This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/1-Xz0ckI9CBVF034QnylUqVKCJ2k.roa File: 1-Xz0ckI9CBVF034QnylUqVKCJ2k.roa (raw, json) Hash identifier: ZY5qyuJzGWTMv1saHpay6f1Y6Lu8rpI6Q1Iz7J18iUs= Subject key identifier: F9:7C:F4:72:42:3D:08:15:45:D3:7E:10:9F:29:54:A9:52:82:27:69 Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89 Certificate serial: 019B7B369D69FF6E90332D0B6265493F45FF Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/1-Xz0ckI9CBVF034QnylUqVKCJ2k.roa Signing time: Thu 01 Jan 2026 20:18:55 +0000 ROA not before: Thu 01 Jan 2026 20:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 85.203.8.0/24 maxlen: 24 85.203.15.0/24 maxlen: 24 85.203.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:9d:69:ff:6e:90:33:2d:0b:62:65:49:3f:45:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89 Validity Not Before: Jan 1 20:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f97cf472423d081545d37e109f2954a952822769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a3:5d:b4:90:8a:05:0b:ca:40:a9:b2:3e:b2: 65:40:39:25:65:b1:e3:85:f9:fa:fb:c9:08:60:0a: 34:9e:74:c4:c7:24:d8:61:70:ad:bf:33:1d:75:e2: 50:fc:12:ba:c6:38:27:1d:5e:f9:be:f8:c8:78:26: be:0c:58:96:4f:9d:20:ca:5a:4d:c6:ed:c9:30:f4: 20:b6:e5:88:b8:8d:60:ed:bc:d8:f8:83:ac:e6:78: f3:71:12:6d:f6:72:14:44:03:15:64:7a:10:6e:34: 43:55:79:45:eb:03:bf:9e:66:01:a6:3d:b8:6d:3d: 25:a7:c4:04:54:75:cf:b0:d8:28:18:0b:00:4e:84: 5d:97:f2:df:dd:db:7c:bd:a2:7b:d1:9d:a1:82:6c: 78:17:34:a1:65:8e:fc:fc:aa:d9:22:68:42:30:7c: dc:97:b8:ab:de:9d:48:57:87:fe:55:8f:cc:27:32: cb:e0:88:d0:2a:17:94:53:b1:56:ac:16:41:9d:5c: d2:ed:b5:4c:c9:90:fd:2b:8e:61:a1:89:2f:5d:c2: 55:69:7d:78:46:67:9a:87:be:98:2b:b4:0c:53:fa: 43:25:a4:9d:c4:19:aa:22:69:70:7f:83:8d:81:1d: fd:51:1c:39:53:90:9c:e4:fd:47:02:47:2f:c8:78: d0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:7C:F4:72:42:3D:08:15:45:D3:7E:10:9F:29:54:A9:52:82:27:69 X509v3 Authority Key Identifier: keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/1-Xz0ckI9CBVF034QnylUqVKCJ2k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.203.8.0/24 85.203.15.0/24 85.203.36.0/24 Signature Algorithm: sha256WithRSAEncryption 17:e1:b7:3b:f0:fe:90:2b:4d:ee:bb:36:d2:b6:14:af:a4:de: bd:da:5b:a7:f9:a7:e4:62:5b:80:2d:ff:48:3a:21:76:e2:48: 89:c0:06:3c:9a:42:77:15:66:6e:1e:4f:d8:f6:08:42:30:52: 7f:9d:c3:97:b9:e9:93:dd:66:c4:52:99:78:70:2b:e9:0c:ab: 80:36:87:09:84:f0:26:ac:ba:87:32:32:23:81:b8:6a:16:a1: bb:ac:7a:69:2e:a9:c7:37:a9:f7:0d:7a:11:dc:08:16:b0:2b: 3b:b3:2a:d4:61:16:76:9f:d3:12:5e:74:a9:73:53:53:08:01: d5:b2:d4:66:1a:ba:37:f8:1b:e4:41:0e:91:60:84:31:81:d9: 22:95:e4:4e:05:38:2f:a0:57:f0:e5:f0:68:7f:eb:66:9b:3f: db:37:b9:0f:af:74:45:ca:b1:0f:74:ec:34:6e:00:25:7b:bd: dd:85:d1:fe:d1:e7:30:e6:73:0a:ff:39:94:a0:0f:54:58:8e: 8b:0f:8a:59:f9:b1:dd:61:31:7f:91:25:17:d1:51:8e:12:f6: 47:7c:eb:e4:34:a1:6f:19:fa:9d:37:c3:d9:03:7d:79:ca:1a: e0:b3:77:cc:76:5e:88:74:98:24:c1:ea:39:2a:0d:ac:72:c9: ce:23:c6:ff -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt7Np1p/26QMy0LYmVJP0X/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MmJkNzZhNWNhYzI4M2VjZTBhMGY4ZWFiMmM5NzAyMTQw MWZiODkwHhcNMjYwMTAxMjAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTdjZjQ3MjQyM2QwODE1NDVkMzdlMTA5ZjI5NTRhOTUyODIyNzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16NdtJCKBQvKQKmyPrJlQDklZbHj hfn6+8kIYAo0nnTExyTYYXCtvzMddeJQ/BK6xjgnHV75vvjIeCa+DFiWT50gylpN xu3JMPQgtuWIuI1g7bzY+IOs5njzcRJt9nIURAMVZHoQbjRDVXlF6wO/nmYBpj24 bT0lp8QEVHXPsNgoGAsAToRdl/Lf3dt8vaJ70Z2hgmx4FzShZY78/KrZImhCMHzc l7ir3p1IV4f+VY/MJzLL4IjQKheUU7FWrBZBnVzS7bVMyZD9K45hoYkvXcJVaX14 Rmeah76YK7QMU/pDJaSdxBmqImlwf4ONgR39URw5U5Cc5P1HAkcvyHjQlwIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFPl89HJCPQgVRdN+EJ8pVKlSgidpMB8GA1UdIwQY MBaAFJYr12pcrCg+zgoPjqsslwIUAfuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMt NmFiMTExNTVmNmZiLzEvMS1YejBja0k5Q0JWRjAzNFFueWxVcVZLQ0oyay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODQvMDQ2NDYwLTEwMmMtNDkzMC04NDJjLTZhYjExMTU1ZjZm Yi8xL2xpdlhhbHlzS0Q3T0NnLU9xeXlYQWhRQi00ay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAFXLCAME AFXLDwMEAFXLJDANBgkqhkiG9w0BAQsFAAOCAQEAF+G3O/D+kCtN7rs20rYUr6Te vdpbp/mn5GJbgC3/SDohduJIicAGPJpCdxVmbh5P2PYIQjBSf53Dl7npk91mxFKZ eHAr6QyrgDaHCYTwJqy6hzIyI4G4ahahu6x6aS6pxzep9w16EdwIFrArO7Mq1GEW dp/TEl50qXNTUwgB1bLUZhq6N/gb5EEOkWCEMYHZIpXkTgU4L6BX8OXwaH/rZps/ 2ze5D690RcqxD3TsNG4AJXu93YXR/tHnMOZzCv85lKAPVFiOiw+KWfmx3WExf5El F9FRjhL2R3zr5DShbxn6nTfD2QN9ecoa4LN3zHZeiHSYJMHqOSoNrHLJziPG/w== -----END CERTIFICATE-----Generated at Wed Jan 21 02:49:03 2026 by rpki-client