This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/x0FhCIB5ODK90_rTc_r2Awfjd4M.roa File: x0FhCIB5ODK90_rTc_r2Awfjd4M.roa (raw, json) Hash identifier: On2NagZQM243ZaSUw3yn3W8AAke2HxKmPn2XRmXrxn4= Subject key identifier: C7:41:61:08:80:79:38:32:BD:D3:FA:D3:73:FA:F6:03:07:E3:77:83 Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E3905A112474DD4E8B8C3C78B520C3F Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/x0FhCIB5ODK90_rTc_r2Awfjd4M.roa Signing time: Fri 02 Jan 2026 10:20:24 +0000 ROA not before: Fri 02 Jan 2026 10:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28800 IP address blocks: 85.142.160.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:05:a1:12:47:4d:d4:e8:b8:c3:c7:8b:52:0c:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c741610880793832bdd3fad373faf60307e37783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:08:61:df:1d:7c:93:f7:f3:39:13:15:e3:61: c0:6a:7c:dc:80:81:b6:05:92:47:d9:81:3f:2e:e8: 76:b0:d3:6e:b1:c4:4f:f1:4d:49:f5:5c:99:0e:d2: 3d:27:b7:2e:0d:a7:2b:d7:a4:eb:01:0f:85:a5:e6: 6e:93:ce:85:ff:0c:42:8d:dc:d5:92:5e:f2:b9:48: f1:a2:c7:5c:2c:e7:8e:95:01:f1:41:76:4c:df:2d: 09:15:51:ad:a7:28:60:4f:cd:28:04:c0:e2:b7:4a: ce:ea:f7:46:2e:b0:22:b6:5b:3c:e6:f5:5c:75:7e: f6:34:4f:ea:54:dc:83:a3:b4:e6:96:3c:db:6d:77: f6:06:03:13:3b:5b:8a:36:5b:af:92:3e:8c:56:34: b5:4d:e9:94:01:f8:9e:7f:a7:93:15:3b:3c:20:d7: ce:fc:de:2d:2a:b7:ac:b8:bf:0c:fe:1f:f6:d9:df: b8:3d:44:2a:40:6e:c4:e4:ed:38:88:21:af:4c:28: b5:8f:26:fe:7d:eb:37:4e:2a:1a:4d:5a:33:d4:29: 4c:a8:f8:de:c1:51:a4:68:7a:23:4f:1f:58:62:cd: 0e:31:49:07:4e:10:b1:fb:b3:3f:8f:f1:b1:5a:44: 27:c1:c7:3c:b4:1b:e8:09:cc:e4:39:be:83:77:35: 4a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:41:61:08:80:79:38:32:BD:D3:FA:D3:73:FA:F6:03:07:E3:77:83 X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/x0FhCIB5ODK90_rTc_r2Awfjd4M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.142.160.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:fb:2d:75:28:48:ef:1b:cb:11:6b:5d:f3:1c:dc:ac:90:6b: cf:d5:3c:bc:ad:39:7e:61:fa:d5:b1:6a:25:eb:68:a4:62:bc: 23:fb:f9:e6:bb:1b:01:99:78:e6:81:a6:e9:c1:d6:3f:8d:85: 7c:ef:a3:dc:f7:b1:1b:a0:97:7f:7a:e3:23:3b:dc:dd:8d:27: 3e:28:7b:99:9d:f9:93:9f:4c:6d:df:ee:6d:83:82:4a:42:c8: 80:aa:93:c1:6d:79:3b:53:15:60:cb:fd:dc:38:c4:a7:af:8e: 65:7d:44:c3:2f:ad:a5:89:f9:51:66:a1:75:ef:47:8b:08:87: 8d:04:23:81:fe:92:15:cc:38:0d:9e:2d:0a:c3:e4:d4:21:87: 40:aa:72:fa:1a:2e:f7:47:c6:1e:6e:0e:4b:18:77:45:8c:27: ef:d0:e5:b6:94:d8:a2:9d:0f:32:2f:14:22:a6:6d:b5:fa:dc: 77:82:3a:d5:e0:4c:94:39:31:f6:e7:78:d4:a3:4e:a5:44:c6: 43:f4:b7:1c:f1:61:db:25:92:4f:e7:29:e7:76:25:0a:91:12: b8:0d:5f:7b:01:d6:d3:45:32:37:ab:ae:cc:c0:1f:ea:bf:22: ba:93:88:d2:27:c8:a1:6b:52:90:ab:3f:89:8c:3a:2d:e2:f4: 34:78:86:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OQWhEkdN1Oi4w8eLUgw/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzQxNjEwODgwNzkzODMyYmRkM2ZhZDM3M2ZhZjYwMzA3ZTM3NzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswhh3x18k/fzORMV42HAanzcgIG2 BZJH2YE/Luh2sNNuscRP8U1J9VyZDtI9J7cuDacr16TrAQ+FpeZuk86F/wxCjdzV kl7yuUjxosdcLOeOlQHxQXZM3y0JFVGtpyhgT80oBMDit0rO6vdGLrAitls85vVc dX72NE/qVNyDo7TmljzbbXf2BgMTO1uKNluvkj6MVjS1TemUAfief6eTFTs8INfO /N4tKresuL8M/h/22d+4PUQqQG7E5O04iCGvTCi1jyb+fes3TioaTVoz1ClMqPje wVGkaHojTx9YYs0OMUkHThCx+7M/j/GxWkQnwcc8tBvoCczkOb6DdzVK2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMdBYQiAeTgyvdP603P69gMH43eDMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEveDBGaENJQjVPREs5MF9yVGNfcjJBd2ZqZDRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVY6gMA0G CSqGSIb3DQEBCwUAA4IBAQAd+y11KEjvG8sRa13zHNyskGvP1Ty8rTl+YfrVsWol 62ikYrwj+/nmuxsBmXjmgabpwdY/jYV876Pc97EboJd/euMjO9zdjSc+KHuZnfmT n0xt3+5tg4JKQsiAqpPBbXk7UxVgy/3cOMSnr45lfUTDL62liflRZqF170eLCIeN BCOB/pIVzDgNni0Kw+TUIYdAqnL6Gi73R8Yebg5LGHdFjCfv0OW2lNiinQ8yLxQi pm21+tx3gjrV4EyUOTH253jUo06lRMZD9Lcc8WHbJZJP5ynndiUKkRK4DV97AdbT RTI3q67MwB/qvyK6k4jSJ8iha1KQqz+JjDot4vQ0eIaa -----END CERTIFICATE-----Generated at Mon Jan 26 04:55:20 2026 by rpki-client