This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/8OAnw9pNudALCBq2DGlrP0Yh1Kc.roa File: 8OAnw9pNudALCBq2DGlrP0Yh1Kc.roa (raw, json) Hash identifier: qMW9V8p4q8Yxa5qUy5cuIhZXt7ZJwFhjTuPtwb0D+GU= Subject key identifier: F0:E0:27:C3:DA:4D:B9:D0:0B:08:1A:B6:0C:69:6B:3F:46:21:D4:A7 Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E39123E9B328D3142B982560A13F0DF Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/8OAnw9pNudALCBq2DGlrP0Yh1Kc.roa Signing time: Fri 02 Jan 2026 10:20:27 +0000 ROA not before: Fri 02 Jan 2026 10:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202974 IP address blocks: 85.143.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:12:3e:9b:32:8d:31:42:b9:82:56:0a:13:f0:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0e027c3da4db9d00b081ab60c696b3f4621d4a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:db:da:30:29:2a:28:98:4a:06:c8:d2:71:ee: 6e:29:d8:cc:1d:0c:56:7a:26:ea:e7:c7:28:4d:25: 5e:3a:1b:5c:8f:7c:f7:d3:f2:40:d6:38:c0:4f:72: fb:4c:7d:f2:da:95:39:70:41:7a:21:3d:f2:20:83: 9b:87:d3:6c:ff:e0:87:71:17:7c:68:a8:1e:34:9d: 65:51:64:35:8c:67:89:29:6d:4b:1f:56:cb:6f:43: 40:f9:4c:66:b7:a9:f8:04:80:e4:e6:04:6f:17:62: e1:d2:4e:f5:c5:6e:38:4f:8d:f7:d5:ed:6c:d3:2d: 38:d4:a0:75:8f:e9:7d:68:e1:cf:4d:d0:72:14:5d: 8e:b2:8d:12:55:8d:8b:5a:90:7e:2e:36:cf:76:e4: 6c:63:40:01:94:40:a7:ca:f9:77:b6:24:82:ca:15: ce:33:06:fc:54:4a:e6:f3:45:29:7d:f4:3d:1f:90: 92:46:cc:4f:1c:13:b6:89:ac:0c:48:62:52:28:a1: b8:26:86:c6:b3:ce:8e:4a:a5:9b:7f:cc:1f:86:6a: 37:6c:fa:c0:af:3f:90:59:e0:f2:1a:fc:f1:df:d1: 10:97:8c:bd:6a:b9:96:3f:34:8a:4b:84:80:0e:b8: 9a:f8:17:c4:e5:85:55:13:07:a1:2b:3b:1f:b0:19: ee:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E0:27:C3:DA:4D:B9:D0:0B:08:1A:B6:0C:69:6B:3F:46:21:D4:A7 X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/8OAnw9pNudALCBq2DGlrP0Yh1Kc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.143.249.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:f6:69:e1:b7:ef:9c:df:c4:a6:c8:ae:a2:a5:32:ba:15:52: 1a:30:21:4e:92:1f:5a:e4:d3:cb:93:1a:ff:e3:5a:62:9a:1b: d0:56:83:ba:14:07:df:70:14:4d:21:4f:15:18:bd:6c:d9:d7: 52:1f:9c:fa:9a:66:5d:17:af:04:1f:cc:5c:7d:62:9f:bd:f7: fb:4e:50:35:34:c8:25:8e:ce:fe:e6:ce:54:28:0a:9e:e2:fc: 59:ec:e1:79:65:9e:d9:09:06:7e:16:f4:42:df:77:c4:72:ae: 46:c6:01:23:fc:7e:4f:81:b8:12:b2:50:9d:e1:d8:86:d9:b9: 40:11:43:e1:66:7d:67:9e:d4:3f:4c:65:3c:68:3c:84:57:44: 50:f3:08:f8:b5:8a:4b:00:1f:a1:68:01:73:77:78:6e:ed:2f: 2d:84:e3:91:74:be:19:07:ce:15:91:05:61:24:1a:09:7a:da: 9a:61:8b:f9:29:c3:47:dd:89:18:0f:67:72:c7:d9:d7:b5:45: 5d:fd:42:12:b3:6f:79:3f:2b:c7:d0:b8:7a:71:4e:aa:51:f0: c4:26:b3:ed:28:90:f8:3f:77:bf:e5:60:fb:fc:50:82:ba:ae: 47:55:ae:eb:65:23:b3:2d:3f:e4:1d:66:62:f6:28:1a:05:f4: 5d:a2:59:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ORI+mzKNMUK5glYKE/DfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGUwMjdjM2RhNGRiOWQwMGIwODFhYjYwYzY5NmIzZjQ2MjFkNGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tvaMCkqKJhKBsjSce5uKdjMHQxW eibq58coTSVeOhtcj3z30/JA1jjAT3L7TH3y2pU5cEF6IT3yIIObh9Ns/+CHcRd8 aKgeNJ1lUWQ1jGeJKW1LH1bLb0NA+Uxmt6n4BIDk5gRvF2Lh0k71xW44T4331e1s 0y041KB1j+l9aOHPTdByFF2Oso0SVY2LWpB+LjbPduRsY0ABlECnyvl3tiSCyhXO Mwb8VErm80UpffQ9H5CSRsxPHBO2iawMSGJSKKG4JobGs86OSqWbf8wfhmo3bPrA rz+QWeDyGvzx39EQl4y9armWPzSKS4SADria+BfE5YVVEwehKzsfsBnuxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPDgJ8PaTbnQCwgatgxpaz9GIdSnMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvOE9Bbnc5cE51ZEFMQ0JxMkRHbHJQMFloMUtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVY/5MA0G CSqGSIb3DQEBCwUAA4IBAQAq9mnht++c38SmyK6ipTK6FVIaMCFOkh9a5NPLkxr/ 41pimhvQVoO6FAffcBRNIU8VGL1s2ddSH5z6mmZdF68EH8xcfWKfvff7TlA1NMgl js7+5s5UKAqe4vxZ7OF5ZZ7ZCQZ+FvRC33fEcq5GxgEj/H5PgbgSslCd4diG2blA EUPhZn1nntQ/TGU8aDyEV0RQ8wj4tYpLAB+haAFzd3hu7S8thOORdL4ZB84VkQVh JBoJetqaYYv5KcNH3YkYD2dyx9nXtUVd/UISs295PyvH0Lh6cU6qUfDEJrPtKJD4 P3e/5WD7/FCCuq5HVa7rZSOzLT/kHWZi9igaBfRdollw -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:54 2026 by rpki-client