This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/pLQrbeiLlbqhipeOcT9REiuVFEg.roa File: pLQrbeiLlbqhipeOcT9REiuVFEg.roa (raw, json) Hash identifier: TQZ4kOTlGvxMTZCOPNSRdXnAQr/tXnAwN1TXSaicJbM= Subject key identifier: A4:B4:2B:6D:E8:8B:95:BA:A1:8A:97:8E:71:3F:51:12:2B:95:14:48 Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Certificate serial: 019B775910E9D6BB825B44CE25E2DBDFF2A2 Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/pLQrbeiLlbqhipeOcT9REiuVFEg.roa Signing time: Thu 01 Jan 2026 02:18:04 +0000 ROA not before: Thu 01 Jan 2026 02:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208807 IP address blocks: 85.31.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:10:e9:d6:bb:82:5b:44:ce:25:e2:db:df:f2:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Validity Not Before: Jan 1 02:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4b42b6de88b95baa18a978e713f51122b951448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e8:5d:cf:22:cc:ce:da:96:e6:a5:99:49:a4: c7:c6:09:f7:69:36:cb:5c:2a:ed:af:ab:fb:37:cd: fb:f5:f4:9d:00:c9:35:2b:01:d3:48:0a:ca:e0:96: ca:8f:3e:e6:8a:46:fe:e4:84:c1:d5:2c:70:e7:80: 0b:53:68:f4:b8:43:05:cd:6b:46:94:66:df:68:b9: fa:29:67:eb:8b:52:fb:6d:78:f7:b6:af:bf:08:da: c8:06:fc:51:d3:ed:77:c5:bd:49:58:a5:20:fd:92: 2f:b9:14:a7:35:ad:6a:e0:59:83:3d:4e:1f:2d:39: 11:55:38:f0:bb:fe:88:87:5c:0f:dc:0c:90:0a:41: f4:1b:e5:db:ac:88:2e:4a:fb:78:ee:cc:62:6c:a8: c2:3a:a0:6c:dc:76:1f:6d:23:e8:bf:5c:e1:50:d2: e0:dc:be:34:54:84:a5:03:fe:9e:d2:e2:66:ac:68: e0:37:bf:ea:1d:20:cc:54:2f:7d:26:e7:78:bb:96: 21:28:5e:84:48:8c:23:e8:f9:0c:78:f0:de:2f:6d: 86:81:58:74:6c:63:16:a8:9d:bc:c6:c1:2e:de:a6: 2c:04:87:38:b6:cb:79:70:7b:b8:67:51:80:8f:58: 06:0a:a3:07:ba:43:20:e2:a2:1f:bf:b7:9c:34:d4: 04:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B4:2B:6D:E8:8B:95:BA:A1:8A:97:8E:71:3F:51:12:2B:95:14:48 X509v3 Authority Key Identifier: keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/pLQrbeiLlbqhipeOcT9REiuVFEg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.31.246.0/24 Signature Algorithm: sha256WithRSAEncryption 67:09:3b:90:7f:95:be:4b:65:74:c8:a1:4d:67:d2:47:d7:c7: e7:0a:67:da:11:15:b1:02:1b:34:f1:6f:b9:d9:1c:1d:71:e8: 75:88:b9:c2:f2:e1:52:c1:16:a3:df:ba:8a:56:0d:6d:9f:47: a9:fc:4f:29:1e:2c:f5:c7:9e:31:3a:9d:62:5d:88:5d:5f:99: 03:23:94:37:d8:c9:7e:50:e2:d0:e1:28:73:d4:72:fe:d9:65: 7a:ea:7c:02:6c:6b:ac:c2:b4:e2:b0:96:62:6a:fe:bd:50:89: d0:c2:1d:c8:51:4e:2e:67:e4:26:04:6f:ad:ef:f2:ae:0d:bc: 41:65:49:43:78:0a:bd:84:40:e9:ac:31:ab:6e:fe:4a:0f:34: bd:d2:13:6f:88:ea:7d:7e:14:87:61:c3:4f:26:b3:27:0e:97: 97:c3:45:81:6f:c4:da:79:94:3c:e7:a6:e4:24:26:51:59:21: fe:0e:2e:a9:8a:9d:f9:5b:d9:5a:11:4d:66:34:e5:d1:f7:69: 79:82:54:61:ff:81:78:27:2f:21:8c:f1:9c:bd:96:2f:c0:a6: f0:60:f8:a6:33:bc:90:d8:33:03:5c:0b:cf:70:90:ed:c7:40: bf:8e:f6:bb:cc:e3:65:52:07:dd:cc:20:73:75:87:f8:6d:e7: 04:b0:c8:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WRDp1ruCW0TOJeLb3/KiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx YjM2ZTgwHhcNMjYwMTAxMDIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGI0MmI2ZGU4OGI5NWJhYTE4YTk3OGU3MTNmNTExMjJiOTUxNDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uhdzyLMztqW5qWZSaTHxgn3aTbL XCrtr6v7N8379fSdAMk1KwHTSArK4JbKjz7mikb+5ITB1Sxw54ALU2j0uEMFzWtG lGbfaLn6KWfri1L7bXj3tq+/CNrIBvxR0+13xb1JWKUg/ZIvuRSnNa1q4FmDPU4f LTkRVTjwu/6Ih1wP3AyQCkH0G+XbrIguSvt47sxibKjCOqBs3HYfbSPov1zhUNLg 3L40VISlA/6e0uJmrGjgN7/qHSDMVC99Jud4u5YhKF6ESIwj6PkMePDeL22GgVh0 bGMWqJ28xsEu3qYsBIc4tst5cHu4Z1GAj1gGCqMHukMg4qIfv7ecNNQE5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKS0K23oi5W6oYqXjnE/URIrlRRIMB8GA1UdIwQY MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt MDI0YjE2NTVjMjQ3LzEvcExRcmJlaUxsYnFoaXBlT2NUOVJFaXVWRkVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3 LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVR/2MA0G CSqGSIb3DQEBCwUAA4IBAQBnCTuQf5W+S2V0yKFNZ9JH18fnCmfaERWxAhs08W+5 2Rwdceh1iLnC8uFSwRaj37qKVg1tn0ep/E8pHiz1x54xOp1iXYhdX5kDI5Q32Ml+ UOLQ4Shz1HL+2WV66nwCbGuswrTisJZiav69UInQwh3IUU4uZ+QmBG+t7/KuDbxB ZUlDeAq9hEDprDGrbv5KDzS90hNviOp9fhSHYcNPJrMnDpeXw0WBb8TaeZQ856bk JCZRWSH+Di6pip35W9laEU1mNOXR92l5glRh/4F4Jy8hjPGcvZYvwKbwYPimM7yQ 2DMDXAvPcJDtx0C/jva7zONlUgfdzCBzdYf4becEsMhw -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:49 2026 by rpki-client