This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Q4uP1RUE1xZr8Edi1jOhkNA_tNk.roa File: Q4uP1RUE1xZr8Edi1jOhkNA_tNk.roa (raw, json) Hash identifier: o8VUMLktvoYRUYxjBrKlTflWiIsNUa/NCV6GAvb2+I8= Subject key identifier: 43:8B:8F:D5:15:04:D7:16:6B:F0:47:62:D6:33:A1:90:D0:3F:B4:D9 Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E39174E4B98F15286750C57E2FB4889 Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Q4uP1RUE1xZr8Edi1jOhkNA_tNk.roa Signing time: Fri 02 Jan 2026 10:20:29 +0000 ROA not before: Fri 02 Jan 2026 10:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210447 IP address blocks: 85.142.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:17:4e:4b:98:f1:52:86:75:0c:57:e2:fb:48:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=438b8fd51504d7166bf04762d633a190d03fb4d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ec:cc:0d:04:f6:3d:77:c7:b9:1f:6e:3b:b8: 39:9f:ff:e6:62:f8:06:d8:73:11:61:e9:38:fe:48: fb:86:3a:cf:2d:e5:71:0c:ae:8f:f7:08:90:17:8d: 5f:bb:a2:d0:d2:c3:f5:be:c5:04:39:39:1a:4b:30: c9:4a:c2:ec:03:40:5e:82:0a:cd:75:f5:39:63:18: c2:79:26:96:d0:3d:c8:d0:5f:4f:4f:bd:32:6d:7d: 59:f0:d0:1a:5a:57:57:b2:55:f9:f4:60:36:78:c6: c0:cf:cd:92:6a:fe:37:4a:76:45:24:60:fb:14:e5: f9:a3:18:92:2d:32:66:85:c7:bd:d7:38:97:70:83: df:5b:5c:f9:2a:69:d8:1e:60:06:d1:42:48:cd:1c: c7:5c:9f:f5:cb:87:77:f1:c1:92:32:a6:eb:ae:fc: d3:60:d5:3d:6c:d0:24:38:ec:d2:62:8d:51:aa:f5: 27:62:fe:0b:75:33:83:33:20:bd:a9:38:52:02:93: c9:3d:66:5c:86:85:5f:c2:51:08:9b:ff:e4:b4:4d: de:00:4a:33:4f:69:f0:95:99:c8:3f:45:ea:92:9b: 52:0e:f9:ba:ec:76:95:b8:ff:1b:2f:fc:b0:0f:be: d3:e0:98:f7:47:35:84:5b:18:d0:cc:75:c8:63:dc: dd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8B:8F:D5:15:04:D7:16:6B:F0:47:62:D6:33:A1:90:D0:3F:B4:D9 X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Q4uP1RUE1xZr8Edi1jOhkNA_tNk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.142.114.0/24 Signature Algorithm: sha256WithRSAEncryption 26:ce:f6:7c:1f:90:d8:68:6b:81:8b:03:48:25:1e:34:6d:81: 60:1f:fb:a6:3e:67:18:10:c8:54:52:01:d2:d9:67:6a:39:a6: f0:bb:54:4d:5f:1d:21:5b:45:56:8d:ef:77:7f:20:a1:63:79: 69:45:11:99:cd:e2:54:76:aa:f3:e3:94:a0:04:49:55:bf:97: 6b:62:fb:b0:5d:c9:f1:6c:af:62:e7:9c:ae:8a:11:bf:0b:45: 5b:db:16:9a:13:09:1d:a9:88:10:b9:1d:e4:ff:f2:8f:0b:33: 3d:a0:5f:91:b5:d2:7d:99:f7:7c:9a:08:af:75:6f:4b:2b:f6: 22:b3:97:13:32:41:30:25:e3:c9:e4:90:53:4e:7d:8e:20:fe: 21:01:a1:3f:76:31:54:d2:94:88:92:a0:f1:cc:2e:d9:e1:cb: eb:d7:e9:31:9c:25:9c:aa:fb:ff:97:a1:00:75:d3:00:f9:43: ad:06:82:3a:01:fd:a4:f4:a4:d6:25:48:50:16:f8:a8:f7:c6: 8c:0f:d0:bc:8e:d0:07:2c:1c:87:6e:05:73:3a:0e:b7:de:17: 92:33:52:c9:d4:f2:1a:9a:83:36:ba:dc:b3:b9:af:41:b1:fe: 11:95:39:28:b0:0d:60:96:10:85:f4:53:e3:a1:24:62:93:6e: 91:45:da:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ORdOS5jxUoZ1DFfi+0iJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzhiOGZkNTE1MDRkNzE2NmJmMDQ3NjJkNjMzYTE5MGQwM2ZiNGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApezMDQT2PXfHuR9uO7g5n//mYvgG 2HMRYek4/kj7hjrPLeVxDK6P9wiQF41fu6LQ0sP1vsUEOTkaSzDJSsLsA0BeggrN dfU5YxjCeSaW0D3I0F9PT70ybX1Z8NAaWldXslX59GA2eMbAz82Sav43SnZFJGD7 FOX5oxiSLTJmhce91ziXcIPfW1z5KmnYHmAG0UJIzRzHXJ/1y4d38cGSMqbrrvzT YNU9bNAkOOzSYo1RqvUnYv4LdTODMyC9qThSApPJPWZchoVfwlEIm//ktE3eAEoz T2nwlZnIP0XqkptSDvm67HaVuP8bL/ywD77T4Jj3RzWEWxjQzHXIY9zdqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEOLj9UVBNcWa/BHYtYzoZDQP7TZMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvUTR1UDFSVUUxeFpyOEVkaTFqT2hrTkFfdE5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVY5yMA0G CSqGSIb3DQEBCwUAA4IBAQAmzvZ8H5DYaGuBiwNIJR40bYFgH/umPmcYEMhUUgHS 2WdqOabwu1RNXx0hW0VWje93fyChY3lpRRGZzeJUdqrz45SgBElVv5drYvuwXcnx bK9i55yuihG/C0Vb2xaaEwkdqYgQuR3k//KPCzM9oF+RtdJ9mfd8mgivdW9LK/Yi s5cTMkEwJePJ5JBTTn2OIP4hAaE/djFU0pSIkqDxzC7Z4cvr1+kxnCWcqvv/l6EA ddMA+UOtBoI6Af2k9KTWJUhQFvio98aMD9C8jtAHLByHbgVzOg633heSM1LJ1PIa moM2utyzua9Bsf4RlTkosA1glhCF9FPjoSRik26RRdrQ -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:04 2026 by rpki-client