This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/rYWyVFJzLrFOCnVo-LA8TMd7XMk.roa File: rYWyVFJzLrFOCnVo-LA8TMd7XMk.roa (raw, json) Hash identifier: /09X2rjXIYAHVxxz61B+a44mcYZqQFBBx89GEQ/r21o= Subject key identifier: AD:85:B2:54:52:73:2E:B1:4E:0A:75:68:F8:B0:3C:4C:C7:7B:5C:C9 Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881 Certificate serial: 019B7B369960C4E8F12E90D4287D29C6D42D Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/rYWyVFJzLrFOCnVo-LA8TMd7XMk.roa Signing time: Thu 01 Jan 2026 20:18:54 +0000 ROA not before: Thu 01 Jan 2026 20:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35334 IP address blocks: 85.31.210.0/24 maxlen: 24 85.31.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:99:60:c4:e8:f1:2e:90:d4:28:7d:29:c6:d4:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881 Validity Not Before: Jan 1 20:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad85b25452732eb14e0a7568f8b03c4cc77b5cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:56:11:73:5f:6f:84:c1:24:0b:e1:93:9c:66: cf:0e:2b:0e:b5:3c:dc:db:db:06:b9:93:7e:79:4e: 7e:3d:6f:08:c7:e3:97:cd:14:4e:dd:8d:7c:38:d5: b1:96:cf:60:3c:45:a7:a4:24:6e:9d:21:1b:0c:fd: 9c:5a:2b:42:12:84:6c:a5:03:56:93:86:e3:8c:31: 6b:23:8e:b7:1a:3b:24:2b:31:09:3c:27:de:9b:23: 71:93:df:63:c8:35:64:06:c8:c6:fe:62:f9:25:1a: d7:a9:5f:70:c2:26:a8:b8:98:99:89:15:a5:41:e3: 96:bc:6a:55:41:b0:15:b1:66:0a:a1:ce:80:47:6c: c8:4d:d6:d2:bd:41:d2:51:9e:40:64:6d:75:ee:39: df:86:57:b8:a9:d2:91:9a:bc:22:af:81:c1:70:90: 6f:e7:63:3c:10:d2:f8:8e:c1:fc:18:66:86:5f:3c: b4:b6:bc:06:9f:b1:61:0e:17:55:1c:e2:e5:19:cf: 0b:d4:72:78:c0:55:f1:eb:73:7e:75:af:5d:46:a6: 9e:31:1e:5b:aa:28:fd:dd:34:01:a6:b4:ac:34:44: 92:4d:49:9b:3d:31:46:09:4f:6f:fa:32:57:43:18: 32:78:d9:be:d5:12:e4:73:d0:ae:5d:36:01:9d:71: e4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:85:B2:54:52:73:2E:B1:4E:0A:75:68:F8:B0:3C:4C:C7:7B:5C:C9 X509v3 Authority Key Identifier: keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/rYWyVFJzLrFOCnVo-LA8TMd7XMk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.31.210.0/24 85.31.222.0/24 Signature Algorithm: sha256WithRSAEncryption 18:c7:72:f0:d0:66:df:95:4a:46:a4:38:78:ec:d4:5d:0c:c8: 41:4c:65:37:55:1e:33:f3:67:5e:98:42:87:df:87:98:d3:88: a1:6b:60:72:72:fe:39:10:08:e9:de:f2:22:2d:5d:14:9f:ef: 85:60:1a:ca:bf:ce:b0:01:80:ae:eb:65:c0:69:09:64:6a:99: 9e:38:9f:ef:12:a8:71:a7:b5:8a:a1:2e:63:97:3d:31:00:e9: 4d:de:b1:da:80:3d:90:31:a0:89:37:9b:5d:63:0e:28:2c:97: 80:ae:bc:8a:50:03:2f:72:37:e0:5b:18:d9:eb:0d:8e:44:52: 96:17:a2:08:22:52:00:78:8d:e9:e1:3b:76:02:4a:d2:b1:20: c5:08:14:cf:4f:1f:a2:46:7f:9b:b8:af:f7:d5:45:33:cb:db: f7:f2:07:ca:b1:f6:f2:76:20:77:21:07:68:8b:31:d9:b5:28: 44:08:33:b6:6e:e8:ad:bb:ad:26:c4:fa:c5:c8:3f:8c:2b:e0: 32:c3:38:79:45:72:18:40:6c:e4:6c:2c:08:4d:45:6d:9d:e7: 60:12:8b:49:1f:58:e0:19:a6:50:fb:26:95:66:2c:29:08:c9: a1:85:c4:9b:92:f7:57:79:7a:01:13:a5:0e:51:07:ab:0f:86: 61:5c:cc:07 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NplgxOjxLpDUKH0pxtQtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MDllZTNkNjE4OTc0ZGEwY2JkODA1YTJkYTgwNDEwYTQ5 ODk4ODEwHhcNMjYwMTAxMjAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDg1YjI1NDUyNzMyZWIxNGUwYTc1NjhmOGIwM2M0Y2M3N2I1Y2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1YRc19vhMEkC+GTnGbPDisOtTzc 29sGuZN+eU5+PW8Ix+OXzRRO3Y18ONWxls9gPEWnpCRunSEbDP2cWitCEoRspQNW k4bjjDFrI463GjskKzEJPCfemyNxk99jyDVkBsjG/mL5JRrXqV9wwiaouJiZiRWl QeOWvGpVQbAVsWYKoc6AR2zITdbSvUHSUZ5AZG117jnfhle4qdKRmrwir4HBcJBv 52M8ENL4jsH8GGaGXzy0trwGn7FhDhdVHOLlGc8L1HJ4wFXx63N+da9dRqaeMR5b qij93TQBprSsNESSTUmbPTFGCU9v+jJXQxgyeNm+1RLkc9CuXTYBnXHkXwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK2FslRScy6xTgp1aPiwPEzHe1zJMB8GA1UdIwQY MBaAFOkJ7j1hiXTaDL2AWi2oBBCkmJiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEt ZGQxMTVmOWUzMzAxLzEvcllXeVZGSnpMckZPQ25Wby1MQThUTWQ3WE1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEtZGQxMTVmOWUzMzAx LzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVR/SAwQA VR/eMA0GCSqGSIb3DQEBCwUAA4IBAQAYx3Lw0GbflUpGpDh47NRdDMhBTGU3VR4z 82demEKH34eY04iha2Bycv45EAjp3vIiLV0Un++FYBrKv86wAYCu62XAaQlkapme OJ/vEqhxp7WKoS5jlz0xAOlN3rHagD2QMaCJN5tdYw4oLJeArryKUAMvcjfgWxjZ 6w2ORFKWF6IIIlIAeI3p4Tt2AkrSsSDFCBTPTx+iRn+buK/31UUzy9v38gfKsfby diB3IQdoizHZtShECDO2buitu60mxPrFyD+MK+Aywzh5RXIYQGzkbCwITUVtnedg EotJH1jgGaZQ+yaVZiwpCMmhhcSbkvdXeXoBE6UOUQerD4ZhXMwH -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:50 2026 by rpki-client