This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/0P2euke766u_nOezgnIa2MYYHZw.roa File: 0P2euke766u_nOezgnIa2MYYHZw.roa (raw, json) Hash identifier: 30yakKSUzYGUvs4Bo52C2pbQfrx/Cgc0eb5hrteJv9s= Subject key identifier: D0:FD:9E:BA:47:BB:EB:AB:BF:9C:E7:B3:82:72:1A:D8:C6:18:1D:9C Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E3911421750D74B25F5A9E3B04D63CD Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/0P2euke766u_nOezgnIa2MYYHZw.roa Signing time: Fri 02 Jan 2026 10:20:27 +0000 ROA not before: Fri 02 Jan 2026 10:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202537 IP address blocks: 85.142.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:11:42:17:50:d7:4b:25:f5:a9:e3:b0:4d:63:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0fd9eba47bbebabbf9ce7b382721ad8c6181d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f3:90:03:cf:ce:a8:c8:6b:24:15:de:b9:8b: 67:23:0f:8b:ea:5b:b3:d5:b0:52:85:1f:cc:36:57: e8:c8:11:ec:2a:e0:cc:2d:31:d4:ea:b7:57:39:13: bf:98:16:91:7f:03:c1:eb:1c:b8:20:e1:a0:db:1e: 25:92:bf:90:06:4a:86:b6:98:40:d8:b1:39:7e:01: e4:52:54:81:a5:73:08:8d:ed:05:f7:68:54:69:15: b0:6a:4a:30:86:e4:6c:ee:7b:15:7a:ff:43:da:5a: 46:f4:d7:75:d6:1f:05:05:12:35:c9:e1:5a:f2:99: 6f:af:88:3d:15:95:c3:08:d0:eb:db:3f:fa:e5:d2: 2e:52:5c:f8:a1:b1:29:bd:f4:f4:98:32:f2:5f:8e: db:9c:08:5d:ee:63:be:cd:53:dd:1f:60:ee:2d:cc: e4:82:21:86:9d:33:c3:02:d1:87:ef:f2:74:a8:0c: 61:4b:b9:f5:df:ac:65:da:3d:7b:41:5e:58:85:da: e6:9a:bd:0a:6e:5b:0e:df:c8:18:5b:0d:8b:2c:85: f2:a3:ab:c2:ad:13:e3:d3:03:a8:bd:7d:e7:43:60: eb:8a:9f:4d:15:01:d8:2e:4a:24:c3:e4:29:6f:56: b3:1e:32:dd:e6:8e:ba:26:a6:c7:53:18:4a:ce:fe: 2f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:FD:9E:BA:47:BB:EB:AB:BF:9C:E7:B3:82:72:1A:D8:C6:18:1D:9C X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/0P2euke766u_nOezgnIa2MYYHZw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.142.247.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:bb:c6:8d:e0:01:3c:82:38:fb:d3:58:1a:d1:d3:9c:1d:4c: fd:e8:ed:a1:f3:80:b1:7f:4a:24:8b:b6:39:f5:c8:77:e9:f3: 05:a9:52:64:4e:98:b3:b6:9d:da:d7:91:a4:38:3a:dd:0d:f9: 70:3e:2c:50:47:f3:76:01:af:09:8c:2b:06:c7:07:a0:6e:c7: 3a:3c:d2:cf:b0:0f:ce:2e:a0:c6:ce:3b:08:42:58:db:4f:d6: 85:4d:a0:e5:60:cb:3c:a4:7a:21:c6:3c:b7:dd:5b:7d:44:6b: 1a:7f:89:4d:77:d6:1c:8e:35:97:a2:38:17:63:6c:ad:43:8e: 49:22:a0:61:7d:6f:f6:89:4f:45:80:d7:92:57:b8:95:7f:dd: 7c:d6:51:8d:0a:fa:16:18:7d:3e:ca:b8:d0:bd:87:ca:ce:9e: cc:67:45:22:4a:69:a1:20:2c:37:fc:2a:a9:fc:38:80:e1:5b: 12:50:c2:c7:b4:a5:ae:13:de:9d:cc:33:5e:23:d5:bb:09:a0: 36:c9:be:94:4f:28:b0:54:ab:7b:51:da:9b:6b:a3:85:b7:1b: 19:31:cf:43:07:1f:8f:a4:da:64:36:f6:22:82:ea:60:e5:e0: d7:af:18:13:30:8c:31:c3:b9:23:a7:e0:c0:2e:40:e8:03:66: e6:5f:52:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ORFCF1DXSyX1qeOwTWPNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGZkOWViYTQ3YmJlYmFiYmY5Y2U3YjM4MjcyMWFkOGM2MTgxZDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/OQA8/OqMhrJBXeuYtnIw+L6luz 1bBShR/MNlfoyBHsKuDMLTHU6rdXORO/mBaRfwPB6xy4IOGg2x4lkr+QBkqGtphA 2LE5fgHkUlSBpXMIje0F92hUaRWwakowhuRs7nsVev9D2lpG9Nd11h8FBRI1yeFa 8plvr4g9FZXDCNDr2z/65dIuUlz4obEpvfT0mDLyX47bnAhd7mO+zVPdH2DuLczk giGGnTPDAtGH7/J0qAxhS7n136xl2j17QV5Yhdrmmr0KblsO38gYWw2LLIXyo6vC rRPj0wOovX3nQ2Drip9NFQHYLkokw+Qpb1azHjLd5o66JqbHUxhKzv4v7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFND9nrpHu+urv5zns4JyGtjGGB2cMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvMFAyZXVrZTc2NnVfbk9lemduSWEyTVlZSFp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVY73MA0G CSqGSIb3DQEBCwUAA4IBAQAcu8aN4AE8gjj701ga0dOcHUz96O2h84Cxf0oki7Y5 9ch36fMFqVJkTpiztp3a15GkODrdDflwPixQR/N2Aa8JjCsGxwegbsc6PNLPsA/O LqDGzjsIQljbT9aFTaDlYMs8pHohxjy33Vt9RGsaf4lNd9YcjjWXojgXY2ytQ45J IqBhfW/2iU9FgNeSV7iVf9181lGNCvoWGH0+yrjQvYfKzp7MZ0UiSmmhICw3/Cqp /DiA4VsSUMLHtKWuE96dzDNeI9W7CaA2yb6UTyiwVKt7Udqba6OFtxsZMc9DBx+P pNpkNvYigupg5eDXrxgTMIwxw7kjp+DALkDoA2bmX1Iu -----END CERTIFICATE-----Generated at Mon Jan 26 04:55:20 2026 by rpki-client