This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/NdVo2e7qrrUdGKU9TWYrVATCf3k.roa File: NdVo2e7qrrUdGKU9TWYrVATCf3k.roa (raw, json) Hash identifier: fXd/0KSWHJzZr4eluY95EcC2k/+iop2qGPYSXUVflNI= Subject key identifier: 35:D5:68:D9:EE:EA:AE:B5:1D:18:A5:3D:4D:66:2B:54:04:C2:7F:79 Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E390C7FE6DEC148A8021AE118C1EB7F Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/NdVo2e7qrrUdGKU9TWYrVATCf3k.roa Signing time: Fri 02 Jan 2026 10:20:26 +0000 ROA not before: Fri 02 Jan 2026 10:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57010 IP address blocks: 85.143.180.0/22 maxlen: 22 85.143.198.0/23 maxlen: 23 85.143.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:0c:7f:e6:de:c1:48:a8:02:1a:e1:18:c1:eb:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35d568d9eeeaaeb51d18a53d4d662b5404c27f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a6:3b:c6:3d:c2:96:4c:69:e5:93:66:08:e4: e4:53:25:1e:4c:9f:d9:c0:fc:c0:96:8a:5b:9e:66: d0:de:6b:88:0b:1a:01:22:4e:2a:e4:6e:3c:2d:ea: 9d:b4:de:66:d4:8f:cd:24:46:c1:ce:13:1e:b8:05: 4f:8f:31:2e:3e:99:41:d1:c8:5f:84:fd:6b:e0:f0: 6b:37:fc:d4:94:b8:c8:60:ac:b8:fd:45:ca:28:c9: c7:89:cf:ab:a9:fc:8b:3c:62:a6:d3:ca:11:a6:f3: 07:28:34:c5:f9:2a:53:f8:e0:be:cf:95:2c:d0:a2: 8d:de:e0:25:e6:38:bb:e2:59:2c:5d:a1:ce:f5:75: 90:46:ff:c0:13:c0:f3:66:21:ef:b9:7c:74:94:2b: f7:78:82:4b:9d:c2:06:72:23:39:40:9d:b6:f9:eb: 7f:35:de:7e:d1:0c:9c:16:36:31:bb:5a:2f:7f:04: 0e:5f:37:af:06:df:54:a3:e3:35:d4:29:12:cf:3a: 60:96:48:8d:0b:1b:04:f8:57:d4:c0:9b:5e:f2:f3: 84:1e:64:bb:52:df:88:c7:5f:3b:70:89:55:2b:f8: 6a:f1:92:57:05:a5:79:a0:aa:37:2d:35:b1:65:e3: 95:fb:e5:86:43:91:61:d9:5a:bb:9e:30:cf:3c:61: f7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D5:68:D9:EE:EA:AE:B5:1D:18:A5:3D:4D:66:2B:54:04:C2:7F:79 X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/NdVo2e7qrrUdGKU9TWYrVATCf3k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.143.180.0/22 85.143.198.0/23 85.143.251.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:74:8d:ef:81:37:c7:21:84:3a:b6:5a:5d:2e:13:f8:ec:f4: c0:ad:9f:3a:86:d7:18:1d:16:59:ea:23:00:5e:2c:dc:23:a9: 56:c0:85:c5:5b:46:73:3c:3d:d5:fc:81:f0:a2:49:a5:d0:30: 4d:b1:d3:41:46:6b:70:29:d3:b4:14:76:fe:70:84:d6:44:85: ae:5f:70:3d:de:cf:06:73:4a:3d:fd:c2:57:31:e4:fa:88:29: b0:e7:8f:70:7b:4d:f2:a5:de:14:9f:a8:60:06:5c:8c:99:78: 01:02:65:22:ff:53:f6:90:a3:be:b9:ac:86:cd:b6:0a:8a:1f: 40:56:ec:56:de:77:2c:9e:ce:91:55:bc:95:4e:34:fc:f4:b6: d7:8c:16:b6:47:0a:67:ba:31:0d:23:2b:2e:60:07:25:0e:8e: 18:6e:92:23:75:33:d2:9b:91:4d:c7:45:f7:8e:71:d4:61:d7: 6d:55:cc:44:7b:b9:63:e2:fb:29:65:02:4f:3a:9d:0b:ba:ad: 32:bf:6c:3e:18:32:e6:a2:ab:7d:a0:49:fe:9f:7e:a2:06:5f: c6:31:6b:b6:ad:0e:77:75:07:32:ca:fd:f1:b7:66:36:f3:f6: f1:ac:c0:ed:d2:f7:68:92:a0:29:d8:c8:50:11:9b:04:ee:81: 37:55:e7:63 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OQx/5t7BSKgCGuEYwet/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWQ1NjhkOWVlZWFhZWI1MWQxOGE1M2Q0ZDY2MmI1NDA0YzI3Zjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaY7xj3Clkxp5ZNmCOTkUyUeTJ/Z wPzAlopbnmbQ3muICxoBIk4q5G48LeqdtN5m1I/NJEbBzhMeuAVPjzEuPplB0chf hP1r4PBrN/zUlLjIYKy4/UXKKMnHic+rqfyLPGKm08oRpvMHKDTF+SpT+OC+z5Us 0KKN3uAl5ji74lksXaHO9XWQRv/AE8DzZiHvuXx0lCv3eIJLncIGciM5QJ22+et/ Nd5+0QycFjYxu1ovfwQOXzevBt9Uo+M11CkSzzpglkiNCxsE+FfUwJte8vOEHmS7 Ut+Ix187cIlVK/hq8ZJXBaV5oKo3LTWxZeOV++WGQ5Fh2Vq7njDPPGH3kQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDXVaNnu6q61HRilPU1mK1QEwn95MB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvTmRWbzJlN3FyclVkR0tVOVRXWXJWQVRDZjNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCVY+0AwQB VY/GAwQAVY/7MA0GCSqGSIb3DQEBCwUAA4IBAQAddI3vgTfHIYQ6tlpdLhP47PTA rZ86htcYHRZZ6iMAXizcI6lWwIXFW0ZzPD3V/IHwokml0DBNsdNBRmtwKdO0FHb+ cITWRIWuX3A93s8Gc0o9/cJXMeT6iCmw549we03ypd4Un6hgBlyMmXgBAmUi/1P2 kKO+uayGzbYKih9AVuxW3ncsns6RVbyVTjT89LbXjBa2RwpnujENIysuYAclDo4Y bpIjdTPSm5FNx0X3jnHUYddtVcxEe7lj4vspZQJPOp0Luq0yv2w+GDLmoqt9oEn+ n36iBl/GMWu2rQ53dQcyyv3xt2Y28/bxrMDt0vdokqAp2MhQEZsE7oE3Vedj -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:14 2026 by rpki-client