This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/NtljOaIL1JwpiXLySyyvx4z_K-w.roa File: NtljOaIL1JwpiXLySyyvx4z_K-w.roa (raw, json) Hash identifier: bTyr7ks2Z5N+mkb97LsrPJ8BXJjMNHN+ldTmfDHr8Xw= Subject key identifier: 36:D9:63:39:A2:0B:D4:9C:29:89:72:F2:4B:2C:AF:C7:8C:FF:2B:EC Certificate issuer: /CN=93dc75e61e483f0d479221f3ca75fc722096a7ed Certificate serial: 019B7C125966C2AD7203023C15B6686FB59E Authority key identifier: 93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/NtljOaIL1JwpiXLySyyvx4z_K-w.roa Signing time: Fri 02 Jan 2026 00:18:55 +0000 ROA not before: Fri 02 Jan 2026 00:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207029 IP address blocks: 185.85.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:59:66:c2:ad:72:03:02:3c:15:b6:68:6f:b5:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93dc75e61e483f0d479221f3ca75fc722096a7ed Validity Not Before: Jan 2 00:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36d96339a20bd49c298972f24b2cafc78cff2bec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:94:39:ee:91:c7:d2:51:df:9a:35:fe:e6:63: 47:45:38:d0:4c:3b:96:ae:40:01:69:61:0b:79:52: 73:29:57:8e:4b:fe:dc:bc:60:2a:bd:f0:08:fa:78: 14:11:54:68:4d:4b:85:30:99:19:2f:3e:ca:29:b7: c7:d5:ef:53:e9:f3:5e:c2:18:b4:e9:8e:d2:fb:2f: 90:31:cc:0d:6d:a8:2e:61:3a:df:83:03:96:f7:ef: ad:ad:b1:ae:77:e1:41:d2:08:d8:26:a3:3b:e7:62: 0b:12:ed:4e:b8:0a:6c:ab:17:d7:e2:62:10:e5:0c: c1:dc:68:e9:ed:eb:03:99:57:ce:2f:11:42:12:b9: 3e:03:b0:a4:a7:25:c6:01:48:92:44:b7:bc:40:b5: 2f:68:42:09:1b:7f:43:d5:d6:f7:7d:8b:97:84:09: 00:e2:5c:fe:d7:01:0b:44:65:8d:3c:ea:4a:41:18: a9:88:cc:87:18:a1:8d:03:4e:aa:7d:b1:31:1f:62: b6:d3:43:28:f6:85:aa:f6:65:e0:db:17:25:41:ad: 1f:17:79:d1:de:26:2a:b0:dd:06:ec:39:86:eb:62: d0:35:1d:75:b5:fd:39:3b:fb:2f:7e:b1:3d:da:b5: 7a:41:65:5d:27:c2:dc:a2:a6:f3:39:0d:ab:f2:53: a0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D9:63:39:A2:0B:D4:9C:29:89:72:F2:4B:2C:AF:C7:8C:FF:2B:EC X509v3 Authority Key Identifier: keyid:93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/NtljOaIL1JwpiXLySyyvx4z_K-w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.85.20.0/24 Signature Algorithm: sha256WithRSAEncryption 66:21:9f:ef:53:ee:11:82:27:0a:3b:ea:d3:ed:11:ee:fe:4c: fb:2c:e8:47:15:ca:f4:d8:02:5a:86:e0:be:3d:39:61:85:e7: cd:84:ce:ef:84:9b:3a:68:0d:d0:6b:1a:b9:fa:57:0b:a8:1f: e4:c3:cf:8a:98:18:0a:73:d3:92:6c:1f:77:fb:45:51:c2:e1: 57:04:56:1d:5d:33:f6:5a:d8:43:e1:18:73:bf:5a:02:11:0a: c4:bb:ca:b2:ee:ff:61:11:d2:af:be:37:c3:60:1d:6f:b3:54: 1d:6a:4f:88:82:92:c6:6a:7d:fb:f0:9c:e9:2e:fd:33:6c:39: b7:3b:02:c0:fc:0c:10:28:ee:d0:79:bb:b4:77:3f:a1:b7:b4: ee:0d:04:7e:cd:3b:87:bf:bd:06:de:03:27:39:f0:e5:45:7c: 46:5f:69:39:e0:56:24:9d:ee:46:3f:5c:b2:1f:87:ce:4d:1c: c3:b1:04:f1:59:d7:44:f1:68:53:61:50:7f:75:b3:04:a1:b7: 70:a5:20:c7:c9:e6:08:44:7f:61:e8:84:92:e4:78:56:87:9f: 88:83:54:5f:fd:95:ff:33:7f:d5:f4:ed:6b:40:9f:3f:bd:d0: 1d:1f:20:b4:ea:62:88:4d:cc:5c:d1:6e:dc:2a:0b:ac:82:64: 70:d2:0b:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ellmwq1yAwI8FbZob7WeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZGM3NWU2MWU0ODNmMGQ0NzkyMjFmM2NhNzVmYzcyMjA5 NmE3ZWQwHhcNMjYwMTAyMDAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmQ5NjMzOWEyMGJkNDljMjk4OTcyZjI0YjJjYWZjNzhjZmYyYmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpQ57pHH0lHfmjX+5mNHRTjQTDuW rkABaWELeVJzKVeOS/7cvGAqvfAI+ngUEVRoTUuFMJkZLz7KKbfH1e9T6fNewhi0 6Y7S+y+QMcwNbaguYTrfgwOW9++trbGud+FB0gjYJqM752ILEu1OuApsqxfX4mIQ 5QzB3Gjp7esDmVfOLxFCErk+A7CkpyXGAUiSRLe8QLUvaEIJG39D1db3fYuXhAkA 4lz+1wELRGWNPOpKQRipiMyHGKGNA06qfbExH2K200Mo9oWq9mXg2xclQa0fF3nR 3iYqsN0G7DmG62LQNR11tf05O/svfrE92rV6QWVdJ8LcoqbzOQ2r8lOgtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDbZYzmiC9ScKYly8kssr8eM/yvsMB8GA1UdIwQY MBaAFJPcdeYeSD8NR5Ih88p1/HIglqftMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazl4MTVoNUlQdzFIa2lIenluWDhjaUNXcC0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS83NjgyNDEtN2FkZi00YzI1LTk3Y2Ut MzM4OTc1ODI5ZThiLzEvTnRsak9hSUwxSndwaVhMeVN5eXZ4NHpfSy13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS83NjgyNDEtN2FkZi00YzI1LTk3Y2UtMzM4OTc1ODI5ZThi LzEvazl4MTVoNUlQdzFIa2lIenluWDhjaUNXcC0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVUUMA0G CSqGSIb3DQEBCwUAA4IBAQBmIZ/vU+4RgicKO+rT7RHu/kz7LOhHFcr02AJahuC+ PTlhhefNhM7vhJs6aA3Qaxq5+lcLqB/kw8+KmBgKc9OSbB93+0VRwuFXBFYdXTP2 WthD4Rhzv1oCEQrEu8qy7v9hEdKvvjfDYB1vs1Qdak+IgpLGan378JzpLv0zbDm3 OwLA/AwQKO7Qebu0dz+ht7TuDQR+zTuHv70G3gMnOfDlRXxGX2k54FYkne5GP1yy H4fOTRzDsQTxWddE8WhTYVB/dbMEobdwpSDHyeYIRH9h6ISS5HhWh5+Ig1Rf/ZX/ M3/V9O1rQJ8/vdAdHyC06mKITcxc0W7cKgusgmRw0gvB -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:46 2026 by rpki-client