This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/yE8_O8Q4IwHJTINRIt0LbeP-GOY.roa
File: yE8_O8Q4IwHJTINRIt0LbeP-GOY.roa (raw, json)
Hash identifier: 6l3rgcL1TxtnHd0pNzPe7Ddtbuc1oQAiArSsH/nUS34=
Subject key identifier: C8:4F:3F:3B:C4:38:23:01:C9:4C:83:51:22:DD:0B:6D:E3:FE:18:E6
Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial: 019B7B36953A56C4F32B8171528CDE4D8F30
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/yE8_O8Q4IwHJTINRIt0LbeP-GOY.roa
Signing time: Thu 01 Jan 2026 20:18:53 +0000
ROA not before: Thu 01 Jan 2026 20:18:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 85.203.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:95:3a:56:c4:f3:2b:81:71:52:8c:de:4d:8f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Validity
Not Before: Jan 1 20:18:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c84f3f3bc4382301c94c835122dd0b6de3fe18e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:de:45:06:71:b8:08:5a:3f:1a:54:a4:22:fa:
21:42:1d:2b:2b:7d:c5:9e:c0:2c:ad:c8:16:e3:fa:
79:f2:51:ef:15:ba:e1:59:3d:71:eb:b6:79:f8:5c:
0f:f6:dd:68:92:29:ca:90:86:0d:5b:0a:c1:94:49:
e9:d0:09:8b:b2:5d:58:23:74:1d:57:e4:0a:eb:30:
66:7d:42:f5:48:f7:e2:53:db:48:49:4e:99:a2:66:
d7:7a:9a:67:d6:e7:5a:ce:16:5a:a2:95:ca:a5:70:
86:f8:a3:4a:19:3b:1b:76:e2:9f:6e:7b:0a:35:2f:
79:39:f5:ac:8d:ac:a4:b3:66:9c:5c:e9:38:92:7a:
6c:2b:07:ba:ee:b3:7c:a1:bc:c0:42:66:54:c6:eb:
b3:d0:2e:1c:bf:a0:54:9a:5b:dc:07:2c:e3:d8:5f:
9b:33:0e:35:0e:60:ff:7a:17:8f:ac:e2:15:91:7d:
4a:57:e9:61:a0:db:4e:05:9d:c6:3f:5a:83:46:b6:
d9:56:6b:0f:c5:0d:7c:94:32:08:12:35:47:65:ff:
8d:a2:97:bc:c9:e4:6b:42:56:1a:4a:78:04:66:c0:
87:00:d2:54:2d:bf:dc:ce:71:d5:b8:23:b0:f3:ca:
22:3c:04:63:be:5c:fe:c8:83:cc:80:67:d3:d6:df:
ee:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4F:3F:3B:C4:38:23:01:C9:4C:83:51:22:DD:0B:6D:E3:FE:18:E6
X509v3 Authority Key Identifier:
keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/yE8_O8Q4IwHJTINRIt0LbeP-GOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.27.0/24
Signature Algorithm: sha256WithRSAEncryption
79:7f:03:fc:ca:b1:3c:55:19:77:5e:97:cc:47:f2:08:b5:a9:
30:7f:f1:e0:54:06:a1:b9:1d:ce:e6:e8:a5:24:6e:4c:e7:b0:
20:0f:91:cc:12:d4:5a:c9:fe:7b:de:39:a2:97:2e:4f:58:5c:
33:cf:54:a8:9e:d0:48:54:10:fa:bc:f5:0a:7f:6f:bc:ab:ae:
0e:f8:99:72:a6:da:29:3d:b8:8f:f1:fc:f6:58:72:65:0d:de:
51:bf:b6:36:29:c7:39:22:c1:2c:dd:5b:ed:67:7b:11:f2:29:
e0:d1:02:59:fb:71:dd:42:2a:75:9d:73:8d:16:48:38:ac:c4:
e2:5b:73:2f:23:de:0f:d4:dd:17:2f:87:83:90:1b:ce:52:d0:
56:73:03:03:90:e8:6a:03:7c:8a:b4:3f:54:1e:89:b6:8b:fa:
79:4d:65:52:52:eb:a2:4c:01:e2:4d:d3:fb:83:da:71:4a:39:
ed:ca:c4:4d:3e:0a:1e:82:c0:26:29:87:7c:96:9d:fa:8f:72:
cc:0f:28:45:da:46:3b:2b:f2:a1:1e:fc:92:18:e2:65:b9:cc:
8e:3e:6f:b9:d4:1d:da:6b:3c:48:5a:2c:dc:a4:1c:5c:5a:de:
f7:af:36:51:72:35:ce:57:1a:4a:15:9b:58:7c:24:54:11:32:
88:65:98:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7NpU6VsTzK4FxUozeTY8wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MmJkNzZhNWNhYzI4M2VjZTBhMGY4ZWFiMmM5NzAyMTQw
MWZiODkwHhcNMjYwMTAxMjAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODRmM2YzYmM0MzgyMzAxYzk0YzgzNTEyMmRkMGI2ZGUzZmUxOGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt5FBnG4CFo/GlSkIvohQh0rK33F
nsAsrcgW4/p58lHvFbrhWT1x67Z5+FwP9t1okinKkIYNWwrBlEnp0AmLsl1YI3Qd
V+QK6zBmfUL1SPfiU9tISU6ZombXeppn1udazhZaopXKpXCG+KNKGTsbduKfbnsK
NS95OfWsjayks2acXOk4knpsKwe67rN8obzAQmZUxuuz0C4cv6BUmlvcByzj2F+b
Mw41DmD/ehePrOIVkX1KV+lhoNtOBZ3GP1qDRrbZVmsPxQ18lDIIEjVHZf+Nope8
yeRrQlYaSngEZsCHANJULb/cznHVuCOw88oiPARjvlz+yIPMgGfT1t/uLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMhPPzvEOCMByUyDUSLdC23j/hjmMB8GA1UdIwQY
MBaAFJYr12pcrCg+zgoPjqsslwIUAfuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMt
NmFiMTExNTVmNmZiLzEveUU4X084UTRJd0hKVElOUkl0MExiZVAtR09ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMtNmFiMTExNTVmNmZi
LzEvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVcsbMA0G
CSqGSIb3DQEBCwUAA4IBAQB5fwP8yrE8VRl3XpfMR/IItakwf/HgVAahuR3O5uil
JG5M57AgD5HMEtRayf573jmily5PWFwzz1SontBIVBD6vPUKf2+8q64O+Jlyptop
PbiP8fz2WHJlDd5Rv7Y2Kcc5IsEs3VvtZ3sR8ing0QJZ+3HdQip1nXONFkg4rMTi
W3MvI94P1N0XL4eDkBvOUtBWcwMDkOhqA3yKtD9UHom2i/p5TWVSUuuiTAHiTdP7
g9pxSjntysRNPgoegsAmKYd8lp36j3LMDyhF2kY7K/KhHvySGOJlucyOPm+51B3a
azxIWizcpBxcWt73rzZRcjXOVxpKFZtYfCRUETKIZZgD
-----END CERTIFICATE-----
Generated at Sun Jan 18 11:04:26 2026 by rpki-client