This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/wPOPfa9gC7Gx-gFnDub7_hrEhi4.roa File: wPOPfa9gC7Gx-gFnDub7_hrEhi4.roa (raw, json) Hash identifier: VxkO6fBbTYMBO4jXH/JD3dN5+ZLMhiKDYjCspmghV5A= Subject key identifier: C0:F3:8F:7D:AF:60:0B:B1:B1:FA:01:67:0E:E6:FB:FE:1A:C4:86:2E Certificate issuer: /CN=b0225fd035a7ce64a7c88bde71aeb560f3483974 Certificate serial: 019C2616219F96D9A9DDB29551C0A9087263 Authority key identifier: B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/wPOPfa9gC7Gx-gFnDub7_hrEhi4.roa Signing time: Wed 04 Feb 2026 00:38:30 +0000 ROA not before: Wed 04 Feb 2026 00:38:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 138968 IP address blocks: 85.208.212.0/24 maxlen: 24 85.208.213.0/24 maxlen: 24 85.208.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:26:16:21:9f:96:d9:a9:dd:b2:95:51:c0:a9:08:72:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0225fd035a7ce64a7c88bde71aeb560f3483974 Validity Not Before: Feb 4 00:38:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0f38f7daf600bb1b1fa01670ee6fbfe1ac4862e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c9:3a:36:1d:a2:54:ae:75:c9:90:a5:40:19: 7f:ba:1c:f2:71:c2:f6:4d:85:3f:8f:cc:77:a2:18: f0:fb:ad:e4:0c:92:6e:f3:4b:c4:48:0a:c0:18:dd: a0:c1:b6:16:78:30:da:04:33:3c:cd:4d:69:7d:1c: 1d:3d:8b:21:34:d1:57:63:a2:75:53:07:8f:03:59: da:b2:12:11:74:ef:82:b3:24:26:48:15:3c:99:76: e9:d3:66:e9:28:02:8f:37:e0:6c:48:39:c6:6d:4e: 17:6e:5f:6f:2e:3f:c3:60:b0:73:4b:31:22:35:50: 0c:f0:d2:d3:63:69:4d:1c:d9:2c:d4:e5:c7:36:6b: b0:77:ba:7b:6a:26:18:b8:fd:89:9a:18:7b:04:99: 48:fe:63:5a:7a:f5:47:31:77:3c:4f:6d:c5:72:2a: 8d:bc:ac:97:1b:1c:2d:14:d7:3b:34:dc:4e:d7:47: 6a:c4:49:89:88:26:f5:e5:bc:7d:d0:67:a5:e1:3f: c6:80:e7:63:9b:16:79:e9:73:58:64:82:b4:d1:5e: 53:62:e6:03:29:01:92:56:5f:5b:7d:0e:4a:43:81: 03:f5:90:20:41:1f:13:16:be:64:00:fe:b0:88:f1: 4e:33:ad:41:c7:db:b0:53:10:52:aa:bb:00:58:0f: b9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F3:8F:7D:AF:60:0B:B1:B1:FA:01:67:0E:E6:FB:FE:1A:C4:86:2E X509v3 Authority Key Identifier: keyid:B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/wPOPfa9gC7Gx-gFnDub7_hrEhi4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.208.212.0/22 Signature Algorithm: sha256WithRSAEncryption 95:22:9c:aa:98:cc:4a:85:2f:c2:41:8a:0b:fe:c4:07:ef:9c: b1:af:8d:70:65:91:d7:24:b6:c3:2b:8e:ae:2b:3b:20:48:cb: 4d:db:a8:20:c5:74:6e:e7:16:24:1b:11:f5:9c:61:e4:79:c2: 29:28:bd:2b:94:9c:45:3c:79:4e:c5:c5:8c:6c:c2:97:01:15: c9:2e:23:2b:64:33:f5:32:49:23:45:99:04:1a:ca:02:ca:f4: a0:d1:b9:69:42:26:6e:ce:d4:8f:8a:d8:c2:c5:9b:6a:10:e6: db:76:53:f5:52:48:0a:2c:46:6d:42:31:51:19:03:52:51:2f: e1:f3:cf:10:47:10:a1:10:85:da:4b:37:f5:57:92:62:81:eb: c5:45:86:4d:b0:35:20:ec:1c:14:61:7c:2f:2e:c2:5d:7e:fa: bd:11:f2:6b:8e:27:78:7b:88:ac:50:8d:b5:30:59:26:6e:c3: 22:97:48:70:58:df:c0:52:32:b7:83:ce:9d:ff:14:bd:86:42: 1a:dc:e9:c6:af:16:8e:e6:7b:c0:6e:46:52:93:f9:a3:1e:79: a8:ed:61:2d:1d:d3:3a:3f:76:69:d7:42:ec:d1:d5:7b:4c:e5: 13:f2:26:cc:73:8b:9b:2c:9d:e2:bd:f9:f5:ca:3f:92:00:9d: bd:e5:66:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwmFiGfltmp3bKVUcCpCHJjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMjI1ZmQwMzVhN2NlNjRhN2M4OGJkZTcxYWViNTYwZjM0 ODM5NzQwHhcNMjYwMjA0MDAzODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGYzOGY3ZGFmNjAwYmIxYjFmYTAxNjcwZWU2ZmJmZTFhYzQ4NjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnck6Nh2iVK51yZClQBl/uhzyccL2 TYU/j8x3ohjw+63kDJJu80vESArAGN2gwbYWeDDaBDM8zU1pfRwdPYshNNFXY6J1 UwePA1nashIRdO+CsyQmSBU8mXbp02bpKAKPN+BsSDnGbU4Xbl9vLj/DYLBzSzEi NVAM8NLTY2lNHNks1OXHNmuwd7p7aiYYuP2Jmhh7BJlI/mNaevVHMXc8T23FciqN vKyXGxwtFNc7NNxO10dqxEmJiCb15bx90Gel4T/GgOdjmxZ56XNYZIK00V5TYuYD KQGSVl9bfQ5KQ4ED9ZAgQR8TFr5kAP6wiPFOM61Bx9uwUxBSqrsAWA+5sQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMDzj32vYAuxsfoBZw7m+/4axIYuMB8GA1UdIwQY MBaAFLAiX9A1p85kp8iL3nGutWDzSDl0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0NKZjBEV256bVNueUl2ZWNhNjFZUE5JT1hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jNDYyNzgtZTFkMC00ZGM3LTk4Yzct NDQzZTRiYWI3ZGU2LzEvd1BPUGZhOWdDN0d4LWdGbkR1YjdfaHJFaGk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jNDYyNzgtZTFkMC00ZGM3LTk4YzctNDQzZTRiYWI3ZGU2 LzEvc0NKZjBEV256bVNueUl2ZWNhNjFZUE5JT1hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVdDUMA0G CSqGSIb3DQEBCwUAA4IBAQCVIpyqmMxKhS/CQYoL/sQH75yxr41wZZHXJLbDK46u KzsgSMtN26ggxXRu5xYkGxH1nGHkecIpKL0rlJxFPHlOxcWMbMKXARXJLiMrZDP1 MkkjRZkEGsoCyvSg0blpQiZuztSPitjCxZtqEObbdlP1UkgKLEZtQjFRGQNSUS/h 888QRxChEIXaSzf1V5JigevFRYZNsDUg7BwUYXwvLsJdfvq9EfJrjid4e4isUI21 MFkmbsMil0hwWN/AUjK3g86d/xS9hkIa3OnGrxaO5nvAbkZSk/mjHnmo7WEtHdM6 P3Zp10Ls0dV7TOUT8ibMc4ubLJ3ivfn1yj+SAJ295WZv -----END CERTIFICATE-----Generated at Wed Feb 4 10:07:23 2026 by rpki-client