This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/wBmIOpq2AdH80eVz-xM72a75bxY.roa File: wBmIOpq2AdH80eVz-xM72a75bxY.roa (raw, json) Hash identifier: LOD62raSiEyHmoEDmiO5ru4GTDoYY76zhC+0uqdCgxk= Subject key identifier: C0:19:88:3A:9A:B6:01:D1:FC:D1:E5:73:FB:13:3B:D9:AE:F9:6F:16 Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E39009B4ED290E2A1585287EFC7A4B8 Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/wBmIOpq2AdH80eVz-xM72a75bxY.roa Signing time: Fri 02 Jan 2026 10:20:23 +0000 ROA not before: Fri 02 Jan 2026 10:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8480 IP address blocks: 85.143.25.0/24 maxlen: 24 194.190.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:00:9b:4e:d2:90:e2:a1:58:52:87:ef:c7:a4:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c019883a9ab601d1fcd1e573fb133bd9aef96f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:30:9f:92:e2:7a:06:a0:35:04:d3:9c:d9:87: e6:50:f1:41:43:8a:79:4e:35:3b:a5:0c:f3:73:14: 9f:29:4f:ec:39:7d:fd:c6:b5:ec:89:88:13:32:63: 90:66:a6:ba:08:3c:97:03:61:ce:85:e6:b1:c6:13: 4f:89:87:df:61:9f:40:4a:ca:59:b8:6d:9f:86:ab: d1:a9:8d:4e:45:a6:94:0d:a1:9b:63:91:15:f1:55: fd:63:67:64:37:87:d7:fe:86:32:21:b5:77:35:bb: 08:33:c5:22:4b:7c:53:3d:d0:48:bf:5c:63:bd:94: 12:77:de:2d:81:57:59:cd:b5:e0:ac:95:b0:db:b2: f9:39:e1:f5:11:31:6b:f6:a0:07:12:0f:ac:45:a6: 50:87:67:b2:f4:a7:14:6a:c4:51:34:81:3e:1e:e8: ad:06:d5:76:f9:6e:2c:b0:19:c0:76:a3:6b:fd:5e: 6f:00:87:4e:02:e5:21:26:31:96:c2:a6:12:a4:61: b6:3a:70:8b:12:4d:b7:79:b2:c9:c1:d3:39:f4:f6: 93:f6:ce:94:6e:2e:b3:79:88:cc:cd:cd:40:2d:02: 8a:c0:59:fe:ce:48:8e:75:2f:f7:7c:1a:75:35:13: 20:7f:42:c2:7f:c9:ec:0e:83:a8:ee:21:84:21:dd: a0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:19:88:3A:9A:B6:01:D1:FC:D1:E5:73:FB:13:3B:D9:AE:F9:6F:16 X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/wBmIOpq2AdH80eVz-xM72a75bxY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.143.25.0/24 194.190.227.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:8d:33:05:8a:b0:ff:25:7a:a8:30:95:3d:89:e5:26:5a:51: 9c:01:8b:a1:db:b9:f2:ff:36:08:03:d2:d2:45:95:99:9a:38: 97:28:60:3e:54:32:2d:11:b8:9d:77:c7:bf:d4:c4:3b:79:6d: 8f:7c:af:a0:51:d0:42:67:fa:3c:7c:1c:ab:53:30:ac:e0:1b: ab:51:3f:7b:62:5f:dc:8e:0f:41:5a:25:27:e0:ec:e3:ca:4c: 38:af:3c:2e:1a:37:6f:87:49:76:cb:8c:c5:64:08:fa:54:d3: 78:89:6c:d4:4d:14:25:6c:bc:c9:3a:d7:1b:18:c9:34:9a:ef: 9c:f8:6d:d0:41:cd:fb:db:65:7e:67:22:e9:8b:19:8e:31:d0: 04:d9:60:98:f0:27:7e:47:d6:44:5f:e1:88:bb:ba:d3:72:a3: ed:2a:d4:75:b6:63:e7:30:ea:35:7b:b2:1b:5a:68:9a:b8:3c: 82:82:a9:72:1e:11:d1:bf:2a:f8:6c:cb:a9:0d:14:c8:30:4e: 39:54:64:8a:54:49:00:35:82:bd:7f:17:22:fa:54:16:5e:22: 95:3d:06:21:68:34:da:d9:19:b1:5c:66:36:86:19:12:ab:10: 4f:88:92:44:71:68:35:0f:a1:58:58:58:49:16:a9:e7:53:38: fc:da:84:ef -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OQCbTtKQ4qFYUofvx6S4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDE5ODgzYTlhYjYwMWQxZmNkMWU1NzNmYjEzM2JkOWFlZjk2ZjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDCfkuJ6BqA1BNOc2YfmUPFBQ4p5 TjU7pQzzcxSfKU/sOX39xrXsiYgTMmOQZqa6CDyXA2HOheaxxhNPiYffYZ9ASspZ uG2fhqvRqY1ORaaUDaGbY5EV8VX9Y2dkN4fX/oYyIbV3NbsIM8UiS3xTPdBIv1xj vZQSd94tgVdZzbXgrJWw27L5OeH1ETFr9qAHEg+sRaZQh2ey9KcUasRRNIE+Huit BtV2+W4ssBnAdqNr/V5vAIdOAuUhJjGWwqYSpGG2OnCLEk23ebLJwdM59PaT9s6U bi6zeYjMzc1ALQKKwFn+zkiOdS/3fBp1NRMgf0LCf8nsDoOo7iGEId2gPwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMAZiDqatgHR/NHlc/sTO9mu+W8WMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvd0JtSU9wcTJBZEg4MGVWei14TTcyYTc1YnhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVY8ZAwQA wr7jMA0GCSqGSIb3DQEBCwUAA4IBAQBcjTMFirD/JXqoMJU9ieUmWlGcAYuh27ny /zYIA9LSRZWZmjiXKGA+VDItEbidd8e/1MQ7eW2PfK+gUdBCZ/o8fByrUzCs4Bur UT97Yl/cjg9BWiUn4Ozjykw4rzwuGjdvh0l2y4zFZAj6VNN4iWzUTRQlbLzJOtcb GMk0mu+c+G3QQc3722V+ZyLpixmOMdAE2WCY8Cd+R9ZEX+GIu7rTcqPtKtR1tmPn MOo1e7IbWmiauDyCgqlyHhHRvyr4bMupDRTIME45VGSKVEkANYK9fxci+lQWXiKV PQYhaDTa2RmxXGY2hhkSqxBPiJJEcWg1D6FYWFhJFqnnUzj82oTv -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:24 2026 by rpki-client