This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/KeqImmzvqvUw699BI75ZaQ7ioDw.roa File: KeqImmzvqvUw699BI75ZaQ7ioDw.roa (raw, json) Hash identifier: VHvGEdrea3UPh7EJODxEgR688m3Nrv3k0gMHJv5zc0k= Subject key identifier: 29:EA:88:9A:6C:EF:AA:F5:30:EB:DF:41:23:BE:59:69:0E:E2:A0:3C Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89 Certificate serial: 019B7B369C77BE52DE71C09675B26B1E05A4 Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/KeqImmzvqvUw699BI75ZaQ7ioDw.roa Signing time: Thu 01 Jan 2026 20:18:55 +0000 ROA not before: Thu 01 Jan 2026 20:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54103 IP address blocks: 85.203.48.0/22 maxlen: 22 85.203.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:9c:77:be:52:de:71:c0:96:75:b2:6b:1e:05:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89 Validity Not Before: Jan 1 20:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29ea889a6cefaaf530ebdf4123be59690ee2a03c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4f:09:5b:79:18:81:3e:81:fc:de:b6:17:47: e2:0f:40:b8:f8:cf:c1:cc:f1:45:44:cb:42:b6:93: 2e:93:ee:d6:b0:af:40:83:2a:94:4b:61:02:56:e4: 78:5b:b9:ce:4f:59:2d:dc:2c:9b:db:9b:9e:d7:b9: 9c:0c:a4:93:7d:e6:ca:d3:2b:c7:32:d6:dd:7d:ea: bd:a6:dd:c6:1e:b3:62:52:a9:f1:67:32:4e:e1:6b: d0:87:c1:2b:3d:43:53:8c:52:40:4b:10:a7:f8:58: b7:fe:01:cc:a2:69:b2:02:5c:c9:47:98:b8:18:39: 6c:b1:f2:ce:f5:d8:63:af:e5:33:c7:fa:e1:e2:2d: 63:63:31:df:55:e8:2b:d6:98:c8:9f:12:0f:4f:ea: f6:7d:3b:73:ac:e9:ad:1a:16:dc:ec:71:0e:3f:5b: d7:9d:20:24:28:cd:96:c6:b9:98:d4:31:b8:66:d6: e5:fa:0c:16:a0:9f:0b:6d:f6:08:28:de:6f:d6:bc: 53:99:b7:03:aa:20:97:61:f7:22:40:2c:a6:fe:f8: 42:ec:47:c5:97:56:08:07:a0:95:4b:a2:be:b4:b4: 53:ce:21:34:ee:a2:fe:2d:88:fa:71:ec:00:fc:f9: 6a:53:33:b4:72:4c:8e:ad:62:68:65:0f:67:ee:00: 9c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:EA:88:9A:6C:EF:AA:F5:30:EB:DF:41:23:BE:59:69:0E:E2:A0:3C X509v3 Authority Key Identifier: keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/KeqImmzvqvUw699BI75ZaQ7ioDw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.203.48.0/22 85.203.56.0/22 Signature Algorithm: sha256WithRSAEncryption 45:58:d7:fd:18:e9:9a:67:0b:79:ce:37:f8:86:df:07:af:c5: 63:61:5c:08:e5:cd:89:ce:9b:67:b0:6e:f0:b8:d9:81:b2:72: ad:8c:8a:a2:80:62:8d:41:b5:f7:3b:06:33:16:30:34:b1:9f: 0b:4d:df:db:9d:ec:70:5d:2e:57:f3:20:1c:98:69:29:44:b1: 2e:59:c3:64:74:27:6a:ac:51:82:f5:b7:81:aa:ef:97:0e:a1: 88:11:43:8f:b2:c7:fb:d0:f9:c7:97:6e:0c:8f:ad:da:c3:5c: 2e:16:2d:ac:bd:5c:be:98:bd:a3:11:ba:29:49:ef:b2:58:84: c4:02:a7:d4:49:a8:30:b5:ee:56:42:88:6e:51:1e:9a:1c:80: d7:3e:0d:79:3c:ed:0d:ad:58:3b:db:d8:9e:0d:0e:8b:1a:57: 66:2a:d0:1e:78:6e:f0:2a:99:56:7e:85:a6:d2:12:07:12:36: c1:b6:7f:54:9a:a2:c7:7e:c5:79:45:e0:c0:46:7e:8f:10:d2: 01:9d:85:9e:38:db:49:8a:1d:77:34:50:78:f3:d9:5f:bc:af: c8:06:fb:c9:24:2d:85:c8:e3:46:4b:8e:51:f1:08:4c:bf:cb: 7e:7f:1e:da:14:7b:af:91:8e:d8:fe:48:69:39:90:5f:6d:05: eb:23:57:ae -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7Npx3vlLeccCWdbJrHgWkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MmJkNzZhNWNhYzI4M2VjZTBhMGY4ZWFiMmM5NzAyMTQw MWZiODkwHhcNMjYwMTAxMjAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWVhODg5YTZjZWZhYWY1MzBlYmRmNDEyM2JlNTk2OTBlZTJhMDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok8JW3kYgT6B/N62F0fiD0C4+M/B zPFFRMtCtpMuk+7WsK9AgyqUS2ECVuR4W7nOT1kt3Cyb25ue17mcDKSTfebK0yvH Mtbdfeq9pt3GHrNiUqnxZzJO4WvQh8ErPUNTjFJASxCn+Fi3/gHMommyAlzJR5i4 GDlssfLO9dhjr+Uzx/rh4i1jYzHfVegr1pjInxIPT+r2fTtzrOmtGhbc7HEOP1vX nSAkKM2WxrmY1DG4Ztbl+gwWoJ8LbfYIKN5v1rxTmbcDqiCXYfciQCym/vhC7EfF l1YIB6CVS6K+tLRTziE07qL+LYj6cewA/PlqUzO0ckyOrWJoZQ9n7gCcaQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCnqiJps76r1MOvfQSO+WWkO4qA8MB8GA1UdIwQY MBaAFJYr12pcrCg+zgoPjqsslwIUAfuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMt NmFiMTExNTVmNmZiLzEvS2VxSW1tenZxdlV3Njk5Qkk3NVphUTdpb0R3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMtNmFiMTExNTVmNmZi LzEvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCVcswAwQC Vcs4MA0GCSqGSIb3DQEBCwUAA4IBAQBFWNf9GOmaZwt5zjf4ht8Hr8VjYVwI5c2J zptnsG7wuNmBsnKtjIqigGKNQbX3OwYzFjA0sZ8LTd/bnexwXS5X8yAcmGkpRLEu WcNkdCdqrFGC9beBqu+XDqGIEUOPssf70PnHl24Mj63aw1wuFi2svVy+mL2jEbop Se+yWITEAqfUSagwte5WQohuUR6aHIDXPg15PO0NrVg729ieDQ6LGldmKtAeeG7w KplWfoWm0hIHEjbBtn9UmqLHfsV5ReDARn6PENIBnYWeONtJih13NFB489lfvK/I BvvJJC2FyONGS45R8QhMv8t+fx7aFHuvkY7Y/khpOZBfbQXrI1eu -----END CERTIFICATE-----Generated at Wed Jan 21 02:50:06 2026 by rpki-client