This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/gIYKUggNQz5qRnrVmf0zHx2x_rQ.roa File: gIYKUggNQz5qRnrVmf0zHx2x_rQ.roa (raw, json) Hash identifier: cBxbc1BHJ4vDJuO5pNzthUsJOivkMcofZI/r7ACu4mQ= Subject key identifier: 80:86:0A:52:08:0D:43:3E:6A:46:7A:D5:99:FD:33:1F:1D:B1:FE:B4 Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019C22BE1DB78206C9993976C2F856A3318D Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/gIYKUggNQz5qRnrVmf0zHx2x_rQ.roa Signing time: Tue 03 Feb 2026 09:03:30 +0000 ROA not before: Tue 03 Feb 2026 09:03:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29076 IP address blocks: 85.142.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 18:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:22:be:1d:b7:82:06:c9:99:39:76:c2:f8:56:a3:31:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Feb 3 09:03:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80860a52080d433e6a467ad599fd331f1db1feb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:56:72:41:ac:ec:99:ba:5b:ba:4c:94:87:c7: 56:f7:d2:90:ea:33:76:d5:a0:51:50:06:c6:98:38: be:59:4b:83:85:88:ab:57:65:23:1e:f2:23:bf:0b: 48:50:2a:c8:65:9a:f7:67:2c:dc:8d:53:3b:c9:b0: f8:df:e3:09:7d:b2:72:5e:3f:1b:e7:30:8b:bc:0e: aa:28:0c:be:14:6f:fd:64:05:a5:5b:7f:df:1b:13: e6:95:37:62:59:bb:ca:6c:50:6b:19:ba:79:f0:ef: 04:1e:b8:db:a8:5b:46:fd:88:4e:8a:a9:a2:c1:d1: ae:db:c8:63:d7:f9:01:e9:ae:f1:bc:6a:5b:7f:a6: 47:cf:a6:90:12:73:96:9a:8f:15:ed:3a:00:a1:63: 6a:66:0d:b8:64:e1:36:3c:49:9c:7e:e1:e4:c0:12: ad:19:2d:24:fd:9e:6a:b4:f1:0b:66:20:95:97:d4: 12:ab:7b:11:f4:5e:eb:70:da:8a:a7:c6:13:d9:2e: 69:0c:f6:84:b2:aa:2a:72:9c:8b:06:de:47:27:65: 65:3e:56:16:16:c9:96:6a:01:88:1c:f6:3d:43:42: 1a:3b:7e:eb:78:46:41:27:b8:29:6e:c4:41:26:c5: bd:e5:c0:db:c3:b5:3b:98:5a:8e:94:b6:fc:a4:80: fd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:86:0A:52:08:0D:43:3E:6A:46:7A:D5:99:FD:33:1F:1D:B1:FE:B4 X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/gIYKUggNQz5qRnrVmf0zHx2x_rQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.142.222.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:b5:04:32:c0:b7:33:88:f6:c9:2a:92:83:38:6a:65:1a:c9: b5:b5:b5:86:a4:0f:7d:6c:a8:40:cc:a5:a0:99:19:05:30:7a: e7:1b:f0:c0:0d:64:80:72:28:4b:6c:3b:12:36:70:6d:36:8b: 1c:6d:9f:7e:ba:91:ea:a2:54:78:89:4a:44:a8:c1:c4:8f:f1: 41:1b:b4:06:86:d6:7a:3b:44:b0:af:e1:5f:8f:1a:33:05:0d: 3c:8c:cc:a4:94:d1:30:f7:1e:ac:51:c2:3b:5d:8c:a6:3d:b5: b0:de:44:43:0a:49:0b:e9:42:1a:87:62:42:fd:a8:42:78:57: 02:28:a5:16:77:79:28:3a:cc:61:5b:1a:f6:ec:45:82:2d:54: a2:6c:f3:16:2e:76:80:88:e3:dd:b3:d6:0a:d3:e1:bc:1f:46: 1d:9e:7e:22:5f:cf:66:10:85:c9:98:67:95:ea:af:9d:ae:14: 57:1b:b6:1e:a7:08:fe:f4:a6:91:74:d0:d6:ba:1b:e9:af:ad: d3:69:f0:99:31:11:b6:73:78:6f:2f:01:76:5c:31:e6:1e:15: 01:2a:ca:37:22:c1:a7:53:ad:03:90:38:9e:81:ea:05:cd:0b: be:8c:af:03:b7:37:cc:b6:b6:c9:58:80:5d:73:02:2e:b9:15: 33:be:b6:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwivh23ggbJmTl2wvhWozGNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMjAzMDkwMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDg2MGE1MjA4MGQ0MzNlNmE0NjdhZDU5OWZkMzMxZjFkYjFmZWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVZyQazsmbpbukyUh8dW99KQ6jN2 1aBRUAbGmDi+WUuDhYirV2UjHvIjvwtIUCrIZZr3ZyzcjVM7ybD43+MJfbJyXj8b 5zCLvA6qKAy+FG/9ZAWlW3/fGxPmlTdiWbvKbFBrGbp58O8EHrjbqFtG/YhOiqmi wdGu28hj1/kB6a7xvGpbf6ZHz6aQEnOWmo8V7ToAoWNqZg24ZOE2PEmcfuHkwBKt GS0k/Z5qtPELZiCVl9QSq3sR9F7rcNqKp8YT2S5pDPaEsqoqcpyLBt5HJ2VlPlYW FsmWagGIHPY9Q0IaO37reEZBJ7gpbsRBJsW95cDbw7U7mFqOlLb8pID9QQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFICGClIIDUM+akZ61Zn9Mx8dsf60MB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvZ0lZS1VnZ05RejVxUm5yVm1mMHpIeDJ4X3JRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVY7eMA0G CSqGSIb3DQEBCwUAA4IBAQCKtQQywLcziPbJKpKDOGplGsm1tbWGpA99bKhAzKWg mRkFMHrnG/DADWSAcihLbDsSNnBtNoscbZ9+upHqolR4iUpEqMHEj/FBG7QGhtZ6 O0Swr+FfjxozBQ08jMyklNEw9x6sUcI7XYymPbWw3kRDCkkL6UIah2JC/ahCeFcC KKUWd3koOsxhWxr27EWCLVSibPMWLnaAiOPds9YK0+G8H0Ydnn4iX89mEIXJmGeV 6q+drhRXG7Yepwj+9KaRdNDWuhvpr63TafCZMRG2c3hvLwF2XDHmHhUBKso3IsGn U60DkDiegeoFzQu+jK8DtzfMtrbJWIBdcwIuuRUzvrY0 -----END CERTIFICATE-----Generated at Wed Feb 4 03:01:47 2026 by rpki-client