This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/ONFJ7LphZxOGZ2K2zbv66AhtweY.roa File: ONFJ7LphZxOGZ2K2zbv66AhtweY.roa (raw, json) Hash identifier: DDngO20oZwmh9SFw7vnZ3c/5+t8eB0azTMW7fa0PcqY= Subject key identifier: 38:D1:49:EC:BA:61:67:13:86:67:62:B6:CD:BB:FA:E8:08:6D:C1:E6 Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a Certificate serial: 019B77C6DA616B82B587823F6B783D47CB73 Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/ONFJ7LphZxOGZ2K2zbv66AhtweY.roa Signing time: Thu 01 Jan 2026 04:17:59 +0000 ROA not before: Thu 01 Jan 2026 04:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214238 IP address blocks: 85.28.61.0/24 maxlen: 24 85.28.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:da:61:6b:82:b5:87:82:3f:6b:78:3d:47:cb:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a Validity Not Before: Jan 1 04:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=38d149ecba616713866762b6cdbbfae8086dc1e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:24:c3:da:70:b7:1b:f6:c6:59:3c:f4:61:b8: 57:ab:6c:d8:fd:51:1f:e9:e8:5f:a4:09:01:be:e0: ba:05:bf:af:11:fd:b5:3c:88:8f:82:98:49:31:d1: 72:f7:5d:f2:57:3d:be:14:9c:c8:6a:c9:fb:6f:51: 0d:a5:5b:5c:5b:f2:40:cb:79:23:21:60:41:ad:14: ef:90:3c:04:82:cc:41:20:df:c2:04:2e:85:d3:2d: 14:7a:7a:b8:26:4c:de:7d:23:05:69:fa:df:87:f3: 53:8d:ef:33:bf:41:56:65:45:c4:ca:5c:3e:93:25: 20:3a:f0:b0:47:1d:05:d9:67:3e:25:c9:f7:1d:bc: 59:03:61:56:bd:3e:1c:22:8c:f2:cf:04:aa:4d:47: 68:99:55:52:f6:6d:0c:ce:56:20:52:4e:5d:09:f2: 99:53:12:1a:b7:35:e4:03:ac:0f:36:cd:16:e0:ae: 60:1c:30:f9:99:a7:d5:6d:8e:87:b5:c5:21:50:f6: ab:1e:bb:ac:28:11:e9:bc:3c:f9:1f:03:44:ee:6b: 57:89:ea:73:15:e4:9f:e7:33:33:28:4d:70:fe:66: 88:e2:c9:73:54:d1:1b:5a:0e:be:d4:66:19:c8:a4: 06:c9:70:1d:24:ef:50:5b:6d:f3:4b:fa:c1:47:e0: 68:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D1:49:EC:BA:61:67:13:86:67:62:B6:CD:BB:FA:E8:08:6D:C1:E6 X509v3 Authority Key Identifier: keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/ONFJ7LphZxOGZ2K2zbv66AhtweY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.28.61.0/24 85.28.63.0/24 Signature Algorithm: sha256WithRSAEncryption 81:c8:3b:2f:fe:40:10:23:c9:fc:52:14:3c:fc:6c:7d:44:aa: 8d:b2:c6:7c:c5:54:65:14:6a:17:cb:81:fb:0f:ee:46:95:56: 81:00:4d:88:57:e4:23:93:de:21:8a:bb:80:09:f8:55:90:61: d8:fa:53:42:f1:bc:a9:ce:c3:ba:00:fb:f8:56:1c:b3:61:f4: c1:34:cf:6f:16:fd:ac:ad:03:cd:35:a7:f9:c3:a1:0f:62:9c: 85:4f:13:f4:6f:ec:bf:0c:f1:dd:2d:91:e2:44:77:d0:1d:25: b4:4f:3c:1d:d1:b6:cc:93:4f:53:0b:3a:cf:cf:cf:a6:0c:26: 7a:54:c8:d4:66:a2:f8:72:98:a1:d0:a4:cf:a5:39:3f:68:55: 5b:31:9f:dd:0f:ed:1c:89:b4:52:8d:19:4c:07:af:ca:50:97: a9:bf:46:36:23:ea:22:f0:e1:d1:49:b6:9d:aa:60:cf:9e:23: c6:9d:e1:85:d5:2a:6d:be:9c:d0:e2:ff:7b:5b:9c:22:43:98: 46:0b:25:e0:ba:94:f9:d4:fa:10:f9:8e:e3:f1:a7:5e:f5:1a: 07:24:e3:ca:44:b8:7d:ec:06:be:77:48:31:c0:85:b3:86:b5: 70:ce:71:9a:78:fe:ec:13:b2:70:b0:b4:3b:96:01:e2:83:4d: 8c:37:a5:1d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xtpha4K1h4I/a3g9R8tzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2 NTg4MWEwHhcNMjYwMTAxMDQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGQxNDllY2JhNjE2NzEzODY2NzYyYjZjZGJiZmFlODA4NmRjMWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCTD2nC3G/bGWTz0YbhXq2zY/VEf 6ehfpAkBvuC6Bb+vEf21PIiPgphJMdFy913yVz2+FJzIasn7b1ENpVtcW/JAy3kj IWBBrRTvkDwEgsxBIN/CBC6F0y0Uenq4JkzefSMFafrfh/NTje8zv0FWZUXEylw+ kyUgOvCwRx0F2Wc+Jcn3HbxZA2FWvT4cIozyzwSqTUdomVVS9m0MzlYgUk5dCfKZ UxIatzXkA6wPNs0W4K5gHDD5mafVbY6HtcUhUParHrusKBHpvDz5HwNE7mtXiepz FeSf5zMzKE1w/maI4slzVNEbWg6+1GYZyKQGyXAdJO9QW23zS/rBR+Bo6QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDjRSey6YWcThmdits27+ugIbcHmMB8GA1UdIwQY MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct ZmViYjY0YjVlMTY0LzEvT05GSjdMcGhaeE9HWjJLMnpidjY2QWh0d2VZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0 LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVRw9AwQA VRw/MA0GCSqGSIb3DQEBCwUAA4IBAQCByDsv/kAQI8n8UhQ8/Gx9RKqNssZ8xVRl FGoXy4H7D+5GlVaBAE2IV+Qjk94hiruACfhVkGHY+lNC8bypzsO6APv4VhyzYfTB NM9vFv2srQPNNaf5w6EPYpyFTxP0b+y/DPHdLZHiRHfQHSW0Tzwd0bbMk09TCzrP z8+mDCZ6VMjUZqL4cpih0KTPpTk/aFVbMZ/dD+0cibRSjRlMB6/KUJepv0Y2I+oi 8OHRSbadqmDPniPGneGF1SptvpzQ4v97W5wiQ5hGCyXgupT51PoQ+Y7j8ade9RoH JOPKRLh97Aa+d0gxwIWzhrVwznGaeP7sE7JwsLQ7lgHig02MN6Ud -----END CERTIFICATE-----Generated at Mon Jan 26 07:57:37 2026 by rpki-client