This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/bO5I6Yv7sgCNeBkvy1Oe_N3orfw.roa File: bO5I6Yv7sgCNeBkvy1Oe_N3orfw.roa (raw, json) Hash identifier: fQ8Du4wuonrOz5G52PVVtcVJUJHy6H8iT6TyJbF1Vwc= Subject key identifier: 6C:EE:48:E9:8B:FB:B2:00:8D:78:19:2F:CB:53:9E:FC:DD:E8:AD:FC Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F847A3EE732C01FE607234616D8E9B4 Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/bO5I6Yv7sgCNeBkvy1Oe_N3orfw.roa Signing time: Fri 02 Jan 2026 16:22:27 +0000 ROA not before: Fri 02 Jan 2026 16:22:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211996 IP address blocks: 85.153.135.0/24 maxlen: 24 85.153.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:7a:3e:e7:32:c0:1f:e6:07:23:46:16:d8:e9:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cee48e98bfbb2008d78192fcb539efcdde8adfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c6:78:10:0b:7f:70:79:83:bb:ca:a5:a5:5c: e8:1b:76:f0:63:28:54:54:8f:7a:e6:62:26:ad:fb: 64:82:a2:2d:61:a2:88:76:9a:7c:97:ac:09:67:eb: 4c:50:08:90:52:81:e8:ac:09:35:ef:23:43:e8:4a: 7e:95:06:20:ae:ab:59:0c:28:16:f7:ab:7b:9f:f8: d6:b9:3c:99:56:8c:d6:53:b8:fa:69:ab:54:c5:3c: cf:0d:38:d9:2e:28:73:df:55:01:a6:7b:18:de:d3: a6:ed:23:09:41:69:a1:8c:c5:7e:6e:6d:06:67:c4: e0:5d:54:44:76:ee:80:dd:a8:e0:5d:99:0f:f7:0f: 1d:73:19:fc:59:6e:53:93:94:46:a4:d9:b3:b1:67: db:02:59:a9:3b:dd:81:4c:64:0d:15:88:9d:9a:5d: 77:c9:66:82:a4:b1:e6:58:8b:86:15:0e:d4:56:1d: a4:75:db:72:f6:cc:99:4f:d5:90:73:92:6f:dd:ae: 8d:a0:e6:b5:df:3a:c3:48:e9:03:23:49:ae:51:43: d2:08:f7:bc:bb:9e:00:f5:18:d0:e9:6c:46:34:9c: f6:f9:a6:a2:06:47:f1:3f:51:b0:4c:aa:30:30:93: 3b:5b:83:b6:54:35:1b:81:45:dc:f5:ab:cc:91:b0: 9b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:EE:48:E9:8B:FB:B2:00:8D:78:19:2F:CB:53:9E:FC:DD:E8:AD:FC X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/bO5I6Yv7sgCNeBkvy1Oe_N3orfw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.153.135.0/24 85.153.140.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:2f:dd:04:e2:87:e4:c5:3d:86:87:14:20:d9:5e:77:d2:89: a2:5b:8a:e4:b1:d1:20:08:3f:e8:58:e3:4f:f4:67:67:6d:cc: a1:71:1b:9b:7f:ee:c8:fa:7b:39:71:1c:21:97:40:97:6c:27: 4d:56:ce:d3:8f:aa:a8:cd:fb:ed:4b:02:d7:bd:dd:e5:d0:aa: cc:f2:e0:a4:a4:47:f6:0c:28:ff:d5:1c:8e:b7:47:a4:bd:5b: 23:f4:82:54:72:66:28:51:9e:37:98:74:79:ff:18:6c:4f:6a: 61:91:58:07:53:82:34:c1:6f:bb:84:af:50:f6:ca:40:1b:f1: 58:a2:af:bf:b7:9f:57:c3:a3:18:4b:d4:8d:09:42:eb:b1:e6: d3:17:dc:38:48:9f:23:94:d9:45:43:0a:7b:98:cb:67:d1:e7: fd:bb:38:ee:ce:a1:32:49:d6:d4:02:ca:86:ee:3b:6f:87:bc: 6e:cf:dc:2d:57:5e:20:31:40:d9:8a:68:be:d8:7e:ff:84:4b: 4e:b3:cd:b3:a3:45:cd:d8:c3:23:05:0c:db:e0:9c:2d:bd:81: d9:50:09:27:ae:02:e6:71:a5:ae:c6:df:cd:fa:30:bf:90:7c: 41:9a:be:ec:05:55:9d:c3:f3:b3:2e:94:83:3d:1c:9b:d9:19: 4b:4e:5f:04 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hHo+5zLAH+YHI0YW2Om0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2VlNDhlOThiZmJiMjAwOGQ3ODE5MmZjYjUzOWVmY2RkZThhZGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8Z4EAt/cHmDu8qlpVzoG3bwYyhU VI965mImrftkgqItYaKIdpp8l6wJZ+tMUAiQUoHorAk17yND6Ep+lQYgrqtZDCgW 96t7n/jWuTyZVozWU7j6aatUxTzPDTjZLihz31UBpnsY3tOm7SMJQWmhjMV+bm0G Z8TgXVREdu6A3ajgXZkP9w8dcxn8WW5Tk5RGpNmzsWfbAlmpO92BTGQNFYidml13 yWaCpLHmWIuGFQ7UVh2kddty9syZT9WQc5Jv3a6NoOa13zrDSOkDI0muUUPSCPe8 u54A9RjQ6WxGNJz2+aaiBkfxP1GwTKowMJM7W4O2VDUbgUXc9avMkbCbZQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGzuSOmL+7IAjXgZL8tTnvzd6K38MB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvYk81STZZdjdzZ0NOZUJrdnkxT2VfTjNvcmZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVZmHAwQA VZmMMA0GCSqGSIb3DQEBCwUAA4IBAQBKL90E4ofkxT2GhxQg2V530omiW4rksdEg CD/oWONP9GdnbcyhcRubf+7I+ns5cRwhl0CXbCdNVs7Tj6qozfvtSwLXvd3l0KrM 8uCkpEf2DCj/1RyOt0ekvVsj9IJUcmYoUZ43mHR5/xhsT2phkVgHU4I0wW+7hK9Q 9spAG/FYoq+/t59Xw6MYS9SNCULrsebTF9w4SJ8jlNlFQwp7mMtn0ef9uzjuzqEy SdbUAsqG7jtvh7xuz9wtV14gMUDZimi+2H7/hEtOs82zo0XN2MMjBQzb4JwtvYHZ UAknrgLmcaWuxt/N+jC/kHxBmr7sBVWdw/OzLpSDPRyb2RlLTl8E -----END CERTIFICATE-----Generated at Sun Jan 25 19:20:12 2026 by rpki-client