This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/4bPjmPLYF-VsgIxEmwqrvspuat0.roa File: 4bPjmPLYF-VsgIxEmwqrvspuat0.roa (raw, json) Hash identifier: Mym6Vp+Xrsnjhxv/WkGy04wi/swDTPse9lPsRyVRLJ0= Subject key identifier: E1:B3:E3:98:F2:D8:17:E5:6C:80:8C:44:9B:0A:AB:BE:CA:6E:6A:DD Certificate issuer: /CN=17dbd5acf1f9c75d18a1f75031114c48f0b23363 Certificate serial: 019B7F846A4DF162C950147581C49CF483FB Authority key identifier: 17:DB:D5:AC:F1:F9:C7:5D:18:A1:F7:50:31:11:4C:48:F0:B2:33:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9vVrPH5x10YofdQMRFMSPCyM2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/4bPjmPLYF-VsgIxEmwqrvspuat0.roa Signing time: Fri 02 Jan 2026 16:22:22 +0000 ROA not before: Fri 02 Jan 2026 16:22:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42985 IP address blocks: 85.116.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.mft rsync://rpki.ripe.net/repository/DEFAULT/F9vVrPH5x10YofdQMRFMSPCyM2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:6a:4d:f1:62:c9:50:14:75:81:c4:9c:f4:83:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17dbd5acf1f9c75d18a1f75031114c48f0b23363 Validity Not Before: Jan 2 16:22:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1b3e398f2d817e56c808c449b0aabbeca6e6add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bb:e0:b2:c9:79:09:42:13:d7:b3:8a:8a:cb: d7:07:58:21:c2:54:6b:df:3c:4a:7c:5a:af:d2:af: 20:56:38:f6:fd:ad:59:76:b1:18:54:b7:4e:fa:37: 12:08:89:11:ab:fb:58:40:23:9e:55:e5:ff:1d:30: 51:f1:6b:06:d5:73:0a:27:ec:81:47:f1:58:49:4b: 80:12:59:42:d0:0e:79:76:9c:ba:e9:b8:bc:d4:27: e0:44:0a:e0:ba:66:b7:97:4f:1d:3e:7d:f4:fb:da: 69:0b:6e:48:25:e0:34:7b:8a:50:87:e9:07:1a:ed: 27:de:b4:66:36:85:10:42:10:5d:0d:9d:b2:5b:75: 61:2b:b0:ed:82:de:4c:d1:f7:72:81:d5:6b:3e:27: 7f:d9:40:1f:6b:e9:67:ac:8a:89:5c:ec:b2:55:86: 31:d9:a5:b9:7c:bd:2e:aa:62:fe:24:54:e0:ed:62: 57:02:f0:99:6a:d2:20:74:b5:19:39:8a:b4:f1:53: 0e:6a:b8:23:70:b2:0e:0a:4a:7c:b9:ec:92:fc:12: bc:5a:c9:eb:60:34:96:48:63:a3:5c:b4:cf:6a:1d: aa:e6:e2:74:03:dd:7d:43:a5:25:8e:bc:62:c3:e9: 01:05:ca:e5:46:70:3a:f6:5e:a5:8f:71:d2:f5:2d: 07:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B3:E3:98:F2:D8:17:E5:6C:80:8C:44:9B:0A:AB:BE:CA:6E:6A:DD X509v3 Authority Key Identifier: keyid:17:DB:D5:AC:F1:F9:C7:5D:18:A1:F7:50:31:11:4C:48:F0:B2:33:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9vVrPH5x10YofdQMRFMSPCyM2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/4bPjmPLYF-VsgIxEmwqrvspuat0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.116.255.0/24 Signature Algorithm: sha256WithRSAEncryption 10:2b:f8:17:5f:dd:04:04:60:7c:58:f7:5f:a5:16:47:03:6f: 57:d0:cb:e7:1b:45:24:d0:ca:2e:d4:cf:18:67:1d:67:1c:fb: d7:9f:8b:40:7e:b8:a5:0d:d0:14:70:7b:46:2d:17:89:27:14: 88:7b:7d:34:58:cd:82:99:eb:a9:2a:c7:18:57:80:c0:97:9a: 9a:ac:f4:83:15:a7:25:f1:56:09:78:74:a8:05:30:50:31:49: 2d:52:f1:ba:57:a8:b5:01:51:c2:c3:81:16:b8:c2:02:28:61: ee:ed:8e:55:78:7c:2e:2a:38:53:6a:7b:9b:a6:c4:bc:75:81: 79:e3:59:69:7c:b6:21:8d:1c:f0:79:36:91:71:15:f4:71:9e: 83:23:fc:b6:6d:a2:b8:29:d4:6d:04:3f:cd:3a:1e:e3:e3:f3: f7:69:fe:22:24:f3:dd:e0:a8:d0:23:b0:87:ce:b6:3d:80:18: 58:ae:97:ea:0b:1b:dc:64:16:86:a6:74:90:3d:60:19:86:29: fe:4a:43:88:2c:81:1e:8c:fa:e2:5d:ac:75:d9:39:a1:63:ec: 2c:99:0b:b4:7a:ba:77:22:a7:ac:0e:32:ff:ea:0f:76:b0:38: 17:08:86:f2:2f:11:ea:b0:97:db:6c:6a:2b:83:46:08:0f:b2: 9f:26:d5:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hGpN8WLJUBR1gcSc9IP7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZGJkNWFjZjFmOWM3NWQxOGExZjc1MDMxMTE0YzQ4ZjBi MjMzNjMwHhcNMjYwMTAyMTYyMjIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWIzZTM5OGYyZDgxN2U1NmM4MDhjNDQ5YjBhYWJiZWNhNmU2YWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrvgssl5CUIT17OKisvXB1ghwlRr 3zxKfFqv0q8gVjj2/a1ZdrEYVLdO+jcSCIkRq/tYQCOeVeX/HTBR8WsG1XMKJ+yB R/FYSUuAEllC0A55dpy66bi81CfgRArguma3l08dPn30+9ppC25IJeA0e4pQh+kH Gu0n3rRmNoUQQhBdDZ2yW3VhK7Dtgt5M0fdygdVrPid/2UAfa+lnrIqJXOyyVYYx 2aW5fL0uqmL+JFTg7WJXAvCZatIgdLUZOYq08VMOargjcLIOCkp8ueyS/BK8Wsnr YDSWSGOjXLTPah2q5uJ0A919Q6Uljrxiw+kBBcrlRnA69l6lj3HS9S0H4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOGz45jy2BflbICMRJsKq77KbmrdMB8GA1UdIwQY MBaAFBfb1azx+cddGKH3UDERTEjwsjNjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjl2VnJQSDV4MTBZb2ZkUU1SRk1TUEN5TTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8yOTE5OWYtZjZjYy00NDhhLWJmZDQt NTgxZGI4N2M4MjFlLzEvNGJQam1QTFlGLVZzZ0l4RW13cXJ2c3B1YXQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8yOTE5OWYtZjZjYy00NDhhLWJmZDQtNTgxZGI4N2M4MjFl LzEvRjl2VnJQSDV4MTBZb2ZkUU1SRk1TUEN5TTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXT/MA0G CSqGSIb3DQEBCwUAA4IBAQAQK/gXX90EBGB8WPdfpRZHA29X0MvnG0Uk0Mou1M8Y Zx1nHPvXn4tAfrilDdAUcHtGLReJJxSIe300WM2CmeupKscYV4DAl5qarPSDFacl 8VYJeHSoBTBQMUktUvG6V6i1AVHCw4EWuMICKGHu7Y5VeHwuKjhTanubpsS8dYF5 41lpfLYhjRzweTaRcRX0cZ6DI/y2baK4KdRtBD/NOh7j4/P3af4iJPPd4KjQI7CH zrY9gBhYrpfqCxvcZBaGpnSQPWAZhin+SkOILIEejPriXax12TmhY+wsmQu0erp3 IqesDjL/6g92sDgXCIbyLxHqsJfbbGorg0YID7KfJtWY -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:23 2026 by rpki-client