This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/Fdb2MRiz20g2xgX0HTiyiVn6wdM.roa File: Fdb2MRiz20g2xgX0HTiyiVn6wdM.roa (raw, json) Hash identifier: P7ndLT2N2wnmbFCzRdtX0zBZJo6QlqplqMU+f7R4Fys= Subject key identifier: 15:D6:F6:31:18:B3:DB:48:36:C6:05:F4:1D:38:B2:89:59:FA:C1:D3 Certificate issuer: /CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7 Certificate serial: 019B7C800379233180D2B2B1A01FA14B3626 Authority key identifier: 8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/Fdb2MRiz20g2xgX0HTiyiVn6wdM.roa Signing time: Fri 02 Jan 2026 02:18:42 +0000 ROA not before: Fri 02 Jan 2026 02:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2856 IP address blocks: 185.68.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:03:79:23:31:80:d2:b2:b1:a0:1f:a1:4b:36:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7 Validity Not Before: Jan 2 02:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15d6f63118b3db4836c605f41d38b28959fac1d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:20:c3:15:49:2b:b6:92:96:66:1b:a1:eb:e2: e6:2d:92:3a:d8:4d:30:31:00:28:7c:90:81:b1:22: c1:e8:7d:39:84:a1:aa:d3:88:be:9d:7d:db:bb:14: dc:36:82:3f:85:f0:e8:22:09:21:34:64:b5:1f:56: 7f:f7:dc:59:f3:2e:3c:6b:35:70:03:41:50:da:d0: 55:70:b2:da:ae:58:93:a4:20:e8:19:0c:4b:d6:1c: 1e:0a:5c:da:70:74:4f:58:86:4a:d0:0b:6e:2e:7e: bf:1c:7a:93:c7:af:e4:32:53:38:a2:b7:6e:47:a3: 42:65:4a:e8:44:3e:6e:bd:de:ff:ae:d4:54:db:a9: 98:6b:70:ee:cc:fa:6d:a0:41:ba:c7:2b:0a:ac:1e: 4b:f2:ce:d4:ec:9a:7e:b3:ca:2f:b4:e7:c2:fd:8b: d8:38:0d:ec:66:27:c1:8c:70:2c:aa:4e:50:f2:25: 6e:55:ba:e4:09:1a:e4:04:a7:a3:4a:08:d2:56:b5: 18:f4:00:cc:b3:40:b0:66:93:bd:5c:d8:a1:de:b7: 9b:72:cc:e2:7d:70:bf:1b:37:bc:79:03:0a:b6:77: b5:40:9a:e6:66:35:72:ac:b0:ab:34:be:ec:78:2d: 59:61:07:5e:8c:08:e0:47:e5:9d:83:70:80:b7:4f: 40:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D6:F6:31:18:B3:DB:48:36:C6:05:F4:1D:38:B2:89:59:FA:C1:D3 X509v3 Authority Key Identifier: keyid:8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/Fdb2MRiz20g2xgX0HTiyiVn6wdM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.68.200.0/22 Signature Algorithm: sha256WithRSAEncryption 84:5b:bf:61:13:ce:34:a9:f3:ab:55:e2:cb:62:52:0e:84:bb: 57:8d:6e:72:25:42:53:26:b3:04:86:7e:0f:29:c0:7b:c2:30: 6a:dd:24:94:25:33:b4:a8:a8:49:22:db:33:da:d3:6f:1c:6a: ec:c7:c1:b1:3c:c2:2a:41:a4:d6:9b:34:6a:38:91:da:26:07: a0:d9:5b:ba:9b:c9:c6:b1:e5:f6:f2:48:d3:84:b2:22:ff:24: b2:89:f4:88:98:2d:f1:92:ec:bb:b3:fe:f7:5c:a6:68:dc:33: 17:8c:34:4e:77:07:ac:4b:02:f1:9c:9a:a6:c2:2f:7a:5f:a3: 5d:19:d8:24:0a:6b:d1:d5:16:75:bc:32:22:2c:20:c1:11:74: 24:3c:ad:f7:80:26:26:8c:c2:9c:9a:38:ba:a8:64:08:17:ea: e1:56:91:06:3a:13:86:c9:ac:96:28:0b:79:8a:0b:80:4a:6f: 9c:3f:fa:e6:60:00:ec:71:8e:e4:65:dd:4c:9e:80:89:30:aa: e6:d7:86:8d:73:01:bf:cf:9f:59:00:67:38:e3:ad:78:52:e5: c6:2f:c5:94:9a:ae:38:19:fb:78:c9:92:86:b6:37:c3:e3:57: bc:78:f9:02:d7:f8:fa:9d:7e:ea:1b:39:34:ff:3f:5f:95:9e: bd:dc:5a:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gAN5IzGA0rKxoB+hSzYmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNmEyM2EyZmQxYTA5NTYzNzhhMzdkNGZjZTI1OWRmMmJk Nzk0YTcwHhcNMjYwMTAyMDIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWQ2ZjYzMTE4YjNkYjQ4MzZjNjA1ZjQxZDM4YjI4OTU5ZmFjMWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyDDFUkrtpKWZhuh6+LmLZI62E0w MQAofJCBsSLB6H05hKGq04i+nX3buxTcNoI/hfDoIgkhNGS1H1Z/99xZ8y48azVw A0FQ2tBVcLLarliTpCDoGQxL1hweClzacHRPWIZK0AtuLn6/HHqTx6/kMlM4ordu R6NCZUroRD5uvd7/rtRU26mYa3DuzPptoEG6xysKrB5L8s7U7Jp+s8ovtOfC/YvY OA3sZifBjHAsqk5Q8iVuVbrkCRrkBKejSgjSVrUY9ADMs0CwZpO9XNih3rebcszi fXC/Gze8eQMKtne1QJrmZjVyrLCrNL7seC1ZYQdejAjgR+Wdg3CAt09AEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBXW9jEYs9tINsYF9B04solZ+sHTMB8GA1UdIwQY MBaAFItqI6L9GglWN4o31PziWd8r15SnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTJvam92MGFDVlkzaWpmVV9PSlozeXZYbEtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9mOTFiMmMtYzVmZS00NjI1LWExODAt OWE0NmVkNWI0MmRiLzEvRmRiMk1SaXoyMGcyeGdYMEhUaXlpVm42d2RNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9mOTFiMmMtYzVmZS00NjI1LWExODAtOWE0NmVkNWI0MmRi LzEvaTJvam92MGFDVlkzaWpmVV9PSlozeXZYbEtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUTIMA0G CSqGSIb3DQEBCwUAA4IBAQCEW79hE840qfOrVeLLYlIOhLtXjW5yJUJTJrMEhn4P KcB7wjBq3SSUJTO0qKhJItsz2tNvHGrsx8GxPMIqQaTWmzRqOJHaJgeg2Vu6m8nG seX28kjThLIi/ySyifSImC3xkuy7s/73XKZo3DMXjDROdwesSwLxnJqmwi96X6Nd GdgkCmvR1RZ1vDIiLCDBEXQkPK33gCYmjMKcmji6qGQIF+rhVpEGOhOGyayWKAt5 iguASm+cP/rmYADscY7kZd1MnoCJMKrm14aNcwG/z59ZAGc44614UuXGL8WUmq44 Gft4yZKGtjfD41e8ePkC1/j6nX7qGzk0/z9flZ693FpT -----END CERTIFICATE-----Generated at Thu Jan 8 17:33:28 2026 by rpki-client