This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/nCjz9nEtA_4NA_kaOIHTGjfmhZM.roa File: nCjz9nEtA_4NA_kaOIHTGjfmhZM.roa (raw, json) Hash identifier: HDdNlL5/XEs7lCbhRni8uVckwxG4UwolvDrUBaFtx64= Subject key identifier: 9C:28:F3:F6:71:2D:03:FE:0D:03:F9:1A:38:81:D3:1A:37:E6:85:93 Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E3908AEFA36C936F98DA937EAB2ACFC Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/nCjz9nEtA_4NA_kaOIHTGjfmhZM.roa Signing time: Fri 02 Jan 2026 10:20:25 +0000 ROA not before: Fri 02 Jan 2026 10:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44477 IP address blocks: 85.142.222.0/24 maxlen: 24 85.142.231.0/24 maxlen: 24 85.142.234.0/23 maxlen: 24 85.142.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:08:ae:fa:36:c9:36:f9:8d:a9:37:ea:b2:ac:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c28f3f6712d03fe0d03f91a3881d31a37e68593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:da:d1:5a:0f:43:64:bb:db:d0:ad:24:3e:30: 09:34:29:fa:d5:c0:bb:19:ca:d0:73:3f:8f:39:ca: 9b:03:46:96:18:50:1a:20:11:68:89:3b:aa:cd:bb: df:55:ed:04:c6:d9:96:1d:a1:6c:f3:0e:83:7a:c1: d4:df:d3:e4:d7:64:71:0b:46:c9:a7:00:da:70:a2: 27:32:e5:87:08:dc:e7:ba:4a:03:b7:ff:96:3d:c6: 78:cc:af:1d:d9:93:31:87:f3:65:03:64:c1:cc:a0: bb:02:43:86:15:36:d3:24:12:64:09:be:39:97:c8: 73:93:96:bb:c3:c9:8f:d6:09:36:d3:57:59:ef:d7: 89:5a:32:d0:c8:a7:16:20:df:ea:c1:d7:9d:a0:cf: bd:0b:df:18:1a:09:75:70:8e:29:8c:10:2a:4f:7a: a6:6c:63:b3:cb:32:10:a0:f7:23:b8:65:56:49:9b: 8c:6a:bc:41:0a:28:ac:56:14:86:d2:75:c4:85:4a: 41:4a:9a:b9:71:b8:a7:44:84:e5:8a:ca:73:2d:d7: 4e:61:09:c3:57:60:34:e9:26:13:e7:36:0c:4e:fb: d8:4f:5d:11:64:b3:2c:b0:f3:3d:f0:65:41:7e:69: 03:7e:0c:99:c4:69:03:4e:85:bf:a2:54:39:ae:fb: 21:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:28:F3:F6:71:2D:03:FE:0D:03:F9:1A:38:81:D3:1A:37:E6:85:93 X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/nCjz9nEtA_4NA_kaOIHTGjfmhZM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.142.222.0/24 85.142.231.0/24 85.142.234.0-85.142.239.255 Signature Algorithm: sha256WithRSAEncryption 3c:f0:0b:23:ab:57:0f:ed:5b:a3:d4:44:47:97:03:13:b0:d9: a3:f0:60:6d:0a:0c:9f:79:ec:02:50:f5:cb:ee:af:13:40:e7: 24:10:f5:ee:5f:af:a4:fc:0e:c4:cf:b5:59:da:04:34:67:61: 38:ab:06:65:a6:14:91:49:34:87:77:7b:61:9e:b7:dd:43:41: af:25:61:8d:3b:0e:de:7f:0b:01:ae:ab:48:f3:9a:12:7e:ef: 71:19:49:cc:cd:71:47:ae:b1:a4:16:d2:26:a1:29:c0:ed:50: ed:d1:ba:33:a2:fd:dc:32:6b:4f:83:ef:30:64:47:0c:07:a4: 58:2a:a0:14:db:6c:03:e1:48:b5:50:db:8f:80:7f:fd:99:4e: ce:ce:6d:9c:3a:6b:c8:44:c8:14:bc:11:7a:a9:fd:07:b0:b6: 6e:60:0c:84:46:ce:3f:ef:6e:4d:5d:08:c0:00:cb:a1:49:8f: ac:b9:a4:49:85:99:cf:04:34:49:a4:bd:08:8a:9a:a4:0d:ce: fe:ca:45:eb:52:f2:45:6f:92:b5:ed:31:29:bc:cf:f7:56:95: 1a:0c:61:a0:6d:34:3b:0b:b0:d6:23:cf:46:43:ae:42:2c:0f: 81:89:c4:c3:5f:d6:46:c4:fd:ac:83:a1:da:5e:35:f3:75:8f: d4:1e:ff:c5 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt+OQiu+jbJNvmNqTfqsqz8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzI4ZjNmNjcxMmQwM2ZlMGQwM2Y5MWEzODgxZDMxYTM3ZTY4NTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNrRWg9DZLvb0K0kPjAJNCn61cC7 GcrQcz+POcqbA0aWGFAaIBFoiTuqzbvfVe0ExtmWHaFs8w6DesHU39Pk12RxC0bJ pwDacKInMuWHCNznukoDt/+WPcZ4zK8d2ZMxh/NlA2TBzKC7AkOGFTbTJBJkCb45 l8hzk5a7w8mP1gk201dZ79eJWjLQyKcWIN/qwdedoM+9C98YGgl1cI4pjBAqT3qm bGOzyzIQoPcjuGVWSZuMarxBCiisVhSG0nXEhUpBSpq5cbinRITlispzLddOYQnD V2A06SYT5zYMTvvYT10RZLMssPM98GVBfmkDfgyZxGkDToW/olQ5rvsh8wIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFJwo8/ZxLQP+DQP5GjiB0xo35oWTMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvbkNqejluRXRBXzROQV9rYU9JSFRHamZtaFpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAVY7eAwQA VY7nMAwDBAFVjuoDBARVjuAwDQYJKoZIhvcNAQELBQADggEBADzwCyOrVw/tW6PU REeXAxOw2aPwYG0KDJ957AJQ9cvurxNA5yQQ9e5fr6T8DsTPtVnaBDRnYTirBmWm FJFJNId3e2Get91DQa8lYY07Dt5/CwGuq0jzmhJ+73EZSczNcUeusaQW0iahKcDt UO3RujOi/dwya0+D7zBkRwwHpFgqoBTbbAPhSLVQ24+Af/2ZTs7ObZw6a8hEyBS8 EXqp/Qewtm5gDIRGzj/vbk1dCMAAy6FJj6y5pEmFmc8ENEmkvQiKmqQNzv7KRetS 8kVvkrXtMSm8z/dWlRoMYaBtNDsLsNYjz0ZDrkIsD4GJxMNf1kbE/ayDodpeNfN1 j9Qe/8U= -----END CERTIFICATE-----Generated at Fri Jan 9 12:06:12 2026 by rpki-client