This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/DFqAchiwJnzlSG4eyo-vOSeRNeI.roa File: DFqAchiwJnzlSG4eyo-vOSeRNeI.roa (raw, json) Hash identifier: N2RIPmZbJ5fy1derB4IMwjZbzNeDMo48frV/EdBPTzc= Subject key identifier: 0C:5A:80:72:18:B0:26:7C:E5:48:6E:1E:CA:8F:AF:39:27:91:35:E2 Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Certificate serial: 019B898D5094B6ADA26D3041D57BB4EF9882 Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/DFqAchiwJnzlSG4eyo-vOSeRNeI.roa Signing time: Sun 04 Jan 2026 15:08:18 +0000 ROA not before: Sun 04 Jan 2026 15:08:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151612 IP address blocks: 85.117.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:89:8d:50:94:b6:ad:a2:6d:30:41:d5:7b:b4:ef:98:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Validity Not Before: Jan 4 15:08:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c5a807218b0267ce5486e1eca8faf39279135e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:7d:22:3b:81:f1:8a:db:ba:fd:d9:86:2c:d5: 12:b4:11:0a:83:db:38:e2:e1:25:b3:7b:66:8a:f1: bd:33:2c:f5:88:3b:8e:a5:e1:88:a1:98:be:3d:22: 04:81:04:8e:3b:e6:b6:a7:db:e1:c7:a4:2b:b0:66: 99:18:2f:3f:63:4e:41:0e:c0:f6:95:e4:9d:2b:98: 6e:fe:0d:05:1f:2a:4d:85:9f:b6:0a:2c:5c:82:11: e1:a4:9e:0e:d0:fe:f4:00:ee:8f:00:81:93:82:ff: a2:7f:2e:72:44:e7:cd:43:80:c5:1c:d8:63:d5:96: 9a:d0:cc:06:44:7a:eb:91:b6:61:d5:af:a9:06:51: f7:8f:d3:6d:26:d4:1e:49:56:59:a1:15:0a:4e:8a: 0c:6b:2b:38:76:78:71:74:b0:c4:47:c8:93:43:d1: a6:94:e0:7c:93:8c:78:bd:b7:85:ae:b3:74:b8:5b: 55:24:4d:42:73:59:6a:bd:2c:18:73:95:f0:91:d9: fb:57:d6:66:8d:5f:7c:ef:a3:50:9b:07:75:ec:d5: a9:2c:37:5b:07:e8:d1:60:fa:df:64:4a:d2:a8:24: 8b:d0:00:34:02:42:9b:4e:b1:8f:a5:8f:73:55:7e: ea:a9:5c:b5:f1:98:68:1a:c9:65:5b:f7:56:4d:ef: 30:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:5A:80:72:18:B0:26:7C:E5:48:6E:1E:CA:8F:AF:39:27:91:35:E2 X509v3 Authority Key Identifier: keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/DFqAchiwJnzlSG4eyo-vOSeRNeI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.117.243.0/24 Signature Algorithm: sha256WithRSAEncryption 84:45:60:83:56:07:c5:36:84:cc:d7:16:1a:9d:29:68:c0:70: 78:47:8e:c3:53:3f:43:40:4f:c8:84:31:4d:e7:7e:fa:89:4b: 85:94:da:b9:aa:f9:18:fb:a5:c5:49:36:da:ad:bd:a4:3f:0a: 3e:54:3b:4a:df:75:60:7c:5b:bf:e1:65:ed:bb:b2:2c:57:42: c5:b6:3c:0e:03:ef:46:ca:ef:9d:d1:3f:5d:84:ed:da:62:c0: 26:f0:c0:f0:5d:52:fc:c8:a1:83:89:cd:33:12:c7:18:e0:b2: 77:70:e2:77:ec:85:12:bf:1b:3d:f5:6b:69:ab:bc:c0:7d:1e: 7b:48:8a:63:50:49:05:ec:40:48:8a:df:e1:13:ee:0b:48:a2: 5b:f4:a0:5a:b8:c2:fc:dd:6f:67:7a:bd:8f:80:34:ec:d2:8b: 5a:1b:64:0c:a6:72:08:56:b4:22:40:59:01:d7:0c:0b:cd:76: 23:b0:2f:f8:6e:43:99:bb:6f:a3:88:f6:ec:a6:d3:9a:b0:3b: 61:e8:4f:4d:46:f9:7b:0d:96:f7:21:60:6c:d6:d7:1d:0e:50: aa:ea:a3:5f:ae:22:75:84:f8:26:fd:ed:dc:9f:2b:88:84:0b: 4f:9b:e0:8a:e4:c5:76:55:bf:16:bc:ab:81:f6:d7:ba:10:ab: 95:d8:b9:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuJjVCUtq2ibTBB1Xu075iCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk YTEzNzAwHhcNMjYwMTA0MTUwODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzVhODA3MjE4YjAyNjdjZTU0ODZlMWVjYThmYWYzOTI3OTEzNWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9n0iO4Hxitu6/dmGLNUStBEKg9s4 4uEls3tmivG9Myz1iDuOpeGIoZi+PSIEgQSOO+a2p9vhx6QrsGaZGC8/Y05BDsD2 leSdK5hu/g0FHypNhZ+2CixcghHhpJ4O0P70AO6PAIGTgv+ify5yROfNQ4DFHNhj 1Zaa0MwGRHrrkbZh1a+pBlH3j9NtJtQeSVZZoRUKTooMays4dnhxdLDER8iTQ9Gm lOB8k4x4vbeFrrN0uFtVJE1Cc1lqvSwYc5Xwkdn7V9ZmjV9876NQmwd17NWpLDdb B+jRYPrfZErSqCSL0AA0AkKbTrGPpY9zVX7qqVy18ZhoGsllW/dWTe8wYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAxagHIYsCZ85UhuHsqPrzknkTXiMB8GA1UdIwQY MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt NjA4MDk1MmYwZTA0LzEvREZxQWNoaXdKbnpsU0c0ZXlvLXZPU2VSTmVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0 LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXXzMA0G CSqGSIb3DQEBCwUAA4IBAQCERWCDVgfFNoTM1xYanSlowHB4R47DUz9DQE/IhDFN 5376iUuFlNq5qvkY+6XFSTbarb2kPwo+VDtK33VgfFu/4WXtu7IsV0LFtjwOA+9G yu+d0T9dhO3aYsAm8MDwXVL8yKGDic0zEscY4LJ3cOJ37IUSvxs99Wtpq7zAfR57 SIpjUEkF7EBIit/hE+4LSKJb9KBauML83W9ner2PgDTs0otaG2QMpnIIVrQiQFkB 1wwLzXYjsC/4bkOZu2+jiPbsptOasDth6E9NRvl7DZb3IWBs1tcdDlCq6qNfriJ1 hPgm/e3cnyuIhAtPm+CK5MV2Vb8WvKuB9te6EKuV2LlU -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:33 2026 by rpki-client