This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/nUVyELULlyE5fyAdMqySIUcD1Kg.roa File: nUVyELULlyE5fyAdMqySIUcD1Kg.roa (raw, json) Hash identifier: 7IAppAs9x9RzUF7a3+rIPbPjrq3AFXyVcrF/g7C0QPU= Subject key identifier: 9D:45:72:10:B5:0B:97:21:39:7F:20:1D:32:AC:92:21:47:03:D4:A8 Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3 Certificate serial: 019B7F843B3AE24315631153D60A7B05C4D1 Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/nUVyELULlyE5fyAdMqySIUcD1Kg.roa Signing time: Fri 02 Jan 2026 16:22:10 +0000 ROA not before: Fri 02 Jan 2026 16:22:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213405 IP address blocks: 85.222.160.0/23 maxlen: 24 85.222.160.0/24 maxlen: 24 85.222.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:3b:3a:e2:43:15:63:11:53:d6:0a:7b:05:c4:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3 Validity Not Before: Jan 2 16:22:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d457210b50b9721397f201d32ac92214703d4a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fb:5a:b2:d3:a1:23:ee:2b:ca:3f:12:98:88: 5d:ab:10:bb:0b:0f:dc:66:81:06:c2:7b:58:f2:8b: 41:16:f6:ed:d6:de:81:d7:ff:71:c9:c1:bd:4d:bd: 87:f0:30:10:f1:b0:49:da:ec:22:bc:47:af:15:92: f2:dc:1f:48:34:b6:b0:77:5b:f9:d5:47:49:e3:67: a4:21:ae:23:ea:dd:68:1d:ee:4e:42:c8:ee:68:9d: 87:df:bc:52:55:0e:1b:26:b5:eb:8b:61:98:cf:fa: 30:7b:09:02:c7:a4:72:40:7b:37:aa:d9:c0:7d:63: 7d:5c:d3:8e:9c:79:6f:98:e9:d0:0e:6f:e5:ab:c7: 39:cb:d8:8d:58:24:11:70:05:1b:3d:df:e1:19:45: d7:38:2b:97:b1:02:df:ff:fb:e2:a5:a1:8b:b7:40: 07:a1:13:7f:e1:b4:93:e8:1d:4a:a0:58:9d:06:da: 19:c4:f6:dc:54:df:6c:dd:c9:49:ae:96:c0:23:10: d7:e0:81:f9:7a:f2:07:d9:b2:cb:09:67:2b:d3:34: 18:20:ed:a4:1a:ac:af:fc:45:f6:2a:85:e4:55:0e: c1:98:75:e1:6c:dd:1d:dc:8a:28:7c:94:43:52:66: 92:dd:20:a5:db:59:42:80:7f:6e:e2:5e:cd:cf:a0: 24:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:45:72:10:B5:0B:97:21:39:7F:20:1D:32:AC:92:21:47:03:D4:A8 X509v3 Authority Key Identifier: keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/nUVyELULlyE5fyAdMqySIUcD1Kg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.222.160.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:75:2f:23:66:34:80:e1:a6:75:37:ec:89:fe:fb:8a:84:ff: 9f:5c:f9:89:53:15:a8:df:e6:fb:af:8b:d6:09:57:eb:31:41: ab:a1:24:3a:79:7e:d1:4b:09:47:9d:63:75:de:34:c3:e1:b0: 2e:36:15:18:d3:69:f4:49:34:5d:f2:3c:ed:7c:29:50:e9:d0: 4f:17:6c:9a:18:cb:9c:8e:e3:71:09:5b:b7:4d:00:64:a9:6b: 75:e9:32:c1:98:a2:57:98:db:b3:9f:09:9f:68:a7:82:a2:3c: ca:c1:cf:97:bb:1a:6f:38:06:b3:13:40:f5:d3:e1:41:08:5e: da:07:54:9e:4f:d3:57:83:2a:0a:0d:c5:32:aa:40:8a:13:3a: 14:09:05:b4:47:ff:f4:89:75:06:38:23:63:6e:b5:7f:21:55: a4:df:68:46:fa:19:a9:7e:60:ee:8b:ee:33:c5:e9:4a:6b:20: 96:b4:e3:f0:79:89:e3:81:d4:43:26:02:2c:76:32:f2:e4:25: a6:dc:82:e1:49:1a:ef:52:e8:da:de:86:9f:93:30:5c:b7:55: ad:4c:d9:98:0c:15:f9:a6:e8:20:d5:87:cb:9a:7e:26:1d:a7: af:63:f0:dd:98:5f:b0:f5:f3:c1:9f:96:c2:eb:fb:44:cf:9c: d8:45:ea:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hDs64kMVYxFT1gp7BcTRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZDc4ZGUwMjM0ZTZmOTk3MDE1OTJmNTM2ZTQ1ZjVmNTU5 NGVlYzMwHhcNMjYwMTAyMTYyMjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDQ1NzIxMGI1MGI5NzIxMzk3ZjIwMWQzMmFjOTIyMTQ3MDNkNGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/tastOhI+4ryj8SmIhdqxC7Cw/c ZoEGwntY8otBFvbt1t6B1/9xycG9Tb2H8DAQ8bBJ2uwivEevFZLy3B9INLawd1v5 1UdJ42ekIa4j6t1oHe5OQsjuaJ2H37xSVQ4bJrXri2GYz/owewkCx6RyQHs3qtnA fWN9XNOOnHlvmOnQDm/lq8c5y9iNWCQRcAUbPd/hGUXXOCuXsQLf//vipaGLt0AH oRN/4bST6B1KoFidBtoZxPbcVN9s3clJrpbAIxDX4IH5evIH2bLLCWcr0zQYIO2k Gqyv/EX2KoXkVQ7BmHXhbN0d3IoofJRDUmaS3SCl21lCgH9u4l7Nz6AkJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ1FchC1C5chOX8gHTKskiFHA9SoMB8GA1UdIwQY MBaAFKfXjeAjTm+ZcBWS9TbkX19VlO7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2Mt MjhkNWI2MDdhNDdmLzEvblVWeUVMVUxseUU1ZnlBZE1xeVNJVWNEMUtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2MtMjhkNWI2MDdhNDdm LzEvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVd6gMA0G CSqGSIb3DQEBCwUAA4IBAQBbdS8jZjSA4aZ1N+yJ/vuKhP+fXPmJUxWo3+b7r4vW CVfrMUGroSQ6eX7RSwlHnWN13jTD4bAuNhUY02n0STRd8jztfClQ6dBPF2yaGMuc juNxCVu3TQBkqWt16TLBmKJXmNuznwmfaKeCojzKwc+XuxpvOAazE0D10+FBCF7a B1SeT9NXgyoKDcUyqkCKEzoUCQW0R//0iXUGOCNjbrV/IVWk32hG+hmpfmDui+4z xelKayCWtOPweYnjgdRDJgIsdjLy5CWm3ILhSRrvUuja3oafkzBct1WtTNmYDBX5 pugg1YfLmn4mHaevY/DdmF+w9fPBn5bC6/tEz5zYRep+ -----END CERTIFICATE-----Generated at Mon Jan 26 11:48:35 2026 by rpki-client