This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/sc53o3je4Vl8lQ4MzbfLJ00U0_I.roa File: sc53o3je4Vl8lQ4MzbfLJ00U0_I.roa (raw, json) Hash identifier: fOulSuCVr0MwAAFZSo/zMrnO03rxiziNf5Qwgk9/RVE= Subject key identifier: B1:CE:77:A3:78:DE:E1:59:7C:95:0E:0C:CD:B7:CB:27:4D:14:D3:F2 Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F84754EF9F970795F82033BF8BE350C Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/sc53o3je4Vl8lQ4MzbfLJ00U0_I.roa Signing time: Fri 02 Jan 2026 16:22:25 +0000 ROA not before: Fri 02 Jan 2026 16:22:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208880 IP address blocks: 85.153.169.0/24 maxlen: 24 176.236.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:75:4e:f9:f9:70:79:5f:82:03:3b:f8:be:35:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1ce77a378dee1597c950e0ccdb7cb274d14d3f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:12:90:97:8b:45:7a:4b:6b:57:00:8b:8f:0d: 1f:20:77:49:17:30:05:cc:e1:9a:b7:18:9e:aa:c8: fe:a7:cb:32:77:2e:ad:98:f0:84:18:ed:87:d2:2c: 1c:a3:ff:b3:90:04:f7:df:9d:f5:3c:4d:e7:9c:b1: af:10:1b:bc:9c:19:ee:f0:de:83:b0:64:43:5a:4d: 2b:fa:8e:b5:36:e6:08:4c:5f:85:b4:c0:7f:f4:a0: c0:ec:7d:6f:c3:b4:c8:a6:6c:79:24:9b:99:98:d4: c9:b5:04:69:bd:64:73:ee:7e:db:21:12:d0:e3:c7: e3:5f:0c:c0:cc:eb:6a:66:4c:65:69:d2:97:8e:5c: 27:8a:0a:00:37:19:a6:b3:12:e1:a4:07:e1:b5:cb: f2:a1:1a:4a:cf:07:e4:38:05:dd:ce:21:44:45:01: 5c:19:bd:2e:c7:0f:f5:98:bf:f9:1b:ec:68:41:55: 17:dd:0e:42:d3:a9:fd:76:9d:aa:2f:53:0e:a1:4f: 01:ec:36:32:f3:90:41:86:97:47:57:a1:e9:63:fb: a3:73:ec:14:47:9a:bd:06:61:02:ce:b0:2f:41:ee: 1b:be:75:7f:4f:87:85:da:9b:60:33:3f:7f:f6:26: ff:0f:c9:69:8f:50:41:18:91:28:57:d6:c6:c5:9a: 4d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CE:77:A3:78:DE:E1:59:7C:95:0E:0C:CD:B7:CB:27:4D:14:D3:F2 X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/sc53o3je4Vl8lQ4MzbfLJ00U0_I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.153.169.0/24 176.236.245.0/24 Signature Algorithm: sha256WithRSAEncryption 12:41:2a:46:12:23:df:08:0a:8f:5d:83:68:22:17:4f:21:2c: 75:be:8a:82:7e:da:21:7f:21:30:7a:32:a9:6a:a7:d8:78:a6: 5e:6f:75:e2:78:f7:fe:f7:d0:61:15:ca:61:51:ea:39:68:f3: b6:e2:31:12:3e:ac:89:3e:7e:a4:90:e1:f9:06:b5:d8:6c:87: 12:48:8d:06:5a:63:6c:05:07:c1:a4:a4:72:cb:f8:f3:7c:dc: ef:72:47:8c:59:2c:c4:5a:33:ac:67:73:cc:96:e9:16:53:6a: 48:dc:74:7b:da:3e:83:e0:91:43:65:33:49:04:d5:14:a8:3b: bb:45:2b:1f:2a:98:f0:05:ed:61:79:9f:e0:05:b9:ba:1b:d6: fb:b4:58:7f:66:cd:cb:70:42:13:25:3c:bf:aa:78:47:ff:8a: 2e:3b:0d:43:38:a5:2c:85:60:d2:83:40:c4:50:e8:56:91:fb: 5f:d6:54:0e:16:aa:f8:6e:ce:e1:55:dd:e8:2b:2a:2e:2c:81: 4b:a2:d0:bc:4e:b7:fa:ee:2b:90:e5:9f:5e:1b:20:0c:07:cb: a0:ec:df:6d:d2:84:e9:03:e8:d7:2a:fd:e3:08:b6:f7:59:b4: 73:fb:dd:46:74:c2:f9:43:1e:89:21:b0:3a:87:8c:80:0c:06: e6:bd:67:fc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hHVO+flweV+CAzv4vjUMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWNlNzdhMzc4ZGVlMTU5N2M5NTBlMGNjZGI3Y2IyNzRkMTRkM2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BKQl4tFektrVwCLjw0fIHdJFzAF zOGatxieqsj+p8sydy6tmPCEGO2H0iwco/+zkAT33531PE3nnLGvEBu8nBnu8N6D sGRDWk0r+o61NuYITF+FtMB/9KDA7H1vw7TIpmx5JJuZmNTJtQRpvWRz7n7bIRLQ 48fjXwzAzOtqZkxladKXjlwnigoANxmmsxLhpAfhtcvyoRpKzwfkOAXdziFERQFc Gb0uxw/1mL/5G+xoQVUX3Q5C06n9dp2qL1MOoU8B7DYy85BBhpdHV6HpY/ujc+wU R5q9BmECzrAvQe4bvnV/T4eF2ptgMz9/9ib/D8lpj1BBGJEoV9bGxZpN7wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLHOd6N43uFZfJUODM23yydNFNPyMB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvc2M1M28zamU0Vmw4bFE0TXpiZkxKMDBVMF9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVZmpAwQA sOz1MA0GCSqGSIb3DQEBCwUAA4IBAQASQSpGEiPfCAqPXYNoIhdPISx1voqCftoh fyEwejKpaqfYeKZeb3XiePf+99BhFcphUeo5aPO24jESPqyJPn6kkOH5BrXYbIcS SI0GWmNsBQfBpKRyy/jzfNzvckeMWSzEWjOsZ3PMlukWU2pI3HR72j6D4JFDZTNJ BNUUqDu7RSsfKpjwBe1heZ/gBbm6G9b7tFh/Zs3LcEITJTy/qnhH/4ouOw1DOKUs hWDSg0DEUOhWkftf1lQOFqr4bs7hVd3oKyouLIFLotC8Trf67iuQ5Z9eGyAMB8ug 7N9t0oTpA+jXKv3jCLb3WbRz+91GdML5Qx6JIbA6h4yADAbmvWf8 -----END CERTIFICATE-----Generated at Mon Jan 26 08:40:02 2026 by rpki-client