This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jIJUpwi2Zi5zIVBNmjQ08zwZsTE.roa File: jIJUpwi2Zi5zIVBNmjQ08zwZsTE.roa (raw, json) Hash identifier: FRP7+T20nN6zeeZMlzy/lQX3PIX5ZysOcp+wK0GvUUo= Subject key identifier: 8C:82:54:A7:08:B6:66:2E:73:21:50:4D:9A:34:34:F3:3C:19:B1:31 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAC7D281F53F654D8F2BA2C80EFBFB Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jIJUpwi2Zi5zIVBNmjQ08zwZsTE.roa Signing time: Thu 01 Jan 2026 00:17:36 +0000 ROA not before: Thu 01 Jan 2026 00:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151704 IP address blocks: 85.209.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c7:d2:81:f5:3f:65:4d:8f:2b:a2:c8:0e:fb:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c8254a708b6662e7321504d9a3434f33c19b131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:60:3b:1e:18:1a:ed:d1:67:39:6b:bb:7e:d2: 89:39:19:c1:5c:bb:8a:f9:e3:cb:89:64:d0:56:71: 3b:99:75:2c:5c:18:ab:eb:43:e5:2f:5b:2d:c7:d9: 63:c2:fc:0b:aa:a3:73:3d:bc:bd:0b:b6:30:fd:b0: a3:75:92:1a:3a:92:f6:1b:17:12:93:c4:6e:ee:e9: 9d:8d:e7:71:8e:8a:d5:73:7f:ca:38:16:e5:a1:0c: c7:6e:eb:eb:d4:da:7d:79:ca:02:0a:b3:ee:e5:aa: 8b:f3:dd:76:97:01:55:e7:b3:61:2d:3d:93:1a:ef: ff:c1:4e:24:49:b8:c9:b6:dd:78:74:c4:18:93:ec: f5:b9:7f:ab:ae:0c:c1:57:af:15:b6:de:fd:d7:be: a9:5c:12:1d:3b:f1:1a:70:69:64:0e:c4:83:b4:9a: 7e:f3:22:11:81:39:72:81:b7:32:31:91:00:80:1d: 24:85:66:3f:45:ee:09:1d:f6:8c:df:b9:16:98:96: 44:b2:68:e5:ce:8b:b5:b1:9b:ca:53:68:60:3b:35: 7d:42:87:eb:42:24:a4:1b:47:ce:d2:b3:b0:32:e0: da:1f:69:0e:89:56:0f:be:5b:93:0f:5d:7c:61:08: 15:61:09:c0:1e:50:38:c7:2b:ea:6b:e8:6f:78:2c: fc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:82:54:A7:08:B6:66:2E:73:21:50:4D:9A:34:34:F3:3C:19:B1:31 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jIJUpwi2Zi5zIVBNmjQ08zwZsTE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.209.161.0/24 Signature Algorithm: sha256WithRSAEncryption d6:8b:ff:13:7f:f6:df:59:9c:79:d5:00:b6:a5:c2:10:5c:e7: 42:5b:91:26:40:bd:34:d6:b7:7c:d6:13:75:b8:8d:fe:d8:a5: e6:eb:7e:30:0f:75:68:f1:80:1d:43:06:4b:69:94:09:b9:95: 8b:92:ac:17:df:10:a8:3c:26:dd:5c:b0:4d:21:cc:27:a6:fe: c2:e9:44:a1:dd:4d:c2:a1:79:95:ee:f3:2d:af:98:8f:28:9e: d1:8c:08:d4:ba:0f:4a:7b:75:46:71:48:99:21:41:85:81:cf: d8:b4:eb:ad:94:69:f7:9a:13:26:77:33:62:62:12:5a:e9:e1: 9b:35:04:95:f0:7a:b3:8f:c7:32:29:c6:b5:db:4e:4a:ed:ce: 07:aa:b0:91:ca:9e:00:9b:9d:ec:68:ac:76:d2:64:44:32:79: 9b:0b:a1:20:e5:05:28:72:df:67:c9:5e:2d:b5:17:1a:e0:b1: 74:ef:0b:e0:25:7f:c2:ea:60:f4:6d:7d:79:d5:d0:25:8e:27: 33:a0:3a:3e:07:28:d4:36:27:07:dd:9f:dd:08:ae:b2:7f:2e: c6:0f:1a:a9:7b:e9:55:ba:cd:d4:ab:c6:d5:ef:b8:66:21:76: 54:e6:19:7b:19:20:f6:c6:48:cd:61:4e:7b:5d:d9:95:3e:62: b2:ad:43:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26sfSgfU/ZU2PK6LIDvv7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzgyNTRhNzA4YjY2NjJlNzMyMTUwNGQ5YTM0MzRmMzNjMTliMTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGA7Hhga7dFnOWu7ftKJORnBXLuK +ePLiWTQVnE7mXUsXBir60PlL1stx9ljwvwLqqNzPby9C7Yw/bCjdZIaOpL2GxcS k8Ru7umdjedxjorVc3/KOBbloQzHbuvr1Np9ecoCCrPu5aqL8912lwFV57NhLT2T Gu//wU4kSbjJtt14dMQYk+z1uX+rrgzBV68Vtt79176pXBIdO/EacGlkDsSDtJp+ 8yIRgTlygbcyMZEAgB0khWY/Re4JHfaM37kWmJZEsmjlzou1sZvKU2hgOzV9Qofr QiSkG0fO0rOwMuDaH2kOiVYPvluTD118YQgVYQnAHlA4xyvqa+hveCz84QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIyCVKcItmYucyFQTZo0NPM8GbExMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvaklKVXB3aTJaaTV6SVZCTm1qUTA4endac1RFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdGhMA0G CSqGSIb3DQEBCwUAA4IBAQDWi/8Tf/bfWZx51QC2pcIQXOdCW5EmQL001rd81hN1 uI3+2KXm634wD3Vo8YAdQwZLaZQJuZWLkqwX3xCoPCbdXLBNIcwnpv7C6USh3U3C oXmV7vMtr5iPKJ7RjAjUug9Ke3VGcUiZIUGFgc/YtOutlGn3mhMmdzNiYhJa6eGb NQSV8Hqzj8cyKca1205K7c4HqrCRyp4Am53saKx20mREMnmbC6Eg5QUoct9nyV4t tRca4LF07wvgJX/C6mD0bX151dAljiczoDo+ByjUNicH3Z/dCK6yfy7GDxqpe+lV us3Uq8bV77hmIXZU5hl7GSD2xkjNYU57XdmVPmKyrUNh -----END CERTIFICATE-----Generated at Wed Jan 21 18:52:36 2026 by rpki-client