This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/QmWmoP1KHfrR9eTOqZ6x9ezRXSY.roa File: QmWmoP1KHfrR9eTOqZ6x9ezRXSY.roa (raw, json) Hash identifier: xqu4qFo0DMMx0+rjC1DPBvqtwUrbm4PocY0IAf7sGdo= Subject key identifier: 42:65:A6:A0:FD:4A:1D:FA:D1:F5:E4:CE:A9:9E:B1:F5:EC:D1:5D:26 Certificate issuer: /CN=3816e19b24a7e8cff189fabac28852cd8748a380 Certificate serial: 019B7DCB4A3CE756663CA4B373C17A50C81E Authority key identifier: 38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/QmWmoP1KHfrR9eTOqZ6x9ezRXSY.roa Signing time: Fri 02 Jan 2026 08:20:33 +0000 ROA not before: Fri 02 Jan 2026 08:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50597 IP address blocks: 85.194.248.0/22 maxlen: 22 85.194.248.0/24 maxlen: 24 85.194.249.0/24 maxlen: 24 85.194.250.0/24 maxlen: 24 85.194.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:4a:3c:e7:56:66:3c:a4:b3:73:c1:7a:50:c8:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3816e19b24a7e8cff189fabac28852cd8748a380 Validity Not Before: Jan 2 08:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4265a6a0fd4a1dfad1f5e4cea99eb1f5ecd15d26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fe:4a:71:c9:29:41:0f:d6:73:3c:e5:c2:50: 93:41:33:38:f1:33:33:6f:7d:c8:6a:36:89:69:6d: 7c:ef:ae:c1:66:8f:11:bc:c1:3c:d9:fd:34:dd:f9: 57:1b:0d:f8:83:22:e5:77:33:43:12:8b:25:81:ba: 6a:03:10:20:3f:0a:3f:45:60:3d:21:37:21:b6:8f: 1c:c9:ed:a7:be:61:cd:3c:b8:48:c7:d4:e9:6a:07: 4a:0a:b1:4a:d3:ad:44:08:46:93:0c:48:00:94:ce: c4:c2:16:ba:12:74:13:e4:f3:bf:f8:f3:c6:87:ed: bd:b9:e5:d6:71:64:20:ad:e7:b8:06:56:2e:8d:dc: 9c:75:6f:8a:f4:ff:a5:86:30:48:50:f2:b1:d6:de: ba:52:78:64:52:e0:76:06:1a:f3:5b:a7:84:4c:4e: 46:f5:b7:ae:30:93:41:90:31:34:ce:c4:56:68:62: 71:2f:53:33:e5:b2:54:70:ee:d1:2a:a2:7f:54:23: c3:d0:87:67:31:ad:64:3b:40:fd:85:50:2d:97:ab: d0:a3:47:96:d5:14:4e:18:76:b1:48:af:f3:21:e0: 32:65:15:b9:88:c1:a3:73:60:8b:52:0c:b6:df:bc: b4:7d:7d:c5:13:58:94:bf:df:34:f0:8d:db:f0:52: 84:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:65:A6:A0:FD:4A:1D:FA:D1:F5:E4:CE:A9:9E:B1:F5:EC:D1:5D:26 X509v3 Authority Key Identifier: keyid:38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/QmWmoP1KHfrR9eTOqZ6x9ezRXSY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.194.248.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:4b:d1:3e:6e:f8:1c:02:1e:02:dc:03:df:a2:87:04:08:64: 00:3c:aa:a6:89:d9:96:91:c7:17:36:dc:b1:3c:86:ff:d1:d3: ce:93:2e:df:6a:03:88:74:b6:10:2d:b4:d3:65:6d:e1:ae:f8: 00:59:fb:e4:6e:e9:23:e6:48:28:a3:d5:48:bb:8d:2d:2a:9f: 9f:ab:41:eb:e3:d8:b8:c1:68:2c:62:bd:fe:78:0a:40:b9:93: 82:81:9f:ef:cc:40:f3:b2:49:67:49:c1:a7:33:99:90:1d:39: 84:4b:db:a0:9e:34:d7:86:67:90:bd:9d:29:81:63:8a:18:a7: e5:1b:0f:35:5b:ac:5c:e1:00:f7:dc:c7:a6:42:63:59:48:78: 21:60:53:1e:20:6c:60:8b:e8:20:50:2c:35:7c:b3:4d:1e:67: ed:29:1f:e8:22:68:28:ff:d4:61:1e:90:ac:55:8c:9d:46:cc: 53:6a:d6:5b:a5:2d:c2:42:ca:6d:83:11:35:5e:61:29:c9:31: 29:24:f5:1d:84:c9:a5:e0:20:cb:ed:90:d7:85:73:9c:47:e9: ab:a9:8d:ee:4b:78:0c:79:fd:46:fc:c3:35:17:db:65:4f:ec: 70:bc:19:24:23:6e:2d:dd:5a:c0:c3:3f:65:71:b5:fa:7c:1c: 06:4d:4d:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y0o851ZmPKSzc8F6UMgeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MTZlMTliMjRhN2U4Y2ZmMTg5ZmFiYWMyODg1MmNkODc0 OGEzODAwHhcNMjYwMTAyMDgyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjY1YTZhMGZkNGExZGZhZDFmNWU0Y2VhOTllYjFmNWVjZDE1ZDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv5KcckpQQ/WczzlwlCTQTM48TMz b33IajaJaW18767BZo8RvME82f003flXGw34gyLldzNDEoslgbpqAxAgPwo/RWA9 ITchto8cye2nvmHNPLhIx9TpagdKCrFK061ECEaTDEgAlM7Ewha6EnQT5PO/+PPG h+29ueXWcWQgree4BlYujdycdW+K9P+lhjBIUPKx1t66UnhkUuB2BhrzW6eETE5G 9beuMJNBkDE0zsRWaGJxL1Mz5bJUcO7RKqJ/VCPD0IdnMa1kO0D9hVAtl6vQo0eW 1RROGHaxSK/zIeAyZRW5iMGjc2CLUgy237y0fX3FE1iUv9808I3b8FKEZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEJlpqD9Sh360fXkzqmesfXs0V0mMB8GA1UdIwQY MBaAFDgW4Zskp+jP8Yn6usKIUs2HSKOAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0JiaG15U242TV94aWZxNndvaFN6WWRJbzRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9kNjEyNzUtZTAwYS00YmZiLWJlOGEt MTZiMzZkMDgwMWU5LzEvUW1XbW9QMUtIZnJSOWVUT3FaNng5ZXpSWFNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9kNjEyNzUtZTAwYS00YmZiLWJlOGEtMTZiMzZkMDgwMWU5 LzEvT0JiaG15U242TV94aWZxNndvaFN6WWRJbzRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVcL4MA0G CSqGSIb3DQEBCwUAA4IBAQAqS9E+bvgcAh4C3APfoocECGQAPKqmidmWkccXNtyx PIb/0dPOky7fagOIdLYQLbTTZW3hrvgAWfvkbukj5kgoo9VIu40tKp+fq0Hr49i4 wWgsYr3+eApAuZOCgZ/vzEDzsklnScGnM5mQHTmES9ugnjTXhmeQvZ0pgWOKGKfl Gw81W6xc4QD33MemQmNZSHghYFMeIGxgi+ggUCw1fLNNHmftKR/oImgo/9RhHpCs VYydRsxTatZbpS3CQsptgxE1XmEpyTEpJPUdhMml4CDL7ZDXhXOcR+mrqY3uS3gM ef1G/MM1F9tlT+xwvBkkI24t3VrAwz9lcbX6fBwGTU3F -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:53 2026 by rpki-client