This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/vTTp0-KK0l_fj4cLZRpBMsEuvCk.roa File: vTTp0-KK0l_fj4cLZRpBMsEuvCk.roa (raw, json) Hash identifier: 7xulZwskezugsDAmfZkwMuhBHjOg5lhFwauGfgjdAQs= Subject key identifier: BD:34:E9:D3:E2:8A:D2:5F:DF:8F:87:0B:65:1A:41:32:C1:2E:BC:29 Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E390C3CC2849C5384CAC1120AB274E3 Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/vTTp0-KK0l_fj4cLZRpBMsEuvCk.roa Signing time: Fri 02 Jan 2026 10:20:26 +0000 ROA not before: Fri 02 Jan 2026 10:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56679 IP address blocks: 85.143.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:0c:3c:c2:84:9c:53:84:ca:c1:12:0a:b2:74:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd34e9d3e28ad25fdf8f870b651a4132c12ebc29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0b:7a:6d:6c:58:f1:26:91:c5:4f:44:22:b4: 6d:3b:58:48:06:c5:e3:12:2d:4f:8e:9a:f1:9b:73: e6:5e:96:9e:fd:09:c9:21:e2:11:a4:2d:a1:10:79: 78:2c:93:17:09:a5:70:72:38:7a:5d:7a:63:86:fe: 43:87:27:c0:3c:bf:0a:99:f5:63:20:81:bd:09:13: 1a:4b:91:3b:c0:16:8d:a7:1b:a5:0e:6f:1d:1a:97: ee:82:6b:18:a3:e5:bd:c2:9f:ee:39:77:13:8f:bf: 73:38:bb:19:03:96:1d:71:ba:3d:11:a1:dd:3d:21: 93:d1:21:23:b5:33:10:d7:9f:a4:11:81:f8:75:78: 96:d7:91:aa:39:23:0f:47:c5:a9:5b:63:59:f6:9c: 7d:16:b9:03:f7:df:f7:74:ec:8e:1f:38:48:4f:12: 1e:4b:14:e7:a7:7d:b9:96:49:31:62:fa:7b:53:b0: 71:cb:3e:02:1b:4f:86:71:eb:c9:c8:a8:3e:3c:d6: 86:f1:0f:a6:b7:84:9b:5d:6f:0c:ee:4c:af:f6:e1: 8e:0b:9a:1f:a4:49:8e:12:60:52:d0:28:a0:22:ef: 01:44:13:35:be:1a:92:80:58:01:4c:24:64:7f:9b: 05:26:5d:7b:d9:5d:e3:e6:74:9c:f5:e9:08:40:f3: ce:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:34:E9:D3:E2:8A:D2:5F:DF:8F:87:0B:65:1A:41:32:C1:2E:BC:29 X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/vTTp0-KK0l_fj4cLZRpBMsEuvCk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.143.156.0/23 Signature Algorithm: sha256WithRSAEncryption 10:b8:d4:0b:9a:3b:86:28:6f:06:82:ae:a0:4e:56:b2:30:04: b9:5d:22:a6:b5:4b:60:a4:db:41:30:84:bf:ca:87:d9:8c:ee: e1:4b:64:07:3e:c8:64:e7:46:19:e8:f3:bf:de:5e:59:7b:21: ee:50:14:c4:4b:27:a6:7a:30:d8:44:ef:9e:e5:87:9a:8e:d6: 10:d7:df:bd:3b:56:19:e6:ae:bd:f3:b7:c4:69:c7:d3:dd:b7: 8e:db:a6:d4:a1:cd:1a:3d:4f:81:f4:95:ed:a3:a9:b4:6c:d3: 80:86:46:c5:ef:ae:b9:88:55:29:65:b0:af:8d:c9:d5:91:7e: 9e:d6:71:f8:b8:af:0f:27:81:f3:4b:ae:42:59:9c:c1:e9:18: 06:a4:08:77:89:cb:54:cc:23:06:ff:a4:49:1a:13:9c:05:3f: 9c:c7:3b:77:92:dd:0d:40:8b:3a:a5:e1:20:c1:61:b3:91:a6: dd:5e:35:e2:ab:2a:df:46:43:c1:4e:ec:69:3e:04:97:c2:73: cd:fa:55:87:67:a5:0e:30:6e:07:78:5c:bc:9c:fa:31:db:8d: 10:c2:24:f4:52:e3:a9:68:eb:b1:6f:8b:73:df:d6:d2:73:80: 7e:96:7b:ee:0c:aa:a9:98:b2:e7:47:c4:84:ef:1a:43:52:3d: 54:cf:b5:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OQw8woScU4TKwRIKsnTjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDM0ZTlkM2UyOGFkMjVmZGY4Zjg3MGI2NTFhNDEzMmMxMmViYzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgt6bWxY8SaRxU9EIrRtO1hIBsXj Ei1Pjprxm3PmXpae/QnJIeIRpC2hEHl4LJMXCaVwcjh6XXpjhv5DhyfAPL8KmfVj IIG9CRMaS5E7wBaNpxulDm8dGpfugmsYo+W9wp/uOXcTj79zOLsZA5Ydcbo9EaHd PSGT0SEjtTMQ15+kEYH4dXiW15GqOSMPR8WpW2NZ9px9FrkD99/3dOyOHzhITxIe SxTnp325lkkxYvp7U7Bxyz4CG0+GcevJyKg+PNaG8Q+mt4SbXW8M7kyv9uGOC5of pEmOEmBS0CigIu8BRBM1vhqSgFgBTCRkf5sFJl172V3j5nSc9ekIQPPO8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL006dPiitJf34+HC2UaQTLBLrwpMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvdlRUcDAtS0swbF9majRjTFpScEJNc0V1dkNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVY+cMA0G CSqGSIb3DQEBCwUAA4IBAQAQuNQLmjuGKG8Ggq6gTlayMAS5XSKmtUtgpNtBMIS/ yofZjO7hS2QHPshk50YZ6PO/3l5ZeyHuUBTESyemejDYRO+e5YeajtYQ19+9O1YZ 5q6987fEacfT3beO26bUoc0aPU+B9JXto6m0bNOAhkbF7665iFUpZbCvjcnVkX6e 1nH4uK8PJ4HzS65CWZzB6RgGpAh3ictUzCMG/6RJGhOcBT+cxzt3kt0NQIs6peEg wWGzkabdXjXiqyrfRkPBTuxpPgSXwnPN+lWHZ6UOMG4HeFy8nPox240QwiT0UuOp aOuxb4tz39bSc4B+lnvuDKqpmLLnR8SE7xpDUj1Uz7Ua -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:05 2026 by rpki-client