This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/934_D2624JIRUsZNBmmDTwpOWXo.roa File: 934_D2624JIRUsZNBmmDTwpOWXo.roa (raw, json) Hash identifier: FiP3d7XAuc29ocbFIBjW+4Kw4lfkwQpzO2BLBNwTB5I= Subject key identifier: F7:7E:3F:0F:6E:B6:E0:92:11:52:C6:4D:06:69:83:4F:0A:4E:59:7A Certificate issuer: /CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce Certificate serial: 019B7911261135AFD1EE01A2F886BF4FC26F Authority key identifier: FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/934_D2624JIRUsZNBmmDTwpOWXo.roa Signing time: Thu 01 Jan 2026 10:18:45 +0000 ROA not before: Thu 01 Jan 2026 10:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2116 IP address blocks: 85.194.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:26:11:35:af:d1:ee:01:a2:f8:86:bf:4f:c2:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce Validity Not Before: Jan 1 10:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f77e3f0f6eb6e0921152c64d0669834f0a4e597a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:90:b6:41:2c:08:35:fd:22:c8:18:ae:b6:6e: f0:29:d0:ec:e5:40:09:ef:30:b6:52:7e:77:91:ef: e3:e2:dc:af:68:53:84:1e:c0:e9:5f:bf:b7:3e:54: 69:2e:a8:2d:28:22:3d:45:b2:3e:3a:8f:6e:a3:77: 56:1f:1d:59:da:6a:31:09:57:38:ac:68:d5:f5:50: 46:33:f0:f5:ae:90:8b:2f:dd:34:f8:1c:da:30:d9: 23:bb:b3:7f:09:95:38:2e:ca:4a:f0:ce:e7:70:7f: 40:38:14:5d:8b:3c:d2:5e:62:43:3c:63:a0:b7:cd: d2:a3:fd:b6:99:5b:f5:36:b0:9d:a1:b9:6d:71:27: 8e:37:fd:2f:d9:dc:10:b0:39:f8:0c:55:06:c5:73: 36:08:88:4a:b4:87:8d:83:a1:3c:6b:40:c8:88:8a: b6:4c:ad:12:6d:6e:89:0b:82:82:d9:c3:a5:cf:6a: 35:45:7a:f1:3b:9c:a0:15:99:3a:1b:ef:3c:49:06: ae:9a:03:92:dc:06:bf:01:0d:2e:76:3c:9b:55:69: e3:e0:06:40:d8:d5:22:1d:f2:16:c0:98:49:c6:08: 09:b2:a7:9e:8d:61:84:81:29:55:af:27:ce:9a:df: 59:31:8e:ec:25:0f:b7:93:9f:48:a7:a5:8c:12:a6: d5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:7E:3F:0F:6E:B6:E0:92:11:52:C6:4D:06:69:83:4F:0A:4E:59:7A X509v3 Authority Key Identifier: keyid:FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/934_D2624JIRUsZNBmmDTwpOWXo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.194.254.0/23 Signature Algorithm: sha256WithRSAEncryption 60:56:cf:87:36:b5:bd:c0:f4:35:2d:7c:3d:37:5f:09:c1:b8: 7f:55:3e:d1:1b:48:72:cb:28:a1:d3:df:35:71:79:6f:46:f0: 2d:29:cb:ad:66:7d:69:70:25:8f:e9:95:88:1e:4e:19:79:79: b6:eb:55:1a:42:be:9e:70:43:67:36:0f:6d:ef:1b:4f:da:6e: 9e:d2:fe:c4:d3:68:1a:64:38:78:37:81:8f:fa:d8:76:c3:97: 83:50:96:c1:f4:f8:87:59:c3:1c:c4:b6:a2:21:61:18:e0:81: 08:ea:65:98:e3:41:b6:9b:32:6c:14:8d:af:fc:b1:6d:1c:58: a0:17:73:f2:49:37:f8:ed:80:00:b1:f0:e1:7f:df:d9:c3:75: 3f:70:fb:98:93:2c:f6:64:73:11:36:ef:06:2a:9e:b7:70:4a: 6d:d3:22:05:58:71:4c:b1:08:c1:7d:ab:e9:25:5b:55:83:4c: a4:61:90:85:97:0d:0b:a6:f9:d1:99:1b:b3:0a:51:58:2a:0d: 47:b7:0e:9d:53:04:f0:d6:cf:dc:b7:28:4c:41:f2:c3:47:77: ca:f8:72:04:e6:a3:ae:8f:b9:27:e6:e9:fb:f5:1b:45:11:a8: 11:d5:57:91:e3:b0:33:e9:80:a8:df:b1:e0:87:08:dd:d5:61: 3a:23:96:c8 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5ESYRNa/R7gGi+Ia/T8JvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMjM2YjIxM2Q1NjQ5M2YzYjA3N2U2YjQxZjQyZTRmM2Rm OGNkY2UwHhcNMjYwMTAxMTAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzdlM2YwZjZlYjZlMDkyMTE1MmM2NGQwNjY5ODM0ZjBhNGU1OTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJC2QSwINf0iyBiutm7wKdDs5UAJ 7zC2Un53ke/j4tyvaFOEHsDpX7+3PlRpLqgtKCI9RbI+Oo9uo3dWHx1Z2moxCVc4 rGjV9VBGM/D1rpCLL900+BzaMNkju7N/CZU4LspK8M7ncH9AOBRdizzSXmJDPGOg t83So/22mVv1NrCdobltcSeON/0v2dwQsDn4DFUGxXM2CIhKtIeNg6E8a0DIiIq2 TK0SbW6JC4KC2cOlz2o1RXrxO5ygFZk6G+88SQaumgOS3Aa/AQ0udjybVWnj4AZA 2NUiHfIWwJhJxggJsqeejWGEgSlVryfOmt9ZMY7sJQ+3k59Ip6WMEqbVKwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPd+Pw9utuCSEVLGTQZpg08KTll6MB8GA1UdIwQY MBaAFPsjayE9Vkk/Owd+a0H0Lk89+M3OMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS15TnJJVDFXU1Q4N0IzNXJRZlF1VHozNHpjNC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvMjBmNGFjLTgwZDktNDBlMi1hOWU2 LTFjODhlZWJlYjI5My8xLzkzNF9EMjYyNEpJUlVzWk5CbW1EVHdwT1dYby5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODUvMjBmNGFjLTgwZDktNDBlMi1hOWU2LTFjODhlZWJlYjI5 My8xLzEteU5ySVQxV1NUODdCMzVyUWZRdVR6MzR6YzQuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFVwv4w DQYJKoZIhvcNAQELBQADggEBAGBWz4c2tb3A9DUtfD03XwnBuH9VPtEbSHLLKKHT 3zVxeW9G8C0py61mfWlwJY/plYgeThl5ebbrVRpCvp5wQ2c2D23vG0/abp7S/sTT aBpkOHg3gY/62HbDl4NQlsH0+IdZwxzEtqIhYRjggQjqZZjjQbabMmwUja/8sW0c WKAXc/JJN/jtgACx8OF/39nDdT9w+5iTLPZkcxE27wYqnrdwSm3TIgVYcUyxCMF9 q+klW1WDTKRhkIWXDQum+dGZG7MKUVgqDUe3Dp1TBPDWz9y3KExB8sNHd8r4cgTm o66PuSfm6fv1G0URqBHVV5HjsDPpgKjfseCHCN3VYTojlsg= -----END CERTIFICATE-----Generated at Sun Jan 25 15:00:56 2026 by rpki-client