This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/b85PS3H30eMs5XV1Zj_5kBi4YS8.roa File: b85PS3H30eMs5XV1Zj_5kBi4YS8.roa (raw, json) Hash identifier: ADteCFtgyfMf5jEQhYpSnrBciRI5sXi17xBqTjm3R+s= Subject key identifier: 6F:CE:4F:4B:71:F7:D1:E3:2C:E5:75:75:66:3F:F9:90:18:B8:61:2F Certificate issuer: /CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0 Certificate serial: 019B7AC94E5A28C93C2867DC22CD540023DC Authority key identifier: 0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/b85PS3H30eMs5XV1Zj_5kBi4YS8.roa Signing time: Thu 01 Jan 2026 18:19:31 +0000 ROA not before: Thu 01 Jan 2026 18:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48438 IP address blocks: 31.43.128.0/19 maxlen: 22 91.210.248.0/22 maxlen: 24 194.26.164.0/22 maxlen: 24 2a0c:b440::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:4e:5a:28:c9:3c:28:67:dc:22:cd:54:00:23:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0 Validity Not Before: Jan 1 18:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fce4f4b71f7d1e32ce57575663ff99018b8612f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ca:9c:b4:c5:a5:56:cc:36:39:e1:ba:77:3e: 1d:c1:7a:63:a3:51:93:8c:4e:5c:51:64:c3:bd:29: 6f:53:65:17:51:2d:76:3a:68:32:bf:c6:db:a4:72: 08:18:90:d3:50:f9:2e:12:98:a8:de:21:52:61:49: 5f:80:c2:eb:e3:64:3a:d7:66:f2:40:4b:e5:b1:bc: 38:d1:17:e3:45:0d:eb:b5:7d:bc:6c:64:67:b8:8a: a3:5c:57:90:14:3a:1d:af:16:f6:a2:4f:51:8c:3b: ad:6e:fa:6d:29:4e:a4:1c:d0:0c:25:93:13:1e:c0: 21:71:85:3e:b8:0c:00:56:17:09:d7:a3:39:ee:0e: 41:81:a6:a3:a3:93:53:e8:f6:55:27:db:3a:13:d3: 23:57:38:2d:53:30:1c:93:77:27:2f:fe:35:d4:ff: 82:aa:42:61:89:63:29:84:2a:bb:3b:74:c3:7c:8c: bf:b9:6d:35:70:39:6e:b3:60:d6:51:4b:bd:ca:f4: a3:4d:ba:51:2d:f2:8f:5a:5b:8a:b5:03:8b:ad:41: 15:1f:10:53:1e:9a:b6:ad:c5:82:25:fb:20:24:19: 04:95:33:9b:53:4e:6e:a2:c9:f5:9d:dc:8c:d6:6a: ec:80:d5:38:48:e8:dd:88:bb:4a:1d:19:2d:96:a6: 47:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:CE:4F:4B:71:F7:D1:E3:2C:E5:75:75:66:3F:F9:90:18:B8:61:2F X509v3 Authority Key Identifier: keyid:0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/b85PS3H30eMs5XV1Zj_5kBi4YS8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.43.128.0/19 91.210.248.0/22 194.26.164.0/22 IPv6: 2a0c:b440::/29 Signature Algorithm: sha256WithRSAEncryption 31:a3:e9:e1:a0:f8:e8:d4:21:c7:f9:f7:e8:04:c3:de:9a:b2: ac:d2:60:cc:e1:4d:03:f0:3e:e6:66:ed:64:08:d7:2e:e6:ce: fa:09:fd:83:b7:0c:e6:44:95:ee:39:96:e4:16:da:5f:a7:1a: 73:3b:9b:35:95:b7:19:91:31:25:ca:07:ae:dc:48:c3:ef:9d: 8a:3e:4a:dd:d7:92:1f:64:72:32:36:8a:7c:fc:2f:1b:14:12: f0:3d:65:20:c8:5b:76:1d:3f:87:fc:bd:25:3e:c5:3e:9e:ab: ef:22:93:82:79:64:87:d1:ee:3e:25:4a:40:77:6b:53:fa:5c: aa:fc:6d:5c:53:1c:c6:cf:57:0d:00:1f:14:3d:1d:82:b6:08: 90:2f:31:65:28:d4:4e:96:59:0b:bc:59:73:44:50:9d:f3:2e: 52:5c:8b:cc:31:9f:d9:c1:d2:d7:5b:13:ed:bc:2a:7e:23:25: ba:42:8f:82:15:f0:78:1a:d6:92:e6:36:97:0d:2b:13:2f:c7: 42:6b:72:02:07:86:a0:5d:b6:60:36:71:e8:ea:a5:55:5a:92: 70:f4:35:e4:e5:1b:06:5b:a2:90:a1:7a:b0:58:7d:df:3f:f4: f4:49:b1:d0:83:bf:79:7c:ac:cc:e6:3e:b8:15:ff:1e:f5:6a: 7d:2d:ec:29 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6yU5aKMk8KGfcIs1UACPcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZGQxMDg3NWU5ZTRjOWU3ZTg3ZTcwMWJiNTE2YWE2ZTFi OTUyYjAwHhcNMjYwMTAxMTgxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmNlNGY0YjcxZjdkMWUzMmNlNTc1NzU2NjNmZjk5MDE4Yjg2MTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cqctMWlVsw2OeG6dz4dwXpjo1GT jE5cUWTDvSlvU2UXUS12Omgyv8bbpHIIGJDTUPkuEpio3iFSYUlfgMLr42Q612by QEvlsbw40RfjRQ3rtX28bGRnuIqjXFeQFDodrxb2ok9RjDutbvptKU6kHNAMJZMT HsAhcYU+uAwAVhcJ16M57g5Bgaajo5NT6PZVJ9s6E9MjVzgtUzAck3cnL/411P+C qkJhiWMphCq7O3TDfIy/uW01cDlus2DWUUu9yvSjTbpRLfKPWluKtQOLrUEVHxBT Hpq2rcWCJfsgJBkElTObU05uosn1ndyM1mrsgNU4SOjdiLtKHRktlqZH6QIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFG/OT0tx99HjLOV1dWY/+ZAYuGEvMB8GA1UdIwQY MBaAFA3dEIdenkyefofnAbtRaqbhuVKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGQwUWgxNmVUSjUtaC1jQnUxRnFwdUc1VXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80ZjYzYTQtZDU3Yi00YzljLThjZWIt OTgzYzcxZmY3MDUzLzEvYjg1UFMzSDMwZU1zNVhWMVpqXzVrQmk0WVM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80ZjYzYTQtZDU3Yi00YzljLThjZWItOTgzYzcxZmY3MDUz LzEvRGQwUWgxNmVUSjUtaC1jQnUxRnFwdUc1VXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFHyuAAwQC W9L4AwQCwhqkMA0EAgACMAcDBQMqDLRAMA0GCSqGSIb3DQEBCwUAA4IBAQAxo+nh oPjo1CHH+ffoBMPemrKs0mDM4U0D8D7mZu1kCNcu5s76Cf2DtwzmRJXuOZbkFtpf pxpzO5s1lbcZkTElygeu3EjD752KPkrd15IfZHIyNop8/C8bFBLwPWUgyFt2HT+H /L0lPsU+nqvvIpOCeWSH0e4+JUpAd2tT+lyq/G1cUxzGz1cNAB8UPR2CtgiQLzFl KNROllkLvFlzRFCd8y5SXIvMMZ/ZwdLXWxPtvCp+IyW6Qo+CFfB4GtaS5jaXDSsT L8dCa3ICB4agXbZgNnHo6qVVWpJw9DXk5RsGW6KQoXqwWH3fP/T0SbHQg795fKzM 5j64Ff8e9Wp9Lewp -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:47 2026 by rpki-client