTFjZGQ5ZjljMWVlMzEwNjg1YjUyZDUwZWI2ZTIzYzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOeUhUFTKK0Y69OnTrs9q0VcIN1s IjmYYH13CHWwCGBg+Ik4NIdWM4S5KWXK30+3CfIfqJTetTlzsRRhGxfDaUkgEPhI TVGGOgtVKT8ulKdyDxT0g5PEFeSFjOvtSiJub/edhN6Zm3AHI6/zzTgpa63ComVM alMeJn3iQ9PZmt7cPQ95PLUEBiYOrX5bPhe4/AtoyqV9YbN+xAr4LRa8FQlSvH4A YjZY7bl75AvncdNUZ0SqTJu37FK9om+Du/nkSIqacF1Vxa0QGe9jX2XOgdoz7SgZ x4Dat32rJQAK9YPZXfYgDUS6bTBRrB9ciwrU+D1obQgxgBJUM25AxrtPGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPOKrckc3Z+cHuMQaFtS1Q624jwMMB8GA1UdIwQY MBaAFG7QOSrHZgvRRg+h1QMdGEDQG5QSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnRBNUtzZG1DOUZHRDZIVkF4MFlRTkFibEJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83OGUwM2MtYzljNy00Yzg1LWJmZGQt ZThiYWY5ZmZhZGY4LzEvODRxdHlSemRuNXdlNHhCb1cxTFZEcmJpUEF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83OGUwM2MtYzljNy00Yzg1LWJmZGQtZThiYWY5ZmZhZGY4 LzEvYnRBNUtzZG1DOUZHRDZIVkF4MFlRTkFibEJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVXTAMA0G CSqGSIb3DQEBCwUAA4IBAQC1xakEDhaJ9FrpazWY+Fe5LETXu5ng7q2AAhx0RtR9 c3y8vzn8F7b8M2hNA5PcstZLq9NuCvLsTnl3kYDzbHywUNoX7wVlddyYxlsfiXcp +GhoNkWpFnagCM79oXOj0YWUvJj31AucoKcLPTNmmKWqiLg8kPF1hXoR3g5yoDtt 9pBKMpDDE6CoKpI+NazMMKvgVI0e8dAT4WfxSRr7/Uww2YTNKeF6XaEpYTMtEOTS mNRl1f+PjFBc7LlsEcEHaFFdLlPOCn+BL2AXHei9a0MRduSommqKR2Y4gtrq59BR wA5r+XW4xJR/h4DedH3BuC6AIEM1svehxVCIVsGO/TmR -----END CERTIFICATE-----Generated at Thu Jan 8 00:16:37 2026 by rpki-client