This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/c8_lqB8zuXEzmspKXzyipWp0Oa0.roa File: c8_lqB8zuXEzmspKXzyipWp0Oa0.roa (raw, json) Hash identifier: 2ZR0m4jkOWS1KPdLD0KrcVGTacYGG1RI331SCTXCoGQ= Subject key identifier: 73:CF:E5:A8:1F:33:B9:71:33:9A:CA:4A:5F:3C:A2:A5:6A:74:39:AD Certificate issuer: /CN=13b4f6b90167b71bd663fa0391e038a0155bb939 Certificate serial: 019B7F13A9EF3313E86465364D176B4097AC Authority key identifier: 13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/c8_lqB8zuXEzmspKXzyipWp0Oa0.roa Signing time: Fri 02 Jan 2026 14:19:13 +0000 ROA not before: Fri 02 Jan 2026 14:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210095 IP address blocks: 85.31.40.0/24 maxlen: 24 85.31.41.0/24 maxlen: 24 85.31.42.0/24 maxlen: 24 85.31.43.0/24 maxlen: 24 2a0d:da40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:a9:ef:33:13:e8:64:65:36:4d:17:6b:40:97:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13b4f6b90167b71bd663fa0391e038a0155bb939 Validity Not Before: Jan 2 14:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73cfe5a81f33b971339aca4a5f3ca2a56a7439ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c3:76:da:75:cc:a2:dc:a6:07:34:86:a8:dd: a5:87:c2:64:a1:a1:63:24:bf:96:2f:ff:c1:0f:e6: 57:23:4e:19:ca:58:f9:c1:f5:2b:90:a9:70:79:42: 1a:ac:00:cc:77:63:9f:ba:3e:b8:88:17:43:c8:f7: 4e:d1:0f:bd:a8:15:2d:61:b0:35:eb:b0:42:71:b6: 74:eb:a5:c6:92:7c:3b:9a:fa:c2:37:40:a4:07:d8: 09:2c:03:6e:f8:e8:f7:4e:5f:6e:ac:a2:ee:3d:df: f5:a4:48:3e:4e:0d:4c:26:4a:f5:be:ef:58:fa:be: 0b:e0:07:4a:a6:bf:5c:8a:ee:83:26:37:5b:eb:82: 7d:35:45:d5:8c:db:e5:c5:b3:b4:f5:c4:c2:1e:22: bc:59:3f:fb:61:09:d1:db:24:e2:d6:84:d8:5a:46: f6:41:1d:56:87:1c:00:a1:00:ba:42:e2:de:32:15: 90:7c:c0:c6:3c:c6:4e:b6:0b:8a:ca:ec:67:f3:5b: c3:b5:67:bb:f2:29:7f:d0:5e:b7:a8:7c:24:94:2f: bd:61:47:99:20:e4:5c:75:70:be:e2:7a:97:c3:76: ab:5b:ef:ca:8f:b8:dc:14:a1:93:56:cc:e3:cb:e4: 17:14:63:2d:5e:a5:c6:3d:f3:03:5f:1a:53:08:59: 7c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:CF:E5:A8:1F:33:B9:71:33:9A:CA:4A:5F:3C:A2:A5:6A:74:39:AD X509v3 Authority Key Identifier: keyid:13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/c8_lqB8zuXEzmspKXzyipWp0Oa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.31.40.0/22 IPv6: 2a0d:da40::/29 Signature Algorithm: sha256WithRSAEncryption 2b:1d:22:fe:83:8d:ba:71:e0:ff:9c:23:b8:75:bb:d7:87:7d: df:70:33:c5:a9:b6:88:5f:48:4c:09:40:68:83:9a:6f:31:d9: c1:7c:7a:2c:c4:80:01:21:e1:67:e1:98:fd:d4:9e:13:3e:6d: e9:2c:d0:e0:f7:e5:27:3a:f7:36:36:0b:a6:99:bd:ea:a1:d2: 68:e6:ac:5e:85:30:98:ef:19:08:75:e0:e8:11:4c:cd:86:b0: 17:5c:8f:22:d7:35:0b:77:9d:9c:16:77:de:75:1b:e3:16:7e: dc:3e:b8:2c:d1:c6:a1:a1:a3:89:31:38:f8:cd:a9:c2:f2:90: 9c:3b:c3:66:8b:d4:49:05:30:02:18:55:15:36:74:a0:bc:75: 0b:34:31:ee:b7:c0:10:01:e3:0c:a9:47:28:54:be:ae:8c:21: 38:df:6e:f3:2e:fe:f2:ba:09:8c:67:3e:ef:b5:15:db:05:02: c7:32:90:09:ba:44:17:72:ef:ce:b6:d2:3d:5a:8b:94:ee:6b: 08:de:9d:10:93:35:ff:fb:58:85:c3:7f:7d:5b:7d:e9:ff:5a: f0:c8:99:57:aa:46:42:12:58:03:d4:ff:fe:58:63:87:fd:92: 92:e3:60:f5:b0:39:e5:e7:eb:ab:5e:7a:c2:40:81:33:b3:69: ca:8f:68:c4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/E6nvMxPoZGU2TRdrQJesMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzYjRmNmI5MDE2N2I3MWJkNjYzZmEwMzkxZTAzOGEwMTU1 YmI5MzkwHhcNMjYwMTAyMTQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2NmZTVhODFmMzNiOTcxMzM5YWNhNGE1ZjNjYTJhNTZhNzQzOWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8N22nXMotymBzSGqN2lh8JkoaFj JL+WL//BD+ZXI04Zylj5wfUrkKlweUIarADMd2Ofuj64iBdDyPdO0Q+9qBUtYbA1 67BCcbZ066XGknw7mvrCN0CkB9gJLANu+Oj3Tl9urKLuPd/1pEg+Tg1MJkr1vu9Y +r4L4AdKpr9ciu6DJjdb64J9NUXVjNvlxbO09cTCHiK8WT/7YQnR2yTi1oTYWkb2 QR1WhxwAoQC6QuLeMhWQfMDGPMZOtguKyuxn81vDtWe78il/0F63qHwklC+9YUeZ IORcdXC+4nqXw3arW+/Kj7jcFKGTVszjy+QXFGMtXqXGPfMDXxpTCFl8QQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHPP5agfM7lxM5rKSl88oqVqdDmtMB8GA1UdIwQY MBaAFBO09rkBZ7cb1mP6A5HgOKAVW7k5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTdUMnVRRm50eHZXWV9vRGtlQTRvQlZidVRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85ZTg4NGUtMTdlNC00MjcxLWFjODkt Y2IzZmE0MDdlMGY0LzEvYzhfbHFCOHp1WEV6bXNwS1h6eWlwV3AwT2EwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85ZTg4NGUtMTdlNC00MjcxLWFjODktY2IzZmE0MDdlMGY0 LzEvRTdUMnVRRm50eHZXWV9vRGtlQTRvQlZidVRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCVR8oMA0E AgACMAcDBQMqDdpAMA0GCSqGSIb3DQEBCwUAA4IBAQArHSL+g426ceD/nCO4dbvX h33fcDPFqbaIX0hMCUBog5pvMdnBfHosxIABIeFn4Zj91J4TPm3pLNDg9+UnOvc2 Ngummb3qodJo5qxehTCY7xkIdeDoEUzNhrAXXI8i1zULd52cFnfedRvjFn7cPrgs 0cahoaOJMTj4zanC8pCcO8Nmi9RJBTACGFUVNnSgvHULNDHut8AQAeMMqUcoVL6u jCE4327zLv7yugmMZz7vtRXbBQLHMpAJukQXcu/OttI9WouU7msI3p0QkzX/+1iF w399W33p/1rwyJlXqkZCElgD1P/+WGOH/ZKS42D1sDnl5+urXnrCQIEzs2nKj2jE -----END CERTIFICATE-----Generated at Sun Jan 25 15:28:51 2026 by rpki-client