This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/INMig3Zy-dQgwfBhoGL01YH4fc8.roa File: INMig3Zy-dQgwfBhoGL01YH4fc8.roa (raw, json) Hash identifier: leDHQRzQxheOPvwkn7FM2wxNIq/5wYwXFgbHaxmfmCI= Subject key identifier: 20:D3:22:83:76:72:F9:D4:20:C1:F0:61:A0:62:F4:D5:81:F8:7D:CF Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89 Certificate serial: 019B7B36961DDED5A18F053398121AA1E386 Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/INMig3Zy-dQgwfBhoGL01YH4fc8.roa Signing time: Thu 01 Jan 2026 20:18:53 +0000 ROA not before: Thu 01 Jan 2026 20:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6762 IP address blocks: 85.203.28.0/22 maxlen: 24 85.203.28.0/24 maxlen: 24 85.203.29.0/24 maxlen: 24 85.203.30.0/24 maxlen: 24 85.203.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:96:1d:de:d5:a1:8f:05:33:98:12:1a:a1:e3:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89 Validity Not Before: Jan 1 20:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20d322837672f9d420c1f061a062f4d581f87dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e4:96:c6:81:27:e1:14:df:28:31:b2:fd:72: 18:cd:7d:75:e2:df:5e:8f:8a:2d:9d:55:d2:4e:99: 41:03:47:10:ea:d3:ce:02:fe:86:53:f8:40:c2:53: 9f:d7:9d:32:af:83:1e:e3:da:4e:5f:35:03:e4:d2: 47:fd:3e:34:78:67:f6:42:e2:0e:3c:d6:1a:49:8c: 22:6c:08:05:d5:5f:0d:b5:5f:8f:4f:a1:59:0c:2f: 0f:62:03:f9:e9:71:43:41:48:39:9d:c5:fb:1c:4b: f7:52:51:8e:18:59:c6:7d:e1:6b:a9:d8:34:33:b5: 9a:70:39:bb:30:4a:8b:a5:62:5c:87:0a:e7:ee:0e: 50:19:32:2a:8c:01:69:02:fc:ad:df:ea:10:96:c3: 67:de:60:bc:57:34:34:78:74:64:20:f6:98:97:08: 36:55:8b:32:02:73:cd:8d:b6:13:af:02:4a:85:55: cb:95:2b:97:32:7c:43:77:7d:de:89:ca:ba:3c:f4: 91:76:b8:7c:ca:c6:d3:5d:0f:ca:89:36:c3:d8:fd: 2f:ed:e6:b1:cd:97:7d:70:5d:0e:f0:fb:ce:ae:5c: 5f:55:a4:0b:02:2b:30:eb:d8:1f:19:ca:7e:e2:cb: 24:7c:67:4c:3f:6e:75:69:21:92:15:ab:f2:89:23: c0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D3:22:83:76:72:F9:D4:20:C1:F0:61:A0:62:F4:D5:81:F8:7D:CF X509v3 Authority Key Identifier: keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/INMig3Zy-dQgwfBhoGL01YH4fc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.203.28.0/22 Signature Algorithm: sha256WithRSAEncryption 05:42:af:b5:54:74:e3:23:e2:95:3e:e8:19:1f:83:72:bd:5e: f5:67:7b:54:85:72:bb:51:d2:10:35:c6:c6:31:23:89:71:51: 7c:4f:3e:ff:f0:af:63:ef:9a:e5:d9:5a:22:7e:52:06:21:59: 39:0b:33:78:45:a2:9b:71:29:20:c6:3e:60:9f:26:a3:15:42: 2e:5f:ca:ff:87:e1:69:40:ee:72:cc:e6:71:03:9e:33:aa:55: 61:ea:4e:f8:41:81:83:0b:0b:1a:d9:6d:dd:e4:09:0d:df:b3: 06:bd:15:1d:9e:a2:2f:38:03:f1:80:c9:9b:b1:90:6e:1e:50: 2d:74:94:58:ed:b0:4b:56:8a:85:bc:84:7b:22:3d:e5:ff:ac: c2:98:ab:9f:c8:c5:0c:e7:f9:1c:39:41:fd:9d:3b:00:2a:40: f5:87:a0:ca:08:e6:39:1d:52:58:15:6d:d9:d7:e1:51:8a:c6: b5:e0:5c:44:0b:a1:1d:53:ed:5d:b4:db:43:b9:0c:77:a2:90: b2:4c:e0:ce:2f:f1:a9:72:92:93:b6:3b:3b:16:82:db:2f:4b: b4:9e:90:ee:bf:6f:17:7c:6b:5c:4f:ad:20:4d:e7:f8:89:06: cf:53:fe:17:de:44:b1:1f:82:3c:8d:86:16:f5:97:8e:1a:25: 5e:65:73:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NpYd3tWhjwUzmBIaoeOGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MmJkNzZhNWNhYzI4M2VjZTBhMGY4ZWFiMmM5NzAyMTQw MWZiODkwHhcNMjYwMTAxMjAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGQzMjI4Mzc2NzJmOWQ0MjBjMWYwNjFhMDYyZjRkNTgxZjg3ZGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteSWxoEn4RTfKDGy/XIYzX114t9e j4otnVXSTplBA0cQ6tPOAv6GU/hAwlOf150yr4Me49pOXzUD5NJH/T40eGf2QuIO PNYaSYwibAgF1V8NtV+PT6FZDC8PYgP56XFDQUg5ncX7HEv3UlGOGFnGfeFrqdg0 M7WacDm7MEqLpWJchwrn7g5QGTIqjAFpAvyt3+oQlsNn3mC8VzQ0eHRkIPaYlwg2 VYsyAnPNjbYTrwJKhVXLlSuXMnxDd33eicq6PPSRdrh8ysbTXQ/KiTbD2P0v7eax zZd9cF0O8PvOrlxfVaQLAisw69gfGcp+4sskfGdMP251aSGSFavyiSPA3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCDTIoN2cvnUIMHwYaBi9NWB+H3PMB8GA1UdIwQY MBaAFJYr12pcrCg+zgoPjqsslwIUAfuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMt NmFiMTExNTVmNmZiLzEvSU5NaWczWnktZFFnd2ZCaG9HTDAxWUg0ZmM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMtNmFiMTExNTVmNmZi LzEvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVcscMA0G CSqGSIb3DQEBCwUAA4IBAQAFQq+1VHTjI+KVPugZH4NyvV71Z3tUhXK7UdIQNcbG MSOJcVF8Tz7/8K9j75rl2VoiflIGIVk5CzN4RaKbcSkgxj5gnyajFUIuX8r/h+Fp QO5yzOZxA54zqlVh6k74QYGDCwsa2W3d5AkN37MGvRUdnqIvOAPxgMmbsZBuHlAt dJRY7bBLVoqFvIR7Ij3l/6zCmKufyMUM5/kcOUH9nTsAKkD1h6DKCOY5HVJYFW3Z 1+FRisa14FxEC6EdU+1dtNtDuQx3opCyTODOL/GpcpKTtjs7FoLbL0u0npDuv28X fGtcT60gTef4iQbPU/4X3kSxH4I8jYYW9ZeOGiVeZXOf -----END CERTIFICATE-----Generated at Tue Jan 20 21:16:53 2026 by rpki-client