This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/g3ecyqqZSPjg-6ccrLkDwCQkrnQ.roa File: g3ecyqqZSPjg-6ccrLkDwCQkrnQ.roa (raw, json) Hash identifier: SV51OkrNOpOVdTqiKqHM9Ro93TRFuichJHgxteFHtRM= Subject key identifier: 83:77:9C:CA:AA:99:48:F8:E0:FB:A7:1C:AC:B9:03:C0:24:24:AE:74 Certificate issuer: /CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018 Certificate serial: 019B77C6F503DC37F0DE530C432B9F67383F Authority key identifier: 4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/g3ecyqqZSPjg-6ccrLkDwCQkrnQ.roa Signing time: Thu 01 Jan 2026 04:18:06 +0000 ROA not before: Thu 01 Jan 2026 04:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50538 IP address blocks: 85.234.108.0/24 maxlen: 24 85.234.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f5:03:dc:37:f0:de:53:0c:43:2b:9f:67:38:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018 Validity Not Before: Jan 1 04:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83779ccaaa9948f8e0fba71cacb903c02424ae74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:74:60:45:87:88:65:d1:cd:3f:30:f8:d3:16: 26:4f:39:cb:5a:26:df:dc:58:45:a5:e3:73:87:65: f8:af:cd:ee:45:57:ea:35:71:d2:e5:72:d1:b6:3f: 36:f4:06:c8:8e:76:2c:8a:74:f9:d1:6e:f2:b0:14: 2a:01:af:b5:d0:d8:0e:1a:a6:c5:d5:15:6b:c5:53: 8c:e8:67:9f:b1:8e:06:bd:ba:a1:0e:e1:31:9f:04: da:90:16:c0:b9:e2:89:fb:c7:89:96:48:88:d6:7b: e4:2a:4c:06:1d:d0:ef:2b:57:19:aa:80:a9:87:d2: f2:fe:6e:07:6d:50:e6:b7:aa:68:81:53:ae:ef:b3: 16:0a:98:82:f0:a3:eb:70:18:86:09:49:85:29:d3: 97:a4:d3:61:9a:a4:53:7c:70:a9:4d:c2:c2:2d:30: bc:48:31:07:97:42:80:58:b0:12:06:a4:7d:4f:db: 81:55:61:64:35:92:84:61:57:95:74:d0:81:18:59: 1b:8f:d0:fe:98:5b:89:50:ce:d9:e4:de:4b:0b:52: fb:aa:dc:c7:bb:2b:3c:71:aa:ae:32:83:89:4f:12: d0:8c:5d:fc:81:53:ae:74:08:ce:c2:05:e9:27:55: 0f:3b:a3:a1:0f:ae:38:6d:ec:11:1d:ad:24:7d:a3: 57:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:77:9C:CA:AA:99:48:F8:E0:FB:A7:1C:AC:B9:03:C0:24:24:AE:74 X509v3 Authority Key Identifier: keyid:4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/g3ecyqqZSPjg-6ccrLkDwCQkrnQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.234.108.0/23 Signature Algorithm: sha256WithRSAEncryption 77:36:49:a9:3c:56:d2:25:0a:d0:54:c8:72:30:88:63:c6:3f: 67:61:95:40:07:d5:ea:6f:8c:c6:fe:75:66:18:5b:5c:a6:d2: 2a:02:19:ee:bb:9f:b6:ec:21:42:eb:0d:47:06:fe:62:e9:31: 75:3d:c7:e1:4d:9d:cb:fe:14:e7:99:de:27:95:19:f6:1b:b9: 4c:a8:f4:f6:96:6b:a3:83:63:01:03:11:2b:ec:b4:40:6e:6e: 05:aa:c4:fd:96:47:fc:52:f7:88:2e:04:87:0a:92:9a:19:c8: 84:fd:04:16:cb:53:9c:fe:05:5e:2e:46:4e:1f:1d:ca:cc:43: 6e:3f:d1:ec:82:db:b0:46:a6:aa:56:50:9d:fe:14:14:58:24: f9:63:38:42:9f:a2:bb:25:3f:ea:c9:d3:a9:fd:70:4a:f8:8a: 8d:da:c4:43:65:a8:08:c7:be:1a:a8:22:72:65:29:8f:b2:03: f6:a5:d5:c5:e3:c8:12:98:6f:3e:f0:5b:ea:72:be:5b:91:1c: 2c:29:be:5c:14:c1:bd:5a:c2:78:dc:c1:57:44:0d:7d:d9:2f: 1b:28:db:6a:06:dd:25:9b:cd:f1:16:86:81:1a:8b:99:48:49: b2:0b:59:09:81:00:35:fc:49:75:3a:e2:6c:2d:61:3a:49:e9: 86:e3:6f:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xvUD3Dfw3lMMQyufZzg/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMmI4OWMzYzU3YTNlMjk2YWE0MDYxZTk2Mjg0MGJlN2Fl OGYwMTgwHhcNMjYwMTAxMDQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Mzc3OWNjYWFhOTk0OGY4ZTBmYmE3MWNhY2I5MDNjMDI0MjRhZTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinRgRYeIZdHNPzD40xYmTznLWibf 3FhFpeNzh2X4r83uRVfqNXHS5XLRtj829AbIjnYsinT50W7ysBQqAa+10NgOGqbF 1RVrxVOM6GefsY4GvbqhDuExnwTakBbAueKJ+8eJlkiI1nvkKkwGHdDvK1cZqoCp h9Ly/m4HbVDmt6pogVOu77MWCpiC8KPrcBiGCUmFKdOXpNNhmqRTfHCpTcLCLTC8 SDEHl0KAWLASBqR9T9uBVWFkNZKEYVeVdNCBGFkbj9D+mFuJUM7Z5N5LC1L7qtzH uys8caquMoOJTxLQjF38gVOudAjOwgXpJ1UPO6OhD644bewRHa0kfaNXYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIN3nMqqmUj44PunHKy5A8AkJK50MB8GA1UdIwQY MBaAFEwricPFej4paqQGHpYoQL566PAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEN1Snc4VjZQaWxxcEFZZWxpaEF2bnJvOEJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83MjE1NWEtZDEwOS00YzJkLWI5NzQt MTEyOGU1Y2U2YTViLzEvZzNlY3lxcVpTUGpnLTZjY3JMa0R3Q1Frcm5RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni83MjE1NWEtZDEwOS00YzJkLWI5NzQtMTEyOGU1Y2U2YTVi LzEvVEN1Snc4VjZQaWxxcEFZZWxpaEF2bnJvOEJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVepsMA0G CSqGSIb3DQEBCwUAA4IBAQB3NkmpPFbSJQrQVMhyMIhjxj9nYZVAB9Xqb4zG/nVm GFtcptIqAhnuu5+27CFC6w1HBv5i6TF1PcfhTZ3L/hTnmd4nlRn2G7lMqPT2lmuj g2MBAxEr7LRAbm4FqsT9lkf8UveILgSHCpKaGciE/QQWy1Oc/gVeLkZOHx3KzENu P9HsgtuwRqaqVlCd/hQUWCT5YzhCn6K7JT/qydOp/XBK+IqN2sRDZagIx74aqCJy ZSmPsgP2pdXF48gSmG8+8Fvqcr5bkRwsKb5cFMG9WsJ43MFXRA192S8bKNtqBt0l m83xFoaBGouZSEmyC1kJgQA1/El1OuJsLWE6SemG42+5 -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:03 2026 by rpki-client