This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/d38BdwBixsLNSJmEAvUvWSRBoIs.roa File: d38BdwBixsLNSJmEAvUvWSRBoIs.roa (raw, json) Hash identifier: r/W0hcOEnobdAFb2sNqpcg88QwABp+b4dLsCRPNIxgE= Subject key identifier: 77:7F:01:77:00:62:C6:C2:CD:48:99:84:02:F5:2F:59:24:41:A0:8B Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E39118F5EEDD4B09A76B94A44F3075C Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/d38BdwBixsLNSJmEAvUvWSRBoIs.roa Signing time: Fri 02 Jan 2026 10:20:27 +0000 ROA not before: Fri 02 Jan 2026 10:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202633 IP address blocks: 85.143.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:11:8f:5e:ed:d4:b0:9a:76:b9:4a:44:f3:07:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=777f01770062c6c2cd48998402f52f592441a08b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1f:0b:c7:f2:e6:01:44:50:aa:af:12:db:64: 0a:84:43:12:d3:f0:dc:a3:9b:7f:da:5d:3a:41:0f: 4a:8b:68:b1:88:43:12:f1:52:6e:9f:34:08:12:a4: 59:fd:56:f4:69:33:83:d1:4f:0c:a1:10:77:37:31: 23:90:43:40:9e:ac:f2:56:c6:a7:b9:da:10:00:75: a8:1e:9c:a3:d8:3a:91:72:7e:3d:cc:bf:fb:96:16: ca:93:33:06:6f:8d:94:c4:30:4e:25:00:57:b3:44: cd:a8:fe:b7:0e:fb:52:d1:de:15:19:97:02:ed:ac: 6a:dc:8f:02:a7:01:64:bd:80:4f:2b:8f:cf:4d:56: 91:79:a9:8a:c9:8e:b2:d4:0f:00:55:de:ca:96:55: c4:d2:48:a3:38:f3:e3:f0:02:c3:c9:0b:4a:1d:b8: 98:67:c3:1c:3f:8e:29:c3:40:e0:cc:34:1e:ca:e6: 4f:3f:b0:56:87:85:ed:18:26:ab:ed:40:69:76:79: bc:e6:f8:83:5c:c6:d8:4c:7e:7c:df:99:8c:23:49: b2:c4:b5:62:37:80:b7:4f:2f:30:77:5c:65:11:7c: 6f:65:23:9b:a1:16:8d:23:06:25:60:57:b0:4d:0b: 0d:c1:5c:18:01:ab:dc:0d:fe:a8:a1:41:ed:22:0b: 55:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:7F:01:77:00:62:C6:C2:CD:48:99:84:02:F5:2F:59:24:41:A0:8B X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/d38BdwBixsLNSJmEAvUvWSRBoIs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.143.247.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:dd:b4:27:dc:91:93:f7:b6:b3:75:de:8b:cb:04:0e:f5:fb: 7c:cb:39:f8:3e:fe:25:e5:7f:4f:e2:d8:de:fc:7b:80:29:5c: b7:b9:3f:ee:54:23:58:2d:65:c2:e8:eb:15:84:4e:86:f4:03: b0:0a:ea:18:d7:ff:97:4f:58:61:1a:e2:da:99:35:8e:2a:07: 6c:00:52:63:87:20:dc:0e:46:f2:28:b0:a6:14:9a:dd:c6:62: 7c:0e:1c:99:ec:18:c4:97:cd:df:b4:e7:25:ba:e0:1c:65:4a: d4:3e:71:b4:b3:fd:b4:69:6c:88:2f:8c:06:29:17:4b:6c:35: 3c:d9:63:27:f3:78:d2:e0:f7:af:e3:aa:ef:14:3e:30:c1:13: a5:df:d5:6e:79:2f:1e:1e:2e:da:90:fb:e9:18:25:a2:23:3f: e8:d6:2c:9a:b4:a3:0d:68:88:af:d7:85:c4:95:e5:b5:67:ff: fb:ff:6d:1c:14:47:8d:ac:9e:23:18:3d:2b:bd:97:19:79:cc: e8:32:23:21:7d:2c:6f:ea:6d:69:ea:ab:71:1b:3c:9e:c3:f8: 65:b1:ab:4f:69:f6:ae:67:b5:26:15:9c:69:c9:40:b5:40:4b: 26:8d:8a:60:6a:40:b2:00:42:e6:29:19:82:ad:20:1e:90:ab: 65:46:75:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ORGPXu3UsJp2uUpE8wdcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzdmMDE3NzAwNjJjNmMyY2Q0ODk5ODQwMmY1MmY1OTI0NDFhMDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyh8Lx/LmAURQqq8S22QKhEMS0/Dc o5t/2l06QQ9Ki2ixiEMS8VJunzQIEqRZ/Vb0aTOD0U8MoRB3NzEjkENAnqzyVsan udoQAHWoHpyj2DqRcn49zL/7lhbKkzMGb42UxDBOJQBXs0TNqP63DvtS0d4VGZcC 7axq3I8CpwFkvYBPK4/PTVaReamKyY6y1A8AVd7KllXE0kijOPPj8ALDyQtKHbiY Z8McP44pw0DgzDQeyuZPP7BWh4XtGCar7UBpdnm85viDXMbYTH5835mMI0myxLVi N4C3Ty8wd1xlEXxvZSOboRaNIwYlYFewTQsNwVwYAavcDf6ooUHtIgtV3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHd/AXcAYsbCzUiZhAL1L1kkQaCLMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvZDM4QmR3Qml4c0xOU0ptRUF2VXZXU1JCb0lzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVY/3MA0G CSqGSIb3DQEBCwUAA4IBAQAu3bQn3JGT97azdd6LywQO9ft8yzn4Pv4l5X9P4tje /HuAKVy3uT/uVCNYLWXC6OsVhE6G9AOwCuoY1/+XT1hhGuLamTWOKgdsAFJjhyDc DkbyKLCmFJrdxmJ8DhyZ7BjEl83ftOcluuAcZUrUPnG0s/20aWyIL4wGKRdLbDU8 2WMn83jS4Pev46rvFD4wwROl39VueS8eHi7akPvpGCWiIz/o1iyatKMNaIiv14XE leW1Z//7/20cFEeNrJ4jGD0rvZcZeczoMiMhfSxv6m1p6qtxGzyew/hlsatPafau Z7UmFZxpyUC1QEsmjYpgakCyAELmKRmCrSAekKtlRnUY -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:29 2026 by rpki-client