This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/u3Sm5CQkYvsGuCc2LmoCaugkKjw.roa File: u3Sm5CQkYvsGuCc2LmoCaugkKjw.roa (raw, json) Hash identifier: QovOPnDsIRjc0fHKUk+YUhtZOJkATZJ4vmW0nQyk6FY= Subject key identifier: BB:74:A6:E4:24:24:62:FB:06:B8:27:36:2E:6A:02:6A:E8:24:2A:3C Certificate issuer: /CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa Certificate serial: 019B79113406FBDC3ACF9FD4047F36B07153 Authority key identifier: B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/u3Sm5CQkYvsGuCc2LmoCaugkKjw.roa Signing time: Thu 01 Jan 2026 10:18:49 +0000 ROA not before: Thu 01 Jan 2026 10:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211631 IP address blocks: 85.112.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:34:06:fb:dc:3a:cf:9f:d4:04:7f:36:b0:71:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa Validity Not Before: Jan 1 10:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb74a6e4242462fb06b827362e6a026ae8242a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1a:cf:a1:bd:ec:5a:d8:24:5b:3f:40:57:fd: b8:92:ac:16:e5:dc:02:cb:a0:97:54:1d:c8:e5:59: b3:c5:cf:b9:34:5d:db:b1:da:7d:3b:38:7e:4b:f7: 7f:ca:6e:1d:cd:ff:33:8b:f2:8d:68:ac:50:86:e3: 99:1a:4a:67:39:cb:9d:64:d6:ec:b7:c2:b9:2b:3a: 76:9c:5d:91:e8:72:f5:4a:2e:c3:97:20:9b:5d:b3: a8:4c:d9:b6:83:6f:c5:5b:ba:64:2e:92:c5:ec:f7: 66:92:b1:11:e0:a3:ee:63:1d:3c:c4:8b:e3:1d:42: 05:a3:69:9c:f3:3c:a7:f2:8d:40:81:98:85:19:6f: d6:10:0e:3c:a1:2d:38:5f:f9:bf:a1:f3:c2:06:22: 0c:31:d0:3f:0c:9d:13:b0:03:d6:14:68:49:20:59: d3:71:4c:7a:09:7e:ac:84:26:44:01:9a:ca:34:a6: a3:63:97:51:07:5d:fc:c0:20:b6:1c:26:55:a1:a2: f1:3b:0f:2e:9b:f5:57:8e:c6:78:ea:d3:5a:aa:69: cc:d2:d2:f6:5c:c7:61:01:59:61:1f:35:42:5d:66: 40:25:65:d5:9d:c8:a9:d6:59:5c:a8:e7:5a:d5:a2: 73:ee:c2:99:55:19:e6:97:7a:ba:16:a6:37:8b:92: 96:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:74:A6:E4:24:24:62:FB:06:B8:27:36:2E:6A:02:6A:E8:24:2A:3C X509v3 Authority Key Identifier: keyid:B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/u3Sm5CQkYvsGuCc2LmoCaugkKjw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.112.98.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:13:a1:bf:97:e5:41:f5:b4:23:61:69:b9:0d:46:8e:f9:bc: e6:4f:34:7d:09:6e:5d:84:bb:d2:8e:92:d3:5a:18:cd:f0:94: e4:67:a7:4d:81:e7:c7:fb:f1:76:14:fa:b6:b2:36:b7:ed:89: 42:aa:e5:18:c4:2f:06:ca:0b:68:ce:d2:68:cc:75:42:59:63: 10:19:66:b5:39:05:59:af:2c:e6:54:bb:bc:a0:4f:f4:13:e2: 08:d4:be:68:2a:3a:76:27:5b:49:5f:5b:b6:c6:b3:a1:d2:6b: 3a:2a:b7:24:6a:c4:6e:34:48:6d:76:96:33:49:0b:7e:ed:d2: 07:9c:d4:13:8e:67:80:cf:46:0a:2c:16:1f:15:87:05:81:b9: 53:77:bc:21:91:5e:10:82:68:db:9c:1c:94:3f:04:ba:cb:29: be:8d:3d:a5:a1:2b:0a:b6:45:3d:93:39:55:6f:f7:01:f3:02: 68:8b:da:c0:51:3e:33:4a:6c:ae:e6:dc:1c:6c:32:00:26:13: ac:ab:5e:dd:a3:c1:ef:f6:26:10:89:62:d0:d6:de:6c:9a:26: 0d:71:67:0d:9c:98:0a:91:1c:17:53:ad:98:c6:b1:dd:ee:f3: 2f:17:c0:6e:9d:18:4f:15:ec:25:20:d2:da:4f:27:b1:ab:f6: 38:55:2e:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ETQG+9w6z5/UBH82sHFTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNDNmYTcwM2ZiZWUwNGJiZDkxY2U2M2EzMjE0OGIzNmI4 ZTU1YWEwHhcNMjYwMTAxMTAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjc0YTZlNDI0MjQ2MmZiMDZiODI3MzYyZTZhMDI2YWU4MjQyYTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxrPob3sWtgkWz9AV/24kqwW5dwC y6CXVB3I5Vmzxc+5NF3bsdp9Ozh+S/d/ym4dzf8zi/KNaKxQhuOZGkpnOcudZNbs t8K5Kzp2nF2R6HL1Si7DlyCbXbOoTNm2g2/FW7pkLpLF7PdmkrER4KPuYx08xIvj HUIFo2mc8zyn8o1AgZiFGW/WEA48oS04X/m/ofPCBiIMMdA/DJ0TsAPWFGhJIFnT cUx6CX6shCZEAZrKNKajY5dRB138wCC2HCZVoaLxOw8um/VXjsZ46tNaqmnM0tL2 XMdhAVlhHzVCXWZAJWXVncip1llcqOda1aJz7sKZVRnml3q6FqY3i5KWzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLt0puQkJGL7BrgnNi5qAmroJCo8MB8GA1UdIwQY MBaAFLFD+nA/vuBLvZHOY6MhSLNrjlWqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1VQNmNELS00RXU5a2M1am95RklzMnVPVmFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iOTM0MmYtNTkxNi00NjQ0LWIxYWEt MDBkMWU3YTE3MGEyLzEvdTNTbTVDUWtZdnNHdUNjMkxtb0NhdWdrS2p3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iOTM0MmYtNTkxNi00NjQ0LWIxYWEtMDBkMWU3YTE3MGEy LzEvc1VQNmNELS00RXU5a2M1am95RklzMnVPVmFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXBiMA0G CSqGSIb3DQEBCwUAA4IBAQAuE6G/l+VB9bQjYWm5DUaO+bzmTzR9CW5dhLvSjpLT WhjN8JTkZ6dNgefH+/F2FPq2sja37YlCquUYxC8GygtoztJozHVCWWMQGWa1OQVZ ryzmVLu8oE/0E+II1L5oKjp2J1tJX1u2xrOh0ms6KrckasRuNEhtdpYzSQt+7dIH nNQTjmeAz0YKLBYfFYcFgblTd7whkV4QgmjbnByUPwS6yym+jT2loSsKtkU9kzlV b/cB8wJoi9rAUT4zSmyu5twcbDIAJhOsq17do8Hv9iYQiWLQ1t5smiYNcWcNnJgK kRwXU62YxrHd7vMvF8BunRhPFewlINLaTyexq/Y4VS4r -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:41 2026 by rpki-client