This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/x-4NJxZ2nwyfIPj7rGtcmDafiYQ.roa File: x-4NJxZ2nwyfIPj7rGtcmDafiYQ.roa (raw, json) Hash identifier: hbLajVkI4hSS08XndEILFj9TEfJ8gLTfZffiq7R2pbQ= Subject key identifier: C7:EE:0D:27:16:76:9F:0C:9F:20:F8:FB:AC:6B:5C:98:36:9F:89:84 Certificate issuer: /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e Certificate serial: 019B7EA6D7B274EBE12FB562B62CF896C7FA Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/x-4NJxZ2nwyfIPj7rGtcmDafiYQ.roa Signing time: Fri 02 Jan 2026 12:20:21 +0000 ROA not before: Fri 02 Jan 2026 12:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201334 IP address blocks: 85.91.116.0/24 maxlen: 24 85.91.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d7:b2:74:eb:e1:2f:b5:62:b6:2c:f8:96:c7:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e Validity Not Before: Jan 2 12:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7ee0d2716769f0c9f20f8fbac6b5c98369f8984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9e:a8:c9:32:4d:7b:80:20:da:be:25:8a:5a: 68:6e:8f:a5:28:2f:a2:19:05:67:6c:14:7b:74:21: b7:64:38:f6:c3:81:0b:58:77:92:48:6b:05:8e:ed: 75:3b:56:ff:61:74:b3:8e:7c:b3:35:85:5c:e1:49: 30:32:91:10:07:e5:9d:72:1f:60:43:89:f9:d7:10: 5b:16:c8:8d:e3:1c:06:e5:f2:a9:b8:5a:5f:28:56: 8a:f3:d4:d7:09:ac:f2:bc:c1:4a:9a:e9:41:75:57: 6f:cf:00:e5:ed:57:46:86:e7:50:38:bc:0b:45:8e: 54:f4:62:be:d1:47:67:59:b0:f4:13:f9:dc:84:c7: 19:a9:53:fe:bd:fa:2a:a2:61:8c:72:a5:ea:fa:d8: 41:b6:1a:59:27:49:87:45:d6:92:cd:38:05:e6:78: b7:f2:ad:49:61:52:98:2f:f1:92:ad:c9:6c:e0:a6: 5d:ff:54:bc:23:98:7c:f5:76:eb:a9:95:44:a3:d7: aa:b5:73:2d:bf:1e:6d:d1:ce:2e:2a:e2:7f:77:cf: ff:3e:a6:81:e3:ee:01:08:2b:ed:03:84:e1:7c:45: 0e:dc:8d:36:da:b6:26:32:3e:a5:63:e5:24:68:25: ca:60:37:19:2b:69:21:06:72:68:74:e5:c2:49:e5: a1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:EE:0D:27:16:76:9F:0C:9F:20:F8:FB:AC:6B:5C:98:36:9F:89:84 X509v3 Authority Key Identifier: keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/x-4NJxZ2nwyfIPj7rGtcmDafiYQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.91.116.0/23 Signature Algorithm: sha256WithRSAEncryption 46:87:7e:41:46:f9:df:6c:77:d4:e5:fb:d9:e5:41:69:13:e8: 94:a2:53:66:97:f1:a8:ed:f2:e5:3d:0c:9a:34:e7:d7:fa:63: 93:db:6d:9d:7a:d5:bd:a9:03:d8:53:7b:d7:c0:e7:e7:59:c1: ae:3d:7e:5b:b2:c0:49:3a:af:7a:1c:6d:5a:05:3b:b1:00:c7: e0:10:20:d6:3d:a0:1b:68:a7:58:c2:9d:b4:71:b1:86:60:bb: 58:3a:de:a1:1e:c8:0f:23:c5:4b:f5:f9:14:83:ba:2e:ec:7e: c7:18:02:fe:3f:a6:5e:1a:3e:81:09:92:c0:62:c0:fb:f0:16: c5:63:ea:38:93:33:22:ef:7d:6d:e4:6a:15:af:eb:20:47:c0: ed:31:72:bc:aa:84:76:84:6d:a8:f6:dc:7e:00:d5:c3:b0:ef: 99:db:9a:96:28:dd:69:61:96:d0:0e:e6:5e:db:c2:f6:f7:3f: 8f:2e:1a:9b:31:b4:c1:43:59:ab:bd:3e:7e:26:21:e0:5a:fc: 62:8c:91:5c:69:d7:39:2d:f3:b5:f8:65:e6:be:71:17:0f:c7: d5:ed:a2:2a:2e:a1:08:1d:22:dc:12:b7:25:8e:2a:25:2d:a0: 45:38:fb:e8:60:5c:b2:fe:64:c1:33:b9:c8:ad:83:b3:f1:1a: a6:e8:ce:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pteydOvhL7Vitiz4lsf6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZGQ1NDI3ODE4NTFjMGJjZTVhM2VhNWNjMzg3NjUwZmZj ODI3N2UwHhcNMjYwMTAyMTIyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2VlMGQyNzE2NzY5ZjBjOWYyMGY4ZmJhYzZiNWM5ODM2OWY4OTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu56oyTJNe4Ag2r4lilpobo+lKC+i GQVnbBR7dCG3ZDj2w4ELWHeSSGsFju11O1b/YXSzjnyzNYVc4UkwMpEQB+Wdch9g Q4n51xBbFsiN4xwG5fKpuFpfKFaK89TXCazyvMFKmulBdVdvzwDl7VdGhudQOLwL RY5U9GK+0UdnWbD0E/nchMcZqVP+vfoqomGMcqXq+thBthpZJ0mHRdaSzTgF5ni3 8q1JYVKYL/GSrcls4KZd/1S8I5h89XbrqZVEo9eqtXMtvx5t0c4uKuJ/d8//PqaB 4+4BCCvtA4ThfEUO3I022rYmMj6lY+UkaCXKYDcZK2khBnJodOXCSeWhUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMfuDScWdp8MnyD4+6xrXJg2n4mEMB8GA1UdIwQY MBaAFFndVCeBhRwLzlo+pcw4dlD/yCd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83OWM0YmEtMzhlMi00ZjVhLTk1OWYt NDdlMDkzNzk4OWE4LzEveC00Tkp4WjJud3lmSVBqN3JHdGNtRGFmaVlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi83OWM0YmEtMzhlMi00ZjVhLTk1OWYtNDdlMDkzNzk4OWE4 LzEvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVVt0MA0G CSqGSIb3DQEBCwUAA4IBAQBGh35BRvnfbHfU5fvZ5UFpE+iUolNml/Go7fLlPQya NOfX+mOT222detW9qQPYU3vXwOfnWcGuPX5bssBJOq96HG1aBTuxAMfgECDWPaAb aKdYwp20cbGGYLtYOt6hHsgPI8VL9fkUg7ou7H7HGAL+P6ZeGj6BCZLAYsD78BbF Y+o4kzMi731t5GoVr+sgR8DtMXK8qoR2hG2o9tx+ANXDsO+Z25qWKN1pYZbQDuZe 28L29z+PLhqbMbTBQ1mrvT5+JiHgWvxijJFcadc5LfO1+GXmvnEXD8fV7aIqLqEI HSLcErcljiolLaBFOPvoYFyy/mTBM7nIrYOz8Rqm6M6C -----END CERTIFICATE-----Generated at Mon Jan 26 02:07:19 2026 by rpki-client