This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/iuH7VfunhRqhS8NImI9tx0n1CrY.roa File: iuH7VfunhRqhS8NImI9tx0n1CrY.roa (raw, json) Hash identifier: C+Q/i9Ky2rgg5o/tKoFy1Rs3fDm7L5sfUpqkpPR/ut4= Subject key identifier: 8A:E1:FB:55:FB:A7:85:1A:A1:4B:C3:48:98:8F:6D:C7:49:F5:0A:B6 Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E390970A5EAF16B9E03CCFAC5B06281 Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/iuH7VfunhRqhS8NImI9tx0n1CrY.roa Signing time: Fri 02 Jan 2026 10:20:25 +0000 ROA not before: Fri 02 Jan 2026 10:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49929 IP address blocks: 85.143.104.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:09:70:a5:ea:f1:6b:9e:03:cc:fa:c5:b0:62:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ae1fb55fba7851aa14bc348988f6dc749f50ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3b:81:12:5f:5a:98:4e:05:31:10:aa:a3:b9: 07:d8:cb:27:0c:b8:2c:61:bb:17:6f:f0:66:67:c7: 37:18:3d:1d:54:cc:e3:a4:f2:81:35:01:b5:df:c3: dd:6d:47:13:ca:90:f2:47:62:94:c5:30:75:9c:ef: be:41:f0:5c:e9:68:b2:f6:ae:de:b2:54:49:fb:00: 82:bc:0f:35:8d:66:01:8e:d7:e0:c4:90:a5:c9:18: 94:c6:b0:4f:a2:b6:7f:a4:e4:a8:f3:fe:dd:96:2f: 58:38:17:89:9a:39:be:1d:f8:86:f5:14:90:59:7c: cb:0d:45:0d:2c:80:18:2e:d5:10:fe:4f:6f:4f:c2: ec:9a:45:1c:47:e0:52:ed:3e:b9:c5:c2:a8:6f:f4: 6a:36:f5:df:ae:20:fb:16:d6:ca:4a:a2:9f:0c:51: 40:f1:03:fa:35:bd:1c:c6:64:b3:71:b4:02:24:65: 96:46:df:ac:f8:28:66:3e:7c:89:e8:ff:b8:a6:04: bf:d7:97:e6:4b:f8:be:58:81:bc:d4:64:70:09:3d: e6:6d:7c:db:a4:55:9b:0a:1e:48:86:24:6d:a0:96: 21:89:3e:24:bb:a2:7e:97:34:2c:0d:cc:eb:cd:a7: f3:ee:cb:b5:00:08:d5:f7:89:08:fa:c0:c4:ed:c3: 5f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E1:FB:55:FB:A7:85:1A:A1:4B:C3:48:98:8F:6D:C7:49:F5:0A:B6 X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/iuH7VfunhRqhS8NImI9tx0n1CrY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.143.104.0/22 Signature Algorithm: sha256WithRSAEncryption 23:9b:38:26:3e:b5:0e:59:20:5c:8e:7b:76:ea:b8:51:d4:b2: 00:93:6b:97:5d:5d:90:a1:32:e1:1a:33:1e:ef:7b:f3:47:79: 9e:e3:88:1a:0c:d3:b3:f4:2b:21:5a:53:d9:2c:8f:cd:07:ef: b4:87:48:86:4e:ef:86:3c:1a:39:5d:d8:94:f4:ed:80:38:59: 36:95:59:b4:91:8a:73:c3:f4:83:ff:84:3e:a2:99:47:3c:88: 08:ce:d6:4a:2d:c9:16:3a:6f:9a:8a:0d:1e:7e:09:67:d8:43: b3:91:a0:87:29:61:ca:54:1e:97:15:d0:43:ab:1d:3a:e5:f3: 33:ed:cc:ab:2b:1a:28:3b:30:3c:92:b4:92:2f:dd:66:6e:be: 0d:5f:e5:0b:b9:71:a2:fb:59:1b:4a:83:92:e7:0c:3e:a5:e3: 3d:9a:d1:7d:27:f3:73:42:9c:60:a6:6c:a2:2b:c2:90:53:09: 80:b1:b6:83:e8:4e:53:76:e2:40:77:41:1c:e5:8a:84:1d:c5: d4:9b:a0:8f:b3:bd:f8:2e:96:66:c6:98:55:e0:34:fb:f4:ee: 9e:3b:e2:98:c7:38:86:c0:b8:a3:39:7a:6e:02:f2:81:84:26: 83:92:e6:18:7a:55:17:c9:cb:51:30:12:53:70:eb:b0:6c:07: c3:e5:ca:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OQlwperxa54DzPrFsGKBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWUxZmI1NWZiYTc4NTFhYTE0YmMzNDg5ODhmNmRjNzQ5ZjUwYWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjuBEl9amE4FMRCqo7kH2MsnDLgs YbsXb/BmZ8c3GD0dVMzjpPKBNQG138PdbUcTypDyR2KUxTB1nO++QfBc6Wiy9q7e slRJ+wCCvA81jWYBjtfgxJClyRiUxrBPorZ/pOSo8/7dli9YOBeJmjm+HfiG9RSQ WXzLDUUNLIAYLtUQ/k9vT8LsmkUcR+BS7T65xcKob/RqNvXfriD7FtbKSqKfDFFA 8QP6Nb0cxmSzcbQCJGWWRt+s+ChmPnyJ6P+4pgS/15fmS/i+WIG81GRwCT3mbXzb pFWbCh5IhiRtoJYhiT4ku6J+lzQsDczrzafz7su1AAjV94kI+sDE7cNfewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIrh+1X7p4UaoUvDSJiPbcdJ9Qq2MB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvaXVIN1ZmdW5oUnFoUzhOSW1JOXR4MG4xQ3JZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVY9oMA0G CSqGSIb3DQEBCwUAA4IBAQAjmzgmPrUOWSBcjnt26rhR1LIAk2uXXV2QoTLhGjMe 73vzR3me44gaDNOz9CshWlPZLI/NB++0h0iGTu+GPBo5XdiU9O2AOFk2lVm0kYpz w/SD/4Q+oplHPIgIztZKLckWOm+aig0efgln2EOzkaCHKWHKVB6XFdBDqx065fMz 7cyrKxooOzA8krSSL91mbr4NX+ULuXGi+1kbSoOS5ww+peM9mtF9J/NzQpxgpmyi K8KQUwmAsbaD6E5TduJAd0Ec5YqEHcXUm6CPs734LpZmxphV4DT79O6eO+KYxziG wLijOXpuAvKBhCaDkuYYelUXyctRMBJTcOuwbAfD5cox -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:49 2026 by rpki-client