This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/FgD3i787dasnALIIYuH3e6U1ois.roa File: FgD3i787dasnALIIYuH3e6U1ois.roa (raw, json) Hash identifier: IiclAO9/IgFiRpz2R3UneuZ658FynS73rRUd7jq8FE8= Subject key identifier: 16:00:F7:8B:BF:3B:75:AB:27:00:B2:08:62:E1:F7:7B:A5:35:A2:2B Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb Certificate serial: 019B7835243C99513FCAA90C9A3B7D9268B0 Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/FgD3i787dasnALIIYuH3e6U1ois.roa Signing time: Thu 01 Jan 2026 06:18:27 +0000 ROA not before: Thu 01 Jan 2026 06:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63199 IP address blocks: 185.56.44.0/24 maxlen: 24 185.87.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:24:3c:99:51:3f:ca:a9:0c:9a:3b:7d:92:68:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb Validity Not Before: Jan 1 06:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1600f78bbf3b75ab2700b20862e1f77ba535a22b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:94:ca:fd:92:45:92:ed:c3:ad:3a:9f:a7:a1: df:5f:d1:29:6f:d9:48:1f:57:36:ac:dc:6f:65:a1: b8:dc:6f:30:94:85:b3:fb:37:f2:ea:62:c4:39:9c: 7a:5d:82:f5:f6:72:72:65:75:0e:db:b6:cf:27:9b: e1:06:8d:ab:4f:b9:67:c3:a3:88:ed:65:cd:60:6b: 84:5a:bb:14:64:2b:4b:e8:aa:c5:fe:87:29:d4:28: 13:9c:08:88:a3:74:4f:8d:96:a0:a7:49:ba:81:cd: 54:91:a9:b1:45:c1:8c:a1:a7:60:a0:cc:dc:cb:f2: 93:7c:0d:c7:2f:0c:36:0a:55:ec:b4:c5:25:03:8b: 66:57:18:8e:af:6e:c4:69:d4:a0:f8:d1:16:d4:f5: df:83:0c:5e:3c:f0:c6:04:ce:ca:e5:ca:2f:8a:4d: ac:e5:9b:a5:26:bb:71:82:84:49:81:48:75:77:0c: 3b:26:fc:11:55:da:63:f2:32:fb:83:8c:66:4c:79: 7a:80:96:82:c6:e8:fd:0e:1f:39:a9:10:d9:e5:25: e8:94:d2:ea:70:a2:02:83:6a:4a:91:cf:42:47:5d: 35:1b:ee:4b:b1:86:55:59:f6:80:2e:eb:ec:8d:02: 49:d8:94:84:03:8d:9a:8f:2a:7b:17:be:94:43:8d: a7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:00:F7:8B:BF:3B:75:AB:27:00:B2:08:62:E1:F7:7B:A5:35:A2:2B X509v3 Authority Key Identifier: keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/FgD3i787dasnALIIYuH3e6U1ois.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.56.44.0/24 185.87.56.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:77:55:7f:29:5d:8d:3a:da:9a:9c:90:b9:8b:97:34:66:6b: 3d:9c:37:f5:b5:b5:da:c6:8c:db:9d:aa:39:89:38:cd:37:8a: d3:08:f4:b0:10:be:a9:0f:d1:37:74:d7:b9:aa:1e:5c:ac:f4: fc:6c:e2:52:6f:56:48:cc:68:1b:76:e5:11:b2:69:b3:e4:37: 54:46:a7:40:09:f1:0a:6c:09:d9:c5:a4:20:2b:f2:ac:52:f7: b6:89:a0:6d:37:42:9a:84:88:e5:9b:82:63:e9:bc:0b:ef:8f: b9:c4:2f:b6:c8:98:fd:b4:1c:41:84:f3:42:9b:d2:37:55:f7: 35:4e:03:3a:88:9a:56:f6:c8:1e:eb:60:4b:dd:86:38:0e:8c: 3b:50:ff:b9:07:3c:fb:1c:83:5c:92:0f:66:25:af:aa:16:32: 19:40:e7:67:5f:68:0c:c8:84:0d:6c:4e:48:5f:1e:ab:4e:a8: 5c:6a:04:86:d9:4f:f6:d6:0c:02:64:29:5c:1a:e9:68:50:ce: 1c:ee:07:54:a3:2d:51:a1:e2:68:0b:33:b1:68:2e:a9:ff:47: 88:e2:dc:94:32:69:8c:eb:b7:cc:c9:48:fc:2f:b3:ff:43:a5: e6:e5:41:7e:0b:65:86:5a:8d:7d:14:54:65:46:27:64:cd:0c: 10:bd:ba:9b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NSQ8mVE/yqkMmjt9kmiwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMjdhNjMxYmI2NzM4ZWI2OGJiNmVhNmM0MjRlZjRhN2Qx NGMzY2IwHhcNMjYwMTAxMDYxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjAwZjc4YmJmM2I3NWFiMjcwMGIyMDg2MmUxZjc3YmE1MzVhMjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5TK/ZJFku3DrTqfp6HfX9Epb9lI H1c2rNxvZaG43G8wlIWz+zfy6mLEOZx6XYL19nJyZXUO27bPJ5vhBo2rT7lnw6OI 7WXNYGuEWrsUZCtL6KrF/ocp1CgTnAiIo3RPjZagp0m6gc1UkamxRcGMoadgoMzc y/KTfA3HLww2ClXstMUlA4tmVxiOr27EadSg+NEW1PXfgwxePPDGBM7K5covik2s 5ZulJrtxgoRJgUh1dww7JvwRVdpj8jL7g4xmTHl6gJaCxuj9Dh85qRDZ5SXolNLq cKICg2pKkc9CR101G+5LsYZVWfaALuvsjQJJ2JSEA42ajyp7F76UQ42nOwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBYA94u/O3WrJwCyCGLh93ulNaIrMB8GA1UdIwQY MBaAFDAnpjG7ZzjraLtupsQk70p9FMPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYt MWRkNmQyODFjODhhLzEvRmdEM2k3ODdkYXNuQUxJSVl1SDNlNlUxb2lzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYtMWRkNmQyODFjODhh LzEvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuTgsAwQA uVc4MA0GCSqGSIb3DQEBCwUAA4IBAQA7d1V/KV2NOtqanJC5i5c0Zms9nDf1tbXa xozbnao5iTjNN4rTCPSwEL6pD9E3dNe5qh5crPT8bOJSb1ZIzGgbduURsmmz5DdU RqdACfEKbAnZxaQgK/KsUve2iaBtN0KahIjlm4Jj6bwL74+5xC+2yJj9tBxBhPNC m9I3Vfc1TgM6iJpW9sge62BL3YY4Dow7UP+5Bzz7HINckg9mJa+qFjIZQOdnX2gM yIQNbE5IXx6rTqhcagSG2U/21gwCZClcGuloUM4c7gdUoy1RoeJoCzOxaC6p/0eI 4tyUMmmM67fMyUj8L7P/Q6Xm5UF+C2WGWo19FFRlRidkzQwQvbqb -----END CERTIFICATE-----Generated at Sun Jan 18 11:24:57 2026 by rpki-client