This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/di7BBo89yLvPzYRgI1CnXRkGKek.roa File: di7BBo89yLvPzYRgI1CnXRkGKek.roa (raw, json) Hash identifier: J2fGlbJBwYkKOrpnLxq93QttJnUWfvQ1tz5acXy/Cg8= Subject key identifier: 76:2E:C1:06:8F:3D:C8:BB:CF:CD:84:60:23:50:A7:5D:19:06:29:E9 Certificate issuer: /CN=234cd34911cfce946a22ea84663738cdcc076d45 Certificate serial: 019B78A36CFED68782506C4C2D1A331B55CB Authority key identifier: 23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/di7BBo89yLvPzYRgI1CnXRkGKek.roa Signing time: Thu 01 Jan 2026 08:18:54 +0000 ROA not before: Thu 01 Jan 2026 08:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60070 IP address blocks: 85.208.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:6c:fe:d6:87:82:50:6c:4c:2d:1a:33:1b:55:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234cd34911cfce946a22ea84663738cdcc076d45 Validity Not Before: Jan 1 08:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=762ec1068f3dc8bbcfcd84602350a75d190629e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ae:dd:33:5b:a1:cd:0b:98:8c:0d:2f:49:04: f6:2b:be:d4:36:dd:c6:97:4d:85:3c:fa:38:11:e1: f3:33:00:a3:b4:78:86:b6:05:5a:9e:c7:24:14:ac: 54:8d:76:37:73:31:c7:a4:60:06:01:24:15:2b:66: 6a:00:5b:cf:52:ef:61:76:20:ad:7f:5c:04:49:70: 28:e3:b5:29:61:a8:28:c8:8b:bc:67:da:9a:c0:6e: d2:d2:7e:36:88:e3:4e:b3:0b:aa:e6:da:39:70:b7: cd:f9:e5:9f:f7:b5:24:52:a8:0d:7d:b5:04:c3:a9: 86:93:a8:08:9d:d4:e4:99:81:38:fb:02:bb:b5:ce: 23:8c:c6:9f:d4:7f:3d:8d:5b:0e:62:20:e6:b1:5e: e1:de:42:18:72:58:37:e3:88:63:ed:11:24:43:89: 27:0e:ca:fb:5f:0e:0a:c2:47:f9:ca:60:b4:18:a8: 4f:04:c0:82:08:63:99:58:39:0d:c6:68:f0:0e:48: 3c:0e:69:62:a0:06:bf:73:88:9c:20:c9:97:6a:a3: bf:34:e3:1c:81:87:9f:50:cb:08:af:57:93:4a:30: 2f:11:d6:91:2a:65:54:f4:48:99:85:df:c9:f4:1d: 99:59:e8:f5:4c:4d:57:bc:c3:3b:b1:75:48:7e:7e: b9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:2E:C1:06:8F:3D:C8:BB:CF:CD:84:60:23:50:A7:5D:19:06:29:E9 X509v3 Authority Key Identifier: keyid:23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/di7BBo89yLvPzYRgI1CnXRkGKek.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.208.243.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:3c:bc:2a:0d:f8:0a:a2:7e:fb:5c:9e:bf:9c:0b:7f:61:27: 5c:85:2b:45:8b:23:41:a8:22:44:84:f3:eb:cb:84:fc:e6:69: f9:88:5e:82:61:8a:7c:34:9d:da:9a:36:7c:82:9b:74:3a:09: ed:35:79:03:40:a2:db:82:b3:66:3a:38:35:d8:81:f7:47:6e: cc:c7:ef:98:df:08:b4:3c:55:c4:c5:be:f9:59:ad:3d:52:d6: e1:90:9a:f1:81:04:8a:7f:e1:1a:44:7c:97:07:34:e7:9b:e7: e3:12:03:2a:66:c3:86:cd:bf:87:fe:7b:d9:7e:40:ea:9c:a5: 69:4e:af:62:f3:b2:ba:be:82:66:ad:ff:a2:74:fc:4b:f9:47: 83:29:59:43:c8:0f:65:89:d2:f7:94:f3:7d:9b:c0:4b:3c:39: ac:d8:02:99:b4:6e:82:3c:a8:84:dc:2a:b4:ca:d5:4b:fd:3f: d7:3e:ef:bb:c5:c0:e9:ba:a3:54:bc:b9:da:80:73:27:b0:b5: 18:62:83:7b:37:f0:e2:4b:87:6d:07:14:48:15:1e:bb:0b:f8: 03:d8:f7:91:33:d2:f4:97:eb:84:1c:60:47:ce:5c:7c:0a:df: a0:c7:98:4b:af:58:c0:cd:54:ea:47:17:11:a4:e3:ef:32:79: 59:f2:5f:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o2z+1oeCUGxMLRozG1XLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGNkMzQ5MTFjZmNlOTQ2YTIyZWE4NDY2MzczOGNkY2Mw NzZkNDUwHhcNMjYwMTAxMDgxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjJlYzEwNjhmM2RjOGJiY2ZjZDg0NjAyMzUwYTc1ZDE5MDYyOWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw67dM1uhzQuYjA0vSQT2K77UNt3G l02FPPo4EeHzMwCjtHiGtgVansckFKxUjXY3czHHpGAGASQVK2ZqAFvPUu9hdiCt f1wESXAo47UpYagoyIu8Z9qawG7S0n42iONOswuq5to5cLfN+eWf97UkUqgNfbUE w6mGk6gIndTkmYE4+wK7tc4jjMaf1H89jVsOYiDmsV7h3kIYclg344hj7REkQ4kn Dsr7Xw4Kwkf5ymC0GKhPBMCCCGOZWDkNxmjwDkg8DmlioAa/c4icIMmXaqO/NOMc gYefUMsIr1eTSjAvEdaRKmVU9EiZhd/J9B2ZWej1TE1XvMM7sXVIfn65gwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHYuwQaPPci7z82EYCNQp10ZBinpMB8GA1UdIwQY MBaAFCNM00kRz86UaiLqhGY3OM3MB21FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB6VFNSSFB6cFJxSXVxRVpqYzR6Y3dIYlVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81ZjUzNmYtMzhmZS00NWJlLWI4Zjkt MTI1NTAwZDJiZTk0LzEvZGk3QkJvODl5THZQellSZ0kxQ25YUmtHS2VrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi81ZjUzNmYtMzhmZS00NWJlLWI4ZjktMTI1NTAwZDJiZTk0 LzEvSTB6VFNSSFB6cFJxSXVxRVpqYzR6Y3dIYlVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdDzMA0G CSqGSIb3DQEBCwUAA4IBAQBcPLwqDfgKon77XJ6/nAt/YSdchStFiyNBqCJEhPPr y4T85mn5iF6CYYp8NJ3amjZ8gpt0OgntNXkDQKLbgrNmOjg12IH3R27Mx++Y3wi0 PFXExb75Wa09UtbhkJrxgQSKf+EaRHyXBzTnm+fjEgMqZsOGzb+H/nvZfkDqnKVp Tq9i87K6voJmrf+idPxL+UeDKVlDyA9lidL3lPN9m8BLPDms2AKZtG6CPKiE3Cq0 ytVL/T/XPu+7xcDpuqNUvLnagHMnsLUYYoN7N/DiS4dtBxRIFR67C/gD2PeRM9L0 l+uEHGBHzlx8Ct+gx5hLr1jAzVTqRxcRpOPvMnlZ8l+D -----END CERTIFICATE-----Generated at Mon Feb 9 20:03:20 2026 by rpki-client