This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/G1xUbhXs1xqYRhRVJ6UoOoEqdq8.roa File: G1xUbhXs1xqYRhRVJ6UoOoEqdq8.roa (raw, json) Hash identifier: 1ozCO+4IdqkAM4ne6P5LyE92ojPjy1PjKynZV5C8gyE= Subject key identifier: 1B:5C:54:6E:15:EC:D7:1A:98:46:14:55:27:A5:28:3A:81:2A:76:AF Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254 Certificate serial: 019B7910A9B4830DD1661BC4BC1F13B7062B Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/G1xUbhXs1xqYRhRVJ6UoOoEqdq8.roa Signing time: Thu 01 Jan 2026 10:18:13 +0000 ROA not before: Thu 01 Jan 2026 10:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25147 IP address blocks: 85.11.144.0/24 maxlen: 24 85.11.145.0/24 maxlen: 24 85.11.146.0/24 maxlen: 24 85.11.147.0/24 maxlen: 24 85.11.148.0/24 maxlen: 24 85.11.149.0/24 maxlen: 24 85.11.150.0/24 maxlen: 24 85.11.151.0/24 maxlen: 24 85.11.156.0/24 maxlen: 24 85.11.157.0/24 maxlen: 24 85.11.158.0/24 maxlen: 24 85.11.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a9:b4:83:0d:d1:66:1b:c4:bc:1f:13:b7:06:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254 Validity Not Before: Jan 1 10:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b5c546e15ecd71a9846145527a5283a812a76af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:42:91:ca:b2:54:1d:89:ba:e0:e4:79:c9:84: a9:3c:9e:04:a6:0d:b0:51:7e:4a:19:13:af:04:5d: 77:2b:fc:0d:80:4a:77:30:82:ae:d5:d4:2a:2a:52: ea:53:87:2b:96:67:d7:ad:5e:b7:cc:79:67:20:71: 89:b9:9b:a7:ff:fd:49:9e:26:f4:77:23:75:8f:75: f1:db:2a:dd:e0:0a:58:cc:b2:e9:9c:d6:0d:fa:b4: bb:71:0b:5a:ae:43:cd:e0:af:3d:51:e4:e3:f7:26: a2:69:27:82:62:64:60:68:8f:79:af:4c:1f:0e:61: eb:a5:bf:7b:80:4b:11:27:4a:d8:81:b9:b9:3e:8f: 83:12:bc:18:a6:3a:2b:00:04:67:ea:95:0c:37:da: 1a:95:9e:24:a6:e1:da:0a:d0:5b:ae:c3:39:60:5c: 43:f0:5b:cb:d9:dd:d5:e4:4a:23:af:26:f1:8b:7b: 90:04:bb:81:62:6c:de:3c:ec:de:cf:00:5e:e0:22: 14:08:53:5d:1b:03:90:97:b9:fe:77:21:ed:62:b8: 0e:f8:24:62:5a:0f:0d:92:02:29:61:bc:b2:69:fa: 39:89:ee:29:7c:7c:08:d3:1b:ce:82:c4:9d:1b:f6: e9:33:8e:8f:35:e5:8f:d0:ed:11:b0:71:f9:c7:73: 13:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:5C:54:6E:15:EC:D7:1A:98:46:14:55:27:A5:28:3A:81:2A:76:AF X509v3 Authority Key Identifier: keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/G1xUbhXs1xqYRhRVJ6UoOoEqdq8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.11.144.0/21 85.11.156.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:43:b9:dc:d9:c8:bd:fd:e6:a2:2b:1d:f2:6b:e6:da:49:46: 40:d2:7a:c0:1b:f8:d9:de:4f:a1:5f:a5:a0:6f:a9:c0:2b:eb: 06:f6:1b:33:2b:17:f1:11:51:c4:16:0e:eb:c2:71:a0:65:cd: 43:d3:af:13:44:d3:bc:6d:1c:cf:b2:f0:94:9a:ac:74:b1:44: fb:1e:a9:88:01:84:25:6b:3b:7e:44:e2:ed:83:41:52:52:b1: 68:b4:12:12:22:e3:f8:4a:44:03:0e:9a:1f:30:1e:c6:ef:04: e1:c3:fb:9f:45:76:4b:a2:73:ce:0d:07:12:5c:20:ec:2f:7d: f6:79:1d:3b:89:04:09:86:62:43:0f:6f:9f:1d:02:90:1b:76: 59:f5:74:f8:67:1d:f7:6e:f3:6e:03:12:f9:e5:3e:a2:04:21: 20:ae:92:53:73:80:26:c5:06:0f:3a:77:1f:e3:95:db:09:50: d9:83:8a:32:be:dc:f6:5d:78:31:01:23:82:dc:a6:9c:61:b8: a8:0e:85:26:3a:8d:9c:94:ef:d1:f8:be:0b:71:aa:30:2e:73: 12:05:e7:f3:32:e5:0e:78:35:8a:87:8f:3f:54:7f:a9:53:2b: 71:6b:79:dd:f5:94:c9:e4:c9:52:5c:4f:a0:4e:2e:32:0d:46: 15:f3:87:99 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EKm0gw3RZhvEvB8TtwYrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NzVkNTE5ZGUyMzljZjE2NGNiOTRhNjY2MGMyNTMwY2Vh ZWYyNTQwHhcNMjYwMTAxMTAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjVjNTQ2ZTE1ZWNkNzFhOTg0NjE0NTUyN2E1MjgzYTgxMmE3NmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEKRyrJUHYm64OR5yYSpPJ4Epg2w UX5KGROvBF13K/wNgEp3MIKu1dQqKlLqU4crlmfXrV63zHlnIHGJuZun//1Jnib0 dyN1j3Xx2yrd4ApYzLLpnNYN+rS7cQtarkPN4K89UeTj9yaiaSeCYmRgaI95r0wf DmHrpb97gEsRJ0rYgbm5Po+DErwYpjorAARn6pUMN9oalZ4kpuHaCtBbrsM5YFxD 8FvL2d3V5Eojrybxi3uQBLuBYmzePOzezwBe4CIUCFNdGwOQl7n+dyHtYrgO+CRi Wg8NkgIpYbyyafo5ie4pfHwI0xvOgsSdG/bpM46PNeWP0O0RsHH5x3MTLwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBtcVG4V7NcamEYUVSelKDqBKnavMB8GA1UdIwQY MBaAFFl11RneI5zxZMuUpmYMJTDOrvJUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUt MmNjNjc1NzI2OTc1LzEvRzF4VWJoWHMxeHFZUmhSVko2VW9Pb0VxZHE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUtMmNjNjc1NzI2OTc1 LzEvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDVQuQAwQC VQucMA0GCSqGSIb3DQEBCwUAA4IBAQAfQ7nc2ci9/eaiKx3ya+baSUZA0nrAG/jZ 3k+hX6Wgb6nAK+sG9hszKxfxEVHEFg7rwnGgZc1D068TRNO8bRzPsvCUmqx0sUT7 HqmIAYQlazt+ROLtg0FSUrFotBISIuP4SkQDDpofMB7G7wThw/ufRXZLonPODQcS XCDsL332eR07iQQJhmJDD2+fHQKQG3ZZ9XT4Zx33bvNuAxL55T6iBCEgrpJTc4Am xQYPOncf45XbCVDZg4oyvtz2XXgxASOC3KacYbioDoUmOo2clO/R+L4LcaowLnMS BefzMuUOeDWKh48/VH+pUytxa3nd9ZTJ5MlSXE+gTi4yDUYV84eZ -----END CERTIFICATE-----Generated at Sun Jan 25 08:55:36 2026 by rpki-client