This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/g1nqDrifBLrkTLAeCdnDSVKedWw.roa File: g1nqDrifBLrkTLAeCdnDSVKedWw.roa (raw, json) Hash identifier: Htq1M77i9JDzDZ8afszZN8edWOqPNuxzDCK9MXj7Atg= Subject key identifier: 83:59:EA:0E:B8:9F:04:BA:E4:4C:B0:1E:09:D9:C3:49:52:9E:75:6C Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019A5391EB34F76356ECB95D8478029876EA Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/g1nqDrifBLrkTLAeCdnDSVKedWw.roa Signing time: Wed 05 Nov 2025 10:31:03 +0000 ROA not before: Wed 05 Nov 2025 10:31:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50340 IP address blocks: 85.142.144.0/23 maxlen: 24 85.142.147.0/24 maxlen: 24 85.143.52.0/23 maxlen: 24 85.143.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:53:91:eb:34:f7:63:56:ec:b9:5d:84:78:02:98:76:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Nov 5 10:31:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8359ea0eb89f04bae44cb01e09d9c349529e756c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f1:65:f9:3b:10:25:21:e8:de:65:2c:4d:c5: 4e:16:d7:c0:ef:bb:1a:37:97:b7:c6:6d:5a:ab:33: d4:ca:df:76:3e:0c:75:21:ef:4e:9e:5f:87:ae:8a: c5:67:0c:42:4d:6e:ba:61:0d:37:ff:99:76:5d:0d: 15:1f:cd:2d:b3:5f:85:08:c5:15:1b:ef:f8:49:3b: d4:94:0d:d8:45:3e:c2:ac:ef:97:01:61:68:6f:de: 6c:a1:79:ec:00:8e:49:37:aa:11:0a:6a:7c:9f:b5: bb:a4:6c:a9:15:25:45:4f:04:28:e2:25:80:c1:53: 18:3c:4f:65:a1:22:82:47:ce:2c:9f:98:41:16:5a: c9:88:d0:37:05:0a:ce:12:ce:c6:f8:97:4d:9e:0b: 34:5a:23:b0:39:06:4c:6f:06:88:11:ff:f2:46:d8: 43:a6:76:3a:a6:99:ff:5f:3b:d6:56:6e:59:b1:dc: 4d:56:36:be:78:34:8a:0d:f6:83:34:b3:14:45:67: 3a:0d:a9:f8:ad:77:dd:b8:e6:0e:ca:e0:77:f2:7e: 14:86:14:ad:9e:41:7c:62:d4:1b:cd:32:c1:87:65: 52:84:bc:63:9f:7a:2f:36:76:ae:b1:bc:76:22:99: a6:be:3c:3c:50:39:12:0f:47:b0:5e:06:b4:ba:ca: 76:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:59:EA:0E:B8:9F:04:BA:E4:4C:B0:1E:09:D9:C3:49:52:9E:75:6C X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/g1nqDrifBLrkTLAeCdnDSVKedWw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.142.144.0/23 85.142.147.0/24 85.143.52.0-85.143.54.255 Signature Algorithm: sha256WithRSAEncryption 25:8e:34:30:cc:37:d7:e2:3e:5c:f5:08:c3:09:6f:bc:e2:5a: 6e:16:7f:19:2f:97:35:07:45:32:94:40:9b:9f:a1:2b:79:69: bd:f0:df:b4:11:22:a7:f7:a5:ed:72:d5:72:1e:e2:6a:46:62: 02:25:c1:16:31:8b:54:c6:f2:b8:22:c0:54:8b:43:d3:69:19: 9b:da:87:73:35:7c:cf:16:4d:0f:e0:e4:58:e6:a9:71:f7:4f: 33:1d:d1:66:9b:f3:09:74:5d:19:9b:90:ee:49:ec:30:48:f5: 9e:2c:fb:65:56:50:b2:e6:54:6f:0d:71:00:b9:11:5f:3c:5a: 65:35:88:e6:e2:00:88:57:08:69:c8:89:3d:fd:f8:58:0a:73: 2b:38:89:fe:90:62:97:19:b3:77:f7:dd:19:1a:f0:4b:95:e3: ea:70:31:5e:7d:85:f1:d5:5c:ab:e3:e5:69:8c:b4:ab:15:68: 1a:1f:0c:30:7c:e0:7e:f2:57:f1:11:bb:94:37:d4:20:e0:86: a2:c7:6a:c5:df:be:23:d3:b6:9b:ab:18:65:02:f0:38:55:68: 1c:18:01:29:cd:11:61:65:10:50:87:c8:7b:10:cd:9b:d8:66: c9:68:cb:14:5e:0f:ea:1d:52:eb:f9:65:89:2d:d0:aa:c1:ad: 7b:ba:a2:ff -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZpTkes092NW7LldhHgCmHbqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjUxMTA1MTAzMTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzU5ZWEwZWI4OWYwNGJhZTQ0Y2IwMWUwOWQ5YzM0OTUyOWU3NTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfFl+TsQJSHo3mUsTcVOFtfA77sa N5e3xm1aqzPUyt92Pgx1Ie9Onl+HrorFZwxCTW66YQ03/5l2XQ0VH80ts1+FCMUV G+/4STvUlA3YRT7CrO+XAWFob95soXnsAI5JN6oRCmp8n7W7pGypFSVFTwQo4iWA wVMYPE9loSKCR84sn5hBFlrJiNA3BQrOEs7G+JdNngs0WiOwOQZMbwaIEf/yRthD pnY6ppn/XzvWVm5ZsdxNVja+eDSKDfaDNLMURWc6Dan4rXfduOYOyuB38n4UhhSt nkF8YtQbzTLBh2VShLxjn3ovNnausbx2Ipmmvjw8UDkSD0ewXga0usp2zwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFINZ6g64nwS65EywHgnZw0lSnnVsMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvZzFucURyaWZCTHJrVExBZUNkbkRTVktlZFd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBVY6QAwQA VY6TMAwDBAJVjzQDBABVjzYwDQYJKoZIhvcNAQELBQADggEBACWONDDMN9fiPlz1 CMMJb7ziWm4WfxkvlzUHRTKUQJufoSt5ab3w37QRIqf3pe1y1XIe4mpGYgIlwRYx i1TG8rgiwFSLQ9NpGZvah3M1fM8WTQ/g5FjmqXH3TzMd0Wab8wl0XRmbkO5J7DBI 9Z4s+2VWULLmVG8NcQC5EV88WmU1iObiAIhXCGnIiT39+FgKcys4if6QYpcZs3f3 3Rka8EuV4+pwMV59hfHVXKvj5WmMtKsVaBofDDB84H7yV/ERu5Q31CDghqLHasXf viPTtpurGGUC8DhVaBwYASnNEWFlEFCHyHsQzZvYZsloyxReD+odUuv5ZYkt0KrB rXu6ov8= -----END CERTIFICATE-----Generated at Sat Dec 6 09:42:07 2025 by rpki-client