This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/FIbnU-JdntAN6JJvwAglwo00v-0.roa File: FIbnU-JdntAN6JJvwAglwo00v-0.roa (raw, json) Hash identifier: aiip9yhyYJ+m4VFBymsuOTYKDWYG8fK5OAQLZ40Ameo= Subject key identifier: 14:86:E7:53:E2:5D:9E:D0:0D:E8:92:6F:C0:08:25:C2:8D:34:BF:ED Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E39151B2B81C121188538785FD31BD3 Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/FIbnU-JdntAN6JJvwAglwo00v-0.roa Signing time: Fri 02 Jan 2026 10:20:28 +0000 ROA not before: Fri 02 Jan 2026 10:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207259 IP address blocks: 85.143.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:15:1b:2b:81:c1:21:18:85:38:78:5f:d3:1b:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1486e753e25d9ed00de8926fc00825c28d34bfed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3d:5d:fa:c6:ce:5a:3a:6a:ad:ff:10:14:55: e1:e9:4e:c2:27:62:5f:e5:05:59:09:e5:b7:5d:1f: e2:9c:34:d1:a6:b5:37:e6:90:2d:f0:e4:03:c1:64: ab:87:b1:26:8d:42:a3:15:92:1a:d5:18:47:ab:1f: bd:8b:53:94:94:61:b3:d3:c9:3f:5f:3b:d9:99:cb: 5b:0c:d9:57:8a:7e:f5:49:cf:08:ae:8c:25:a2:ba: 89:34:90:3e:8f:64:5c:8c:e9:ee:15:0a:00:ff:d5: d3:20:44:6c:89:43:bc:d5:16:2a:90:86:f9:29:94: 40:9a:dc:e0:b1:dc:3f:3d:86:ec:5b:55:e6:4a:56: 08:cb:6d:ce:6c:42:92:af:d8:7d:56:6e:79:df:ed: 8b:43:0e:ed:30:74:93:0e:37:b3:41:38:d3:1f:c3: 9d:cf:11:39:9a:af:21:10:da:e7:de:60:18:8f:bb: 19:fb:9f:93:f1:df:24:30:b3:f9:8a:dc:7b:3f:35: 54:b7:c3:78:e1:dd:72:f6:97:7e:98:2f:64:62:23: 08:86:33:98:7f:78:67:c9:6b:79:c2:e2:c4:7c:0b: 99:b7:00:60:00:1c:50:c1:de:9b:be:74:de:6c:e4: 89:aa:95:6d:a1:ac:8c:ab:51:da:18:eb:11:a0:4e: c9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:86:E7:53:E2:5D:9E:D0:0D:E8:92:6F:C0:08:25:C2:8D:34:BF:ED X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/FIbnU-JdntAN6JJvwAglwo00v-0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.143.246.0/24 Signature Algorithm: sha256WithRSAEncryption 14:85:31:8e:3e:1d:e9:ee:07:f4:5e:14:a0:21:0a:fc:f8:84: b2:b3:f5:d3:47:75:35:1d:08:e4:c5:7d:b9:4e:0a:ff:9b:14: 46:54:47:27:4c:60:d8:ba:03:ac:f0:c9:9b:bc:d9:6d:43:08: fe:48:70:7e:1d:3b:4e:3b:ed:7b:fc:a8:ed:a7:43:2f:61:21: 69:b5:17:a8:1c:9a:fb:58:b9:ef:0e:25:5c:41:10:c7:a9:fb: f9:5f:a5:52:6a:a1:b2:5c:14:4b:2a:96:ae:1e:61:e0:63:49: f3:93:47:da:fb:4d:81:01:74:b0:13:44:88:72:fb:b2:62:ac: d5:4f:82:2d:9f:b9:98:75:80:04:52:89:b0:68:76:bc:91:ca: c7:33:37:56:ad:a9:aa:e8:ff:cc:03:cf:18:62:e6:c0:31:a0: e6:db:85:b0:9d:fa:e9:de:24:1c:ff:f0:68:c0:b5:b0:32:0d: 55:89:92:13:04:b9:92:c5:13:c6:5d:61:83:1a:84:97:61:25: 2f:bb:88:1b:39:e2:5a:78:72:f0:55:8c:1c:6f:a8:5a:06:3f: 3e:14:4c:14:5a:25:3d:a6:86:3d:ed:14:20:bb:84:43:fe:b0: db:84:a6:6c:08:a0:b1:af:62:6e:38:9c:af:1e:e1:f4:4a:c8: 2d:f0:f5:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ORUbK4HBIRiFOHhf0xvTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDg2ZTc1M2UyNWQ5ZWQwMGRlODkyNmZjMDA4MjVjMjhkMzRiZmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj1d+sbOWjpqrf8QFFXh6U7CJ2Jf 5QVZCeW3XR/inDTRprU35pAt8OQDwWSrh7EmjUKjFZIa1RhHqx+9i1OUlGGz08k/ XzvZmctbDNlXin71Sc8IrowlorqJNJA+j2RcjOnuFQoA/9XTIERsiUO81RYqkIb5 KZRAmtzgsdw/PYbsW1XmSlYIy23ObEKSr9h9Vm553+2LQw7tMHSTDjezQTjTH8Od zxE5mq8hENrn3mAYj7sZ+5+T8d8kMLP5itx7PzVUt8N44d1y9pd+mC9kYiMIhjOY f3hnyWt5wuLEfAuZtwBgABxQwd6bvnTebOSJqpVtoayMq1HaGOsRoE7JjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBSG51PiXZ7QDeiSb8AIJcKNNL/tMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvRkliblUtSmRudEFONkpKdndBZ2x3bzAwdi0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVY/2MA0G CSqGSIb3DQEBCwUAA4IBAQAUhTGOPh3p7gf0XhSgIQr8+ISys/XTR3U1HQjkxX25 Tgr/mxRGVEcnTGDYugOs8MmbvNltQwj+SHB+HTtOO+17/Kjtp0MvYSFptReoHJr7 WLnvDiVcQRDHqfv5X6VSaqGyXBRLKpauHmHgY0nzk0fa+02BAXSwE0SIcvuyYqzV T4Itn7mYdYAEUomwaHa8kcrHMzdWramq6P/MA88YYubAMaDm24Wwnfrp3iQc//Bo wLWwMg1ViZITBLmSxRPGXWGDGoSXYSUvu4gbOeJaeHLwVYwcb6haBj8+FEwUWiU9 poY97RQgu4RD/rDbhKZsCKCxr2JuOJyvHuH0Ssgt8PU3 -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:46 2026 by rpki-client