This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/sDSYBkXJWK2xyzxkqQteu6-u-eo.roa File: sDSYBkXJWK2xyzxkqQteu6-u-eo.roa (raw, json) Hash identifier: VstIcaANAedHQFTafvIFiBfqRGDPpLct1G18z1nwccI= Subject key identifier: B0:34:98:06:45:C9:58:AD:B1:CB:3C:64:A9:0B:5E:BB:AF:AE:F9:EA Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B77593F34F8CC63C09A8F75D3BCFC95EA Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/sDSYBkXJWK2xyzxkqQteu6-u-eo.roa Signing time: Thu 01 Jan 2026 02:18:16 +0000 ROA not before: Thu 01 Jan 2026 02:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12442 IP address blocks: 85.204.233.0/24 maxlen: 24 188.240.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:3f:34:f8:cc:63:c0:9a:8f:75:d3:bc:fc:95:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b034980645c958adb1cb3c64a90b5ebbafaef9ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:24:67:09:1f:44:81:3a:0d:c3:c9:87:65:c7: 9e:b8:d6:05:17:15:69:b8:1b:b7:9c:ce:29:cf:07: 66:68:30:c7:09:21:df:c1:f6:5b:50:87:64:fa:a1: fb:4a:1b:7d:17:43:25:ad:ed:33:94:a4:17:90:e2: f1:39:18:29:6d:44:12:66:5e:18:f4:d9:93:82:91: 1a:a5:47:55:5f:44:b5:64:3c:10:9c:1f:76:f7:e6: c2:36:bc:6b:86:a8:b9:dc:b9:4c:ca:dd:f7:b8:85: 0f:2d:04:cb:bf:e3:90:ba:eb:1a:15:09:03:f1:aa: ff:98:aa:f4:12:87:88:cc:6f:c7:d9:9b:88:02:34: 84:9f:69:ef:48:2a:c4:2a:4c:54:56:e4:e1:97:01: f4:ed:0b:5e:6b:c7:e5:10:57:ac:9b:cb:a5:a4:74: bb:0b:d4:35:f5:6e:51:0f:24:06:f7:25:32:f3:39: 81:5a:f0:44:9e:77:13:eb:c0:e9:fa:ed:00:d5:74: 2c:97:fd:bb:0e:5e:c0:a5:12:31:bc:f2:aa:d4:2f: bf:2d:30:80:40:ec:e4:9c:f2:a9:cf:ae:a7:9f:0e: c5:6e:71:c8:d4:aa:22:e8:f5:74:53:53:95:cc:f9: 97:11:93:7a:f3:ec:48:cd:cf:6d:8c:e6:af:c5:02: e7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:34:98:06:45:C9:58:AD:B1:CB:3C:64:A9:0B:5E:BB:AF:AE:F9:EA X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/sDSYBkXJWK2xyzxkqQteu6-u-eo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.204.233.0/24 188.240.240.0/21 Signature Algorithm: sha256WithRSAEncryption c7:1a:9c:f1:29:67:9b:e0:3f:61:2c:e7:b7:cc:af:b9:24:70: 56:08:05:70:17:73:54:f0:5c:1e:6c:97:a6:9e:c3:cb:9e:37: 2d:90:70:3e:b9:69:dd:80:19:b7:f6:65:9d:04:23:9c:96:99: d8:f1:90:c6:46:29:c8:24:7f:e6:77:9e:fb:3e:87:b7:0f:3d: 87:a6:ed:9b:77:27:7a:c2:59:91:4c:19:f3:39:da:ca:6e:9a: d2:d6:32:e2:c0:dc:ca:f1:0d:56:c3:d7:e1:62:f1:0b:a8:d2: 8d:87:8f:81:0f:ff:07:e0:50:91:2f:12:4c:44:17:16:cf:84: e6:b7:bf:d4:ba:e6:f0:5e:38:92:47:86:14:cb:42:42:a6:9e: 2a:81:04:bb:dd:51:b6:89:79:6a:20:7e:89:b0:87:67:36:50: 56:24:e9:d8:26:a1:0a:c1:8e:0c:f6:8d:ac:19:70:da:67:e1: 92:05:1a:cd:09:ad:e4:23:3c:4e:61:b9:b5:bb:4e:75:8d:36: 3e:7a:02:58:c6:cf:cb:da:61:51:07:91:0b:1b:54:96:f6:4e: b5:d4:e8:26:16:4b:be:aa:20:bc:f1:dc:b1:76:b5:c1:65:0d: 51:23:27:09:6e:ae:92:b1:32:30:7b:3c:93:76:7a:4a:33:2e: 52:dd:96:50 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3WT80+MxjwJqPddO8/JXqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDM0OTgwNjQ1Yzk1OGFkYjFjYjNjNjRhOTBiNWViYmFmYWVmOWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SRnCR9EgToNw8mHZceeuNYFFxVp uBu3nM4pzwdmaDDHCSHfwfZbUIdk+qH7Sht9F0Mlre0zlKQXkOLxORgpbUQSZl4Y 9NmTgpEapUdVX0S1ZDwQnB929+bCNrxrhqi53LlMyt33uIUPLQTLv+OQuusaFQkD 8ar/mKr0EoeIzG/H2ZuIAjSEn2nvSCrEKkxUVuThlwH07Qtea8flEFesm8ulpHS7 C9Q19W5RDyQG9yUy8zmBWvBEnncT68Dp+u0A1XQsl/27Dl7ApRIxvPKq1C+/LTCA QOzknPKpz66nnw7FbnHI1Koi6PV0U1OVzPmXEZN68+xIzc9tjOavxQLnswIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLA0mAZFyVitscs8ZKkLXruvrvnqMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL3NEU1lCa1hKV0syeHl6eGtxUXRldTYtdS1lby5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABVzOkD BAO88PAwDQYJKoZIhvcNAQELBQADggEBAMcanPEpZ5vgP2Es57fMr7kkcFYIBXAX c1TwXB5sl6aew8ueNy2QcD65ad2AGbf2ZZ0EI5yWmdjxkMZGKcgkf+Z3nvs+h7cP PYem7Zt3J3rCWZFMGfM52spumtLWMuLA3MrxDVbD1+Fi8Quo0o2Hj4EP/wfgUJEv EkxEFxbPhOa3v9S65vBeOJJHhhTLQkKmniqBBLvdUbaJeWogfomwh2c2UFYk6dgm oQrBjgz2jawZcNpn4ZIFGs0JreQjPE5hubW7TnWNNj56AljGz8vaYVEHkQsbVJb2 TrXU6CYWS76qILzx3LF2tcFlDVEjJwlurpKxMjB7PJN2ekozLlLdllA= -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:37 2026 by rpki-client