This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/pxWFbsoMAQLBSDALy0IF8eFc7ac.roa File: pxWFbsoMAQLBSDALy0IF8eFc7ac.roa (raw, json) Hash identifier: sA4Q71fkUFI3QlXq81C3J6iGGkQPgi0Z5yBB1wSqgCI= Subject key identifier: A7:15:85:6E:CA:0C:01:02:C1:48:30:0B:CB:42:05:F1:E1:5C:ED:A7 Certificate issuer: /CN=22ce6f80d7670973d32ec4745301011217468822 Certificate serial: 019B7C805CDD8F40071C1F34EB2EDACC22A1 Authority key identifier: 22:CE:6F:80:D7:67:09:73:D3:2E:C4:74:53:01:01:12:17:46:88:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Is5vgNdnCXPTLsR0UwEBEhdGiCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/pxWFbsoMAQLBSDALy0IF8eFc7ac.roa Signing time: Fri 02 Jan 2026 02:19:05 +0000 ROA not before: Fri 02 Jan 2026 02:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209305 IP address blocks: 85.209.232.0/24 maxlen: 24 2a09:a140::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/Is5vgNdnCXPTLsR0UwEBEhdGiCI.crl rsync://rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/Is5vgNdnCXPTLsR0UwEBEhdGiCI.mft rsync://rpki.ripe.net/repository/DEFAULT/Is5vgNdnCXPTLsR0UwEBEhdGiCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:5c:dd:8f:40:07:1c:1f:34:eb:2e:da:cc:22:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22ce6f80d7670973d32ec4745301011217468822 Validity Not Before: Jan 2 02:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a715856eca0c0102c148300bcb4205f1e15ceda7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9c:d9:8e:48:07:69:57:19:b4:82:94:6a:7a: 8d:c9:91:07:b8:ae:e0:91:10:65:14:f7:50:06:47: c2:46:c9:ec:d9:17:6b:4a:c0:b2:4f:a3:b2:05:85: 13:bd:c8:f0:ef:c3:84:0f:ad:0d:09:63:21:9a:a5: ff:58:c0:ad:d8:f0:e8:5a:f8:0b:62:2b:92:a3:0c: 98:83:7b:d1:36:4b:66:c3:13:b3:16:67:55:e4:15: d0:d2:59:79:06:2a:a2:88:11:84:95:9b:59:39:32: 97:d8:20:6d:8b:35:4b:55:21:0f:0b:40:95:0b:18: ba:a5:be:fd:ce:b6:c8:5e:f6:bb:ee:be:65:ce:7a: ab:bd:a9:4e:ff:25:f5:65:15:a3:f0:2a:b7:53:e2: 1d:9a:2f:e3:6a:42:58:7e:3d:44:7f:92:79:cc:67: 72:54:a9:6f:38:36:d5:b5:b2:48:2b:a4:e3:b8:a2: f1:c6:f0:d6:74:1f:38:48:3b:60:66:c3:f6:3b:00: d3:6f:2c:e0:96:1b:99:f1:a5:42:68:5d:73:a0:3d: 44:c1:97:dd:d2:4f:a1:15:22:b0:3c:c2:3d:4d:d9: 2e:4d:81:fc:66:b9:94:ad:4e:e8:16:d6:23:06:8f: c7:92:83:ab:84:c2:81:df:2e:4a:57:32:44:03:d7: d9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:15:85:6E:CA:0C:01:02:C1:48:30:0B:CB:42:05:F1:E1:5C:ED:A7 X509v3 Authority Key Identifier: keyid:22:CE:6F:80:D7:67:09:73:D3:2E:C4:74:53:01:01:12:17:46:88:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Is5vgNdnCXPTLsR0UwEBEhdGiCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/pxWFbsoMAQLBSDALy0IF8eFc7ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/Is5vgNdnCXPTLsR0UwEBEhdGiCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.209.232.0/24 IPv6: 2a09:a140::/29 Signature Algorithm: sha256WithRSAEncryption 2e:3b:87:aa:11:e3:c2:f3:d7:c0:8e:2d:16:85:c1:15:2b:14: 78:49:9c:78:01:14:e2:f8:47:d5:19:5a:86:83:6f:a3:5f:bc: 64:d0:87:b3:c5:fb:15:2f:85:68:18:a6:fd:f9:70:28:5e:17: 14:a4:e1:f1:cd:2c:54:f5:f1:42:d4:41:72:94:08:40:05:16: ab:05:92:c1:ab:6f:99:b1:90:c7:9e:1e:b6:c7:20:2f:91:cd: 70:e9:e5:42:e6:ff:3b:cb:69:14:8a:bc:6f:83:6f:b3:a0:7b: e3:bf:4d:7f:98:44:c8:61:78:71:e7:35:20:bb:5f:43:cf:59: cf:4c:7b:bd:ac:30:a8:d0:cd:86:88:8f:56:e1:61:0c:f6:53: 50:e9:08:ca:f4:f7:a4:6b:3f:7b:f0:c3:36:69:dc:fe:f0:86: 03:c1:0a:01:c1:9b:26:14:23:2c:5c:34:de:94:bb:d2:4b:6c: db:07:7f:55:fe:78:5a:41:a4:2b:76:4d:f9:f4:d3:a0:ae:ad: 73:01:f8:71:38:b3:c0:77:28:d2:37:5e:cb:95:64:b1:7d:30: 6b:79:83:18:61:d6:61:ca:75:f3:c1:cc:ba:76:a1:d5:dd:58: 58:f3:fd:b1:0d:9c:8c:cb:36:df:6d:33:f1:d7:33:7b:52:7e: 0a:1d:0f:b7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8gFzdj0AHHB806y7azCKhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyY2U2ZjgwZDc2NzA5NzNkMzJlYzQ3NDUzMDEwMTEyMTc0 Njg4MjIwHhcNMjYwMTAyMDIxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzE1ODU2ZWNhMGMwMTAyYzE0ODMwMGJjYjQyMDVmMWUxNWNlZGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZzZjkgHaVcZtIKUanqNyZEHuK7g kRBlFPdQBkfCRsns2RdrSsCyT6OyBYUTvcjw78OED60NCWMhmqX/WMCt2PDoWvgL YiuSowyYg3vRNktmwxOzFmdV5BXQ0ll5BiqiiBGElZtZOTKX2CBtizVLVSEPC0CV Cxi6pb79zrbIXva77r5lznqrvalO/yX1ZRWj8Cq3U+Idmi/jakJYfj1Ef5J5zGdy VKlvODbVtbJIK6TjuKLxxvDWdB84SDtgZsP2OwDTbyzglhuZ8aVCaF1zoD1EwZfd 0k+hFSKwPMI9TdkuTYH8ZrmUrU7oFtYjBo/HkoOrhMKB3y5KVzJEA9fZ5QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKcVhW7KDAECwUgwC8tCBfHhXO2nMB8GA1UdIwQY MBaAFCLOb4DXZwlz0y7EdFMBARIXRogiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXM1dmdOZG5DWFBUTHNSMFV3RUJFaGRHaUNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83Mjc0ZmYtMjUxNi00MmRhLTk1ZDUt NWFhYmRlMzExZmRiLzEvcHhXRmJzb01BUUxCU0RBTHkwSUY4ZUZjN2FjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi83Mjc0ZmYtMjUxNi00MmRhLTk1ZDUtNWFhYmRlMzExZmRi LzEvSXM1dmdOZG5DWFBUTHNSMFV3RUJFaGRHaUNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAVdHoMA0E AgACMAcDBQMqCaFAMA0GCSqGSIb3DQEBCwUAA4IBAQAuO4eqEePC89fAji0WhcEV KxR4SZx4ARTi+EfVGVqGg2+jX7xk0IezxfsVL4VoGKb9+XAoXhcUpOHxzSxU9fFC 1EFylAhABRarBZLBq2+ZsZDHnh62xyAvkc1w6eVC5v87y2kUirxvg2+zoHvjv01/ mETIYXhx5zUgu19Dz1nPTHu9rDCo0M2GiI9W4WEM9lNQ6QjK9Pekaz978MM2adz+ 8IYDwQoBwZsmFCMsXDTelLvSS2zbB39V/nhaQaQrdk359NOgrq1zAfhxOLPAdyjS N17LlWSxfTBreYMYYdZhynXzwcy6dqHV3VhY8/2xDZyMyzbfbTPx1zN7Un4KHQ+3 -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:13 2026 by rpki-client