This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/y8NP3ho_3rZLv6X5SlcqU7okdj4.roa File: y8NP3ho_3rZLv6X5SlcqU7okdj4.roa (raw, json) Hash identifier: R5kyLl6xPMQIDER6cHExweX1zkFO4tx8+1vp745NV+0= Subject key identifier: CB:C3:4F:DE:1A:3F:DE:B6:4B:BF:A5:F9:4A:57:2A:53:BA:24:76:3E Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E391116946FC4536059D5EA185600A1 Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/y8NP3ho_3rZLv6X5SlcqU7okdj4.roa Signing time: Fri 02 Jan 2026 10:20:27 +0000 ROA not before: Fri 02 Jan 2026 10:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201848 IP address blocks: 85.143.172.0/22 maxlen: 22 85.143.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:11:16:94:6f:c4:53:60:59:d5:ea:18:56:00:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbc34fde1a3fdeb64bbfa5f94a572a53ba24763e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9d:ef:4c:23:64:7c:5f:f1:1f:46:29:bb:fc: 56:aa:29:fa:9d:0f:22:07:c2:bd:00:98:8f:69:85: 38:24:cb:55:a4:37:12:53:cb:6f:a2:d4:3f:41:f6: ac:8b:bb:fe:f5:74:3d:b4:f5:24:e0:73:84:4e:e4: a4:b7:75:15:e6:4e:6c:b3:1b:ec:4a:b5:5e:d3:ed: 30:8b:33:ab:f1:25:99:40:b0:3a:63:4c:3e:fc:20: 52:e4:1b:ec:b7:13:61:90:8b:60:80:46:b7:e5:ae: 11:9c:bf:4b:db:e2:ca:ed:89:6d:93:b3:11:ec:37: ea:e8:81:34:8f:29:37:28:31:21:e2:d0:01:4e:a9: b5:40:ca:ea:76:c4:71:63:23:26:28:c0:89:17:ac: af:22:4b:64:59:5c:5b:6d:07:a1:1a:10:9b:69:8f: 26:ec:3f:69:63:a9:66:17:be:f9:82:b8:8e:49:df: 77:0b:e4:2d:7c:c2:91:16:18:4a:b5:2d:c1:a1:27: 71:c7:35:62:1b:4f:7e:4b:5c:4e:0f:77:f2:5a:b3: fb:c6:30:1d:57:32:09:42:a2:8a:6b:a7:a4:84:b7: 32:91:81:da:dc:c4:0e:1c:80:54:f5:2c:f7:94:6f: 58:14:f7:db:5c:f8:7c:c6:71:bd:bd:d3:cd:d8:85: ea:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C3:4F:DE:1A:3F:DE:B6:4B:BF:A5:F9:4A:57:2A:53:BA:24:76:3E X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/y8NP3ho_3rZLv6X5SlcqU7okdj4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.143.172.0/22 85.143.208.0/20 Signature Algorithm: sha256WithRSAEncryption 19:b7:3b:4f:ad:c0:06:96:9d:80:63:85:34:36:01:a2:f2:ba: c8:de:2d:77:8e:93:83:c6:6b:22:42:a9:bd:60:dc:44:3c:e9: 92:75:ff:ef:b5:2f:e7:d4:aa:23:f0:43:66:10:a8:77:e4:82: ce:86:78:7f:ca:4c:54:2c:04:9d:c9:fd:7d:d5:77:66:51:8f: e9:1a:d1:45:27:fe:29:2f:af:f1:ff:14:33:bb:1a:86:99:56: ee:6c:eb:71:58:27:11:00:4f:a2:74:5f:31:0f:34:bc:c6:fa: c6:48:4b:e9:34:22:fc:93:c9:5a:73:96:71:92:74:9a:11:bd: b2:52:3c:50:6b:b5:8b:99:e5:fa:86:e8:ef:e8:96:9f:0c:1b: f1:15:47:e3:87:6c:c4:a7:50:22:5a:2c:05:83:20:57:d7:0c: eb:46:05:24:11:01:5a:28:60:14:2f:2e:ed:fe:e2:50:62:5b: 8f:35:c9:87:e1:f2:37:5b:26:fe:34:f9:25:26:26:b7:5a:82: c6:13:ba:15:3c:de:65:2b:23:46:0a:34:89:ad:8b:bb:8e:f2: 94:0d:08:70:0e:77:44:52:7d:a0:77:3d:1d:36:2c:a2:4c:8c: b8:6a:72:1e:7c:95:4f:e5:11:81:39:3e:c7:08:8a:0d:5c:99: 40:a0:38:ba -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OREWlG/EU2BZ1eoYVgChMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmMzNGZkZTFhM2ZkZWI2NGJiZmE1Zjk0YTU3MmE1M2JhMjQ3NjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ3vTCNkfF/xH0Ypu/xWqin6nQ8i B8K9AJiPaYU4JMtVpDcSU8tvotQ/Qfasi7v+9XQ9tPUk4HOETuSkt3UV5k5ssxvs SrVe0+0wizOr8SWZQLA6Y0w+/CBS5BvstxNhkItggEa35a4RnL9L2+LK7Yltk7MR 7Dfq6IE0jyk3KDEh4tABTqm1QMrqdsRxYyMmKMCJF6yvIktkWVxbbQehGhCbaY8m 7D9pY6lmF775griOSd93C+QtfMKRFhhKtS3BoSdxxzViG09+S1xOD3fyWrP7xjAd VzIJQqKKa6ekhLcykYHa3MQOHIBU9Sz3lG9YFPfbXPh8xnG9vdPN2IXqfwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMvDT94aP962S7+l+UpXKlO6JHY+MB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEveThOUDNob18zclpMdjZYNVNsY3FVN29rZGo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCVY+sAwQE VY/QMA0GCSqGSIb3DQEBCwUAA4IBAQAZtztPrcAGlp2AY4U0NgGi8rrI3i13jpOD xmsiQqm9YNxEPOmSdf/vtS/n1Koj8ENmEKh35ILOhnh/ykxULASdyf191XdmUY/p GtFFJ/4pL6/x/xQzuxqGmVbubOtxWCcRAE+idF8xDzS8xvrGSEvpNCL8k8lac5Zx knSaEb2yUjxQa7WLmeX6hujv6JafDBvxFUfjh2zEp1AiWiwFgyBX1wzrRgUkEQFa KGAULy7t/uJQYluPNcmH4fI3Wyb+NPklJia3WoLGE7oVPN5lKyNGCjSJrYu7jvKU DQhwDndEUn2gdz0dNiyiTIy4anIefJVP5RGBOT7HCIoNXJlAoDi6 -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:19 2026 by rpki-client