This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/Sq1CvQy8o0B9tgh2Xu1eMwRJZtk.roa File: Sq1CvQy8o0B9tgh2Xu1eMwRJZtk.roa (raw, json) Hash identifier: HdfFsuae+bs6Px2O/nXidzw9nHeIbmVY360ACfcO/uA= Subject key identifier: 4A:AD:42:BD:0C:BC:A3:40:7D:B6:08:76:5E:ED:5E:33:04:49:66:D9 Certificate issuer: /CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a Certificate serial: 019B79ED399EA59025C8950DCF4D42D59133 Authority key identifier: CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/Sq1CvQy8o0B9tgh2Xu1eMwRJZtk.roa Signing time: Thu 01 Jan 2026 14:19:08 +0000 ROA not before: Thu 01 Jan 2026 14:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209366 IP address blocks: 85.208.96.0/22 maxlen: 22 85.208.96.0/24 maxlen: 24 85.208.97.0/24 maxlen: 24 85.208.98.0/24 maxlen: 24 85.208.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:39:9e:a5:90:25:c8:95:0d:cf:4d:42:d5:91:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a Validity Not Before: Jan 1 14:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4aad42bd0cbca3407db608765eed5e33044966d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:90:b2:6f:9f:83:e2:f0:ca:b6:09:2b:64:7c: f0:29:50:f4:62:ff:02:c2:0d:9b:da:82:69:05:33: ce:69:87:58:29:ca:c5:0d:65:91:28:d1:8b:f2:57: 52:2b:59:9a:9f:b7:1a:87:9d:8b:4c:02:37:22:73: 4b:1d:f5:97:5c:fb:47:08:05:c3:8b:9f:fc:20:fd: b7:86:41:e9:26:50:5c:38:66:3b:c0:31:83:6f:6d: 03:38:3c:6e:c5:a5:df:14:7f:b4:63:94:90:20:18: 08:a9:70:8b:4e:95:6a:0f:05:1b:d4:dd:2e:09:fb: 82:67:c7:b2:fd:20:22:fa:32:93:cb:81:a1:fb:f4: 10:1e:6e:e3:49:40:9f:aa:1b:b4:14:6a:f3:cb:f8: b7:bb:ec:a9:15:76:94:de:18:cc:de:7d:f4:1c:4f: fb:92:fb:7d:ac:91:d3:06:a2:94:08:c3:53:80:0b: 1b:b3:41:2e:6f:91:55:80:03:0d:84:7e:1b:ca:4d: 32:8f:d6:0e:d7:4f:94:9f:92:ac:21:a1:92:c1:7c: b4:21:13:c3:d0:c7:48:4a:7e:37:fa:a6:b8:2d:d7: c3:29:c6:a9:6f:ff:69:a6:6a:2a:09:ac:a7:ea:be: de:a2:91:62:ad:27:3a:80:4b:d9:98:52:7e:9c:38: 6f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AD:42:BD:0C:BC:A3:40:7D:B6:08:76:5E:ED:5E:33:04:49:66:D9 X509v3 Authority Key Identifier: keyid:CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/Sq1CvQy8o0B9tgh2Xu1eMwRJZtk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.208.96.0/22 Signature Algorithm: sha256WithRSAEncryption 03:5c:bb:3c:3b:31:c0:13:e7:f2:bb:2b:18:9c:83:6b:a1:89: 05:ad:67:e1:5f:5b:78:0a:53:d3:bb:ee:d9:a8:34:44:18:aa: 32:f9:2a:e3:24:5b:52:7d:c5:d6:81:97:1f:a1:a4:29:69:46: 46:93:5c:1f:db:53:64:5a:73:07:e6:bf:3e:38:99:64:fe:2c: c1:c3:a3:0f:fb:1a:1f:b5:0c:8e:22:ea:e3:bf:c0:e1:ed:6f: 67:cd:ee:0b:a8:d7:ec:3f:c1:29:38:c3:82:e3:aa:d4:b9:09: a3:b6:e1:6d:33:7a:a8:7d:82:9b:e7:a3:1a:d6:06:ca:c1:a7: 34:28:b7:88:e1:cb:70:f1:f2:ad:9f:34:12:bb:d9:69:24:e2: bf:1b:a5:34:1f:92:61:8b:c5:78:83:c0:cc:6f:3b:51:b7:39: 14:31:37:a7:4f:57:38:ef:14:39:a7:2c:f0:6a:6f:3e:b3:30: 0b:b9:e3:fe:7a:41:c8:de:32:79:71:75:d9:d1:ba:ed:c2:22: 70:78:ad:0a:09:d2:60:67:d0:2a:ee:43:4c:62:3a:17:24:96: fb:d6:98:88:89:8e:56:87:c1:ad:54:92:5d:7b:12:ef:17:51: 01:19:01:7a:77:fe:5e:2d:1f:7e:a3:95:26:96:27:13:5a:2b: e2:d9:f7:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57TmepZAlyJUNz01C1ZEzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjOTc3ZTlkNTJhZmJjNDc3OTlkMzk3NWZjZWU4YWM1MWNh MGNmNmEwHhcNMjYwMTAxMTQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWFkNDJiZDBjYmNhMzQwN2RiNjA4NzY1ZWVkNWUzMzA0NDk2NmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZCyb5+D4vDKtgkrZHzwKVD0Yv8C wg2b2oJpBTPOaYdYKcrFDWWRKNGL8ldSK1man7cah52LTAI3InNLHfWXXPtHCAXD i5/8IP23hkHpJlBcOGY7wDGDb20DODxuxaXfFH+0Y5SQIBgIqXCLTpVqDwUb1N0u CfuCZ8ey/SAi+jKTy4Gh+/QQHm7jSUCfqhu0FGrzy/i3u+ypFXaU3hjM3n30HE/7 kvt9rJHTBqKUCMNTgAsbs0Eub5FVgAMNhH4byk0yj9YO10+Un5KsIaGSwXy0IRPD 0MdISn43+qa4LdfDKcapb/9ppmoqCayn6r7eopFirSc6gEvZmFJ+nDhvdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEqtQr0MvKNAfbYIdl7tXjMESWbZMB8GA1UdIwQY MBaAFMyXfp1Sr7xHeZ05dfzuisUcoM9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekpkLW5WS3Z2RWQ1blRsMV9PNkt4UnlnejJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy85NWE1ZTYtNTU4My00Y2NlLTg2ZTkt ZTIzMDQ2MmZjNTdiLzEvU3ExQ3ZReThvMEI5dGdoMlh1MWVNd1JKWnRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy85NWE1ZTYtNTU4My00Y2NlLTg2ZTktZTIzMDQ2MmZjNTdi LzEvekpkLW5WS3Z2RWQ1blRsMV9PNkt4UnlnejJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVdBgMA0G CSqGSIb3DQEBCwUAA4IBAQADXLs8OzHAE+fyuysYnINroYkFrWfhX1t4ClPTu+7Z qDREGKoy+SrjJFtSfcXWgZcfoaQpaUZGk1wf21NkWnMH5r8+OJlk/izBw6MP+xof tQyOIurjv8Dh7W9nze4LqNfsP8EpOMOC46rUuQmjtuFtM3qofYKb56Ma1gbKwac0 KLeI4ctw8fKtnzQSu9lpJOK/G6U0H5Jhi8V4g8DMbztRtzkUMTenT1c47xQ5pyzw am8+szALueP+ekHI3jJ5cXXZ0brtwiJweK0KCdJgZ9Aq7kNMYjoXJJb71piIiY5W h8GtVJJdexLvF1EBGQF6d/5eLR9+o5UmlicTWivi2fc6 -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:56 2026 by rpki-client