This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/cCEBdBEXFykEV7kEeY1dU37ZF-A.roa File: cCEBdBEXFykEV7kEeY1dU37ZF-A.roa (raw, json) Hash identifier: zvgqkCYX08qKXbsh4y33vk6hComyiuxyMs/pgAk8eYI= Subject key identifier: 70:21:01:74:11:17:17:29:04:57:B9:04:79:8D:5D:53:7E:D9:17:E0 Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E3917E8DEC642BA17AB7F5C008C1F9A Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/cCEBdBEXFykEV7kEeY1dU37ZF-A.roa Signing time: Fri 02 Jan 2026 10:20:29 +0000 ROA not before: Fri 02 Jan 2026 10:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213461 IP address blocks: 85.142.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:17:e8:de:c6:42:ba:17:ab:7f:5c:00:8c:1f:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70210174111717290457b904798d5d537ed917e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3d:e2:76:66:ae:8b:77:c0:ee:ad:71:df:6b: 1e:83:d7:8a:62:a1:7c:10:1a:64:72:38:b2:91:fe: 60:f7:f0:d5:92:ff:ec:a8:65:32:94:97:f5:26:6b: cb:61:c1:e5:fa:bb:bc:9a:22:d5:0c:dc:9e:1c:b5: 22:77:9c:1a:10:66:f3:9c:0b:07:a1:19:cf:aa:e3: 8d:92:4b:d0:56:61:85:23:ca:79:bc:fe:9c:39:4f: bd:5a:a8:95:15:13:91:15:66:56:83:fa:b5:40:85: 6c:52:74:d8:80:fa:03:8c:cd:0c:d3:16:2f:ad:81: 98:78:f7:0c:4d:34:fc:5a:cf:e2:76:04:e9:cf:e2: 48:83:9c:70:ad:db:53:20:25:f9:2d:73:55:63:65: 67:05:d2:7e:20:97:53:82:eb:23:b6:26:da:d5:11: 3b:59:9f:e6:db:00:28:cf:1a:45:21:e4:a2:cc:8d: 27:e6:84:7e:32:b3:b7:c3:0c:8b:5b:eb:28:8e:18: 31:33:a8:1e:e1:20:9f:db:c7:a2:dc:2d:5b:6c:f9: 57:ac:b9:52:80:2b:d0:fb:46:90:b1:5e:c0:de:9c: 8c:7b:57:91:d7:b3:fc:4d:ba:7c:1b:ef:f7:44:40: 4f:1f:bb:17:a1:59:48:fb:ee:05:d4:95:d7:8d:1d: 3a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:21:01:74:11:17:17:29:04:57:B9:04:79:8D:5D:53:7E:D9:17:E0 X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/cCEBdBEXFykEV7kEeY1dU37ZF-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.142.112.0/24 Signature Algorithm: sha256WithRSAEncryption 18:6c:3e:3a:a4:45:d1:7b:83:d4:7b:b7:a7:03:22:70:28:21: 82:3d:e0:b9:83:d8:cf:da:48:36:c2:d9:76:b0:e7:72:10:f0: 97:c7:ae:66:a8:69:f3:74:11:68:ef:c7:0c:95:30:67:75:a2: 6a:7f:43:5d:1c:84:7d:76:8c:08:be:bf:dd:f0:b0:4d:fa:23: 4b:e1:c8:6b:d3:c8:26:31:c3:f3:78:9a:79:7a:f0:d6:34:c4: d9:58:64:5f:24:66:c5:2d:e1:2f:09:8b:86:e7:95:a9:14:c8: 84:1d:b7:30:4b:1e:5e:e6:52:72:63:db:b0:0a:26:f6:ee:74: fd:8d:f9:a1:98:34:62:0f:23:e5:05:66:8a:57:d2:82:65:ee: 77:70:8d:a6:96:c2:bb:6f:8c:ad:09:62:f1:06:d9:f4:14:7a: e2:66:67:ef:56:ca:df:b4:4f:16:af:b2:6c:bc:ac:21:ba:1b: 1a:05:0a:1c:b9:31:55:66:e5:36:1d:60:c9:12:79:76:0c:ef: 2f:ef:6f:56:94:df:38:ea:51:f4:e1:5a:f2:d2:1c:4c:97:84: 09:fa:41:5e:07:53:64:d3:7b:02:3f:f5:6d:d5:4e:3b:a5:61: d2:5a:36:4a:2c:da:d0:01:fd:49:be:e8:88:53:bc:f1:e7:0f: ad:89:d8:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ORfo3sZCuherf1wAjB+aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDIxMDE3NDExMTcxNzI5MDQ1N2I5MDQ3OThkNWQ1MzdlZDkxN2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT3idmaui3fA7q1x32seg9eKYqF8 EBpkcjiykf5g9/DVkv/sqGUylJf1JmvLYcHl+ru8miLVDNyeHLUid5waEGbznAsH oRnPquONkkvQVmGFI8p5vP6cOU+9WqiVFRORFWZWg/q1QIVsUnTYgPoDjM0M0xYv rYGYePcMTTT8Ws/idgTpz+JIg5xwrdtTICX5LXNVY2VnBdJ+IJdTgusjtiba1RE7 WZ/m2wAozxpFIeSizI0n5oR+MrO3wwyLW+sojhgxM6ge4SCf28ei3C1bbPlXrLlS gCvQ+0aQsV7A3pyMe1eR17P8Tbp8G+/3REBPH7sXoVlI++4F1JXXjR06rQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHAhAXQRFxcpBFe5BHmNXVN+2RfgMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvY0NFQmRCRVhGeWtFVjdrRWVZMWRVMzdaRi1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVY5wMA0G CSqGSIb3DQEBCwUAA4IBAQAYbD46pEXRe4PUe7enAyJwKCGCPeC5g9jP2kg2wtl2 sOdyEPCXx65mqGnzdBFo78cMlTBndaJqf0NdHIR9dowIvr/d8LBN+iNL4chr08gm McPzeJp5evDWNMTZWGRfJGbFLeEvCYuG55WpFMiEHbcwSx5e5lJyY9uwCib27nT9 jfmhmDRiDyPlBWaKV9KCZe53cI2mlsK7b4ytCWLxBtn0FHriZmfvVsrftE8Wr7Js vKwhuhsaBQocuTFVZuU2HWDJEnl2DO8v729WlN846lH04Vry0hxMl4QJ+kFeB1Nk 03sCP/Vt1U47pWHSWjZKLNrQAf1JvuiIU7zx5w+tidjs -----END CERTIFICATE-----Generated at Sun Jan 25 11:39:58 2026 by rpki-client