This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/A65eT7ec2V-KOYaWUfT3rzhJ1YU.roa File: A65eT7ec2V-KOYaWUfT3rzhJ1YU.roa (raw, json) Hash identifier: v7ccUdw+G21QuQPbDqT6fNGR4FGqT73WZzdSe+fyElE= Subject key identifier: 03:AE:5E:4F:B7:9C:D9:5F:8A:39:86:96:51:F4:F7:AF:38:49:D5:85 Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Certificate serial: 019B7AC7A545488C4A2EFB348D7AF204D146 Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/A65eT7ec2V-KOYaWUfT3rzhJ1YU.roa Signing time: Thu 01 Jan 2026 18:17:42 +0000 ROA not before: Thu 01 Jan 2026 18:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215796 IP address blocks: 85.209.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:a5:45:48:8c:4a:2e:fb:34:8d:7a:f2:04:d1:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Validity Not Before: Jan 1 18:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03ae5e4fb79cd95f8a39869651f4f7af3849d585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cc:85:0a:f2:47:fc:44:26:67:2f:6a:b9:69: 27:aa:25:44:6d:9c:ee:17:56:62:43:dc:53:86:82: 3e:bf:8e:2f:9b:c4:5b:2a:8c:83:86:ed:8e:36:4a: 21:6f:4e:0b:5a:7d:fd:b7:2e:b4:19:af:12:a4:0a: 6c:56:f4:1e:d6:be:69:7c:a5:43:ea:ce:5d:ca:bf: dd:9c:dc:fc:83:41:b1:0a:e0:c3:7e:16:07:7e:94: 08:a5:9f:3a:91:d5:29:fb:d3:07:0b:c9:08:54:1b: f7:64:fd:36:40:da:f6:5a:22:3f:24:d3:94:63:4f: 62:cc:dd:80:ea:a6:5c:7e:3d:77:a4:e7:37:a2:c9: 70:a8:c8:3b:57:07:95:26:5b:61:f1:a2:27:36:03: d1:bc:c1:25:05:b6:ed:e4:8c:67:4b:29:6c:e2:9a: 30:48:49:90:4d:5b:e2:18:19:a7:e9:2e:9b:70:03: f1:6e:2a:d4:6f:11:11:70:a8:1f:66:95:1b:da:66: b6:7b:3b:1c:31:89:c4:5a:0c:a9:c3:d4:ee:b4:2c: b8:02:a2:2b:a2:3d:ae:57:41:29:52:f6:72:4b:87: 4c:e2:ba:c6:e7:fb:85:98:ff:42:db:8b:ab:08:8f: ee:28:e7:dd:0e:60:9e:cb:73:15:4b:d0:3a:41:c3: 8a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:AE:5E:4F:B7:9C:D9:5F:8A:39:86:96:51:F4:F7:AF:38:49:D5:85 X509v3 Authority Key Identifier: keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/A65eT7ec2V-KOYaWUfT3rzhJ1YU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.209.8.0/24 Signature Algorithm: sha256WithRSAEncryption bd:3d:e8:45:62:a6:65:c8:b1:63:cd:39:82:07:08:4c:7c:17: 7f:5f:e1:e4:2f:38:8a:8b:d8:11:12:97:a9:80:42:2b:36:c5: e7:c7:17:54:19:b4:ab:f4:64:2b:58:9d:98:18:02:96:f7:64: 44:14:e3:f2:79:fe:32:13:db:22:b4:c5:7a:9e:7c:29:5f:7e: 34:8e:35:4f:cf:6f:5a:bb:42:a8:16:29:77:92:2e:f2:14:b8: d9:19:62:72:61:80:3c:69:36:8c:ea:d2:0c:2d:64:0c:10:a6: 58:ba:d0:18:a7:be:5f:88:0b:53:1b:07:2f:44:9e:cf:45:17: 4a:f2:1c:01:d9:06:66:e1:3e:ed:a7:09:44:87:6e:52:48:6c: 46:2b:1b:f5:45:a5:26:68:9a:d5:f0:88:93:ab:04:05:ee:48: 8b:aa:68:19:38:44:79:3b:c1:ad:f5:a2:f7:92:0a:07:92:1c: 4a:87:fa:11:32:76:f1:d8:77:42:b6:d9:50:7d:6d:8d:15:c4: 0d:a7:75:4a:41:26:ff:e9:00:f1:a5:d2:a0:86:91:1c:47:2b: 2b:5b:16:2a:e9:81:d5:ae:31:30:b5:37:54:ea:4d:cd:9f:58: 11:9a:66:32:cd:dc:d4:93:8b:84:70:df:f0:ed:a0:55:9a:c9: 88:ef:20:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x6VFSIxKLvs0jXryBNFGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0 ODBiOWMwHhcNMjYwMTAxMTgxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2FlNWU0ZmI3OWNkOTVmOGEzOTg2OTY1MWY0ZjdhZjM4NDlkNTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsyFCvJH/EQmZy9quWknqiVEbZzu F1ZiQ9xThoI+v44vm8RbKoyDhu2ONkohb04LWn39ty60Ga8SpApsVvQe1r5pfKVD 6s5dyr/dnNz8g0GxCuDDfhYHfpQIpZ86kdUp+9MHC8kIVBv3ZP02QNr2WiI/JNOU Y09izN2A6qZcfj13pOc3oslwqMg7VweVJlth8aInNgPRvMElBbbt5IxnSyls4pow SEmQTVviGBmn6S6bcAPxbirUbxERcKgfZpUb2ma2ezscMYnEWgypw9TutCy4AqIr oj2uV0EpUvZyS4dM4rrG5/uFmP9C24urCI/uKOfdDmCey3MVS9A6QcOKkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAOuXk+3nNlfijmGllH09684SdWFMB8GA1UdIwQY MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt NTczNzAxYzg0ODMzLzEvQTY1ZVQ3ZWMyVi1LT1lhV1VmVDNyemhKMVlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdEIMA0G CSqGSIb3DQEBCwUAA4IBAQC9PehFYqZlyLFjzTmCBwhMfBd/X+HkLziKi9gREpep gEIrNsXnxxdUGbSr9GQrWJ2YGAKW92REFOPyef4yE9sitMV6nnwpX340jjVPz29a u0KoFil3ki7yFLjZGWJyYYA8aTaM6tIMLWQMEKZYutAYp75fiAtTGwcvRJ7PRRdK 8hwB2QZm4T7tpwlEh25SSGxGKxv1RaUmaJrV8IiTqwQF7kiLqmgZOER5O8Gt9aL3 kgoHkhxKh/oRMnbx2HdCttlQfW2NFcQNp3VKQSb/6QDxpdKghpEcRysrWxYq6YHV rjEwtTdU6k3Nn1gRmmYyzdzUk4uEcN/w7aBVmsmI7yBX -----END CERTIFICATE-----Generated at Mon Jan 19 20:35:05 2026 by rpki-client