This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/uLDcFf3VjGANk8TQCg0vFoqZ_HI.roa File: uLDcFf3VjGANk8TQCg0vFoqZ_HI.roa (raw, json) Hash identifier: pfVCme09A/8wk/MnxkHB5VKNGtvo4YKdgY3uHx7H4D4= Subject key identifier: B8:B0:DC:15:FD:D5:8C:60:0D:93:C4:D0:0A:0D:2F:16:8A:99:FC:72 Certificate issuer: /CN=08fe040242651353d556b8c4240082190f271d13 Certificate serial: 019B7CEE683D5A526B8D3295A987CEE77E89 Authority key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/uLDcFf3VjGANk8TQCg0vFoqZ_HI.roa Signing time: Fri 02 Jan 2026 04:19:17 +0000 ROA not before: Fri 02 Jan 2026 04:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 81.85.63.0/24 maxlen: 24 185.22.168.0/24 maxlen: 24 185.22.170.0/24 maxlen: 24 185.22.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:68:3d:5a:52:6b:8d:32:95:a9:87:ce:e7:7e:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08fe040242651353d556b8c4240082190f271d13 Validity Not Before: Jan 2 04:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8b0dc15fdd58c600d93c4d00a0d2f168a99fc72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6d:24:b2:14:b4:8e:eb:55:c4:35:88:c9:03: 8d:d0:84:fb:23:a4:dc:cc:3a:fd:47:9c:11:5f:cc: a5:ae:22:2a:8e:c3:17:39:b8:8d:c3:91:95:4d:a9: 3b:02:26:6b:3c:bf:24:18:4a:cc:1d:38:ea:97:7a: b8:78:ee:7a:3b:62:53:fe:aa:3b:53:89:ed:9e:3c: ab:9b:c2:00:2b:7d:1e:17:70:64:05:29:0b:92:23: 0e:77:0c:6f:cc:62:ea:0f:6c:f1:da:80:e0:63:df: 86:11:28:79:1c:c9:ff:b2:b3:4c:b3:4b:57:dc:82: dc:6c:e7:f6:ca:9d:86:6a:8d:38:f0:94:f2:25:90: be:51:d0:8a:d1:e2:a6:d5:4d:63:a3:98:c0:d1:23: ee:8b:56:4e:53:a8:69:7a:cf:51:24:e6:4c:3f:1a: 02:9c:1d:93:ea:c1:a3:5e:53:34:30:e3:c1:ac:63: e9:65:6a:dd:90:15:15:a7:14:2d:e8:d4:93:88:e9: 1d:39:83:46:5d:49:99:fa:b7:3e:21:1d:a3:55:ad: 8a:ac:f6:14:3c:e2:74:e0:28:13:14:c6:91:63:4e: 57:b2:d0:29:01:bd:05:21:5c:c1:59:16:f1:ee:98: e4:91:ff:10:97:57:0f:5c:82:65:56:2f:54:00:1f: 71:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B0:DC:15:FD:D5:8C:60:0D:93:C4:D0:0A:0D:2F:16:8A:99:FC:72 X509v3 Authority Key Identifier: keyid:08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/uLDcFf3VjGANk8TQCg0vFoqZ_HI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.85.63.0/24 185.22.168.0/24 185.22.170.0/23 Signature Algorithm: sha256WithRSAEncryption a5:08:a3:b4:c4:3c:0d:16:66:4d:5b:a6:71:4e:15:f4:c2:45: b8:e6:55:f3:e3:ec:61:76:1d:c3:2a:16:e2:55:f5:c3:b5:78: 8a:04:6f:49:84:98:b8:1a:d6:2b:89:06:64:b7:8d:26:c6:7a: 8c:1f:53:23:09:bb:55:9d:c6:9b:74:a3:8d:6a:e4:5b:e9:87: f9:4f:7b:08:a7:d8:8b:2f:6a:7d:fb:31:8b:34:df:8a:65:24: 0b:ed:af:2e:ae:89:54:28:c5:fe:79:4a:06:90:1e:fe:ab:b1: d5:bf:41:12:c4:7b:26:3b:7d:bb:9d:fe:d1:ac:77:76:33:8d: 8a:ad:a4:41:4d:b6:5d:ee:e5:27:81:cf:71:54:ed:36:47:ae: f8:15:28:5a:ea:2b:4a:35:3e:28:8e:dc:c8:f0:af:12:53:83: 64:1b:52:45:b8:9f:23:9d:7b:41:7c:31:58:63:98:22:a3:2b: 44:f8:89:4b:16:fd:73:ad:a1:ce:98:79:a9:8f:13:24:8a:84: 75:26:47:53:b5:49:03:e7:91:d7:3f:31:3b:e5:88:3c:c3:5e: fa:13:ba:fd:bf:58:75:40:12:91:29:0f:86:8a:35:60:47:44: 2d:fa:43:9c:28:5a:10:03:ea:9c:01:82:4a:e7:36:88:4a:12: 74:3c:08:0f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87mg9WlJrjTKVqYfO536JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZmUwNDAyNDI2NTEzNTNkNTU2YjhjNDI0MDA4MjE5MGYy NzFkMTMwHhcNMjYwMTAyMDQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGIwZGMxNWZkZDU4YzYwMGQ5M2M0ZDAwYTBkMmYxNjhhOTlmYzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW0kshS0jutVxDWIyQON0IT7I6Tc zDr9R5wRX8ylriIqjsMXObiNw5GVTak7AiZrPL8kGErMHTjql3q4eO56O2JT/qo7 U4ntnjyrm8IAK30eF3BkBSkLkiMOdwxvzGLqD2zx2oDgY9+GESh5HMn/srNMs0tX 3ILcbOf2yp2Gao048JTyJZC+UdCK0eKm1U1jo5jA0SPui1ZOU6hpes9RJOZMPxoC nB2T6sGjXlM0MOPBrGPpZWrdkBUVpxQt6NSTiOkdOYNGXUmZ+rc+IR2jVa2KrPYU POJ04CgTFMaRY05XstApAb0FIVzBWRbx7pjkkf8Ql1cPXIJlVi9UAB9xqwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLiw3BX91YxgDZPE0AoNLxaKmfxyMB8GA1UdIwQY MBaAFAj+BAJCZRNT1Va4xCQAghkPJx0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80ZWJjMzMtZWU1NC00MzdjLThhMWIt ZGVjNDgwN2NkN2U2LzEvdUxEY0ZmM1ZqR0FOazhUUUNnMHZGb3FaX0hJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy80ZWJjMzMtZWU1NC00MzdjLThhMWItZGVjNDgwN2NkN2U2 LzEvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUVU/AwQA uRaoAwQBuRaqMA0GCSqGSIb3DQEBCwUAA4IBAQClCKO0xDwNFmZNW6ZxThX0wkW4 5lXz4+xhdh3DKhbiVfXDtXiKBG9JhJi4GtYriQZkt40mxnqMH1MjCbtVncabdKON auRb6Yf5T3sIp9iLL2p9+zGLNN+KZSQL7a8urolUKMX+eUoGkB7+q7HVv0ESxHsm O327nf7RrHd2M42KraRBTbZd7uUngc9xVO02R674FSha6itKNT4ojtzI8K8SU4Nk G1JFuJ8jnXtBfDFYY5gioytE+IlLFv1zraHOmHmpjxMkioR1JkdTtUkD55HXPzE7 5Yg8w176E7r9v1h1QBKRKQ+GijVgR0Qt+kOcKFoQA+qcAYJK5zaIShJ0PAgP -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:41 2026 by rpki-client