This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/0T3PuqO97Me-KrHmjySWxLnh86o.roa File: 0T3PuqO97Me-KrHmjySWxLnh86o.roa (raw, json) Hash identifier: b2P45FcxEiewwBdfWnM56RQS0t+/+sUUqYU67Rc+6/k= Subject key identifier: D1:3D:CF:BA:A3:BD:EC:C7:BE:2A:B1:E6:8F:24:96:C4:B9:E1:F3:AA Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E390B1184660C23D1FF2B49F4A51A0B Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/0T3PuqO97Me-KrHmjySWxLnh86o.roa Signing time: Fri 02 Jan 2026 10:20:26 +0000 ROA not before: Fri 02 Jan 2026 10:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51562 IP address blocks: 85.143.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:0b:11:84:66:0c:23:d1:ff:2b:49:f4:a5:1a:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d13dcfbaa3bdecc7be2ab1e68f2496c4b9e1f3aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:37:2d:c1:b8:5b:3d:d5:19:d6:84:32:be:8a: 07:85:cc:f9:8c:47:ce:3f:76:98:80:75:8e:bd:37: fa:9d:ed:25:58:db:ab:4c:47:f5:59:55:1a:1f:38: 53:ec:73:cb:f5:6e:7e:e0:2b:d4:7b:bc:70:8f:d4: 71:0b:f9:cb:de:5b:e0:02:c4:3b:f9:c3:66:2d:fe: 9e:5c:cd:b2:b9:75:e5:7e:66:e2:3a:5b:a2:bd:d7: fa:7f:53:e8:e0:a9:07:64:2b:3e:1f:98:8c:25:20: 18:e0:0c:01:84:e5:1f:d8:b8:51:73:26:ab:b8:23: 3d:a8:00:3a:7e:9a:7a:35:01:78:5c:6e:b4:6c:65: 59:3d:4a:b8:d8:cc:4e:ae:16:73:99:d9:1e:c0:fc: 51:c4:bc:0a:31:05:29:0c:df:b4:63:fd:f3:37:d3: c4:0f:72:70:cd:4f:1c:c4:2f:4b:0f:f2:e1:1a:23: 4e:8c:a0:4d:fd:9b:13:0a:60:8c:ba:70:03:07:77: ec:5c:eb:b9:81:44:a9:a6:60:ad:a6:10:aa:c0:86: 3c:c7:e5:4a:a4:76:5d:15:fd:b8:29:e4:98:0b:a1: 61:2c:1b:3e:d5:ce:41:7c:6b:dc:99:63:63:37:3b: 6d:e0:a7:b1:cb:36:cd:ad:19:64:74:6a:02:de:3d: ba:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:3D:CF:BA:A3:BD:EC:C7:BE:2A:B1:E6:8F:24:96:C4:B9:E1:F3:AA X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/0T3PuqO97Me-KrHmjySWxLnh86o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.143.200.0/24 Signature Algorithm: sha256WithRSAEncryption 74:43:8a:b7:a3:c0:e6:61:43:1e:51:48:2d:be:ba:fe:3d:f5: 23:3b:9e:0c:b6:ed:ba:46:f8:50:3f:ad:8c:f5:ba:fc:08:bc: 16:b3:73:eb:bf:94:45:98:29:5d:62:ad:af:a3:c3:63:eb:cd: b5:58:d8:01:2c:d7:f2:58:9b:a4:55:05:6c:33:ed:e3:f6:ce: c6:05:6f:9c:98:d6:e8:63:0c:63:5f:2b:7b:46:b3:94:7f:80: 00:90:f2:a8:e9:b2:85:ad:64:48:9d:c1:de:51:f8:df:1b:79: 3e:91:9c:6b:fa:c9:23:14:10:b5:c6:d8:9b:81:c5:86:18:c4: 38:c7:89:91:73:73:71:26:e0:7a:28:4e:2b:64:31:c0:c8:56: a7:b4:de:fe:64:8e:1a:ea:b4:69:c9:92:67:c3:dc:f1:de:30: 24:94:53:e1:5a:85:3e:97:32:a1:da:d9:ed:11:8f:4c:58:6f: f9:03:56:af:9e:45:71:8d:09:17:ad:34:f1:cb:36:2f:4f:31: 0a:42:ff:55:d6:66:19:34:23:a9:e9:5e:9b:82:eb:ac:86:1b: 10:4d:f4:6d:ad:4e:66:88:90:3e:cd:a1:15:e5:21:a5:75:47: 74:7c:bc:df:2b:41:74:7f:94:ea:4b:1c:0a:7c:d0:e7:27:2f: 89:ab:d2:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OQsRhGYMI9H/K0n0pRoLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTNkY2ZiYWEzYmRlY2M3YmUyYWIxZTY4ZjI0OTZjNGI5ZTFmM2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jctwbhbPdUZ1oQyvooHhcz5jEfO P3aYgHWOvTf6ne0lWNurTEf1WVUaHzhT7HPL9W5+4CvUe7xwj9RxC/nL3lvgAsQ7 +cNmLf6eXM2yuXXlfmbiOluivdf6f1Po4KkHZCs+H5iMJSAY4AwBhOUf2LhRcyar uCM9qAA6fpp6NQF4XG60bGVZPUq42MxOrhZzmdkewPxRxLwKMQUpDN+0Y/3zN9PE D3JwzU8cxC9LD/LhGiNOjKBN/ZsTCmCMunADB3fsXOu5gUSppmCtphCqwIY8x+VK pHZdFf24KeSYC6FhLBs+1c5BfGvcmWNjNztt4KexyzbNrRlkdGoC3j26lwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNE9z7qjvezHviqx5o8klsS54fOqMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvMFQzUHVxTzk3TWUtS3JIbWp5U1d4TG5oODZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVY/IMA0G CSqGSIb3DQEBCwUAA4IBAQB0Q4q3o8DmYUMeUUgtvrr+PfUjO54Mtu26RvhQP62M 9br8CLwWs3Prv5RFmCldYq2vo8Nj6821WNgBLNfyWJukVQVsM+3j9s7GBW+cmNbo YwxjXyt7RrOUf4AAkPKo6bKFrWRIncHeUfjfG3k+kZxr+skjFBC1xtibgcWGGMQ4 x4mRc3NxJuB6KE4rZDHAyFantN7+ZI4a6rRpyZJnw9zx3jAklFPhWoU+lzKh2tnt EY9MWG/5A1avnkVxjQkXrTTxyzYvTzEKQv9V1mYZNCOp6V6bguushhsQTfRtrU5m iJA+zaEV5SGldUd0fLzfK0F0f5TqSxwKfNDnJy+Jq9LS -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:45 2026 by rpki-client