This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/aM2O3SaZ7tbXcgFGR4OjK9DbYUA.roa File: aM2O3SaZ7tbXcgFGR4OjK9DbYUA.roa (raw, json) Hash identifier: bFnqKAu0z1ajomM6Jstw0NEQ/XOlPZLctzkzaPx1gYo= Subject key identifier: 68:CD:8E:DD:26:99:EE:D6:D7:72:01:46:47:83:A3:2B:D0:DB:61:40 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC850E68559949CD60F6A80A5DDB47A Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/aM2O3SaZ7tbXcgFGR4OjK9DbYUA.roa Signing time: Thu 01 Jan 2026 18:18:26 +0000 ROA not before: Thu 01 Jan 2026 18:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21840 IP address blocks: 85.208.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:50:e6:85:59:94:9c:d6:0f:6a:80:a5:dd:b4:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68cd8edd2699eed6d77201464783a32bd0db6140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d9:67:dd:5f:c4:7a:77:60:c5:73:7a:e3:ef: 8b:99:d1:4c:b8:9b:43:d3:d9:f5:c2:09:de:65:39: d6:7b:c7:c1:8e:e6:8d:2f:7d:8b:74:a5:79:7b:7d: 9f:48:b6:14:44:3f:10:4a:9b:8e:ff:6e:98:d8:03: 88:93:5c:1e:a2:39:1f:bb:4f:1b:03:ed:0c:4b:9a: 78:be:a3:49:dc:c6:49:72:07:e0:e7:5d:ae:7e:31: b0:cd:12:b3:ed:a1:98:c7:23:b5:da:4e:4f:11:79: ee:3d:50:23:4c:5d:ff:4b:3f:65:b8:bb:e1:79:ac: 56:ca:9b:99:f2:78:fb:a4:45:a5:a4:b0:1c:4a:b3: f5:5c:4a:f3:f1:ca:09:6e:4d:2c:85:ed:2d:8c:cb: db:a8:77:a0:2c:12:89:90:49:aa:e2:10:d1:8b:88: 31:fb:94:34:84:6e:6a:12:f0:24:0e:e9:62:46:6d: 95:8b:27:93:7a:fa:06:64:c1:99:c7:ac:a8:43:e2: a4:2a:a6:d2:d7:f8:ca:52:06:aa:9c:0e:98:01:3f: 2e:cd:3d:12:79:79:fd:43:89:b4:f4:fa:4f:a2:ec: bb:39:4b:39:38:cd:9f:d3:c3:8d:48:5e:69:ab:1b: dd:56:84:31:cf:9b:04:44:da:01:da:d6:18:8f:e3: c9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CD:8E:DD:26:99:EE:D6:D7:72:01:46:47:83:A3:2B:D0:DB:61:40 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/aM2O3SaZ7tbXcgFGR4OjK9DbYUA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.208.8.0/24 Signature Algorithm: sha256WithRSAEncryption 56:63:f5:f0:50:8e:95:8b:c1:6e:e0:6f:e8:1d:4a:0a:af:63: 24:a2:bc:3a:eb:ae:43:b7:46:2f:0a:0b:d1:88:06:2d:ea:42: 41:36:31:6c:2c:be:4f:14:cf:c0:f1:36:ce:77:ba:c3:0d:f2: 5c:34:c6:3e:8a:1a:d4:1d:30:6d:7e:f4:fc:cb:d2:a0:2f:69: 80:78:cc:6a:c3:53:8b:41:6d:57:65:49:96:b2:72:b3:39:ea: 17:40:ba:ca:db:c4:e9:36:89:b3:17:04:51:16:74:85:3d:32: 16:7f:fd:12:24:db:37:54:7d:c9:22:a0:3e:58:88:56:e0:0a: 4b:4f:40:bf:fb:c8:c5:fe:5b:3c:ea:d7:3c:ef:27:fa:34:06: 93:ff:bc:d7:71:26:fc:95:c3:d4:98:07:2e:11:a0:3d:97:c8: 10:12:d9:4b:b8:fe:86:ce:88:b3:c6:54:62:e1:c2:a4:1d:55: ec:49:a6:3a:c9:af:91:d0:9e:dc:76:d0:c4:24:8d:e6:19:48: 91:a3:0a:b2:73:68:2d:d3:c8:cd:00:65:67:b2:67:a6:d4:e5: d1:46:36:e2:3f:bd:63:d4:6c:ca:7a:c9:c1:50:22:53:57:7a: c0:3f:0b:fe:34:e8:e2:c6:bc:40:40:7d:f6:74:8c:90:df:0e: 9c:a8:10:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yFDmhVmUnNYPaoCl3bR6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGNkOGVkZDI2OTllZWQ2ZDc3MjAxNDY0NzgzYTMyYmQwZGI2MTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNln3V/EendgxXN64++LmdFMuJtD 09n1wgneZTnWe8fBjuaNL32LdKV5e32fSLYURD8QSpuO/26Y2AOIk1weojkfu08b A+0MS5p4vqNJ3MZJcgfg512ufjGwzRKz7aGYxyO12k5PEXnuPVAjTF3/Sz9luLvh eaxWypuZ8nj7pEWlpLAcSrP1XErz8coJbk0she0tjMvbqHegLBKJkEmq4hDRi4gx +5Q0hG5qEvAkDuliRm2ViyeTevoGZMGZx6yoQ+KkKqbS1/jKUgaqnA6YAT8uzT0S eXn9Q4m09PpPouy7OUs5OM2f08ONSF5pqxvdVoQxz5sERNoB2tYYj+PJ6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGjNjt0mme7W13IBRkeDoyvQ22FAMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvYU0yTzNTYVo3dGJYY2dGR1I0T2pLOURiWVVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdAIMA0G CSqGSIb3DQEBCwUAA4IBAQBWY/XwUI6Vi8Fu4G/oHUoKr2Mkorw6665Dt0YvCgvR iAYt6kJBNjFsLL5PFM/A8TbOd7rDDfJcNMY+ihrUHTBtfvT8y9KgL2mAeMxqw1OL QW1XZUmWsnKzOeoXQLrK28TpNomzFwRRFnSFPTIWf/0SJNs3VH3JIqA+WIhW4ApL T0C/+8jF/ls86tc87yf6NAaT/7zXcSb8lcPUmAcuEaA9l8gQEtlLuP6GzoizxlRi 4cKkHVXsSaY6ya+R0J7cdtDEJI3mGUiRowqyc2gt08jNAGVnsmem1OXRRjbiP71j 1GzKesnBUCJTV3rAPwv+NOjixrxAQH32dIyQ3w6cqBAb -----END CERTIFICATE-----Generated at Tue Jan 20 12:51:03 2026 by rpki-client