This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/De5ufO6Y06gtV_o3Xr37ttzDs30.roa File: De5ufO6Y06gtV_o3Xr37ttzDs30.roa (raw, json) Hash identifier: 5E7IuaicadsOosL60n3e2M2esKe7z1EV4Dvc8Y0q56A= Subject key identifier: 0D:EE:6E:7C:EE:98:D3:A8:2D:57:FA:37:5E:BD:FB:B6:DC:C3:B3:7D Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89 Certificate serial: 019B7B3697B71DE8A03C778F87F96A3FDAA9 Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/De5ufO6Y06gtV_o3Xr37ttzDs30.roa Signing time: Thu 01 Jan 2026 20:18:53 +0000 ROA not before: Thu 01 Jan 2026 20:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13213 IP address blocks: 85.203.22.0/24 maxlen: 24 85.203.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:97:b7:1d:e8:a0:3c:77:8f:87:f9:6a:3f:da:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89 Validity Not Before: Jan 1 20:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0dee6e7cee98d3a82d57fa375ebdfbb6dcc3b37d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:25:a9:3f:2c:f3:0c:f7:fd:ea:2f:7f:e8:b6: 83:b2:8d:2c:69:88:29:ac:db:85:7f:cc:29:53:4e: c0:46:09:89:8f:86:15:3f:2e:f6:1d:cf:97:6e:03: 30:2f:dd:84:b0:c9:ef:99:ef:d4:8e:e2:d4:b7:44: 2e:a1:56:30:a1:1f:cd:c5:52:b4:65:9a:47:5e:6f: 79:29:f7:10:85:f3:f5:d9:52:4c:19:fe:fa:fc:e1: 3e:56:0e:b0:a8:a2:b8:04:9b:e4:27:fd:5e:4d:ba: 66:31:2d:82:10:70:2c:78:60:64:ff:7a:b0:b6:4b: ec:59:93:e4:60:6a:75:82:d6:4d:49:cc:88:78:68: 77:7f:48:27:2c:f4:7e:99:d6:de:02:e1:d3:af:53: 01:a1:96:23:ff:de:8e:c8:c6:53:57:33:66:05:ee: 81:b2:c8:2c:87:87:24:35:da:90:cd:ed:1e:88:02: bc:5e:69:0f:32:be:02:14:51:5f:d7:6a:21:29:9e: 7d:c3:49:5f:4f:48:e8:9e:d4:90:e6:7c:b3:1e:e0: 2f:65:4e:df:d2:bc:b6:de:82:de:3b:b5:df:bc:03: f0:7e:84:64:47:27:86:0a:0d:6c:73:57:09:89:8a: 5d:19:45:aa:8e:63:d9:96:cc:53:b7:f0:41:50:bf: c7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:EE:6E:7C:EE:98:D3:A8:2D:57:FA:37:5E:BD:FB:B6:DC:C3:B3:7D X509v3 Authority Key Identifier: keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/De5ufO6Y06gtV_o3Xr37ttzDs30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.203.22.0/24 85.203.46.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:8c:65:c0:4f:5b:aa:7e:ec:46:aa:39:c8:c2:0b:d2:81:56: ef:1d:48:fa:a2:59:59:42:b3:28:e0:49:c7:d8:cc:d3:16:5b: a0:b7:c9:92:00:ec:09:49:43:0d:db:4c:34:a0:0c:81:d5:f5: bc:2f:de:bc:76:a9:38:f7:4b:fe:d5:2d:de:d8:62:8e:21:75: 53:5c:86:df:37:c0:ac:96:91:e2:eb:ab:8b:ca:91:29:27:dd: 1d:78:c2:6f:86:6c:fd:a2:cc:7b:7d:6a:b2:52:df:ce:1d:88: 25:e4:04:56:b2:00:7b:0a:33:d7:de:65:11:ba:75:d4:78:aa: 11:ec:25:c2:6f:1e:a5:50:a2:4d:da:7b:41:d2:f3:9a:fd:07: b2:74:48:d5:d8:16:d7:5a:54:bf:21:91:9a:14:83:d2:83:99: 67:f6:fb:bc:a4:b8:88:9e:b1:b3:d6:36:44:7e:5f:2f:4d:eb: 42:d2:47:24:84:f1:b0:c7:0c:bf:c7:77:bd:df:bf:9c:fc:a4: df:a2:2f:fa:31:35:2e:ad:91:4d:b7:ba:70:9b:62:f6:51:39: 76:48:92:a5:e5:19:5b:32:db:4c:a3:b5:79:08:0c:3d:d4:2a: 71:6b:0f:64:0a:47:1d:3b:a7:e8:88:93:fc:27:04:3a:50:f7: 0e:a9:d2:24 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7Npe3HeigPHePh/lqP9qpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MmJkNzZhNWNhYzI4M2VjZTBhMGY4ZWFiMmM5NzAyMTQw MWZiODkwHhcNMjYwMTAxMjAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGVlNmU3Y2VlOThkM2E4MmQ1N2ZhMzc1ZWJkZmJiNmRjYzNiMzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSWpPyzzDPf96i9/6LaDso0saYgp rNuFf8wpU07ARgmJj4YVPy72Hc+XbgMwL92EsMnvme/UjuLUt0QuoVYwoR/NxVK0 ZZpHXm95KfcQhfP12VJMGf76/OE+Vg6wqKK4BJvkJ/1eTbpmMS2CEHAseGBk/3qw tkvsWZPkYGp1gtZNScyIeGh3f0gnLPR+mdbeAuHTr1MBoZYj/96OyMZTVzNmBe6B ssgsh4ckNdqQze0eiAK8XmkPMr4CFFFf12ohKZ59w0lfT0jontSQ5nyzHuAvZU7f 0ry23oLeO7XfvAPwfoRkRyeGCg1sc1cJiYpdGUWqjmPZlsxTt/BBUL/HzwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFA3ubnzumNOoLVf6N169+7bcw7N9MB8GA1UdIwQY MBaAFJYr12pcrCg+zgoPjqsslwIUAfuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMt NmFiMTExNTVmNmZiLzEvRGU1dWZPNlkwNmd0Vl9vM1hyMzd0dHpEczMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMtNmFiMTExNTVmNmZi LzEvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVcsWAwQA VcsuMA0GCSqGSIb3DQEBCwUAA4IBAQALjGXAT1uqfuxGqjnIwgvSgVbvHUj6ollZ QrMo4EnH2MzTFlugt8mSAOwJSUMN20w0oAyB1fW8L968dqk490v+1S3e2GKOIXVT XIbfN8CslpHi66uLypEpJ90deMJvhmz9osx7fWqyUt/OHYgl5ARWsgB7CjPX3mUR unXUeKoR7CXCbx6lUKJN2ntB0vOa/QeydEjV2BbXWlS/IZGaFIPSg5ln9vu8pLiI nrGz1jZEfl8vTetC0kckhPGwxwy/x3e937+c/KTfoi/6MTUurZFNt7pwm2L2UTl2 SJKl5RlbMttMo7V5CAw91Cpxaw9kCkcdO6foiJP8JwQ6UPcOqdIk -----END CERTIFICATE-----Generated at Wed Jan 21 02:50:06 2026 by rpki-client