This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/I-GxtlJhzGYYRg8Wgfp9tQaL5Ag.roa File: I-GxtlJhzGYYRg8Wgfp9tQaL5Ag.roa (raw, json) Hash identifier: JBs1U9vJlSB2FdEOWcBpaJo3IbbOgjp9v20dwFHbjXo= Subject key identifier: 23:E1:B1:B6:52:61:CC:66:18:46:0F:16:81:FA:7D:B5:06:8B:E4:08 Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Certificate serial: 019B7EA65E9BDEE787EF9BE09D4703A50290 Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/I-GxtlJhzGYYRg8Wgfp9tQaL5Ag.roa Signing time: Fri 02 Jan 2026 12:19:50 +0000 ROA not before: Fri 02 Jan 2026 12:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199527 IP address blocks: 85.208.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:5e:9b:de:e7:87:ef:9b:e0:9d:47:03:a5:02:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Validity Not Before: Jan 2 12:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23e1b1b65261cc6618460f1681fa7db5068be408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8d:b1:06:92:21:71:7a:36:cd:03:a7:fe:51: 9c:de:c0:7d:a0:52:f7:5d:9b:e0:f1:e3:dc:8c:0b: 7b:6a:9f:ec:69:bc:56:48:b4:25:11:6b:5c:c1:43: e8:6e:ce:5c:ed:1c:63:b2:07:ab:81:48:3b:5f:6c: 59:1f:84:e7:61:e4:51:a9:96:77:ca:ca:7d:7b:6b: 4c:4f:83:55:9b:70:e8:85:51:f1:59:c3:57:b4:23: f1:b2:07:d8:3b:b7:a9:75:ae:00:26:e8:c1:18:f7: d8:0f:dd:34:d7:c0:36:a7:24:9d:6e:b9:b2:64:6c: 7f:4f:40:91:cc:05:c9:0f:cd:71:47:5b:84:ed:00: ea:d1:e4:cd:9a:d4:a3:bb:7c:14:27:eb:5c:43:14: e2:f5:0c:b7:c0:4f:ac:1f:46:1e:e1:03:20:68:20: f3:2f:f3:ca:00:14:cf:f9:01:dc:c6:0c:2a:88:ce: c5:84:fe:96:39:53:e4:36:72:54:f8:ff:e9:32:d7: ee:47:31:21:c2:df:59:a1:00:dd:f7:37:13:df:0b: 46:52:8f:d0:5f:44:30:0f:d6:54:5e:0a:3c:56:13: a4:d8:31:65:29:e8:f2:e2:0f:06:ac:0c:29:cd:1d: af:7c:35:c8:a0:06:55:fb:9a:a3:c8:8f:ac:e1:e5: c7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E1:B1:B6:52:61:CC:66:18:46:0F:16:81:FA:7D:B5:06:8B:E4:08 X509v3 Authority Key Identifier: keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/I-GxtlJhzGYYRg8Wgfp9tQaL5Ag.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.208.224.0/22 Signature Algorithm: sha256WithRSAEncryption 37:d9:53:bd:0b:f8:60:94:b7:73:54:ad:5f:ab:d9:ac:ae:aa: c1:1a:71:c7:ed:9e:a7:44:07:d8:00:65:b9:55:ba:f1:1a:31: 97:f5:d4:50:92:93:b6:cb:80:42:02:e0:e2:96:6a:71:81:79: 72:9c:e9:fc:b6:04:9c:5c:39:4f:71:6c:bc:8f:b5:c5:cd:ed: 00:d0:9b:bc:89:68:ef:2f:67:16:27:0f:51:45:71:92:bd:f3: 8b:20:9e:bb:3a:fa:0d:2d:ab:a2:9a:46:dd:ba:7e:97:84:87: 02:30:b0:a7:e6:5d:a5:13:04:e8:9b:c2:c6:0a:7c:17:a5:23: 2c:26:ec:58:e3:38:53:53:c1:35:38:45:68:f1:71:13:82:70: 8d:ff:68:4d:ac:64:37:fc:12:10:6d:2d:d2:56:ca:e1:ac:71: 1c:f2:68:ec:f2:f3:10:d9:70:63:83:59:ed:8c:b2:85:ee:bb: f2:67:f0:90:80:70:db:34:72:66:3e:7a:84:d9:3a:6d:77:86: bd:72:fc:60:c7:95:b9:24:a2:f3:7c:de:a2:66:23:7b:ee:68: 76:69:16:f5:99:d6:8c:43:bf:3b:66:1e:2c:55:cd:9f:ac:aa: 6f:0c:8d:cb:87:d9:7c:5c:91:30:af:40:99:ff:3f:9a:7f:07: b9:37:12:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pl6b3ueH75vgnUcDpQKQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2 OWYyYTAwHhcNMjYwMTAyMTIxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2UxYjFiNjUyNjFjYzY2MTg0NjBmMTY4MWZhN2RiNTA2OGJlNDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn42xBpIhcXo2zQOn/lGc3sB9oFL3 XZvg8ePcjAt7ap/sabxWSLQlEWtcwUPobs5c7RxjsgergUg7X2xZH4TnYeRRqZZ3 ysp9e2tMT4NVm3DohVHxWcNXtCPxsgfYO7epda4AJujBGPfYD90018A2pySdbrmy ZGx/T0CRzAXJD81xR1uE7QDq0eTNmtSju3wUJ+tcQxTi9Qy3wE+sH0Ye4QMgaCDz L/PKABTP+QHcxgwqiM7FhP6WOVPkNnJU+P/pMtfuRzEhwt9ZoQDd9zcT3wtGUo/Q X0QwD9ZUXgo8VhOk2DFlKejy4g8GrAwpzR2vfDXIoAZV+5qjyI+s4eXH9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCPhsbZSYcxmGEYPFoH6fbUGi+QIMB8GA1UdIwQY MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt NDI4NTk5ODM5MmQzLzEvSS1HeHRsSmh6R1lZUmc4V2dmcDl0UWFMNUFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVdDgMA0G CSqGSIb3DQEBCwUAA4IBAQA32VO9C/hglLdzVK1fq9msrqrBGnHH7Z6nRAfYAGW5 VbrxGjGX9dRQkpO2y4BCAuDilmpxgXlynOn8tgScXDlPcWy8j7XFze0A0Ju8iWjv L2cWJw9RRXGSvfOLIJ67OvoNLauimkbdun6XhIcCMLCn5l2lEwTom8LGCnwXpSMs JuxY4zhTU8E1OEVo8XETgnCN/2hNrGQ3/BIQbS3SVsrhrHEc8mjs8vMQ2XBjg1nt jLKF7rvyZ/CQgHDbNHJmPnqE2Tptd4a9cvxgx5W5JKLzfN6iZiN77mh2aRb1mdaM Q787Zh4sVc2frKpvDI3Lh9l8XJEwr0CZ/z+afwe5NxJA -----END CERTIFICATE-----Generated at Sun Jan 25 15:01:31 2026 by rpki-client