This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/4spwpSRjC-RQMPlIJx92CvkfZhw.roa File: 4spwpSRjC-RQMPlIJx92CvkfZhw.roa (raw, json) Hash identifier: Jb+y/WDihaTMHMd1Rhf1mRin1696DkPdDuU5o5NpqQc= Subject key identifier: E2:CA:70:A5:24:63:0B:E4:50:30:F9:48:27:1F:76:0A:F9:1F:66:1C Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019BC1BFC5B602808D0CB6194A7BA49F860F Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/4spwpSRjC-RQMPlIJx92CvkfZhw.roa Signing time: Thu 15 Jan 2026 13:02:09 +0000 ROA not before: Thu 15 Jan 2026 13:02:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49505 IP address blocks: 85.142.0.0/21 maxlen: 24 85.142.40.0/21 maxlen: 24 85.142.48.0/22 maxlen: 24 85.142.64.0/22 maxlen: 24 85.142.72.0/24 maxlen: 24 85.142.76.0/24 maxlen: 24 85.142.81.0/24 maxlen: 24 85.142.84.0/23 maxlen: 24 85.142.87.0/24 maxlen: 24 85.142.99.0/24 maxlen: 24 85.142.100.0/23 maxlen: 24 85.142.113.0/24 maxlen: 24 85.142.115.0/24 maxlen: 24 85.142.128.0/21 maxlen: 24 85.142.137.0/24 maxlen: 24 85.142.138.0/23 maxlen: 24 85.142.140.0/22 maxlen: 24 85.142.212.0/23 maxlen: 24 85.142.215.0/24 maxlen: 24 85.142.240.0/24 maxlen: 24 85.142.242.0/24 maxlen: 24 85.142.246.0/24 maxlen: 24 85.142.250.0/24 maxlen: 24 85.142.253.0/24 maxlen: 24 85.142.254.0/23 maxlen: 24 85.143.41.0/24 maxlen: 24 85.143.42.0/23 maxlen: 24 85.143.44.0/24 maxlen: 24 85.143.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c1:bf:c5:b6:02:80:8d:0c:b6:19:4a:7b:a4:9f:86:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 15 13:02:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2ca70a524630be45030f948271f760af91f661c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:99:c2:29:e9:c6:f2:27:fd:d0:33:c4:44:81: 18:d5:3a:77:c8:58:57:03:3c:67:03:f5:b4:8c:6f: d3:c0:dc:76:92:0e:03:81:3e:e1:d4:be:f1:bf:dc: 70:4b:b1:8f:31:38:64:d8:9f:6b:4e:d3:7a:cf:3b: 25:5d:06:e1:b8:bd:d7:a3:a3:48:53:22:6a:85:8e: f8:68:1d:cf:79:06:cf:c8:82:de:58:45:34:cf:19: 50:d9:71:9c:e5:b5:37:ff:cf:91:4c:fb:25:7b:87: 69:e4:82:46:23:6b:df:6d:7f:03:f7:ce:e4:d0:a3: 3c:53:ac:30:fa:57:8c:90:0a:7b:a0:48:bb:f3:ac: ee:15:25:ea:17:ab:8a:49:a4:d3:26:d7:ad:9a:f9: 6d:b6:9c:0c:04:a1:74:e8:73:8b:f9:25:ab:bb:2f: b3:6d:d7:99:eb:f8:e8:88:27:cb:b5:2c:7d:9e:53: a6:46:47:97:5a:90:f5:8d:52:6a:2d:5c:8e:09:16: 01:c8:b2:cd:dc:07:64:45:e5:4f:aa:9d:ff:56:4c: 26:03:09:b9:74:1c:bf:60:39:6e:e6:75:5e:47:1c: 4a:88:84:73:bc:99:30:ea:83:5c:1e:75:79:25:49: f5:93:0d:93:f4:b0:b0:d2:b6:04:be:d6:9c:55:83: b6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:CA:70:A5:24:63:0B:E4:50:30:F9:48:27:1F:76:0A:F9:1F:66:1C X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/4spwpSRjC-RQMPlIJx92CvkfZhw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.142.0.0/21 85.142.40.0-85.142.51.255 85.142.64.0/22 85.142.72.0/24 85.142.76.0/24 85.142.81.0/24 85.142.84.0/23 85.142.87.0/24 85.142.99.0-85.142.101.255 85.142.113.0/24 85.142.115.0/24 85.142.128.0/21 85.142.137.0-85.142.143.255 85.142.212.0/23 85.142.215.0/24 85.142.240.0/24 85.142.242.0/24 85.142.246.0/24 85.142.250.0/24 85.142.253.0-85.142.255.255 85.143.41.0-85.143.44.255 85.143.48.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:51:a2:1e:ad:43:40:c6:d6:9a:aa:4d:d0:e5:ea:77:de:13: d8:85:b7:6d:78:fe:76:b4:25:ab:50:86:22:6f:19:21:58:c9: 94:c5:bf:ff:dd:34:cd:ec:ef:fb:05:b2:79:bb:4b:d7:45:35: d1:89:f5:85:65:92:69:1b:93:8b:e9:bd:8c:09:f8:80:69:96: ff:6a:c7:36:10:c6:eb:4b:ca:0f:ab:a8:e2:a7:64:b5:72:35: 79:a1:1c:d3:00:b4:36:86:e1:9b:d8:dc:a0:2e:dc:81:c0:0d: a7:02:e1:81:05:c2:45:46:1e:b2:5b:b4:1a:d0:35:35:90:cb: 2d:1a:3d:1b:d2:02:b8:b2:ce:15:71:2f:f0:6d:15:b9:54:f6: bd:2b:91:55:06:5f:4a:f4:50:6a:fd:d9:13:86:a0:88:b6:7f: d4:5d:07:59:00:69:ae:15:9e:1a:56:f9:36:b5:9c:8b:2b:a9: a5:a8:53:1c:c6:30:88:c9:1c:e9:8d:40:8b:10:ea:ba:af:5b: f3:58:c9:07:50:f6:49:e3:1a:aa:52:e2:db:94:af:7c:84:4b: 1c:4e:6b:93:7e:32:b6:1e:99:41:7c:34:1d:35:b9:b0:d4:de: 33:d6:b4:2d:34:9f:8c:de:29:64:81:f1:db:ce:4f:4f:e8:22: ab:4e:74:27 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgISAZvBv8W2AoCNDLYZSnukn4YPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTE1MTMwMjA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmNhNzBhNTI0NjMwYmU0NTAzMGY5NDgyNzFmNzYwYWY5MWY2NjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZnCKenG8if90DPERIEY1Tp3yFhX AzxnA/W0jG/TwNx2kg4DgT7h1L7xv9xwS7GPMThk2J9rTtN6zzslXQbhuL3Xo6NI UyJqhY74aB3PeQbPyILeWEU0zxlQ2XGc5bU3/8+RTPsle4dp5IJGI2vfbX8D987k 0KM8U6ww+leMkAp7oEi786zuFSXqF6uKSaTTJtetmvlttpwMBKF06HOL+SWruy+z bdeZ6/joiCfLtSx9nlOmRkeXWpD1jVJqLVyOCRYByLLN3AdkReVPqp3/VkwmAwm5 dBy/YDlu5nVeRxxKiIRzvJkw6oNcHnV5JUn1kw2T9LCw0rYEvtacVYO2mQIDAQAB o4ICszCCAq8wHQYDVR0OBBYEFOLKcKUkYwvkUDD5SCcfdgr5H2YcMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvNHNwd3BTUmpDLVJRTVBsSUp4OTJDdmtmWmh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHIBggrBgEFBQcBBwEB/wSBuDCBtTCBsgQCAAEwgasDBANV jgAwDAMEA1WOKAMEAlWOMAMEAlWOQAMEAFWOSAMEAFWOTAMEAFWOUQMEAVWOVAME AFWOVzAMAwQAVY5jAwQBVY5kAwQAVY5xAwQAVY5zAwQDVY6AMAwDBABVjokDBARV joADBAFVjtQDBABVjtcDBABVjvADBABVjvIDBABVjvYDBABVjvowCwMEAFWO/QMD AFWOMAwDBABVjykDBABVjywDBAJVjzAwDQYJKoZIhvcNAQELBQADggEBADtRoh6t Q0DG1pqqTdDl6nfeE9iFt214/na0JatQhiJvGSFYyZTFv//dNM3s7/sFsnm7S9dF NdGJ9YVlkmkbk4vpvYwJ+IBplv9qxzYQxutLyg+rqOKnZLVyNXmhHNMAtDaG4ZvY 3KAu3IHADacC4YEFwkVGHrJbtBrQNTWQyy0aPRvSAriyzhVxL/BtFblU9r0rkVUG X0r0UGr92ROGoIi2f9RdB1kAaa4VnhpW+Ta1nIsrqaWoUxzGMIjJHOmNQIsQ6rqv W/NYyQdQ9knjGqpS4tuUr3yESxxOa5N+MrYemUF8NB01ubDU3jPWtC00n4zeKWSB 8dvOT0/oIqtOdCc= -----END CERTIFICATE-----Generated at Sun Jan 25 16:10:06 2026 by rpki-client