This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/7wkbYQm3OMaXg5fU-PViYRcSg2A.roa File: 7wkbYQm3OMaXg5fU-PViYRcSg2A.roa (raw, json) Hash identifier: yhXfg9IvUyXwkbnmT4i0CF874XFJ5XjPLZ/56z+8pDI= Subject key identifier: EF:09:1B:61:09:B7:38:C6:97:83:97:D4:F8:F5:62:61:17:12:83:60 Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019A6DA03CBC24CBEEE60485FAD8B8DF25DF Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/7wkbYQm3OMaXg5fU-PViYRcSg2A.roa Signing time: Mon 10 Nov 2025 11:56:49 +0000 ROA not before: Mon 10 Nov 2025 11:56:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49505 IP address blocks: 85.142.0.0/21 maxlen: 24 85.142.40.0/21 maxlen: 24 85.142.48.0/22 maxlen: 24 85.142.64.0/22 maxlen: 24 85.142.72.0/24 maxlen: 24 85.142.76.0/24 maxlen: 24 85.142.81.0/24 maxlen: 24 85.142.84.0/23 maxlen: 24 85.142.87.0/24 maxlen: 24 85.142.99.0/24 maxlen: 24 85.142.100.0/23 maxlen: 24 85.142.113.0/24 maxlen: 24 85.142.115.0/24 maxlen: 24 85.142.128.0/20 maxlen: 24 85.142.212.0/23 maxlen: 24 85.142.215.0/24 maxlen: 24 85.142.240.0/24 maxlen: 24 85.142.242.0/24 maxlen: 24 85.142.244.0/24 maxlen: 24 85.142.246.0/24 maxlen: 24 85.142.250.0/24 maxlen: 24 85.142.253.0/24 maxlen: 24 85.142.254.0/23 maxlen: 24 85.143.41.0/24 maxlen: 24 85.143.42.0/23 maxlen: 24 85.143.44.0/24 maxlen: 24 85.143.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6d:a0:3c:bc:24:cb:ee:e6:04:85:fa:d8:b8:df:25:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Nov 10 11:56:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ef091b6109b738c6978397d4f8f5626117128360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d3:c2:e0:11:c7:b8:92:70:c0:2f:ee:5d:b1: 18:df:3d:19:e5:12:64:0d:be:a7:fb:95:eb:0a:00: e9:6a:ad:e1:2b:29:c3:41:e8:38:09:f7:fc:82:b3: ec:0f:ef:ef:10:55:9e:78:80:de:c9:c7:be:4d:15: 08:53:e6:09:7a:b4:98:64:19:c1:3a:8c:36:e8:88: d6:2b:66:32:34:87:88:b0:40:65:5c:df:3d:9e:d7: ff:42:07:1c:9d:db:22:ca:5e:08:6a:90:3c:11:aa: 17:7f:87:9e:70:3c:f8:9e:db:17:5f:af:05:8d:d1: 8e:62:01:9b:a5:5d:55:ca:10:21:92:28:93:e3:31: db:f7:87:7b:79:f1:ae:c9:55:05:5d:6a:41:d2:ac: fe:95:58:bc:07:bb:95:92:9e:fd:6b:b5:53:a2:01: c3:25:9f:6b:7c:2c:c8:ae:9c:b0:a8:de:7a:06:89: 41:af:8b:d1:06:4b:b5:2d:38:0c:d2:32:8e:85:66: a5:db:38:0b:cd:d5:c2:e2:f9:5d:92:70:f2:8f:67: 1d:26:4e:b0:ba:62:66:d4:40:e9:75:ba:fe:1e:fc: 67:92:b0:19:da:2c:64:f8:4f:01:f7:e1:3a:7b:f4: 56:85:54:f9:3b:a7:c6:de:71:6d:b2:b6:fe:23:58: 81:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:09:1B:61:09:B7:38:C6:97:83:97:D4:F8:F5:62:61:17:12:83:60 X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/7wkbYQm3OMaXg5fU-PViYRcSg2A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.142.0.0/21 85.142.40.0-85.142.51.255 85.142.64.0/22 85.142.72.0/24 85.142.76.0/24 85.142.81.0/24 85.142.84.0/23 85.142.87.0/24 85.142.99.0-85.142.101.255 85.142.113.0/24 85.142.115.0/24 85.142.128.0/20 85.142.212.0/23 85.142.215.0/24 85.142.240.0/24 85.142.242.0/24 85.142.244.0/24 85.142.246.0/24 85.142.250.0/24 85.142.253.0-85.142.255.255 85.143.41.0-85.143.44.255 85.143.48.0/22 Signature Algorithm: sha256WithRSAEncryption 67:be:50:a2:c6:6b:d2:d9:9d:f9:8e:f4:dc:8b:2d:61:91:79: 73:87:58:1c:42:cd:d9:fd:ff:86:14:fa:b6:7e:17:fc:88:ec: 9d:5f:62:1b:01:fa:cb:01:51:14:e6:3e:3b:2c:f7:04:1e:b1: a9:64:6e:73:d3:4b:91:71:a9:25:2b:38:c4:ab:99:9b:51:66: b7:ff:9e:84:86:e6:dd:e3:d0:77:36:70:4b:bb:cc:ea:09:6c: f5:ca:b8:f1:f3:8f:09:4a:a6:af:08:b4:86:b0:9e:4f:dd:42: 6f:24:5f:66:e2:23:a7:0f:5b:6a:a1:41:b4:40:e0:74:72:42: 93:ad:fc:32:18:6d:ce:87:f2:46:43:61:3e:b1:2c:a7:34:52: 19:e0:33:f1:73:14:d2:b5:69:11:af:06:f2:54:84:73:63:da: 1e:b6:72:e8:18:2d:3e:ea:7e:af:f7:22:18:5a:6f:86:f9:7c: f2:e9:12:89:25:c8:50:52:85:ae:31:b3:93:20:4c:ea:68:10: 04:53:49:84:55:0e:31:f3:bf:6d:e6:c1:50:74:57:82:05:ca: 4e:8b:96:77:c4:b7:14:19:d2:a6:fa:04:15:2a:95:d1:13:90: c1:53:52:5b:41:cb:80:59:df:90:e9:6f:fc:4d:8d:29:4a:72: f7:43:51:d5 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZptoDy8JMvu5gSF+ti43yXfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjUxMTEwMTE1NjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjA5MWI2MTA5YjczOGM2OTc4Mzk3ZDRmOGY1NjI2MTE3MTI4MzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNPC4BHHuJJwwC/uXbEY3z0Z5RJk Db6n+5XrCgDpaq3hKynDQeg4Cff8grPsD+/vEFWeeIDeyce+TRUIU+YJerSYZBnB Oow26IjWK2YyNIeIsEBlXN89ntf/Qgccndsiyl4IapA8EaoXf4eecDz4ntsXX68F jdGOYgGbpV1VyhAhkiiT4zHb94d7efGuyVUFXWpB0qz+lVi8B7uVkp79a7VTogHD JZ9rfCzIrpywqN56BolBr4vRBku1LTgM0jKOhWal2zgLzdXC4vldknDyj2cdJk6w umJm1EDpdbr+HvxnkrAZ2ixk+E8B9+E6e/RWhVT5O6fG3nFtsrb+I1iBiQIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFO8JG2EJtzjGl4OX1Pj1YmEXEoNgMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvN3drYllRbTNPTWFYZzVmVS1QVmlZUmNTZzJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHABggrBgEFBQcBBwEB/wSBsDCBrTCBqgQCAAEwgaMDBANV jgAwDAMEA1WOKAMEAlWOMAMEAlWOQAMEAFWOSAMEAFWOTAMEAFWOUQMEAVWOVAME AFWOVzAMAwQAVY5jAwQBVY5kAwQAVY5xAwQAVY5zAwQEVY6AAwQBVY7UAwQAVY7X AwQAVY7wAwQAVY7yAwQAVY70AwQAVY72AwQAVY76MAsDBABVjv0DAwBVjjAMAwQA VY8pAwQAVY8sAwQCVY8wMA0GCSqGSIb3DQEBCwUAA4IBAQBnvlCixmvS2Z35jvTc iy1hkXlzh1gcQs3Z/f+GFPq2fhf8iOydX2IbAfrLAVEU5j47LPcEHrGpZG5z00uR caklKzjEq5mbUWa3/56Ehubd49B3NnBLu8zqCWz1yrjx848JSqavCLSGsJ5P3UJv JF9m4iOnD1tqoUG0QOB0ckKTrfwyGG3Oh/JGQ2E+sSynNFIZ4DPxcxTStWkRrwby VIRzY9oetnLoGC0+6n6v9yIYWm+G+Xzy6RKJJchQUoWuMbOTIEzqaBAEU0mEVQ4x 879t5sFQdFeCBcpOi5Z3xLcUGdKm+gQVKpXRE5DBU1JbQcuAWd+Q6W/8TY0pSnL3 Q1HV -----END CERTIFICATE-----Generated at Sat Dec 6 08:50:43 2025 by rpki-client