This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/CiRpNleeEt6n__DOZdV1ggQx1XE.roa File: CiRpNleeEt6n__DOZdV1ggQx1XE.roa (raw, json) Hash identifier: Q1Q0FazLW2QeTKzJxJyYoHgBiPj3VLKnqJ5ZVna4Xyg= Subject key identifier: 0A:24:69:36:57:9E:12:DE:A7:FF:F0:CE:65:D5:75:82:04:31:D5:71 Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Certificate serial: 019B7759000B6541FC695EDA4BD2A9082E17 Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/CiRpNleeEt6n__DOZdV1ggQx1XE.roa Signing time: Thu 01 Jan 2026 02:17:59 +0000 ROA not before: Thu 01 Jan 2026 02:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200289 IP address blocks: 85.31.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:00:0b:65:41:fc:69:5e:da:4b:d2:a9:08:2e:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Validity Not Before: Jan 1 02:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a246936579e12dea7fff0ce65d575820431d571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:51:a1:69:6f:a2:58:9c:5e:d0:39:52:ed:6b: a9:4d:7a:87:7e:4a:14:35:81:be:68:b2:3d:b9:5b: 87:99:ba:2e:ea:3f:ed:d0:87:65:25:c3:3e:c1:a9: cb:94:8a:aa:62:7f:29:e0:d1:bb:ee:5d:af:98:05: 8f:4d:f4:86:b1:22:9e:53:50:ca:fd:fa:ae:8c:53: de:1f:47:e5:e9:5d:ad:50:b9:0f:d3:b0:6c:79:74: 6d:9f:20:4b:71:4a:db:7f:c7:5c:91:d7:61:38:be: 26:21:9f:6e:f2:58:cb:e9:41:ba:94:22:bb:34:c3: 1a:b8:1c:8d:d7:aa:7f:7c:07:5c:e3:7d:cf:eb:d5: c5:5a:bb:d1:9d:da:ae:19:0f:37:4c:c6:1c:21:49: 95:74:51:57:96:c7:9d:8e:fe:01:f0:44:c6:c6:c7: 78:59:7d:7a:46:ac:62:2e:67:af:18:c8:4a:5b:9e: b4:b6:96:da:71:77:5b:46:44:08:af:2a:c8:ab:ac: 3f:2f:b8:59:08:7c:8b:5c:b1:f0:60:e2:8b:6d:40: 69:90:c2:5c:d0:a3:b2:8f:0e:14:9d:ff:59:2f:96: 6d:1b:1e:e6:f1:c2:19:7b:47:dc:6f:65:0b:10:c4: 5b:e9:12:52:82:f9:a2:44:00:3b:b8:e7:42:2e:60: 39:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:24:69:36:57:9E:12:DE:A7:FF:F0:CE:65:D5:75:82:04:31:D5:71 X509v3 Authority Key Identifier: keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/CiRpNleeEt6n__DOZdV1ggQx1XE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.31.245.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:ff:b1:62:9b:f2:b0:4e:bd:b3:fa:18:84:e3:90:d4:d3:6d: 33:a8:ba:97:67:c7:17:07:96:e9:67:8f:12:f2:12:2d:3e:4a: 4c:18:d9:6a:5a:0b:27:7c:d9:49:ce:a0:59:44:a5:48:2b:05: a1:0d:5a:ca:83:f7:36:33:c0:cf:52:db:0a:19:0a:9e:2c:0d: 0d:65:a5:c3:87:0a:fc:5d:53:7c:f2:65:c4:21:0a:12:4f:4d: 29:df:72:4a:fa:35:b8:6d:cb:18:6d:ee:60:3f:35:5e:64:6a: 86:aa:2b:12:89:df:1d:b8:a3:04:14:1d:f1:68:13:c5:c3:e0: ce:cb:26:6f:1d:15:63:c3:f9:e7:e0:c0:5d:69:8b:e8:d7:a2: f4:4e:23:0b:a3:b8:d7:96:56:e9:7b:ad:75:61:90:80:df:be: 4c:e7:6f:bb:8f:56:f6:c9:fa:77:12:3a:25:6b:bd:88:07:8b: c2:aa:f0:0c:18:c5:28:22:09:7e:e2:29:31:59:b9:64:18:fe: 08:60:91:46:87:70:40:56:1e:38:b1:98:86:5f:1a:f3:a4:06: 8c:5b:fc:2c:16:d4:f9:91:c8:60:ee:98:42:63:08:c6:5a:be: 61:9d:f1:95:eb:b9:20:3a:bf:30:76:40:d1:33:aa:de:30:69: 47:2d:1d:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WQALZUH8aV7aS9KpCC4XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx YjM2ZTgwHhcNMjYwMTAxMDIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTI0NjkzNjU3OWUxMmRlYTdmZmYwY2U2NWQ1NzU4MjA0MzFkNTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlGhaW+iWJxe0DlS7WupTXqHfkoU NYG+aLI9uVuHmbou6j/t0IdlJcM+wanLlIqqYn8p4NG77l2vmAWPTfSGsSKeU1DK /fqujFPeH0fl6V2tULkP07BseXRtnyBLcUrbf8dckddhOL4mIZ9u8ljL6UG6lCK7 NMMauByN16p/fAdc433P69XFWrvRndquGQ83TMYcIUmVdFFXlsedjv4B8ETGxsd4 WX16RqxiLmevGMhKW560tpbacXdbRkQIryrIq6w/L7hZCHyLXLHwYOKLbUBpkMJc 0KOyjw4Unf9ZL5ZtGx7m8cIZe0fcb2ULEMRb6RJSgvmiRAA7uOdCLmA5swIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAokaTZXnhLep//wzmXVdYIEMdVxMB8GA1UdIwQY MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt MDI0YjE2NTVjMjQ3LzEvQ2lScE5sZWVFdDZuX19ET1pkVjFnZ1F4MVhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3 LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVR/1MA0G CSqGSIb3DQEBCwUAA4IBAQAq/7Fim/KwTr2z+hiE45DU020zqLqXZ8cXB5bpZ48S 8hItPkpMGNlqWgsnfNlJzqBZRKVIKwWhDVrKg/c2M8DPUtsKGQqeLA0NZaXDhwr8 XVN88mXEIQoST00p33JK+jW4bcsYbe5gPzVeZGqGqisSid8duKMEFB3xaBPFw+DO yyZvHRVjw/nn4MBdaYvo16L0TiMLo7jXllbpe611YZCA375M52+7j1b2yfp3Ejol a72IB4vCqvAMGMUoIgl+4ikxWblkGP4IYJFGh3BAVh44sZiGXxrzpAaMW/wsFtT5 kchg7phCYwjGWr5hnfGV67kgOr8wdkDRM6reMGlHLR0B -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:45 2026 by rpki-client