This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/85N61DY6T0inNnrqVUCM6sTdgKU.roa File: 85N61DY6T0inNnrqVUCM6sTdgKU.roa (raw, json) Hash identifier: E7jLGUVgfvH6Bf9X/Tr/dhAmN2pO8jtzEzXDclGZ/hs= Subject key identifier: F3:93:7A:D4:36:3A:4F:48:A7:36:7A:EA:55:40:8C:EA:C4:DD:80:A5 Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907 Certificate serial: 019B7C123352605F458BA09849BB08D46A1A Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/85N61DY6T0inNnrqVUCM6sTdgKU.roa Signing time: Fri 02 Jan 2026 00:18:46 +0000 ROA not before: Fri 02 Jan 2026 00:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24614 IP address blocks: 193.140.252.0/23 maxlen: 23 193.255.252.0/22 maxlen: 22 194.27.188.0/22 maxlen: 22 194.27.196.0/22 maxlen: 22 194.27.238.0/23 maxlen: 23 194.27.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:33:52:60:5f:45:8b:a0:98:49:bb:08:d4:6a:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907 Validity Not Before: Jan 2 00:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3937ad4363a4f48a7367aea55408ceac4dd80a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:29:dc:ec:5a:23:ac:d0:e2:c1:d4:23:f0:d4: 56:22:29:1f:2b:8c:9e:80:b9:5d:a0:45:a3:82:2e: 47:13:56:1a:fc:0d:5e:dc:b0:6f:34:87:2a:e3:20: af:3c:0e:8e:74:4b:1f:4c:90:b0:ad:7e:e8:b7:34: fc:90:bf:02:c2:96:01:08:f4:13:3b:0a:c7:8b:48: eb:12:d9:b7:ad:41:4c:2b:7c:92:5c:be:78:2f:7c: 82:25:c6:e5:0a:5e:b2:cd:12:1d:b8:18:f2:03:18: 74:83:3b:7e:d2:a3:ba:a9:b0:5c:2e:65:17:0b:8b: 53:fc:2b:78:52:04:13:0b:7c:90:ba:11:11:85:90: 4e:37:da:be:d4:d6:d7:1d:00:47:62:c6:c0:fc:df: 2b:a5:0b:7d:77:f9:fd:68:fc:cb:c6:94:79:e4:ae: dc:a7:50:27:c3:13:96:3b:34:e2:45:ab:37:31:0e: c2:4b:53:9d:87:86:cf:f5:74:44:ff:d2:cc:6c:a3: de:a8:b7:44:c2:24:18:53:ec:90:30:e9:81:e7:c3: c6:38:82:fa:85:32:b9:92:2b:b5:38:b8:2a:8e:e2: f0:a1:d9:f8:3b:4b:31:7c:76:cc:3f:1a:f0:c7:88: 64:98:e5:47:da:cb:c9:a3:e9:d9:00:58:c2:e5:56: 23:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:93:7A:D4:36:3A:4F:48:A7:36:7A:EA:55:40:8C:EA:C4:DD:80:A5 X509v3 Authority Key Identifier: keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/85N61DY6T0inNnrqVUCM6sTdgKU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.140.252.0/23 193.255.252.0/22 194.27.188.0/22 194.27.196.0/22 194.27.238.0-194.27.255.255 Signature Algorithm: sha256WithRSAEncryption 34:c6:bb:20:61:47:a9:06:16:ec:e0:5f:00:a6:c7:9c:79:97: bf:3c:67:21:7c:dd:66:85:24:98:0d:4c:04:15:00:35:04:1a: 99:73:52:3d:a1:35:62:d7:cc:08:ad:00:d0:a4:04:45:2a:a3: e1:3d:5c:e3:8f:5f:26:ec:ac:61:aa:b0:0e:a1:db:84:63:c6: db:33:f5:16:f4:96:14:4b:c1:d0:a0:d7:48:5b:f4:d2:d1:0a: 11:91:71:4c:18:51:46:d0:c5:87:8d:81:fa:ca:e1:6d:88:77: 4e:93:76:98:e7:58:57:fd:50:f2:14:23:5f:0d:50:27:99:7b: 7a:90:15:3e:2e:11:e8:b7:bc:e6:02:65:f2:22:ca:13:20:ad: 68:f4:8a:18:c5:d5:a5:24:d6:ba:06:d0:96:db:63:4e:99:be: ae:53:91:ad:6c:a9:99:bf:84:0c:93:4f:3d:7b:c2:df:16:8e: 5b:9a:27:00:f7:20:88:77:e6:d6:6e:2e:51:7c:2a:5b:60:98: 76:b1:80:5a:52:f4:81:7c:c9:98:d9:dc:c5:62:da:dc:8b:d9: 1f:bd:d9:cd:f8:5a:d8:0a:69:fe:0b:8d:19:4d:ba:c8:13:0f: 9d:a5:ac:b6:1c:25:9b:4a:02:6a:64:9f:19:35:1a:ee:88:e6: d4:e6:ef:e4 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt8EjNSYF9Fi6CYSbsI1GoaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NTE4ZDE4MDkyM2E3ZjNjMDA2NTNlYzEyYmM3MDJiOTVh YWI5MDcwHhcNMjYwMTAyMDAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzkzN2FkNDM2M2E0ZjQ4YTczNjdhZWE1NTQwOGNlYWM0ZGQ4MGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCnc7FojrNDiwdQj8NRWIikfK4ye gLldoEWjgi5HE1Ya/A1e3LBvNIcq4yCvPA6OdEsfTJCwrX7otzT8kL8CwpYBCPQT OwrHi0jrEtm3rUFMK3ySXL54L3yCJcblCl6yzRIduBjyAxh0gzt+0qO6qbBcLmUX C4tT/Ct4UgQTC3yQuhERhZBON9q+1NbXHQBHYsbA/N8rpQt9d/n9aPzLxpR55K7c p1AnwxOWOzTiRas3MQ7CS1Odh4bP9XRE/9LMbKPeqLdEwiQYU+yQMOmB58PGOIL6 hTK5kiu1OLgqjuLwodn4O0sxfHbMPxrwx4hkmOVH2svJo+nZAFjC5VYjtwIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFPOTetQ2Ok9IpzZ66lVAjOrE3YClMB8GA1UdIwQY MBaAFDdRjRgJI6fzwAZT7BK8cCuVqrkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgt NTk2NzE5MjBmYjYwLzEvODVONjFEWTZUMGluTm5ycVZVQ002c1RkZ0tVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgtNTk2NzE5MjBmYjYw LzEvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTArBAIAATAlAwQBwYz8AwQC wf/8AwQCwhu8AwQCwhvEMAsDBAHCG+4DAwLCGDANBgkqhkiG9w0BAQsFAAOCAQEA NMa7IGFHqQYW7OBfAKbHnHmXvzxnIXzdZoUkmA1MBBUANQQamXNSPaE1YtfMCK0A 0KQERSqj4T1c449fJuysYaqwDqHbhGPG2zP1FvSWFEvB0KDXSFv00tEKEZFxTBhR RtDFh42B+srhbYh3TpN2mOdYV/1Q8hQjXw1QJ5l7epAVPi4R6Le85gJl8iLKEyCt aPSKGMXVpSTWugbQlttjTpm+rlORrWypmb+EDJNPPXvC3xaOW5onAPcgiHfm1m4u UXwqW2CYdrGAWlL0gXzJmNncxWLa3IvZH73Zzfha2App/guNGU26yBMPnaWsthwl m0oCamSfGTUa7ojm1Obv5A== -----END CERTIFICATE-----Generated at Mon Jan 26 07:57:41 2026 by rpki-client