This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/_7qWKS1csoWUqUsFNNOiL6451ys.roa File: _7qWKS1csoWUqUsFNNOiL6451ys.roa (raw, json) Hash identifier: /iDif7LQhjMSe8pOojFBssleDtOr1vNWkexVpZHh8kU= Subject key identifier: FF:BA:96:29:2D:5C:B2:85:94:A9:4B:05:34:D3:A2:2F:AE:39:D7:2B Certificate issuer: /CN=08fe040242651353d556b8c4240082190f271d13 Certificate serial: 019B7CEE694E60754BF38ACA5EF512F9A3F1 Authority key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/_7qWKS1csoWUqUsFNNOiL6451ys.roa Signing time: Fri 02 Jan 2026 04:19:17 +0000 ROA not before: Fri 02 Jan 2026 04:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60821 IP address blocks: 81.85.63.0/24 maxlen: 24 185.22.168.0/22 maxlen: 22 185.22.168.0/24 maxlen: 24 185.22.169.0/24 maxlen: 24 185.22.170.0/24 maxlen: 24 194.46.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:69:4e:60:75:4b:f3:8a:ca:5e:f5:12:f9:a3:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08fe040242651353d556b8c4240082190f271d13 Validity Not Before: Jan 2 04:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffba96292d5cb28594a94b0534d3a22fae39d72b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cd:32:01:6f:8f:2e:a6:93:a7:f6:b8:60:c6: f4:3a:11:59:4b:fd:28:4a:5d:33:6e:0b:3e:94:6a: da:15:f5:84:95:b7:7e:f3:32:89:f6:3a:bc:e1:01: 8e:5d:80:30:f0:f9:ba:8b:79:cd:60:1d:ee:51:25: a2:5c:75:72:d0:d1:e2:54:62:23:d4:f6:48:ef:95: 20:f6:9d:a1:a5:f0:9f:b8:01:70:04:a5:8b:e8:83: 4e:18:cc:07:84:d1:fb:53:45:c7:93:3d:e9:ab:03: 4d:41:35:1e:28:0f:86:a7:99:92:03:8c:1b:7d:a3: 66:23:9a:b7:1c:6a:0d:39:86:6a:5b:de:e0:05:09: 50:ed:0b:82:01:53:0c:40:66:31:c2:67:cf:91:1d: 1c:e0:40:ae:b2:5b:cc:26:cd:e2:7e:3e:d0:c8:f0: c4:45:f7:de:b0:b9:10:43:03:62:23:dc:00:9e:80: b3:fb:53:6e:25:c2:a6:cb:b9:86:ca:8e:a4:f6:af: 0e:b0:84:2b:07:60:73:e0:0b:19:51:84:52:d9:e4: c0:d3:02:c5:8f:25:d0:0c:c3:57:28:83:ac:b7:27: 96:76:85:e3:b1:a7:3a:01:55:f8:a8:4a:15:d7:b3: 19:1d:86:84:66:9b:fd:7b:01:21:82:90:36:24:a8: 56:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:BA:96:29:2D:5C:B2:85:94:A9:4B:05:34:D3:A2:2F:AE:39:D7:2B X509v3 Authority Key Identifier: keyid:08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/_7qWKS1csoWUqUsFNNOiL6451ys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.85.63.0/24 185.22.168.0/22 194.46.38.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:1f:ef:43:be:92:c4:d1:c7:9c:01:34:10:6f:5f:97:ab:a6: b5:d6:90:df:67:ed:c0:34:8b:2f:e7:a9:1a:b3:de:f7:d4:4e: 61:bb:16:bd:a4:72:01:e8:e5:2c:aa:74:3c:76:22:06:ba:96: b6:82:8c:3d:e1:a1:f8:49:9e:3e:f1:ee:e2:60:79:41:91:ec: 5a:cb:73:82:dd:4b:d0:15:f5:fc:02:74:6a:ad:2c:41:ea:34: fd:35:b4:d1:d2:a1:c8:55:a2:db:24:d9:ff:c6:73:0a:d6:10: b2:04:d2:ab:26:9a:38:22:07:28:76:27:2f:4d:c9:2a:05:f8: 12:e4:41:45:8d:e9:48:72:5c:3d:1d:10:32:dd:b2:f6:4c:c0: 2f:b6:06:f8:95:e7:30:e0:1a:d9:88:dd:55:a5:30:64:66:8b: 9a:49:62:19:5e:89:88:5e:2b:e7:b4:73:7e:44:ab:b6:a5:5a: f4:74:42:ab:59:b0:71:97:b5:2b:d4:2b:82:0e:74:61:93:8b: bd:c9:6b:da:19:91:c8:3d:fe:00:4c:c3:4f:74:2d:8b:e7:54: c4:a2:07:b9:60:c7:0e:85:e9:29:79:f9:70:8c:15:d8:b3:fb: 7a:73:82:09:dd:7c:f0:53:9d:8d:d9:ca:61:cf:14:5b:d0:81: 28:39:c1:da -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87mlOYHVL84rKXvUS+aPxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZmUwNDAyNDI2NTEzNTNkNTU2YjhjNDI0MDA4MjE5MGYy NzFkMTMwHhcNMjYwMTAyMDQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmJhOTYyOTJkNWNiMjg1OTRhOTRiMDUzNGQzYTIyZmFlMzlkNzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms0yAW+PLqaTp/a4YMb0OhFZS/0o Sl0zbgs+lGraFfWElbd+8zKJ9jq84QGOXYAw8Pm6i3nNYB3uUSWiXHVy0NHiVGIj 1PZI75Ug9p2hpfCfuAFwBKWL6INOGMwHhNH7U0XHkz3pqwNNQTUeKA+Gp5mSA4wb faNmI5q3HGoNOYZqW97gBQlQ7QuCAVMMQGYxwmfPkR0c4ECuslvMJs3ifj7QyPDE RffesLkQQwNiI9wAnoCz+1NuJcKmy7mGyo6k9q8OsIQrB2Bz4AsZUYRS2eTA0wLF jyXQDMNXKIOstyeWdoXjsac6AVX4qEoV17MZHYaEZpv9ewEhgpA2JKhWwwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFP+6liktXLKFlKlLBTTToi+uOdcrMB8GA1UdIwQY MBaAFAj+BAJCZRNT1Va4xCQAghkPJx0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80ZWJjMzMtZWU1NC00MzdjLThhMWIt ZGVjNDgwN2NkN2U2LzEvXzdxV0tTMWNzb1dVcVVzRk5OT2lMNjQ1MXlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy80ZWJjMzMtZWU1NC00MzdjLThhMWItZGVjNDgwN2NkN2U2 LzEvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUVU/AwQC uRaoAwQAwi4mMA0GCSqGSIb3DQEBCwUAA4IBAQAeH+9DvpLE0cecATQQb1+Xq6a1 1pDfZ+3ANIsv56kas9731E5huxa9pHIB6OUsqnQ8diIGupa2gow94aH4SZ4+8e7i YHlBkexay3OC3UvQFfX8AnRqrSxB6jT9NbTR0qHIVaLbJNn/xnMK1hCyBNKrJpo4 IgcodicvTckqBfgS5EFFjelIclw9HRAy3bL2TMAvtgb4lecw4BrZiN1VpTBkZoua SWIZXomIXivntHN+RKu2pVr0dEKrWbBxl7Ur1CuCDnRhk4u9yWvaGZHIPf4ATMNP dC2L51TEoge5YMcOhekpeflwjBXYs/t6c4IJ3XzwU52N2cphzxRb0IEoOcHa -----END CERTIFICATE-----Generated at Sun Jan 11 16:13:04 2026 by rpki-client