This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/cTa4k-r506Jm5F65mksggvloVDA.roa File: cTa4k-r506Jm5F65mksggvloVDA.roa (raw, json) Hash identifier: VUs6amyf7QVphS7d5atiRKNg/52+c1LBxHY+3So5haI= Subject key identifier: 71:36:B8:93:EA:F9:D3:A2:66:E4:5E:B9:9A:4B:20:82:F9:68:54:30 Certificate issuer: /CN=b01a59d0a61aa6174438988cc83598dbfea5a998 Certificate serial: 019B7CEE3CC6FCA082D628070291D1BBAC37 Authority key identifier: B0:1A:59:D0:A6:1A:A6:17:44:38:98:8C:C8:35:98:DB:FE:A5:A9:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBpZ0KYaphdEOJiMyDWY2_6lqZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/cTa4k-r506Jm5F65mksggvloVDA.roa Signing time: Fri 02 Jan 2026 04:19:06 +0000 ROA not before: Fri 02 Jan 2026 04:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209348 IP address blocks: 85.208.228.0/24 maxlen: 24 85.208.229.0/24 maxlen: 24 85.208.230.0/24 maxlen: 24 85.208.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.mft rsync://rpki.ripe.net/repository/DEFAULT/sBpZ0KYaphdEOJiMyDWY2_6lqZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:3c:c6:fc:a0:82:d6:28:07:02:91:d1:bb:ac:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b01a59d0a61aa6174438988cc83598dbfea5a998 Validity Not Before: Jan 2 04:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7136b893eaf9d3a266e45eb99a4b2082f9685430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8e:0f:30:ff:74:62:2a:dc:66:ee:d9:54:8e: cd:ae:9d:71:79:18:04:0c:bc:ff:2d:e6:db:d5:ba: 38:06:4e:1d:c5:96:06:65:ca:da:70:c8:3a:90:e8: 13:b1:fd:47:5f:0c:20:dc:50:83:bf:21:9f:22:65: 8e:1a:bc:14:c2:b8:8d:0e:06:de:ef:ba:52:b6:68: 72:d7:e2:23:94:8a:92:0f:4d:35:dd:c4:e3:0e:39: 2e:c7:c7:c6:71:83:8e:b1:27:4d:58:95:94:55:97: 91:3b:3f:f2:2a:eb:07:39:86:4a:bc:91:4c:7a:85: 7f:60:04:fd:ba:d1:c6:48:bd:49:4c:5b:57:90:bb: 7e:06:a2:6b:9c:53:43:0e:22:c0:01:d4:fa:13:49: 8e:02:dc:7a:33:3e:49:97:02:5f:5d:e8:5a:d3:d9: d5:9f:13:72:52:bc:9f:be:9e:8c:7f:85:51:ac:be: 35:15:8f:66:44:36:f4:0c:76:99:d8:e9:c9:e5:f1: 08:c9:06:93:d0:64:29:d5:81:df:d6:2c:2c:3a:2e: 4d:06:26:25:19:f1:e7:d3:03:af:34:61:cc:b0:b2: 22:80:4a:35:f7:34:ae:db:af:10:e3:c1:b0:df:6a: db:0d:60:6b:7e:29:e1:8e:60:e0:9c:52:3a:c4:77: 98:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:36:B8:93:EA:F9:D3:A2:66:E4:5E:B9:9A:4B:20:82:F9:68:54:30 X509v3 Authority Key Identifier: keyid:B0:1A:59:D0:A6:1A:A6:17:44:38:98:8C:C8:35:98:DB:FE:A5:A9:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBpZ0KYaphdEOJiMyDWY2_6lqZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/cTa4k-r506Jm5F65mksggvloVDA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.208.228.0/22 Signature Algorithm: sha256WithRSAEncryption 02:34:d5:2f:2a:12:a1:d3:a5:b3:5b:b7:57:1b:9c:ef:0e:4c: 04:be:bd:24:a6:cb:3f:85:14:da:7b:14:4b:08:3a:f5:73:2b: d8:4b:e4:3c:e7:3a:37:2c:e2:03:df:5b:f9:31:b2:89:43:a6: 18:b1:db:32:f0:61:58:6b:8d:fc:8a:43:cb:49:e8:18:84:b6: 5d:0d:18:57:e8:6b:c8:63:c4:aa:42:59:6a:46:86:0a:37:aa: 08:50:fb:df:1e:02:7d:03:f6:52:18:3e:66:86:64:07:bc:cb: ea:16:77:22:7d:e4:a4:b0:d8:a9:30:b2:ae:96:71:d4:44:55: b0:ff:4f:07:d4:75:12:78:9a:96:f0:b1:90:65:ca:28:aa:6f: c3:e0:74:79:cf:f3:32:7f:7c:f8:c7:ca:d1:a5:ec:66:7a:6d: 96:55:21:e9:b2:77:32:26:0d:18:c1:e9:5a:ad:1f:e7:a0:22: b3:11:9c:57:24:12:99:df:b2:89:e0:54:5f:28:b3:d4:b5:e7: 25:2d:eb:0b:e3:b1:bf:b0:87:77:64:58:7b:b1:cf:84:02:e2: 15:8c:4f:76:5a:c0:5c:cf:46:39:3f:c5:0a:46:92:74:b8:87: 73:c6:60:41:b7:6b:9c:77:81:00:eb:3f:1b:2e:c2:3a:e8:e5: d1:f9:4c:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87jzG/KCC1igHApHRu6w3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMWE1OWQwYTYxYWE2MTc0NDM4OTg4Y2M4MzU5OGRiZmVh NWE5OTgwHhcNMjYwMTAyMDQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTM2Yjg5M2VhZjlkM2EyNjZlNDVlYjk5YTRiMjA4MmY5Njg1NDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1o4PMP90YircZu7ZVI7Nrp1xeRgE DLz/Lebb1bo4Bk4dxZYGZcracMg6kOgTsf1HXwwg3FCDvyGfImWOGrwUwriNDgbe 77pStmhy1+IjlIqSD0013cTjDjkux8fGcYOOsSdNWJWUVZeROz/yKusHOYZKvJFM eoV/YAT9utHGSL1JTFtXkLt+BqJrnFNDDiLAAdT6E0mOAtx6Mz5JlwJfXeha09nV nxNyUryfvp6Mf4VRrL41FY9mRDb0DHaZ2OnJ5fEIyQaT0GQp1YHf1iwsOi5NBiYl GfHn0wOvNGHMsLIigEo19zSu268Q48Gw32rbDWBrfinhjmDgnFI6xHeYHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHE2uJPq+dOiZuReuZpLIIL5aFQwMB8GA1UdIwQY MBaAFLAaWdCmGqYXRDiYjMg1mNv+pamYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0JwWjBLWWFwaGRFT0ppTXlEV1kyXzZscVpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hMGU4ZTMtYTRlNy00YTllLWI3OTgt MDRlMWZhODA4NDI2LzEvY1RhNGstcjUwNkptNUY2NW1rc2dndmxvVkRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9hMGU4ZTMtYTRlNy00YTllLWI3OTgtMDRlMWZhODA4NDI2 LzEvc0JwWjBLWWFwaGRFT0ppTXlEV1kyXzZscVpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVdDkMA0G CSqGSIb3DQEBCwUAA4IBAQACNNUvKhKh06WzW7dXG5zvDkwEvr0kpss/hRTaexRL CDr1cyvYS+Q85zo3LOID31v5MbKJQ6YYsdsy8GFYa438ikPLSegYhLZdDRhX6GvI Y8SqQllqRoYKN6oIUPvfHgJ9A/ZSGD5mhmQHvMvqFncifeSksNipMLKulnHURFWw /08H1HUSeJqW8LGQZcooqm/D4HR5z/Myf3z4x8rRpexmem2WVSHpsncyJg0Ywela rR/noCKzEZxXJBKZ37KJ4FRfKLPUteclLesL47G/sId3ZFh7sc+EAuIVjE92WsBc z0Y5P8UKRpJ0uIdzxmBBt2ucd4EA6z8bLsI66OXR+Uzy -----END CERTIFICATE-----Generated at Mon Feb 9 23:43:03 2026 by rpki-client