This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/vUO8iJf5TPdN_Y2pvnWSgJsVLzM.roa File: vUO8iJf5TPdN_Y2pvnWSgJsVLzM.roa (raw, json) Hash identifier: OrVE4nZqfYfPq1L+ieNzu7qnXwZgNYWL2y7B/YmdnLw= Subject key identifier: BD:43:BC:88:97:F9:4C:F7:4D:FD:8D:A9:BE:75:92:80:9B:15:2F:33 Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797EB533E6213F8038134C8F644A3824 Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/vUO8iJf5TPdN_Y2pvnWSgJsVLzM.roa Signing time: Thu 01 Jan 2026 12:18:25 +0000 ROA not before: Thu 01 Jan 2026 12:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39251 IP address blocks: 85.130.72.0/22 maxlen: 22 85.130.72.0/24 maxlen: 24 85.130.73.0/24 maxlen: 24 85.130.74.0/24 maxlen: 24 85.130.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b5:33:e6:21:3f:80:38:13:4c:8f:64:4a:38:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd43bc8897f94cf74dfd8da9be7592809b152f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:25:04:a7:d6:e2:81:bd:d2:2d:71:6c:74:59: 7a:dc:7f:9e:e2:ac:66:50:f4:59:37:34:8e:5f:49: e6:ba:d4:13:b3:45:e3:c2:f5:e0:bf:54:04:55:ef: 6c:64:00:b1:b5:5c:e6:c0:59:f5:e4:c1:a6:be:3e: 7d:65:20:b6:07:2e:cc:15:b3:b7:83:3d:b0:39:bd: 3d:ef:c3:10:e7:c2:6d:15:97:fc:cb:c6:b6:b4:ef: c6:0c:41:a2:29:6c:6f:17:f0:50:b7:4c:1c:b5:6c: e3:c1:5f:fb:98:4e:59:fc:0a:a1:be:63:11:94:32: b3:f3:9a:9e:db:e3:8c:9f:48:b2:bf:b9:29:65:9e: 4f:b2:62:70:f1:68:49:80:08:1f:fa:7a:33:96:09: b2:1e:c9:71:1f:b6:64:70:c6:90:5f:6f:e6:4e:24: 17:59:9f:cb:4e:5f:26:b3:91:db:19:27:ff:c5:79: ec:14:e2:5a:39:ba:77:3e:87:82:e3:bc:9c:2d:3c: 14:17:54:6e:e5:bf:0f:34:d1:5c:b3:02:a3:b8:13: 0b:90:ad:06:3b:92:3b:9b:17:74:68:f5:4a:c8:6b: 7a:7f:88:3d:0c:07:5b:29:f0:02:c8:80:10:d5:7b: bb:67:c3:75:46:97:d1:26:c6:29:7a:62:ff:cb:b0: 9e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:43:BC:88:97:F9:4C:F7:4D:FD:8D:A9:BE:75:92:80:9B:15:2F:33 X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/vUO8iJf5TPdN_Y2pvnWSgJsVLzM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.130.72.0/22 Signature Algorithm: sha256WithRSAEncryption 18:1a:1e:ab:4d:d5:e2:89:02:c7:5d:bd:6c:5f:4d:10:ee:aa: 71:6a:92:08:05:57:fd:17:70:53:af:5d:50:b6:b2:26:4c:09: fa:bc:b4:3d:c9:35:76:ed:e6:29:e7:b3:e8:2f:90:53:62:48: 7e:20:7b:b3:5e:cf:3c:25:b4:ca:d5:93:cf:86:e0:d2:cd:22: 35:e0:ca:dd:48:ef:e0:19:52:43:04:f3:96:41:ac:66:c4:c2: 1d:49:bd:73:e8:ac:37:2c:a7:88:29:ce:eb:f8:65:53:d4:44: ee:f8:1d:04:65:ec:39:8f:f7:95:ea:b1:0d:4e:6a:2d:4f:40: 63:98:64:30:2d:41:95:9a:f9:53:33:49:82:d6:54:86:e3:b5: 4d:46:6a:63:4e:a5:6a:ae:3d:76:0c:c1:8f:d1:f0:fc:e3:3e: 6f:4e:f1:d1:2e:55:5b:17:29:3d:b0:34:b2:78:06:6a:e4:70: da:fd:ac:e6:58:d3:55:59:bf:70:6b:9a:49:56:36:73:03:c6: 89:d9:67:c7:40:1d:ce:84:ee:4f:57:6e:3f:10:1c:bb:e1:bc: 47:d8:63:5c:78:7a:23:48:97:99:73:80:e2:ac:b1:3a:fe:b5: 1e:9f:97:7d:fa:b3:f1:9e:b7:cc:79:47:98:97:c4:a0:c4:7e: d0:ee:94:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5frUz5iE/gDgTTI9kSjgkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDQzYmM4ODk3Zjk0Y2Y3NGRmZDhkYTliZTc1OTI4MDliMTUyZjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSUEp9bigb3SLXFsdFl63H+e4qxm UPRZNzSOX0nmutQTs0XjwvXgv1QEVe9sZACxtVzmwFn15MGmvj59ZSC2By7MFbO3 gz2wOb0978MQ58JtFZf8y8a2tO/GDEGiKWxvF/BQt0wctWzjwV/7mE5Z/AqhvmMR lDKz85qe2+OMn0iyv7kpZZ5PsmJw8WhJgAgf+nozlgmyHslxH7ZkcMaQX2/mTiQX WZ/LTl8ms5HbGSf/xXnsFOJaObp3PoeC47ycLTwUF1Ru5b8PNNFcswKjuBMLkK0G O5I7mxd0aPVKyGt6f4g9DAdbKfACyIAQ1Xu7Z8N1RpfRJsYpemL/y7CeoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL1DvIiX+Uz3Tf2Nqb51koCbFS8zMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvdlVPOGlKZjVUUGROX1kycHZuV1NnSnNWTHpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVYJIMA0G CSqGSIb3DQEBCwUAA4IBAQAYGh6rTdXiiQLHXb1sX00Q7qpxapIIBVf9F3BTr11Q trImTAn6vLQ9yTV27eYp57PoL5BTYkh+IHuzXs88JbTK1ZPPhuDSzSI14MrdSO/g GVJDBPOWQaxmxMIdSb1z6Kw3LKeIKc7r+GVT1ETu+B0EZew5j/eV6rENTmotT0Bj mGQwLUGVmvlTM0mC1lSG47VNRmpjTqVqrj12DMGP0fD84z5vTvHRLlVbFyk9sDSy eAZq5HDa/azmWNNVWb9wa5pJVjZzA8aJ2WfHQB3OhO5PV24/EBy74bxH2GNceHoj SJeZc4DirLE6/rUen5d9+rPxnrfMeUeYl8SgxH7Q7pSo -----END CERTIFICATE-----Generated at Sun Jan 25 14:35:50 2026 by rpki-client