This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/qLE7D4CG3mYVkl8oS9Fzc5SexMc.roa File: qLE7D4CG3mYVkl8oS9Fzc5SexMc.roa (raw, json) Hash identifier: JyfpyyKWFy47CPyUQtytdwQPJBc0llD8HdRl1HrFy6k= Subject key identifier: A8:B1:3B:0F:80:86:DE:66:15:92:5F:28:4B:D1:73:73:94:9E:C4:C7 Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Certificate serial: 019B7910EC5951749DCCEC9583F2173F552F Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/qLE7D4CG3mYVkl8oS9Fzc5SexMc.roa Signing time: Thu 01 Jan 2026 10:18:30 +0000 ROA not before: Thu 01 Jan 2026 10:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6079 IP address blocks: 85.208.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ec:59:51:74:9d:cc:ec:95:83:f2:17:3f:55:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Validity Not Before: Jan 1 10:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8b13b0f8086de6615925f284bd17373949ec4c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:5a:31:da:d1:98:bc:0d:f3:fd:9e:a7:bf:9d: a3:ad:f1:1d:9f:b7:98:54:e4:25:aa:a3:d3:37:c8: f1:ac:22:c8:5f:0a:6f:68:68:6e:cd:00:69:1e:6e: 8d:29:50:d5:ae:87:69:fa:66:ef:71:35:21:93:d9: 14:24:5e:14:53:7a:3a:ad:84:0b:a9:60:49:31:e6: 27:dc:7c:14:1b:cd:b1:33:52:d3:aa:64:d7:4a:bf: ae:e6:44:29:45:a0:31:d9:28:ce:85:bc:c1:cb:de: 91:65:01:e3:1c:05:a3:c3:89:c8:39:21:ba:0e:b2: 5b:2b:0a:ef:58:32:5d:60:81:e6:8b:ea:d2:41:8d: 66:24:18:2c:69:11:7e:b0:c0:03:7f:a8:66:17:fc: 30:66:ec:21:c5:f5:6e:d3:5a:f1:89:3d:ad:29:4d: 91:99:9e:40:1a:df:ae:6f:d9:33:72:7a:19:e8:5b: ef:86:cd:55:5e:a4:9c:87:f4:a3:0b:2c:e8:d4:85: 81:4b:0a:8a:02:62:24:a4:c4:4e:1c:62:97:3c:a2: b7:76:eb:00:4a:8a:9a:29:a7:fe:85:b8:b0:d2:e5: f5:7a:af:b2:b0:38:9c:57:e3:0d:b2:ca:65:d1:3f: 2d:8d:26:97:86:46:fa:18:ed:58:92:a1:e1:8c:38: bf:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B1:3B:0F:80:86:DE:66:15:92:5F:28:4B:D1:73:73:94:9E:C4:C7 X509v3 Authority Key Identifier: keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/qLE7D4CG3mYVkl8oS9Fzc5SexMc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.208.34.0/23 Signature Algorithm: sha256WithRSAEncryption b4:fc:5c:ea:08:f7:ca:b4:ea:d2:92:0d:12:f3:eb:b7:13:c7: 55:a3:17:f9:d0:0b:bd:54:f6:c0:e4:7a:d7:bc:02:dc:b2:41: 99:df:58:f6:d5:c7:ff:a9:fb:9c:31:84:e4:ae:b1:d5:79:d9: 43:d0:74:7a:2b:69:0e:06:eb:6d:92:19:d1:be:95:53:28:f9: 55:98:d2:48:b6:05:58:06:19:42:c5:6f:88:25:87:0a:81:24: e8:65:a4:08:e9:f4:45:00:38:83:75:92:57:85:ec:ab:1a:78: 62:af:37:a1:f8:a1:d7:78:02:68:5c:ff:68:2e:fc:4d:0f:dd: 4b:97:45:35:3d:f0:ee:78:1d:b6:d5:0a:cd:0d:8a:83:7e:05: 24:3b:1a:3e:48:04:69:d3:9a:8d:07:67:c9:0b:37:09:eb:b2: 66:6f:be:4b:77:8b:fc:e2:dd:85:47:ff:c3:3c:4a:55:a7:dc: 70:3a:ca:b7:0f:8c:4f:45:4f:af:42:ff:6e:2b:06:df:2f:31: da:81:b8:34:44:19:21:87:01:d9:e7:fe:e7:3e:96:56:ff:fe: b0:bc:50:c2:f4:99:6e:9e:01:8e:29:c1:72:7f:a1:38:f0:64: a7:ba:02:fd:01:7e:e8:1c:94:76:c1:b5:43:7d:45:5c:d9:2a: a9:b9:7d:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EOxZUXSdzOyVg/IXP1UvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj YjUzZDYwHhcNMjYwMTAxMTAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGIxM2IwZjgwODZkZTY2MTU5MjVmMjg0YmQxNzM3Mzk0OWVjNGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51ox2tGYvA3z/Z6nv52jrfEdn7eY VOQlqqPTN8jxrCLIXwpvaGhuzQBpHm6NKVDVrodp+mbvcTUhk9kUJF4UU3o6rYQL qWBJMeYn3HwUG82xM1LTqmTXSr+u5kQpRaAx2SjOhbzBy96RZQHjHAWjw4nIOSG6 DrJbKwrvWDJdYIHmi+rSQY1mJBgsaRF+sMADf6hmF/wwZuwhxfVu01rxiT2tKU2R mZ5AGt+ub9kzcnoZ6Fvvhs1VXqSch/SjCyzo1IWBSwqKAmIkpMROHGKXPKK3dusA SoqaKaf+hbiw0uX1eq+ysDicV+MNsspl0T8tjSaXhkb6GO1YkqHhjDi/6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKixOw+Aht5mFZJfKEvRc3OUnsTHMB8GA1UdIwQY MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt NDY5MGEwMDcxNDFmLzEvcUxFN0Q0Q0czbVlWa2w4b1M5RnpjNVNleE1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVdAiMA0G CSqGSIb3DQEBCwUAA4IBAQC0/FzqCPfKtOrSkg0S8+u3E8dVoxf50Au9VPbA5HrX vALcskGZ31j21cf/qfucMYTkrrHVedlD0HR6K2kOButtkhnRvpVTKPlVmNJItgVY BhlCxW+IJYcKgSToZaQI6fRFADiDdZJXheyrGnhirzeh+KHXeAJoXP9oLvxND91L l0U1PfDueB221QrNDYqDfgUkOxo+SARp05qNB2fJCzcJ67Jmb75Ld4v84t2FR//D PEpVp9xwOsq3D4xPRU+vQv9uKwbfLzHagbg0RBkhhwHZ5/7nPpZW//6wvFDC9Jlu ngGOKcFyf6E48GSnugL9AX7oHJR2wbVDfUVc2SqpuX2/ -----END CERTIFICATE-----Generated at Mon Jan 19 16:53:17 2026 by rpki-client