This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/X8qnUQA1qg1cnkzl8QaDSyMhQm4.roa File: X8qnUQA1qg1cnkzl8QaDSyMhQm4.roa (raw, json) Hash identifier: 0vr+LOr1h8ehAYfiW23NLACGpkor4jsJll80Z2l7cCg= Subject key identifier: 5F:CA:A7:51:00:35:AA:0D:5C:9E:4C:E5:F1:06:83:4B:23:21:42:6E Certificate issuer: /CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91 Certificate serial: 019B7EA67E95B7693E469C989D10634B975E Authority key identifier: D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/X8qnUQA1qg1cnkzl8QaDSyMhQm4.roa Signing time: Fri 02 Jan 2026 12:19:59 +0000 ROA not before: Fri 02 Jan 2026 12:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216244 IP address blocks: 185.85.72.0/24 maxlen: 24 185.85.73.0/24 maxlen: 24 185.85.74.0/24 maxlen: 24 185.85.75.0/24 maxlen: 24 185.160.28.0/24 maxlen: 24 185.160.29.0/24 maxlen: 24 185.160.30.0/24 maxlen: 24 185.160.31.0/24 maxlen: 24 2a05:abc0::/48 maxlen: 48 2a05:abc0:1::/48 maxlen: 48 2a05:abc0:2::/48 maxlen: 48 2a05:abc0:3::/48 maxlen: 48 2a05:abc0:4::/48 maxlen: 48 2a05:abc0:5::/48 maxlen: 48 2a05:abc0:6::/48 maxlen: 48 2a05:abc0:7::/48 maxlen: 48 2a05:abc0:8::/48 maxlen: 48 2a05:abc0:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:7e:95:b7:69:3e:46:9c:98:9d:10:63:4b:97:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91 Validity Not Before: Jan 2 12:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fcaa7510035aa0d5c9e4ce5f106834b2321426e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a0:b9:a4:74:a9:92:eb:5b:b7:d6:06:4d:c7: 3a:2c:a5:78:e3:30:af:fd:39:89:3d:e4:e2:18:fb: ba:84:02:c8:25:1f:17:af:e4:3c:94:94:39:2d:e5: f5:92:88:e0:71:b5:a6:4f:72:5d:55:ca:0d:34:2d: 20:64:ea:53:b6:13:62:50:20:e5:62:43:4a:aa:34: 86:32:6a:6e:29:6c:9c:70:04:9b:27:64:99:d4:47: aa:83:c8:f2:df:73:5c:52:5f:2d:5c:6d:9d:bc:9c: 2b:ae:c8:8a:ff:54:73:57:5e:8c:b9:7c:47:60:a7: 19:6a:af:a2:4b:3a:c3:13:2c:b4:ec:a5:62:48:29: 80:a0:88:1f:d2:8c:98:62:47:a7:f7:54:55:4d:b5: 2b:a2:3b:ca:81:3b:c5:ad:b1:9b:18:60:05:2b:f1: 6f:31:70:ba:18:e3:e4:91:48:c9:30:6a:6a:7e:4d: 23:37:c6:94:c7:c6:17:2b:14:a8:02:87:9d:e6:75: 4f:2d:9a:fc:50:ab:6f:1d:31:c0:75:8b:a1:8e:c0: f7:93:b0:29:49:30:eb:d8:97:aa:f9:31:d5:3d:8f: db:44:7c:87:ca:33:b4:00:1d:5f:08:5b:1d:c4:23: 1f:8a:34:ae:21:75:64:04:c8:48:30:16:57:bd:6f: b4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:CA:A7:51:00:35:AA:0D:5C:9E:4C:E5:F1:06:83:4B:23:21:42:6E X509v3 Authority Key Identifier: keyid:D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/X8qnUQA1qg1cnkzl8QaDSyMhQm4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.85.72.0/22 185.160.28.0/22 IPv6: 2a05:abc0::-2a05:abc0:9:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 05:7c:eb:45:1d:0c:a8:4a:68:60:67:c4:2b:0f:51:35:61:30: 7c:b0:cb:92:c9:2c:93:e8:01:04:ba:00:ef:89:32:c8:c5:4b: 27:2b:ed:95:c5:6b:79:63:a0:7c:78:6d:a7:ed:ad:09:74:1d: 56:74:62:55:3d:de:c4:47:85:85:6a:12:36:7b:4b:22:f9:d1: 4f:f5:7a:3f:3c:a4:21:c0:b0:56:75:0a:6a:fb:2e:b8:4c:10: 9e:99:08:f6:ca:31:9c:2b:e3:8e:ab:39:70:10:e3:e0:9d:8c: 79:84:94:dc:a9:35:b7:de:a7:04:93:ec:cd:99:af:20:d9:6b: f8:5a:f0:3d:c8:9c:9a:9b:0c:19:11:e0:9a:cc:70:ae:63:5c: 4f:c3:02:41:6a:05:dd:0d:33:7d:64:cb:a0:6b:87:75:53:0a: 55:7c:d0:f3:97:49:49:fd:51:e8:8a:d6:60:69:fb:9b:7e:6e: e1:ad:49:da:79:cb:5e:98:4b:51:d2:4f:d6:30:23:77:67:f3: 7f:02:91:48:b2:6c:75:63:82:1b:1c:40:0f:55:7b:63:f4:9d: f6:23:5f:ca:4d:6e:b7:1d:2e:f8:15:6b:d7:33:15:d5:d7:e3: 23:f0:10:89:cd:ca:fa:41:c5:a2:4f:03:8d:0f:43:3c:61:cd: 03:7d:7b:f9 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt+pn6Vt2k+RpyYnRBjS5deMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZTAxM2VjOGE1YzU2ZGYyNDFhOWIyNTYzZDExMWY4ZTU0 M2JmOTEwHhcNMjYwMTAyMTIxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmNhYTc1MTAwMzVhYTBkNWM5ZTRjZTVmMTA2ODM0YjIzMjE0MjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaC5pHSpkutbt9YGTcc6LKV44zCv /TmJPeTiGPu6hALIJR8Xr+Q8lJQ5LeX1kojgcbWmT3JdVcoNNC0gZOpTthNiUCDl YkNKqjSGMmpuKWyccASbJ2SZ1Eeqg8jy33NcUl8tXG2dvJwrrsiK/1RzV16MuXxH YKcZaq+iSzrDEyy07KViSCmAoIgf0oyYYken91RVTbUrojvKgTvFrbGbGGAFK/Fv MXC6GOPkkUjJMGpqfk0jN8aUx8YXKxSoAoed5nVPLZr8UKtvHTHAdYuhjsD3k7Ap STDr2Jeq+THVPY/bRHyHyjO0AB1fCFsdxCMfijSuIXVkBMhIMBZXvW+0tQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFF/Kp1EANaoNXJ5M5fEGg0sjIUJuMB8GA1UdIwQY MBaAFNHgE+yKXFbfJBqbJWPREfjlQ7+RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGVBVDdJcGNWdDhrR3BzbFk5RVItT1ZEdjVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9lNDFlZjQtZGMxZS00NDY5LWJkMmQt NDQwNTI4YzFlNDllLzEvWDhxblVRQTFxZzFjbmt6bDhRYURTeU1oUW00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9lNDFlZjQtZGMxZS00NDY5LWJkMmQtNDQwNTI4YzFlNDll LzEvMGVBVDdJcGNWdDhrR3BzbFk5RVItT1ZEdjVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQCuVVIAwQC uaAcMBgEAgACMBIwEAMFBioFq8ADBwEqBavAAAgwDQYJKoZIhvcNAQELBQADggEB AAV860UdDKhKaGBnxCsPUTVhMHywy5LJLJPoAQS6AO+JMsjFSycr7ZXFa3ljoHx4 baftrQl0HVZ0YlU93sRHhYVqEjZ7SyL50U/1ej88pCHAsFZ1Cmr7LrhMEJ6ZCPbK MZwr446rOXAQ4+CdjHmElNypNbfepwST7M2ZryDZa/ha8D3InJqbDBkR4JrMcK5j XE/DAkFqBd0NM31ky6Brh3VTClV80POXSUn9UeiK1mBp+5t+buGtSdp5y16YS1HS T9YwI3dn838CkUiybHVjghscQA9Ve2P0nfYjX8pNbrcdLvgVa9czFdXX4yPwEInN yvpBxaJPA40PQzxhzQN9e/k= -----END CERTIFICATE-----Generated at Mon Feb 9 23:57:25 2026 by rpki-client