This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/DtP5TcC78Ta0vQQBaiLRrng7HAY.roa File: DtP5TcC78Ta0vQQBaiLRrng7HAY.roa (raw, json) Hash identifier: UWu+orQumNbAH2JdcDqNioK0n/VPs+KPuoKy/0wsRxw= Subject key identifier: 0E:D3:F9:4D:C0:BB:F1:36:B4:BD:04:01:6A:22:D1:AE:78:3B:1C:06 Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e Certificate serial: 019B7A5A6DC513F4971DC5EE808A74F10275 Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/DtP5TcC78Ta0vQQBaiLRrng7HAY.roa Signing time: Thu 01 Jan 2026 16:18:25 +0000 ROA not before: Thu 01 Jan 2026 16:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44821 IP address blocks: 85.118.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:6d:c5:13:f4:97:1d:c5:ee:80:8a:74:f1:02:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e Validity Not Before: Jan 1 16:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ed3f94dc0bbf136b4bd04016a22d1ae783b1c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:57:49:4a:83:25:7f:91:eb:90:92:5c:ac:48: 54:14:41:65:5e:27:80:ee:de:a4:50:20:28:7a:bd: ec:a4:f6:33:24:04:3c:5f:6a:be:df:39:2b:2d:79: 52:d8:88:27:c2:ed:5b:27:0b:71:c0:d8:ab:ff:2b: e9:c4:a3:86:8e:6f:62:30:80:8c:97:ac:ae:e8:d3: c0:bf:2a:4b:a0:bd:26:cc:30:29:5d:ef:44:68:18: d6:6b:da:54:cf:a8:a6:a0:9b:c1:98:51:d3:8e:db: 5e:bf:64:5d:8b:82:09:06:e7:70:b9:39:1c:de:16: a2:a2:5b:5e:36:16:47:e7:65:4d:6f:be:10:b9:64: 0b:2c:f4:40:bb:a1:b3:95:c8:f8:02:07:a4:5e:86: e2:02:db:07:af:aa:4d:31:7f:b3:48:66:ae:e6:a3: 35:35:4c:29:30:e1:28:f8:c9:05:ec:7f:24:2b:ad: e6:c8:d5:71:91:a8:30:01:1a:b7:c8:27:22:85:0e: 9e:e2:9d:61:b8:65:0b:90:02:39:ce:96:7b:7f:85: 17:99:d3:8c:c3:39:78:ff:e2:a7:fc:61:e6:9a:f2: 97:d4:9e:d5:db:15:e3:35:9e:c0:61:3b:ed:a3:8d: d8:48:2c:36:3a:68:64:58:2c:33:40:86:c8:68:ab: 94:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D3:F9:4D:C0:BB:F1:36:B4:BD:04:01:6A:22:D1:AE:78:3B:1C:06 X509v3 Authority Key Identifier: keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/DtP5TcC78Ta0vQQBaiLRrng7HAY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.118.52.0/22 Signature Algorithm: sha256WithRSAEncryption 53:c3:29:27:69:0e:d2:b7:92:c3:00:c3:0c:b3:42:cc:d6:fb: 13:a8:21:56:55:47:b8:80:ef:40:e0:b2:3e:3d:88:c4:53:3e: 20:6d:cc:5c:87:bf:0e:42:1b:7a:56:06:b0:d6:e8:7c:15:a5: 11:e4:47:ff:8d:f9:6f:f5:b9:b7:ac:81:7d:d3:34:29:94:48: ba:00:ff:e6:f7:0c:bf:f5:db:8e:66:63:a6:72:6f:56:a8:79: 99:2c:52:7a:16:dc:42:9c:2d:51:f3:40:04:d5:f4:96:54:8a: 89:be:b4:ea:57:16:52:f0:45:3f:95:45:a5:2f:0d:31:57:33: 38:02:b2:2a:45:6b:04:82:a3:4b:4d:4a:2c:ec:89:eb:45:28: 08:84:29:97:77:81:c4:0c:99:58:08:1c:50:4c:9e:00:c2:c7: ab:61:84:62:da:9f:b2:ed:a0:cc:30:a5:a4:28:24:ca:aa:1a: 2f:02:da:cd:06:9f:96:79:7d:62:80:17:f3:c3:d2:5a:7f:4b: 01:f4:25:d9:b4:8b:11:4b:15:36:e9:65:bc:83:f8:48:0e:76: 7b:76:86:59:aa:db:70:8e:f7:7b:11:66:6c:35:0c:e0:0a:0b: 1b:fe:79:d0:fc:ea:19:7d:49:99:f8:91:b0:34:14:47:98:2e: f2:3b:fd:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wm3FE/SXHcXugIp08QJ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZGUxZDlkY2RiMjVjMWU1MzJjNWM5YjY5ZGZhNzU3ZTMw NjIxMGUwHhcNMjYwMTAxMTYxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWQzZjk0ZGMwYmJmMTM2YjRiZDA0MDE2YTIyZDFhZTc4M2IxYzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvldJSoMlf5HrkJJcrEhUFEFlXieA 7t6kUCAoer3spPYzJAQ8X2q+3zkrLXlS2Ignwu1bJwtxwNir/yvpxKOGjm9iMICM l6yu6NPAvypLoL0mzDApXe9EaBjWa9pUz6imoJvBmFHTjttev2Rdi4IJBudwuTkc 3haiolteNhZH52VNb74QuWQLLPRAu6Gzlcj4AgekXobiAtsHr6pNMX+zSGau5qM1 NUwpMOEo+MkF7H8kK63myNVxkagwARq3yCcihQ6e4p1huGULkAI5zpZ7f4UXmdOM wzl4/+Kn/GHmmvKX1J7V2xXjNZ7AYTvto43YSCw2OmhkWCwzQIbIaKuUzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA7T+U3Au/E2tL0EAWoi0a54OxwGMB8GA1UdIwQY MBaAFGbeHZ3NslweUyxcm2nfp1fjBiEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnQ0ZG5jMnlYQjVUTEZ5YmFkLW5WLU1HSVE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC82MGZjZmUtN2IyYy00NjcyLWJjMmYt NDA0Nzk4NzA5NzZlLzEvRHRQNVRjQzc4VGEwdlFRQmFpTFJybmc3SEFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC82MGZjZmUtN2IyYy00NjcyLWJjMmYtNDA0Nzk4NzA5NzZl LzEvWnQ0ZG5jMnlYQjVUTEZ5YmFkLW5WLU1HSVE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVXY0MA0G CSqGSIb3DQEBCwUAA4IBAQBTwyknaQ7St5LDAMMMs0LM1vsTqCFWVUe4gO9A4LI+ PYjEUz4gbcxch78OQht6Vgaw1uh8FaUR5Ef/jflv9bm3rIF90zQplEi6AP/m9wy/ 9duOZmOmcm9WqHmZLFJ6FtxCnC1R80AE1fSWVIqJvrTqVxZS8EU/lUWlLw0xVzM4 ArIqRWsEgqNLTUos7InrRSgIhCmXd4HEDJlYCBxQTJ4AwserYYRi2p+y7aDMMKWk KCTKqhovAtrNBp+WeX1igBfzw9Jaf0sB9CXZtIsRSxU26WW8g/hIDnZ7doZZqttw jvd7EWZsNQzgCgsb/nnQ/OoZfUmZ+JGwNBRHmC7yO/3h -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:38 2026 by rpki-client