This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/CNhJHcroHKkouxvrmNmUTpyGRhk.roa File: CNhJHcroHKkouxvrmNmUTpyGRhk.roa (raw, json) Hash identifier: GM+fttNxAdTxFP4Afz/Sr7XsappNtqPJ1pIlyQ/HeZg= Subject key identifier: 08:D8:49:1D:CA:E8:1C:A9:28:BB:1B:EB:98:D9:94:4E:9C:86:46:19 Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E3915D1FA9C0E4642878837C86A4E00 Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/CNhJHcroHKkouxvrmNmUTpyGRhk.roa Signing time: Fri 02 Jan 2026 10:20:28 +0000 ROA not before: Fri 02 Jan 2026 10:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209269 IP address blocks: 85.142.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:15:d1:fa:9c:0e:46:42:87:88:37:c8:6a:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08d8491dcae81ca928bb1beb98d9944e9c864619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:cb:28:9c:5e:fc:29:9f:43:62:8f:ca:17:da: e7:57:7c:9f:de:b2:69:15:b8:4c:46:a2:7f:83:83: 7d:d4:67:80:de:f9:0f:c9:4c:a6:a9:7d:7f:73:14: 5d:d5:ff:c2:68:9a:a5:ec:99:3a:88:84:8e:8a:d8: 13:0b:bd:25:7d:32:c1:1b:24:1c:f3:71:5e:6c:cc: 0f:7d:c0:83:20:45:9a:ad:eb:bd:6b:fc:c6:78:ac: 04:9d:6a:3e:9a:05:40:87:7e:59:b1:7c:7e:11:72: 00:e6:1e:7d:a1:be:4f:d7:3e:70:20:e0:58:69:e8: 82:72:b4:67:b6:19:0d:88:da:8c:13:95:c9:d2:4f: 06:4c:44:ea:ca:22:7f:17:d4:7c:50:b1:0e:c5:4a: f2:b7:aa:4d:d1:14:bf:32:36:5b:3e:63:28:cf:cc: 28:6d:36:dd:1b:53:5d:f5:cb:5c:00:df:ee:a5:4b: 87:fd:f5:cc:b2:79:9f:7e:fe:65:35:79:be:d0:5d: fd:29:a1:51:31:b8:6b:5f:33:84:09:00:26:df:40: e2:c0:49:b5:21:c2:f3:9c:6d:d5:86:30:62:ed:61: 89:11:df:fb:a5:cc:57:3b:bc:06:57:c1:6c:3d:9b: 4d:47:6d:27:9c:73:2c:f3:10:2b:ed:4e:66:76:c4: d9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D8:49:1D:CA:E8:1C:A9:28:BB:1B:EB:98:D9:94:4E:9C:86:46:19 X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/CNhJHcroHKkouxvrmNmUTpyGRhk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.142.146.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:97:bd:b9:da:fd:e2:5f:26:a4:31:24:e1:88:96:27:3b:22: 94:61:1b:cb:bc:e0:52:1d:4e:69:a5:3a:28:a3:3e:9b:f5:29: 2a:30:e8:1c:9b:6d:b4:94:45:f4:fb:7f:11:83:ee:84:fe:ec: 76:de:c3:1a:15:16:fd:01:04:08:d8:c9:f7:b1:54:39:f0:dd: 62:d2:7a:9d:5b:38:38:8a:63:7a:e9:7b:44:f1:40:43:21:9a: 12:66:b1:95:06:39:1e:f1:ef:aa:5d:53:c8:33:26:8f:32:88: 5b:4f:36:14:a8:43:32:b0:e2:b4:2d:38:7b:b9:bb:50:7d:72: 88:28:17:65:c8:0c:76:50:b7:48:35:3f:06:d8:a5:43:86:d5: d7:a4:15:e5:12:4a:96:3a:02:af:a3:ce:93:c0:02:d0:15:16: 23:86:3a:f1:f8:53:93:c5:02:eb:dc:66:ea:5c:73:dd:01:2e: c9:6d:11:8d:5b:d1:59:15:e5:88:0f:05:9d:4d:2f:bf:0f:ce: f8:15:77:20:c8:ec:3b:85:1f:57:08:b2:f2:3f:a5:9e:3e:be: ce:6d:03:9a:e6:16:b7:da:49:da:04:8f:91:ed:da:d2:56:8d: b0:9e:8d:55:ff:19:df:89:a7:5f:79:d9:79:94:1e:30:9d:1e: 11:81:10:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ORXR+pwORkKHiDfIak4AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGQ4NDkxZGNhZTgxY2E5MjhiYjFiZWI5OGQ5OTQ0ZTljODY0NjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38sonF78KZ9DYo/KF9rnV3yf3rJp FbhMRqJ/g4N91GeA3vkPyUymqX1/cxRd1f/CaJql7Jk6iISOitgTC70lfTLBGyQc 83FebMwPfcCDIEWareu9a/zGeKwEnWo+mgVAh35ZsXx+EXIA5h59ob5P1z5wIOBY aeiCcrRnthkNiNqME5XJ0k8GTETqyiJ/F9R8ULEOxUryt6pN0RS/MjZbPmMoz8wo bTbdG1Nd9ctcAN/upUuH/fXMsnmffv5lNXm+0F39KaFRMbhrXzOECQAm30DiwEm1 IcLznG3VhjBi7WGJEd/7pcxXO7wGV8FsPZtNR20nnHMs8xAr7U5mdsTZ5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAjYSR3K6BypKLsb65jZlE6chkYZMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvQ05oSkhjcm9IS2tvdXh2cm1ObVVUcHlHUmhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVY6SMA0G CSqGSIb3DQEBCwUAA4IBAQAel7252v3iXyakMSThiJYnOyKUYRvLvOBSHU5ppToo oz6b9SkqMOgcm220lEX0+38Rg+6E/ux23sMaFRb9AQQI2Mn3sVQ58N1i0nqdWzg4 imN66XtE8UBDIZoSZrGVBjke8e+qXVPIMyaPMohbTzYUqEMysOK0LTh7ubtQfXKI KBdlyAx2ULdINT8G2KVDhtXXpBXlEkqWOgKvo86TwALQFRYjhjrx+FOTxQLr3Gbq XHPdAS7JbRGNW9FZFeWIDwWdTS+/D874FXcgyOw7hR9XCLLyP6WePr7ObQOa5ha3 2knaBI+R7drSVo2wno1V/xnfiadfedl5lB4wnR4RgRDf -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:41 2026 by rpki-client