This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/raYhTrbA7AoozsXURA3QDIX0YBc.roa File: raYhTrbA7AoozsXURA3QDIX0YBc.roa (raw, json) Hash identifier: B+Xtv54fCZUAtknXOZ9mXLkVpBJk+ZPCTEYDeFWV1/Y= Subject key identifier: AD:A6:21:4E:B6:C0:EC:0A:28:CE:C5:D4:44:0D:D0:0C:85:F4:60:17 Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89 Certificate serial: 019B7B36A1B04C1873D4C3FCDADB7DC044EB Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/raYhTrbA7AoozsXURA3QDIX0YBc.roa Signing time: Thu 01 Jan 2026 20:18:56 +0000 ROA not before: Thu 01 Jan 2026 20:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211826 IP address blocks: 85.203.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a1:b0:4c:18:73:d4:c3:fc:da:db:7d:c0:44:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89 Validity Not Before: Jan 1 20:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ada6214eb6c0ec0a28cec5d4440dd00c85f46017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:11:5b:ac:ca:ae:e5:b1:f2:35:78:99:ce:cb: c3:6c:f4:02:83:5d:80:e2:86:39:75:8a:0e:3b:cc: 6e:e2:0c:c8:96:8e:fc:c4:59:0b:4e:f3:a6:85:52: 1f:c9:22:65:78:24:b7:d1:7a:10:10:16:3d:34:73: d6:8b:57:11:aa:6d:f2:45:5a:fd:ef:73:48:4e:a8: ed:8e:3a:f6:1e:14:72:e6:2d:99:b4:f7:dd:48:08: 2d:bb:c6:de:1d:32:f2:7c:71:5a:b1:b1:08:77:40: 53:b2:b6:63:21:a5:15:4d:35:d5:95:40:ca:12:41: 03:be:64:ec:10:e8:06:2f:53:7b:b2:09:9a:e2:91: ff:75:d3:bb:db:7f:4d:73:8d:95:98:ab:d1:b2:fb: 8c:2b:8a:43:ff:ec:57:f6:70:6f:20:9f:a1:67:79: 30:ef:59:f1:0f:ce:9e:50:6d:ed:e1:3e:40:c9:ff: cf:6f:d9:bb:64:25:aa:bd:a9:35:99:6b:e7:e6:39: 7a:d6:29:c0:68:f1:6d:d8:2d:c9:40:e3:0e:88:5e: eb:80:5c:44:d5:46:e0:46:6c:68:6c:aa:88:57:cd: 9f:db:8c:bb:76:28:c0:21:26:29:3b:54:be:7d:f6: a3:e3:e6:44:e9:63:28:7e:5d:49:a6:b6:cd:22:bd: 16:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A6:21:4E:B6:C0:EC:0A:28:CE:C5:D4:44:0D:D0:0C:85:F4:60:17 X509v3 Authority Key Identifier: keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/raYhTrbA7AoozsXURA3QDIX0YBc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.203.33.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:76:1d:60:69:c6:86:10:9b:95:56:0e:03:b2:f0:90:69:20: 4b:9d:ca:9b:0c:20:22:8f:c6:69:91:5b:ec:cc:b9:0f:8d:86: 91:ea:65:5d:e7:b8:b8:3b:5e:4e:be:9d:90:cc:9b:37:03:e9: b6:6f:24:d2:9e:b0:00:9f:1d:0a:bc:31:9e:d3:a1:75:2d:42: f2:67:5c:af:cd:23:11:c8:b7:61:9a:3e:6e:0a:fb:33:3c:a1: 64:e2:70:50:62:33:13:a7:92:94:74:e4:a6:07:dc:cf:33:d2: 9e:ba:92:21:e5:e7:9e:50:f4:8a:cc:9d:0c:fc:e7:75:9d:53: bf:47:a3:ca:6a:0d:2d:9e:74:6c:cd:2c:df:f1:dc:da:40:25: c3:d8:60:f4:73:c3:9c:06:b4:f5:34:63:9f:8c:74:6a:9e:2b: 06:55:9d:82:db:77:a0:fa:2d:37:07:f4:b5:e3:fe:bb:da:a3: ae:a2:a1:88:82:84:42:7e:37:23:02:10:bd:7b:d8:02:0a:5e: 31:f5:92:df:bb:bf:5d:aa:37:54:aa:b8:e2:9e:6b:68:8e:32: c8:c3:59:93:71:60:29:20:3f:26:fb:0a:00:b3:77:9b:a7:1f: ce:bf:87:cf:02:59:57:67:4b:9d:27:cb:30:ca:c7:d9:6f:ec: 7a:75:61:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NqGwTBhz1MP82tt9wETrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MmJkNzZhNWNhYzI4M2VjZTBhMGY4ZWFiMmM5NzAyMTQw MWZiODkwHhcNMjYwMTAxMjAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGE2MjE0ZWI2YzBlYzBhMjhjZWM1ZDQ0NDBkZDAwYzg1ZjQ2MDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRFbrMqu5bHyNXiZzsvDbPQCg12A 4oY5dYoOO8xu4gzIlo78xFkLTvOmhVIfySJleCS30XoQEBY9NHPWi1cRqm3yRVr9 73NITqjtjjr2HhRy5i2ZtPfdSAgtu8beHTLyfHFasbEId0BTsrZjIaUVTTXVlUDK EkEDvmTsEOgGL1N7sgma4pH/ddO7239Nc42VmKvRsvuMK4pD/+xX9nBvIJ+hZ3kw 71nxD86eUG3t4T5Ayf/Pb9m7ZCWqvak1mWvn5jl61inAaPFt2C3JQOMOiF7rgFxE 1UbgRmxobKqIV82f24y7dijAISYpO1S+ffaj4+ZE6WMofl1JprbNIr0WrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK2mIU62wOwKKM7F1EQN0AyF9GAXMB8GA1UdIwQY MBaAFJYr12pcrCg+zgoPjqsslwIUAfuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMt NmFiMTExNTVmNmZiLzEvcmFZaFRyYkE3QW9venNYVVJBM1FESVgwWUJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMtNmFiMTExNTVmNmZi LzEvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVcshMA0G CSqGSIb3DQEBCwUAA4IBAQBKdh1gacaGEJuVVg4DsvCQaSBLncqbDCAij8ZpkVvs zLkPjYaR6mVd57i4O15Ovp2QzJs3A+m2byTSnrAAnx0KvDGe06F1LULyZ1yvzSMR yLdhmj5uCvszPKFk4nBQYjMTp5KUdOSmB9zPM9KeupIh5eeeUPSKzJ0M/Od1nVO/ R6PKag0tnnRszSzf8dzaQCXD2GD0c8OcBrT1NGOfjHRqnisGVZ2C23eg+i03B/S1 4/672qOuoqGIgoRCfjcjAhC9e9gCCl4x9ZLfu79dqjdUqrjinmtojjLIw1mTcWAp ID8m+woAs3ebpx/Ov4fPAllXZ0udJ8swysfZb+x6dWGV -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:20 2026 by rpki-client