This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/bV0Oecg9FpFPdKSu5u25Jo7YKFc.roa File: bV0Oecg9FpFPdKSu5u25Jo7YKFc.roa (raw, json) Hash identifier: wzfJXOF17NIzBDPaWzhDhMtbjSTm+QMWw0TiVc5A5mo= Subject key identifier: 6D:5D:0E:79:C8:3D:16:91:4F:74:A4:AE:E6:ED:B9:26:8E:D8:28:57 Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Certificate serial: 019B7B36DB8CCBA7C2477A449830BDB351D6 Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/bV0Oecg9FpFPdKSu5u25Jo7YKFc.roa Signing time: Thu 01 Jan 2026 20:19:11 +0000 ROA not before: Thu 01 Jan 2026 20:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63199 IP address blocks: 85.115.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:db:8c:cb:a7:c2:47:7a:44:98:30:bd:b3:51:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Validity Not Before: Jan 1 20:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d5d0e79c83d16914f74a4aee6edb9268ed82857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a6:32:3d:7d:16:67:2a:18:e2:1d:a0:ca:52: 3f:12:80:e5:f2:c9:6e:9c:6d:e5:46:b4:a3:c8:89: e9:cc:55:8d:c2:58:02:32:a4:dc:54:89:30:a2:ae: ef:85:a4:6f:18:15:15:cb:ce:84:66:c7:c6:6d:40: a4:15:92:1e:2a:09:a3:b3:f6:c1:46:ff:b6:89:74: 24:5f:6c:54:b9:fd:a5:4b:71:2c:8c:14:10:7b:bf: 97:3f:8e:b7:bf:11:6f:b6:dd:b5:a6:01:02:1d:e4: d1:2c:cf:01:1a:db:c3:97:82:42:8c:91:4c:93:f1: d8:be:c1:aa:6c:7d:fe:cb:4f:f8:9b:c9:18:8f:0a: c8:76:02:e4:c8:fd:3b:62:1d:30:38:4b:77:19:5f: d8:8a:03:78:ff:8f:3f:a3:22:2b:21:0e:4c:c0:a6: 5a:35:10:d2:b6:c1:33:ee:9e:28:e5:12:53:88:d6: 08:8a:b7:07:7f:1f:b3:bf:b7:71:48:c5:25:03:34: 9e:d7:5d:dc:c2:c3:9a:70:17:30:0f:7b:61:a8:a1: f0:a5:9d:66:95:6c:5f:b0:3a:22:a9:66:83:71:86: 98:d7:7d:d2:76:f1:2b:04:41:91:7d:56:00:dd:4c: 7d:21:60:c3:0f:33:78:cf:5c:95:39:21:18:0f:f3: f7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5D:0E:79:C8:3D:16:91:4F:74:A4:AE:E6:ED:B9:26:8E:D8:28:57 X509v3 Authority Key Identifier: keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/bV0Oecg9FpFPdKSu5u25Jo7YKFc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.115.210.0/24 Signature Algorithm: sha256WithRSAEncryption 56:1f:cd:84:d8:d9:60:4e:8a:b6:0f:62:20:93:bd:6d:ab:90: 95:a0:14:07:70:c5:a1:32:41:fa:12:4c:5f:84:77:18:0d:25: 43:61:32:c6:5a:23:31:d1:71:19:c8:ce:57:e1:c1:c0:b2:7d: 6a:d6:31:cc:07:7b:70:9c:68:df:19:52:9c:2c:9b:68:22:70: 02:be:e3:6d:49:7f:18:2c:ae:c8:55:17:89:e8:2f:25:ad:bf: 20:d9:bf:7a:9f:9c:86:ca:9a:e0:14:4a:23:59:2f:b2:d7:b4: 48:27:5d:c4:be:41:fa:b8:9d:ea:6d:2e:a4:b8:f4:0a:83:2c: ff:dd:09:fc:03:3d:64:18:07:0e:87:06:28:74:c1:7b:39:29: 5b:98:9f:22:79:60:67:7c:42:d9:e4:66:85:76:8c:2d:98:0b: 34:73:55:82:38:d0:41:ab:83:2d:88:57:2a:ff:0b:d8:43:8b: 9f:6e:bb:21:29:13:59:e9:2c:14:08:c4:b0:e5:78:f1:49:9c: 2a:5b:3d:99:95:92:48:03:50:20:8e:cf:c5:2c:65:09:71:7e: b6:fb:3a:e4:8a:a9:1d:49:c2:02:86:62:73:0f:34:af:f1:2b: 57:a3:3b:d6:8d:40:b9:d4:3f:a6:d8:65:15:78:25:76:84:51: 1d:6d:77:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NtuMy6fCR3pEmDC9s1HWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx ZDA3MjIwHhcNMjYwMTAxMjAxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDVkMGU3OWM4M2QxNjkxNGY3NGE0YWVlNmVkYjkyNjhlZDgyODU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaYyPX0WZyoY4h2gylI/EoDl8slu nG3lRrSjyInpzFWNwlgCMqTcVIkwoq7vhaRvGBUVy86EZsfGbUCkFZIeKgmjs/bB Rv+2iXQkX2xUuf2lS3EsjBQQe7+XP463vxFvtt21pgECHeTRLM8BGtvDl4JCjJFM k/HYvsGqbH3+y0/4m8kYjwrIdgLkyP07Yh0wOEt3GV/YigN4/48/oyIrIQ5MwKZa NRDStsEz7p4o5RJTiNYIircHfx+zv7dxSMUlAzSe113cwsOacBcwD3thqKHwpZ1m lWxfsDoiqWaDcYaY133SdvErBEGRfVYA3Ux9IWDDDzN4z1yVOSEYD/P3ywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG1dDnnIPRaRT3SkrubtuSaO2ChXMB8GA1UdIwQY MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt ZDI0MmI2ZjNhOGExLzEvYlYwT2VjZzlGcEZQZEtTdTV1MjVKbzdZS0ZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXPSMA0G CSqGSIb3DQEBCwUAA4IBAQBWH82E2NlgToq2D2Igk71tq5CVoBQHcMWhMkH6Ekxf hHcYDSVDYTLGWiMx0XEZyM5X4cHAsn1q1jHMB3twnGjfGVKcLJtoInACvuNtSX8Y LK7IVReJ6C8lrb8g2b96n5yGyprgFEojWS+y17RIJ13EvkH6uJ3qbS6kuPQKgyz/ 3Qn8Az1kGAcOhwYodMF7OSlbmJ8ieWBnfELZ5GaFdowtmAs0c1WCONBBq4MtiFcq /wvYQ4ufbrshKRNZ6SwUCMSw5XjxSZwqWz2ZlZJIA1Agjs/FLGUJcX62+zrkiqkd ScIChmJzDzSv8StXozvWjUC51D+m2GUVeCV2hFEdbXe6 -----END CERTIFICATE-----Generated at Mon Jan 19 17:13:35 2026 by rpki-client