This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/roOXBhGFAF86gv52BSTW1-GJ5Ww.roa File: roOXBhGFAF86gv52BSTW1-GJ5Ww.roa (raw, json) Hash identifier: sU4TCChOSQ9hmPCHcaruiP1ZI0w7ReNQ3FWvH2HypdM= Subject key identifier: AE:83:97:06:11:85:00:5F:3A:82:FE:76:05:24:D6:D7:E1:89:E5:6C Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c Certificate serial: 019B7B36059428016DD9911637B1DCB01F15 Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/roOXBhGFAF86gv52BSTW1-GJ5Ww.roa Signing time: Thu 01 Jan 2026 20:18:16 +0000 ROA not before: Thu 01 Jan 2026 20:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39425 IP address blocks: 85.204.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:05:94:28:01:6d:d9:91:16:37:b1:dc:b0:1f:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c Validity Not Before: Jan 1 20:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae8397061185005f3a82fe760524d6d7e189e56c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d6:74:5e:ab:11:5e:73:da:3e:fc:5a:0c:e4: ea:66:d7:4d:58:31:7b:36:25:ba:77:77:3c:ac:7e: 3b:9b:fa:f1:92:a4:c1:a0:e4:20:6b:81:7b:b7:d0: c9:d7:14:6d:2f:f0:71:f4:d8:61:ff:e6:3a:b3:e9: 0e:f7:d5:01:2e:46:97:74:ca:75:3c:59:98:7b:ed: 5a:33:b4:15:12:f8:5b:9b:ff:0d:d4:ec:dc:b9:04: 42:bd:e3:14:e0:1f:7a:58:19:a2:22:0d:74:d6:c2: de:d6:c4:4b:af:23:7c:68:18:f8:f1:d7:c1:18:76: 36:5a:75:cf:3c:14:3b:7e:b4:f4:0e:bb:07:aa:c7: 88:bf:c5:a8:ed:b8:03:35:02:a2:63:9c:c9:02:fa: d6:35:27:f5:77:fe:e9:48:fa:d9:11:4d:b4:e9:d8: 2e:e8:95:08:55:3b:1c:ea:3b:12:d5:49:1f:7f:96: 17:8c:02:26:83:f7:02:ff:05:b1:d3:ef:12:4f:6e: 03:f2:9f:58:8b:e6:b4:f3:8a:01:37:72:31:c7:00: d9:f4:a5:82:9f:9b:76:39:f7:eb:5a:fc:27:d6:3c: 82:15:4a:08:f2:72:56:ba:dc:0a:a0:d5:24:d1:da: 60:1b:e0:06:d3:39:32:58:ba:7f:c4:d3:c0:c0:41: c9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:83:97:06:11:85:00:5F:3A:82:FE:76:05:24:D6:D7:E1:89:E5:6C X509v3 Authority Key Identifier: keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/roOXBhGFAF86gv52BSTW1-GJ5Ww.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.204.41.0/24 Signature Algorithm: sha256WithRSAEncryption 30:aa:d5:bd:88:73:67:7c:55:22:cb:cb:32:1a:3e:0f:2c:33: 7d:f4:c3:1d:06:b1:1b:75:7d:e8:e3:09:ad:53:6b:7d:52:e4: e1:65:42:58:31:2c:61:0a:86:89:72:98:29:07:e9:00:d1:05: 41:e9:cc:ff:69:91:3f:5c:92:c5:5a:b3:8f:05:3a:c1:39:a8: 60:91:a1:2e:e2:f2:eb:1f:c0:5d:1a:f9:d2:21:1e:77:5d:43: 43:7d:03:df:df:15:ed:8c:89:5e:c2:f3:06:3b:c8:d0:21:f2: 0b:8c:e6:09:62:56:35:98:be:1e:5a:ca:d8:23:a3:bc:7b:98: 8d:70:a7:f8:26:96:fe:ac:55:ab:2a:4b:72:61:fa:d5:bf:07: 47:ea:83:a0:7b:d9:15:29:4b:5d:e7:b4:ae:b5:f8:b8:26:7f: ff:5d:90:3d:b8:dc:16:3b:76:82:f1:f8:90:b2:eb:38:be:55: aa:9b:2e:9d:fc:d2:8e:42:8b:1d:91:8e:bc:66:06:51:85:35: 73:e3:f2:b6:7d:50:14:a4:67:87:73:c2:02:f3:e8:17:91:3a: c3:96:06:c2:0f:a4:5b:cd:f8:a3:e6:86:63:81:23:8e:bc:eb: 66:79:b1:a7:db:aa:df:b2:81:14:e3:92:5b:ba:75:f5:12:5d: e0:48:bd:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NgWUKAFt2ZEWN7HcsB8VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm NmMxNGMwHhcNMjYwMTAxMjAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTgzOTcwNjExODUwMDVmM2E4MmZlNzYwNTI0ZDZkN2UxODllNTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdZ0XqsRXnPaPvxaDOTqZtdNWDF7 NiW6d3c8rH47m/rxkqTBoOQga4F7t9DJ1xRtL/Bx9Nhh/+Y6s+kO99UBLkaXdMp1 PFmYe+1aM7QVEvhbm/8N1OzcuQRCveMU4B96WBmiIg101sLe1sRLryN8aBj48dfB GHY2WnXPPBQ7frT0DrsHqseIv8Wo7bgDNQKiY5zJAvrWNSf1d/7pSPrZEU206dgu 6JUIVTsc6jsS1Ukff5YXjAImg/cC/wWx0+8ST24D8p9Yi+a084oBN3IxxwDZ9KWC n5t2OffrWvwn1jyCFUoI8nJWutwKoNUk0dpgG+AG0zkyWLp/xNPAwEHJwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK6DlwYRhQBfOoL+dgUk1tfhieVsMB8GA1UdIwQY MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt OTc3ODY3NGVkYzk3LzEvcm9PWEJoR0ZBRjg2Z3Y1MkJTVFcxLUdKNVd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3 LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVcwpMA0G CSqGSIb3DQEBCwUAA4IBAQAwqtW9iHNnfFUiy8syGj4PLDN99MMdBrEbdX3o4wmt U2t9UuThZUJYMSxhCoaJcpgpB+kA0QVB6cz/aZE/XJLFWrOPBTrBOahgkaEu4vLr H8BdGvnSIR53XUNDfQPf3xXtjIlewvMGO8jQIfILjOYJYlY1mL4eWsrYI6O8e5iN cKf4Jpb+rFWrKktyYfrVvwdH6oOge9kVKUtd57Sutfi4Jn//XZA9uNwWO3aC8fiQ sus4vlWqmy6d/NKOQosdkY68ZgZRhTVz4/K2fVAUpGeHc8IC8+gXkTrDlgbCD6Rb zfij5oZjgSOOvOtmebGn26rfsoEU45JbunX1El3gSL3r -----END CERTIFICATE-----Generated at Sun Jan 25 21:24:38 2026 by rpki-client