This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/rSLgRzXc7wO9A2e_RCKG-a8FHf4.roa File: rSLgRzXc7wO9A2e_RCKG-a8FHf4.roa (raw, json) Hash identifier: Z9tQA5QlYDpA+1bJUxMIqjwvzdSZlaSgBvZRFq8GUrM= Subject key identifier: AD:22:E0:47:35:DC:EF:03:BD:03:67:BF:44:22:86:F9:AF:05:1D:FE Certificate issuer: /CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce Certificate serial: 019B7911266C698DE01738B94FA49C6F46C8 Authority key identifier: FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/rSLgRzXc7wO9A2e_RCKG-a8FHf4.roa Signing time: Thu 01 Jan 2026 10:18:45 +0000 ROA not before: Thu 01 Jan 2026 10:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 80.210.95.0/24 maxlen: 24 85.194.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:26:6c:69:8d:e0:17:38:b9:4f:a4:9c:6f:46:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce Validity Not Before: Jan 1 10:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad22e04735dcef03bd0367bf442286f9af051dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d3:19:2e:aa:b7:f5:be:e8:17:2a:b0:92:64: cb:02:0d:94:15:f1:1f:86:aa:b4:ab:10:00:87:9b: 09:e3:78:cd:97:d3:e5:7b:51:50:8b:56:2a:cc:e2: 11:0f:95:d0:51:dd:e4:34:fa:78:33:e6:c1:1d:31: 41:cd:a5:e0:21:89:f3:c2:19:8b:2b:39:5a:f1:0c: df:9c:78:36:cf:de:a8:f7:e6:bd:39:a0:4d:1d:45: 17:bc:da:21:08:37:03:4d:97:56:fa:8d:ef:83:5e: 02:d1:f8:ce:f0:8e:96:2f:ce:3d:06:6f:f1:1e:4b: b8:ab:8e:51:97:2b:ef:e6:6e:21:7c:f7:2c:f0:f4: 23:a3:f8:9a:66:53:85:4b:4c:b5:8e:93:5f:d4:56: e5:d3:35:41:f1:55:f2:97:cd:f3:e1:10:cc:1c:72: 8f:20:f6:e4:06:37:a0:b0:17:1f:86:77:f8:7f:8d: 80:51:f0:a5:f2:93:b5:2b:30:c4:7a:cf:7a:33:77: ce:19:06:4c:10:eb:30:f1:f6:ee:15:15:f0:c7:5b: 9b:0e:27:9a:6c:c3:7c:83:8c:f7:de:da:31:4f:b5: 41:cc:1b:67:0f:81:1d:f4:4f:df:ea:64:9b:88:49: 20:12:3b:9c:93:6e:de:58:4d:e7:58:84:9f:f7:ce: 46:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:22:E0:47:35:DC:EF:03:BD:03:67:BF:44:22:86:F9:AF:05:1D:FE X509v3 Authority Key Identifier: keyid:FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/rSLgRzXc7wO9A2e_RCKG-a8FHf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.210.95.0/24 85.194.254.0/23 Signature Algorithm: sha256WithRSAEncryption 09:a2:37:51:2b:87:d4:90:77:1a:11:6f:78:21:b5:93:44:15: 27:6b:a5:63:a2:32:94:7c:1b:9e:63:60:f0:30:5b:d7:6b:e4: 06:87:b0:4e:df:c2:78:2d:6e:ce:fe:10:b5:bb:a5:f8:5d:57: fc:79:ce:e5:4f:c5:ee:60:73:c4:0e:64:16:0f:d3:ea:80:61: 9b:09:4a:5e:6e:ad:4b:d2:c4:1f:bc:3c:54:7a:07:fe:b5:6a: 65:f8:6c:b7:44:2f:17:c7:5c:be:a6:10:53:e1:ed:f2:9b:5e: 28:b1:a1:51:65:ea:bf:6e:ff:a5:91:eb:77:c2:0b:48:47:5d: d9:c4:cc:5d:77:62:de:51:ce:2f:e3:ca:18:8d:da:d9:4c:87: ca:af:b2:2b:00:b7:8b:fe:da:53:fb:de:bb:e9:82:34:4e:e3: e2:96:23:eb:a9:8a:12:60:fb:c7:7d:9e:3f:2f:6d:b1:d3:63: 15:18:83:30:28:f7:d5:78:85:e7:22:ff:fd:87:c6:8e:27:ff: 2c:e1:f3:de:df:63:3e:0a:db:c2:57:7f:9c:90:af:43:a9:f4: ba:5b:01:3e:80:49:27:9a:c1:ca:98:ad:55:87:13:be:07:a1: c9:2f:02:84:55:a5:d9:1f:be:e4:8a:80:af:9d:bb:e8:71:75: 1c:0e:9e:60 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5ESZsaY3gFzi5T6Scb0bIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMjM2YjIxM2Q1NjQ5M2YzYjA3N2U2YjQxZjQyZTRmM2Rm OGNkY2UwHhcNMjYwMTAxMTAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDIyZTA0NzM1ZGNlZjAzYmQwMzY3YmY0NDIyODZmOWFmMDUxZGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldMZLqq39b7oFyqwkmTLAg2UFfEf hqq0qxAAh5sJ43jNl9Ple1FQi1YqzOIRD5XQUd3kNPp4M+bBHTFBzaXgIYnzwhmL Kzla8QzfnHg2z96o9+a9OaBNHUUXvNohCDcDTZdW+o3vg14C0fjO8I6WL849Bm/x Hku4q45Rlyvv5m4hfPcs8PQjo/iaZlOFS0y1jpNf1Fbl0zVB8VXyl83z4RDMHHKP IPbkBjegsBcfhnf4f42AUfCl8pO1KzDEes96M3fOGQZMEOsw8fbuFRXwx1ubDiea bMN8g4z33toxT7VBzBtnD4Ed9E/f6mSbiEkgEjuck27eWE3nWISf985GaQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFK0i4Ec13O8DvQNnv0QihvmvBR3+MB8GA1UdIwQY MBaAFPsjayE9Vkk/Owd+a0H0Lk89+M3OMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS15TnJJVDFXU1Q4N0IzNXJRZlF1VHozNHpjNC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvMjBmNGFjLTgwZDktNDBlMi1hOWU2 LTFjODhlZWJlYjI5My8xL3JTTGdSelhjN3dPOUEyZV9SQ0tHLWE4RkhmNC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODUvMjBmNGFjLTgwZDktNDBlMi1hOWU2LTFjODhlZWJlYjI5 My8xLzEteU5ySVQxV1NUODdCMzVyUWZRdVR6MzR6YzQuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABQ0l8D BAFVwv4wDQYJKoZIhvcNAQELBQADggEBAAmiN1Erh9SQdxoRb3ghtZNEFSdrpWOi MpR8G55jYPAwW9dr5AaHsE7fwngtbs7+ELW7pfhdV/x5zuVPxe5gc8QOZBYP0+qA YZsJSl5urUvSxB+8PFR6B/61amX4bLdELxfHXL6mEFPh7fKbXiixoVFl6r9u/6WR 63fCC0hHXdnEzF13Yt5Rzi/jyhiN2tlMh8qvsisAt4v+2lP73rvpgjRO4+KWI+up ihJg+8d9nj8vbbHTYxUYgzAo99V4heci//2Hxo4n/yzh897fYz4K28JXf5yQr0Op 9LpbAT6ASSeawcqYrVWHE74HockvAoRVpdkfvuSKgK+du+hxdRwOnmA= -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:47 2026 by rpki-client