This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/NQ3alsbcYrDD3Id4_ZbBebDtKMQ.roa File: NQ3alsbcYrDD3Id4_ZbBebDtKMQ.roa (raw, json) Hash identifier: R7bDblUywN+L5+T5OsDfB/grAiWD1P3KTdK+6VLq0W8= Subject key identifier: 35:0D:DA:96:C6:DC:62:B0:C3:DC:87:78:FD:96:C1:79:B0:ED:28:C4 Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Certificate serial: 019B7F15D02454F4E4B8A7B6C402B5D0BBF0 Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/NQ3alsbcYrDD3Id4_ZbBebDtKMQ.roa Signing time: Fri 02 Jan 2026 14:21:34 +0000 ROA not before: Fri 02 Jan 2026 14:21:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210469 IP address blocks: 85.117.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d0:24:54:f4:e4:b8:a7:b6:c4:02:b5:d0:bb:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Validity Not Before: Jan 2 14:21:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=350dda96c6dc62b0c3dc8778fd96c179b0ed28c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b4:35:97:e5:ee:43:2b:b0:d5:13:79:9a:d5: 4e:ee:7f:e7:15:a1:39:11:9b:3d:d4:4b:17:aa:96: fb:a0:e3:05:64:50:cb:6f:e6:77:dd:5f:a8:92:c1: 7d:34:bc:43:e4:5b:18:58:fa:8d:cc:76:01:cf:b8: e4:8b:9e:bb:48:52:71:0e:5d:8a:a6:fe:28:f9:7b: ae:2b:b8:1d:a6:4f:4d:23:f7:cb:27:7c:ea:cc:82: d3:0a:d8:dc:89:0b:da:e3:03:84:36:07:02:50:05: b7:e5:63:38:25:f5:4c:f6:53:0f:1b:dc:5f:6f:a5: 1e:4c:57:eb:ef:bb:a0:9c:44:8a:7c:2b:2c:d2:8b: 67:2c:98:1d:d8:ce:2a:7f:6f:b8:3e:7f:89:9b:09: 03:d0:c0:70:d9:af:64:5f:19:4f:87:49:29:39:65: 58:46:db:19:e1:49:bc:35:95:9e:13:24:9d:20:ad: 6a:62:d2:16:8b:53:95:3b:1d:fa:7e:e7:18:d8:f2: 0e:8c:36:e6:d3:2d:de:b4:4b:57:a9:04:a2:17:0f: 58:a2:cb:2b:df:92:ea:6c:6f:2b:ec:00:4f:fb:ee: 33:cd:05:2b:e7:f3:ad:7b:ae:0e:70:4c:67:ef:cc: 7c:7a:b4:97:9d:64:38:2c:ca:e4:6f:94:2e:0e:0a: ca:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0D:DA:96:C6:DC:62:B0:C3:DC:87:78:FD:96:C1:79:B0:ED:28:C4 X509v3 Authority Key Identifier: keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/NQ3alsbcYrDD3Id4_ZbBebDtKMQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.117.241.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:61:10:11:15:33:9f:03:3e:20:5e:9e:26:7c:78:e2:99:1f: 64:18:ba:2e:a3:91:0b:96:bc:ae:de:bc:ed:2f:94:9d:d7:9e: 7d:c1:1e:fd:c7:ae:12:bb:35:38:6a:c8:5a:2d:92:bc:d1:6a: 0f:8b:ae:b4:93:34:98:79:91:d1:66:78:1a:3a:31:e4:84:3a: 29:d0:4e:c2:b0:25:ce:76:e0:69:62:e1:8c:f9:87:6f:30:ed: cd:77:fe:4a:b2:2b:c5:9c:e6:db:3d:38:1b:af:12:94:1d:b9: 48:72:36:4f:9c:f6:13:6e:c8:e6:d6:e6:b5:47:e8:d7:2d:14: 04:1d:38:28:dd:40:e1:30:18:b6:c5:95:80:c1:22:ea:12:00: 13:72:7e:f2:88:2b:26:45:cd:a5:5b:9f:75:d6:83:21:c8:f4: be:5f:3c:47:02:e8:6f:bc:a8:ce:b9:42:f5:68:bd:28:d9:ab: f7:c0:af:4b:dc:56:7a:4b:38:62:9c:e7:62:f2:ad:17:d7:b1: 74:36:3d:79:d9:13:4d:e6:ff:ea:4c:21:a3:9f:64:81:bd:56: 25:0f:df:29:c4:6b:69:68:a3:6b:8d:d2:0c:4d:6a:77:3c:77: 89:0c:c2:c6:74:7e:cb:73:46:17:e6:66:d3:d7:2f:da:ce:0f: c3:dd:d8:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FdAkVPTkuKe2xAK10LvwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk YTEzNzAwHhcNMjYwMTAyMTQyMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTBkZGE5NmM2ZGM2MmIwYzNkYzg3NzhmZDk2YzE3OWIwZWQyOGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LQ1l+XuQyuw1RN5mtVO7n/nFaE5 EZs91EsXqpb7oOMFZFDLb+Z33V+oksF9NLxD5FsYWPqNzHYBz7jki567SFJxDl2K pv4o+XuuK7gdpk9NI/fLJ3zqzILTCtjciQva4wOENgcCUAW35WM4JfVM9lMPG9xf b6UeTFfr77ugnESKfCss0otnLJgd2M4qf2+4Pn+JmwkD0MBw2a9kXxlPh0kpOWVY RtsZ4Um8NZWeEySdIK1qYtIWi1OVOx36fucY2PIOjDbm0y3etEtXqQSiFw9Yossr 35LqbG8r7ABP++4zzQUr5/Ote64OcExn78x8erSXnWQ4LMrkb5QuDgrKUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDUN2pbG3GKww9yHeP2WwXmw7SjEMB8GA1UdIwQY MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt NjA4MDk1MmYwZTA0LzEvTlEzYWxzYmNZckREM0lkNF9aYkJlYkR0S01RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0 LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXXxMA0G CSqGSIb3DQEBCwUAA4IBAQA9YRARFTOfAz4gXp4mfHjimR9kGLouo5ELlryu3rzt L5Sd1559wR79x64SuzU4ashaLZK80WoPi660kzSYeZHRZngaOjHkhDop0E7CsCXO duBpYuGM+YdvMO3Nd/5KsivFnObbPTgbrxKUHblIcjZPnPYTbsjm1ua1R+jXLRQE HTgo3UDhMBi2xZWAwSLqEgATcn7yiCsmRc2lW5911oMhyPS+XzxHAuhvvKjOuUL1 aL0o2av3wK9L3FZ6SzhinOdi8q0X17F0Nj152RNN5v/qTCGjn2SBvVYlD98pxGtp aKNrjdIMTWp3PHeJDMLGdH7Lc0YX5mbT1y/azg/D3diq -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:56 2026 by rpki-client