This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/pxkX6Yph9uy4iGqYcnxkhKdhohQ.roa File: pxkX6Yph9uy4iGqYcnxkhKdhohQ.roa (raw, json) Hash identifier: bifJOe/IS/0GcT2Z9iDNC5IwmSgJXexqKx52FOV+q98= Subject key identifier: A7:19:17:E9:8A:61:F6:EC:B8:88:6A:98:72:7C:64:84:A7:61:A2:14 Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Certificate serial: 019B79EBC13E5B9C34080E1B734C8F2292D0 Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/pxkX6Yph9uy4iGqYcnxkhKdhohQ.roa Signing time: Thu 01 Jan 2026 14:17:32 +0000 ROA not before: Thu 01 Jan 2026 14:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39346 IP address blocks: 85.204.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:c1:3e:5b:9c:34:08:0e:1b:73:4c:8f:22:92:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Validity Not Before: Jan 1 14:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a71917e98a61f6ecb8886a98727c6484a761a214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:64:14:16:41:94:81:d1:01:00:ec:2a:a8:6f: 49:ad:36:b1:f4:0b:a7:36:99:84:5d:0a:f5:92:b0: 26:73:07:84:4b:52:4b:02:e2:ad:26:d5:c4:e4:38: 8d:66:3e:7a:80:5a:13:86:d8:69:fa:4d:c2:d3:23: 23:ca:34:46:24:66:37:bd:5e:55:8f:24:bb:2f:f8: a4:42:42:e6:3e:ad:31:2e:a2:92:68:7e:b0:de:93: 6d:e8:d8:8f:a0:f9:d1:7c:b7:50:89:5c:bc:60:2f: d3:ef:c5:26:cf:b0:98:7b:c9:c5:27:95:2f:43:90: f5:a7:fc:3b:4a:92:91:99:c2:2e:a5:04:d8:bf:5b: 7d:a3:64:d2:88:49:5a:46:8a:a3:d1:07:61:5e:fd: f7:89:c7:49:bd:06:c1:d3:2b:77:f8:ef:34:dd:34: 4c:41:34:09:50:5e:8b:b3:29:55:df:31:02:d9:e0: 9b:17:db:50:22:83:40:40:24:f7:28:f0:b2:1a:6d: 96:05:f7:ef:8a:b9:0f:08:f3:6c:c2:c0:de:4d:dc: 0b:9d:c6:72:e7:73:72:63:83:0c:24:e8:51:60:70: a0:0b:0b:ad:25:aa:a4:53:9c:22:d0:e0:37:5f:0d: 60:4c:2d:0f:df:90:b7:f7:22:e2:38:33:13:02:ed: 83:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:19:17:E9:8A:61:F6:EC:B8:88:6A:98:72:7C:64:84:A7:61:A2:14 X509v3 Authority Key Identifier: keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/pxkX6Yph9uy4iGqYcnxkhKdhohQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.204.139.0/24 Signature Algorithm: sha256WithRSAEncryption 55:4a:ad:5d:bc:7e:bb:93:78:d1:46:27:2b:52:a8:f6:cc:72: d9:6b:04:36:d6:41:6e:16:18:72:83:aa:19:9d:49:52:b7:70: 9c:a8:32:55:ca:0a:67:b2:e1:60:10:ba:77:e5:f3:45:d7:b5: 78:a5:cd:14:1f:46:53:cf:01:0a:70:48:96:5c:68:c7:cf:9d: 59:f3:8b:99:2c:d4:d8:ee:68:0c:53:9f:75:71:78:48:84:76: ad:e6:b3:6c:13:22:e4:11:9f:f4:6c:8e:e8:ae:a6:7b:53:fc: e7:ef:fc:80:0c:b7:37:df:5d:ec:1b:6c:63:c6:a9:f5:f6:76: b9:8e:be:ee:54:f0:33:85:c3:40:a9:24:e6:49:63:bd:52:0b: 8b:0b:aa:d8:86:8b:2f:b6:5a:31:01:bf:1b:82:8f:c4:4f:63: 39:2b:7f:45:03:c2:28:87:79:cf:ee:d9:f7:dc:57:41:ca:3a: 9f:2f:83:61:e3:09:32:db:6a:b2:85:ea:a5:28:66:82:4b:62: 4a:85:74:9d:42:ac:08:bd:0e:6c:d1:0b:8a:cf:70:b6:f4:93: 1f:b3:ec:a6:f8:c7:ec:8c:e1:c9:e6:d8:9b:9d:56:33:41:7b: 9e:bb:f6:f2:28:e8:f6:bc:6c:b6:1f:16:f6:87:94:02:01:9b: 48:f2:f9:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt568E+W5w0CA4bc0yPIpLQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTQyZjVkZjNjMWFjYjg1N2ZkNTBlZWIwMTZlZWQwNzM4 NWZmOGMwHhcNMjYwMTAxMTQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzE5MTdlOThhNjFmNmVjYjg4ODZhOTg3MjdjNjQ4NGE3NjFhMjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmQUFkGUgdEBAOwqqG9JrTax9Aun NpmEXQr1krAmcweES1JLAuKtJtXE5DiNZj56gFoThthp+k3C0yMjyjRGJGY3vV5V jyS7L/ikQkLmPq0xLqKSaH6w3pNt6NiPoPnRfLdQiVy8YC/T78Umz7CYe8nFJ5Uv Q5D1p/w7SpKRmcIupQTYv1t9o2TSiElaRoqj0QdhXv33icdJvQbB0yt3+O803TRM QTQJUF6LsylV3zEC2eCbF9tQIoNAQCT3KPCyGm2WBffvirkPCPNswsDeTdwLncZy 53NyY4MMJOhRYHCgCwutJaqkU5wi0OA3Xw1gTC0P35C39yLiODMTAu2DEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKcZF+mKYfbsuIhqmHJ8ZISnYaIUMB8GA1UdIwQY MBaAFJxUL13zway4V/1Q7rAW7tBzhf+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUt MjVkYmY0MzgwNGM1LzEvcHhrWDZZcGg5dXk0aUdxWWNueGtoS2Rob2hRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUtMjVkYmY0MzgwNGM1 LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVcyLMA0G CSqGSIb3DQEBCwUAA4IBAQBVSq1dvH67k3jRRicrUqj2zHLZawQ21kFuFhhyg6oZ nUlSt3CcqDJVygpnsuFgELp35fNF17V4pc0UH0ZTzwEKcEiWXGjHz51Z84uZLNTY 7mgMU591cXhIhHat5rNsEyLkEZ/0bI7orqZ7U/zn7/yADLc3313sG2xjxqn19na5 jr7uVPAzhcNAqSTmSWO9UguLC6rYhosvtloxAb8bgo/ET2M5K39FA8Ioh3nP7tn3 3FdByjqfL4Nh4wky22qyheqlKGaCS2JKhXSdQqwIvQ5s0QuKz3C29JMfs+ym+Mfs jOHJ5tibnVYzQXueu/byKOj2vGy2Hxb2h5QCAZtI8vkB -----END CERTIFICATE-----Generated at Sun Jan 25 21:04:48 2026 by rpki-client