This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/P85nMUUsWvtlty3MsyeYuR91WlA.roa File: P85nMUUsWvtlty3MsyeYuR91WlA.roa (raw, json) Hash identifier: 0M7UxUnF0/zFcPRAsWHHJdG3pK8LxaWyG1SYbXqBeBM= Subject key identifier: 3F:CE:67:31:45:2C:5A:FB:65:B7:2D:CC:B3:27:98:B9:1F:75:5A:50 Certificate issuer: /CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21 Certificate serial: 019B7F15B02F2994C62FB29E88A7CA9A28F2 Authority key identifier: 91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/P85nMUUsWvtlty3MsyeYuR91WlA.roa Signing time: Fri 02 Jan 2026 14:21:26 +0000 ROA not before: Fri 02 Jan 2026 14:21:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204732 IP address blocks: 185.242.68.0/22 maxlen: 22 185.242.68.0/23 maxlen: 23 185.242.68.0/24 maxlen: 24 185.242.69.0/24 maxlen: 24 185.242.70.0/23 maxlen: 23 185.242.70.0/24 maxlen: 24 185.242.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:b0:2f:29:94:c6:2f:b2:9e:88:a7:ca:9a:28:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21 Validity Not Before: Jan 2 14:21:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fce6731452c5afb65b72dccb32798b91f755a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b8:7b:e7:e8:e4:f4:28:2b:b3:a5:fa:ac:9d: ca:29:fc:b5:21:14:05:ff:0f:99:bd:96:f7:04:db: 48:f7:df:70:a4:86:25:d9:48:b4:85:68:d2:a6:3b: 33:89:3b:22:37:9c:f4:8d:c1:63:2d:a2:18:48:6b: b4:b3:3d:0b:5e:66:91:2a:99:33:2c:68:30:ea:76: c2:c2:e0:1f:7b:ce:ee:57:69:95:55:4a:69:86:64: d2:a1:7c:7f:b2:e0:2a:d8:da:52:63:65:e8:48:c2: 0b:39:48:ac:69:17:bf:2a:48:b9:ac:c0:63:58:7d: 4a:0a:bd:f0:82:9a:42:1b:ce:d5:72:d4:33:46:62: 33:3b:f7:aa:60:4f:3e:52:4d:20:e1:1d:0f:ea:cc: 7e:fb:db:98:e2:c6:2f:a9:a6:39:af:95:3b:ce:41: cf:ac:7b:d9:11:72:f2:2c:12:3b:4a:be:88:6a:c6: be:af:60:9a:b0:eb:2a:4b:42:6e:78:34:65:e9:e2: 53:5d:77:50:79:cc:74:86:66:d1:7b:61:8f:85:aa: 72:f7:e9:d1:cb:9f:62:a1:71:bc:7b:5d:6a:5c:46: 55:38:c7:39:df:30:b3:22:ca:97:ac:a6:9c:90:ce: 5f:8f:e5:b4:98:32:3a:b8:a3:20:ee:66:33:99:4a: d8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CE:67:31:45:2C:5A:FB:65:B7:2D:CC:B3:27:98:B9:1F:75:5A:50 X509v3 Authority Key Identifier: keyid:91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/P85nMUUsWvtlty3MsyeYuR91WlA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.68.0/22 Signature Algorithm: sha256WithRSAEncryption 09:3f:ce:7b:91:41:ab:46:0c:34:1b:00:f2:40:f0:51:0e:f7: 93:63:d5:4a:5c:0b:c9:12:08:6b:f1:0b:7c:2c:04:b4:61:af: 4f:9e:8b:28:4e:61:7f:dd:84:9a:78:a2:1d:bb:93:97:66:b2: 88:27:42:08:4f:e3:5c:a0:b6:1b:cb:89:17:fb:9e:e3:d1:60: 85:70:87:0e:6b:d0:05:70:af:9d:3d:46:d9:53:e9:c0:6e:1f: 0e:ab:2f:68:11:f7:23:78:aa:f6:71:e1:39:65:2c:f8:e2:cc: ab:72:bf:43:73:c4:14:22:8c:ee:63:f6:fe:19:5f:fd:aa:a3: a2:67:8f:04:aa:5a:53:90:4c:60:06:d1:68:4b:0a:b6:da:64: 85:b9:44:44:ca:f7:f1:68:18:86:fa:b1:ca:ea:09:8b:f3:49: b5:2f:b1:3e:63:69:50:0c:45:d1:c5:77:7e:fe:f5:00:82:91: 56:d6:92:f2:60:02:42:05:03:4c:de:00:3f:31:bd:02:02:3a: 1b:89:47:e0:a0:96:7f:8a:3c:ab:ab:fa:b7:19:5c:24:53:a4: 3f:9a:9f:62:de:00:a8:9f:60:40:80:e7:2e:39:a2:27:05:4b: 67:fa:0c:f0:5b:89:b9:94:dd:42:43:5e:7d:c4:7e:c6:2e:97: 38:21:3d:cc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FbAvKZTGL7KeiKfKmijyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZTZkMzI0MjI1N2IyOTY1YjYyNzhmZjhjMTdlMTZmZjNm MDhiMjEwHhcNMjYwMTAyMTQyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmNlNjczMTQ1MmM1YWZiNjViNzJkY2NiMzI3OThiOTFmNzU1YTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07h75+jk9Cgrs6X6rJ3KKfy1IRQF /w+ZvZb3BNtI999wpIYl2Ui0hWjSpjsziTsiN5z0jcFjLaIYSGu0sz0LXmaRKpkz LGgw6nbCwuAfe87uV2mVVUpphmTSoXx/suAq2NpSY2XoSMILOUisaRe/Kki5rMBj WH1KCr3wgppCG87VctQzRmIzO/eqYE8+Uk0g4R0P6sx++9uY4sYvqaY5r5U7zkHP rHvZEXLyLBI7Sr6Iasa+r2CasOsqS0JueDRl6eJTXXdQecx0hmbRe2GPhapy9+nR y59ioXG8e11qXEZVOMc53zCzIsqXrKackM5fj+W0mDI6uKMg7mYzmUrY1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD/OZzFFLFr7ZbctzLMnmLkfdVpQMB8GA1UdIwQY MBaAFJHm0yQiV7KWW2J4/4wX4W/z8IshMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2ViVEpDSlhzcFpiWW5qX2pCZmhiX1B3aXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8wYzBmNjEtYjY5Yy00NjU3LTk4Njct N2U3NGE2YTk4ZWNkLzEvUDg1bk1VVXNXdnRsdHkzTXN5ZVl1UjkxV2xBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8wYzBmNjEtYjY5Yy00NjU3LTk4NjctN2U3NGE2YTk4ZWNk LzEva2ViVEpDSlhzcFpiWW5qX2pCZmhiX1B3aXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufJEMA0G CSqGSIb3DQEBCwUAA4IBAQAJP857kUGrRgw0GwDyQPBRDveTY9VKXAvJEghr8Qt8 LAS0Ya9PnosoTmF/3YSaeKIdu5OXZrKIJ0IIT+NcoLYby4kX+57j0WCFcIcOa9AF cK+dPUbZU+nAbh8Oqy9oEfcjeKr2ceE5ZSz44syrcr9Dc8QUIozuY/b+GV/9qqOi Z48EqlpTkExgBtFoSwq22mSFuUREyvfxaBiG+rHK6gmL80m1L7E+Y2lQDEXRxXd+ /vUAgpFW1pLyYAJCBQNM3gA/Mb0CAjobiUfgoJZ/ijyrq/q3GVwkU6Q/mp9i3gCo n2BAgOcuOaInBUtn+gzwW4m5lN1CQ159xH7GLpc4IT3M -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:09 2026 by rpki-client