This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/r3uWhWQfYQ-7I96xPQgZcGOfgm8.roa File: r3uWhWQfYQ-7I96xPQgZcGOfgm8.roa (raw, json) Hash identifier: 3XA1JsyB/6+JdqSvjZhGBEJokLbWA2Jq/KVD4Zxhe/g= Subject key identifier: AF:7B:96:85:64:1F:61:0F:BB:23:DE:B1:3D:08:19:70:63:9F:82:6F Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Certificate serial: 019B7B36DD1E7F5E0ADD182A549E00584E5C Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/r3uWhWQfYQ-7I96xPQgZcGOfgm8.roa Signing time: Thu 01 Jan 2026 20:19:11 +0000 ROA not before: Thu 01 Jan 2026 20:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202656 IP address blocks: 85.115.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:dd:1e:7f:5e:0a:dd:18:2a:54:9e:00:58:4e:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Validity Not Before: Jan 1 20:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af7b9685641f610fbb23deb13d081970639f826f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:37:b7:7d:bb:37:fe:88:a6:ec:23:87:1e:e5: 85:95:60:fa:6c:7e:6c:27:b4:7b:0a:89:86:51:6a: 46:b7:da:3c:53:22:ff:85:52:89:30:1c:f8:c8:ec: 6b:b6:64:b4:2f:51:c8:59:cd:15:a6:16:da:bc:6c: 4d:85:a1:04:68:85:1b:ce:5a:db:ea:a0:2f:0d:72: 14:5d:3c:1e:4f:7d:df:24:3e:d0:7a:63:f0:1b:f2: 74:49:0d:9d:05:13:01:f0:88:a6:10:a6:b4:13:8f: 83:1d:95:fe:44:60:a3:23:bb:70:4f:9e:f1:f9:68: 0e:23:6e:15:37:f3:5e:93:83:04:a3:dd:ae:23:37: b5:de:06:42:f4:32:54:c9:d2:6b:f8:8a:c2:11:4f: 96:60:1f:36:3c:a1:07:70:d9:4a:83:01:78:72:17: f4:0c:5d:ed:d9:41:b9:5b:5f:11:2f:a6:99:a1:03: 24:74:a1:3b:5c:d4:33:a1:88:b0:b8:b4:68:86:c5: 6c:ed:15:bb:ae:b1:da:c9:48:3e:73:bd:b0:96:e5: 97:ee:ed:f6:43:a0:e7:60:6f:19:c2:2d:7a:eb:96: 9d:dc:2b:ff:66:5e:b7:5a:94:ca:c2:46:85:f1:68: fb:42:fa:f0:25:07:78:8b:c0:b4:00:0d:55:a0:81: a1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:7B:96:85:64:1F:61:0F:BB:23:DE:B1:3D:08:19:70:63:9F:82:6F X509v3 Authority Key Identifier: keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/r3uWhWQfYQ-7I96xPQgZcGOfgm8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.115.208.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:3d:9e:7b:93:2d:e5:75:ea:de:3b:ce:c7:75:31:50:90:61: f9:f2:2f:92:b3:0f:77:5c:6e:c5:d9:79:8c:45:74:0b:68:62: b9:64:02:90:14:80:bb:84:5c:65:b0:d3:93:66:93:3d:e4:9f: 14:69:10:b9:c8:4c:77:a0:83:a7:3c:9d:e9:2c:cb:4f:70:0a: 7a:f6:88:3d:1d:76:60:ac:45:32:6d:71:d0:2c:ac:43:78:4e: 44:51:f0:91:29:a2:c8:6c:37:a2:a5:d8:9a:09:04:64:42:fe: ba:5b:e3:08:f2:f0:08:c5:b1:99:4d:bb:d5:e9:0b:5b:19:20: a2:72:63:dd:a7:d8:3c:a8:35:6d:38:a4:d6:0f:ab:46:ae:d8: 49:1c:71:7a:64:6c:f3:e4:56:89:73:33:fd:26:c3:09:07:c1: e9:fc:80:25:70:15:85:ec:e6:0f:ce:63:68:79:f1:f7:a1:ac: f5:34:29:5d:ca:be:c8:ba:9a:3a:48:77:f9:2a:b8:d2:32:70: df:14:9f:f5:7f:28:de:fc:aa:71:3c:e1:23:04:c4:8d:fa:4c: f1:01:26:9c:b6:44:01:53:e0:ef:c5:3d:ef:29:f9:97:3d:ed: 1f:7c:b5:00:31:3b:9d:18:7a:fe:10:0c:e9:d1:88:e8:6c:90: be:dd:44:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nt0ef14K3RgqVJ4AWE5cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx ZDA3MjIwHhcNMjYwMTAxMjAxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjdiOTY4NTY0MWY2MTBmYmIyM2RlYjEzZDA4MTk3MDYzOWY4MjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuze3fbs3/oim7COHHuWFlWD6bH5s J7R7ComGUWpGt9o8UyL/hVKJMBz4yOxrtmS0L1HIWc0VphbavGxNhaEEaIUbzlrb 6qAvDXIUXTweT33fJD7QemPwG/J0SQ2dBRMB8IimEKa0E4+DHZX+RGCjI7twT57x +WgOI24VN/Nek4MEo92uIze13gZC9DJUydJr+IrCEU+WYB82PKEHcNlKgwF4chf0 DF3t2UG5W18RL6aZoQMkdKE7XNQzoYiwuLRohsVs7RW7rrHayUg+c72wluWX7u32 Q6DnYG8Zwi1665ad3Cv/Zl63WpTKwkaF8Wj7QvrwJQd4i8C0AA1VoIGhgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK97loVkH2EPuyPesT0IGXBjn4JvMB8GA1UdIwQY MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt ZDI0MmI2ZjNhOGExLzEvcjN1V2hXUWZZUS03STk2eFBRZ1pjR09mZ204LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXPQMA0G CSqGSIb3DQEBCwUAA4IBAQA/PZ57ky3ldereO87HdTFQkGH58i+Ssw93XG7F2XmM RXQLaGK5ZAKQFIC7hFxlsNOTZpM95J8UaRC5yEx3oIOnPJ3pLMtPcAp69og9HXZg rEUybXHQLKxDeE5EUfCRKaLIbDeipdiaCQRkQv66W+MI8vAIxbGZTbvV6QtbGSCi cmPdp9g8qDVtOKTWD6tGrthJHHF6ZGzz5FaJczP9JsMJB8Hp/IAlcBWF7OYPzmNo efH3oaz1NCldyr7Iupo6SHf5KrjSMnDfFJ/1fyje/KpxPOEjBMSN+kzxASactkQB U+DvxT3vKfmXPe0ffLUAMTudGHr+EAzp0YjobJC+3USJ -----END CERTIFICATE-----Generated at Mon Jan 19 20:20:49 2026 by rpki-client