This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/eIzJAPRXQh7bNSiMTqkj43SexEQ.roa File: eIzJAPRXQh7bNSiMTqkj43SexEQ.roa (raw, json) Hash identifier: OPcuV9o3PZg/eX83JrxqObu4QO1zcPYVg/IVI9NI1pc= Subject key identifier: 78:8C:C9:00:F4:57:42:1E:DB:35:28:8C:4E:A9:23:E3:74:9E:C4:44 Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E390DB0451BD218207990AB84D2E4E8 Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/eIzJAPRXQh7bNSiMTqkj43SexEQ.roa Signing time: Fri 02 Jan 2026 10:20:26 +0000 ROA not before: Fri 02 Jan 2026 10:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59714 IP address blocks: 85.143.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:0d:b0:45:1b:d2:18:20:79:90:ab:84:d2:e4:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=788cc900f457421edb35288c4ea923e3749ec444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:56:54:9d:3f:f8:e0:2c:d5:d1:5c:84:5a:92: 33:6c:92:38:86:dd:29:80:36:db:59:ad:56:73:3c: 63:81:e0:85:a2:f4:c3:a0:ba:c2:db:36:04:f4:08: ec:62:dc:66:45:28:98:4f:28:f5:d9:9a:a6:e2:1d: 86:28:f5:8f:7f:8f:79:2d:1a:aa:03:81:35:a5:ff: 0b:b2:91:bb:a7:74:06:db:dc:d1:10:c1:d7:ff:e0: b3:80:88:c1:71:73:0a:8f:76:a9:76:6a:19:93:e4: 9d:f9:ce:94:1d:d4:bb:50:98:28:38:5a:4c:bc:80: eb:9d:58:0f:4e:f9:69:30:8b:ff:0b:56:68:b3:74: 8a:32:f4:a8:fd:6e:5d:76:b0:1e:71:e7:59:4d:ec: 04:21:52:85:58:b1:a0:c9:16:38:5f:a8:b6:19:2c: 64:8c:6d:d2:d4:31:1b:cf:3d:da:49:ad:ac:93:9c: 3a:69:b9:16:f3:d7:77:4f:62:75:99:97:30:64:87: 99:50:1b:e1:c9:18:e8:e9:dc:02:c8:97:d8:f6:44: da:4d:12:1a:2c:e5:9d:64:08:d7:66:86:ad:79:1c: 92:72:c5:ee:97:fa:99:c1:da:27:db:41:09:03:de: 58:ca:13:53:5d:e0:9c:e8:3f:bf:37:ff:f6:b6:31: 14:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:8C:C9:00:F4:57:42:1E:DB:35:28:8C:4E:A9:23:E3:74:9E:C4:44 X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/eIzJAPRXQh7bNSiMTqkj43SexEQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.143.32.0/22 Signature Algorithm: sha256WithRSAEncryption 04:ce:43:0f:cf:c7:da:15:df:9c:fd:4a:2c:f9:37:f8:2b:3f: 7b:98:90:02:a2:5d:15:76:ed:8e:5a:bb:6d:7e:56:cf:18:de: be:cb:77:72:94:92:54:ec:70:5d:54:f8:be:3b:8d:11:9b:eb: 78:98:bf:bb:3e:58:32:bd:e1:63:e0:e7:8b:6f:4f:4f:a6:55: ef:01:c4:2f:7c:ae:f9:f5:1a:5d:e9:ce:c2:70:2f:9a:8b:99: cb:3f:db:fe:ec:13:53:24:c5:97:2f:52:34:56:88:21:96:60: 8c:2b:8e:b0:6b:ef:fb:02:8e:01:8d:2d:5d:85:a1:68:36:50: 3e:0c:08:72:1b:46:0b:55:ce:a7:01:0c:6e:83:c6:69:04:2a: 1e:29:7d:25:0c:3d:83:16:c3:ba:4e:c8:70:77:a0:4b:37:dc: 7e:cf:4d:d6:c0:47:47:55:34:9e:72:41:96:ef:a4:9d:2b:6e: b5:50:dc:8a:50:48:c8:5d:47:9d:f2:e7:41:c1:2d:4c:76:1b: 31:fa:65:c1:da:2c:19:1a:f2:8c:de:dc:57:4d:d1:14:5c:af: 07:88:1f:5d:db:05:0e:ac:89:7a:78:62:e1:04:3b:cf:07:55: 3b:d7:91:23:e7:03:c5:d1:53:77:11:12:15:7a:d4:df:1c:5c: e0:af:67:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OQ2wRRvSGCB5kKuE0uToMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODhjYzkwMGY0NTc0MjFlZGIzNTI4OGM0ZWE5MjNlMzc0OWVjNDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVZUnT/44CzV0VyEWpIzbJI4ht0p gDbbWa1WczxjgeCFovTDoLrC2zYE9AjsYtxmRSiYTyj12Zqm4h2GKPWPf495LRqq A4E1pf8LspG7p3QG29zREMHX/+CzgIjBcXMKj3apdmoZk+Sd+c6UHdS7UJgoOFpM vIDrnVgPTvlpMIv/C1Zos3SKMvSo/W5ddrAecedZTewEIVKFWLGgyRY4X6i2GSxk jG3S1DEbzz3aSa2sk5w6abkW89d3T2J1mZcwZIeZUBvhyRjo6dwCyJfY9kTaTRIa LOWdZAjXZoateRyScsXul/qZwdon20EJA95YyhNTXeCc6D+/N//2tjEUbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHiMyQD0V0Ie2zUojE6pI+N0nsREMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvZUl6SkFQUlhRaDdiTlNpTVRxa2o0M1NleEVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVY8gMA0G CSqGSIb3DQEBCwUAA4IBAQAEzkMPz8faFd+c/Uos+Tf4Kz97mJACol0Vdu2OWrtt flbPGN6+y3dylJJU7HBdVPi+O40Rm+t4mL+7PlgyveFj4OeLb09PplXvAcQvfK75 9Rpd6c7CcC+ai5nLP9v+7BNTJMWXL1I0VoghlmCMK46wa+/7Ao4BjS1dhaFoNlA+ DAhyG0YLVc6nAQxug8ZpBCoeKX0lDD2DFsO6Tshwd6BLN9x+z03WwEdHVTSeckGW 76SdK261UNyKUEjIXUed8udBwS1Mdhsx+mXB2iwZGvKM3txXTdEUXK8HiB9d2wUO rIl6eGLhBDvPB1U715Ej5wPF0VN3ERIVetTfHFzgr2f3 -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:36 2026 by rpki-client