This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/fLF8Vila1r0RN0oiVUNv1xvPqaA.roa File: fLF8Vila1r0RN0oiVUNv1xvPqaA.roa (raw, json) Hash identifier: /bMYQ7nOmx3+vzDvLERE8lHTa7z1YNrgI2/AZRCBmFU= Subject key identifier: 7C:B1:7C:56:29:5A:D6:BD:11:37:4A:22:55:43:6F:D7:1B:CF:A9:A0 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7C095A85C682F5BC41DC82F63122B Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/fLF8Vila1r0RN0oiVUNv1xvPqaA.roa Signing time: Thu 01 Jan 2026 18:17:49 +0000 ROA not before: Thu 01 Jan 2026 18:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 85.254.29.0/24 maxlen: 24 85.254.178.0/23 maxlen: 23 159.148.169.0/24 maxlen: 24 159.148.177.0/24 maxlen: 24 185.27.92.0/24 maxlen: 24 185.27.93.0/24 maxlen: 24 185.27.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:c0:95:a8:5c:68:2f:5b:c4:1d:c8:2f:63:12:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cb17c56295ad6bd11374a2255436fd71bcfa9a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cd:ff:a0:17:ef:5c:d2:0a:52:3e:60:ec:8c: 94:f2:61:13:52:45:bb:ce:dd:e8:fe:77:c8:23:5d: ec:69:4c:db:62:07:f8:05:92:24:89:b3:e0:d7:7e: 90:da:96:12:4b:5a:35:40:c4:d0:e3:bf:8a:05:fc: 20:6a:fe:9d:2c:ff:4d:e2:63:65:be:47:0c:05:4c: 79:2a:9e:e7:83:79:10:46:9e:61:2c:6f:55:54:34: ac:79:23:8f:46:32:e8:ea:b3:57:67:4e:4b:5b:fc: 99:77:d7:57:0f:a2:b7:97:31:82:b8:71:67:ec:d0: d9:25:72:9a:e2:57:21:35:22:50:bd:32:dc:23:85: 23:fd:71:27:69:56:85:1b:c5:bf:ce:8d:7a:52:78: a2:9e:34:d6:38:da:72:57:da:41:90:96:3e:3b:f7: 8d:ee:08:f8:4e:94:d0:bb:70:b2:2e:de:1f:da:03: ce:48:c9:f0:07:8e:a9:7f:67:85:bd:f5:d6:a2:6b: 79:a5:d3:c8:a7:96:ef:d6:c3:f8:e6:bb:2e:38:31: 3c:9e:13:61:16:c4:a8:7f:a0:1d:8c:01:78:ca:07: 49:94:5c:2d:30:79:ed:d9:62:2d:ef:91:1d:b1:28: b2:29:7e:b7:36:2f:ff:11:3a:22:69:6b:36:34:22: fc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B1:7C:56:29:5A:D6:BD:11:37:4A:22:55:43:6F:D7:1B:CF:A9:A0 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/fLF8Vila1r0RN0oiVUNv1xvPqaA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.254.29.0/24 85.254.178.0/23 159.148.169.0/24 159.148.177.0/24 185.27.92.0/23 185.27.95.0/24 Signature Algorithm: sha256WithRSAEncryption b5:e9:d1:bb:43:f5:ff:73:f6:23:ed:28:4f:4c:f6:5d:5a:8c: b4:e1:82:aa:bf:55:eb:89:be:d4:e1:33:c9:d5:18:21:00:3b: 50:80:39:0e:c0:98:c0:a3:59:1c:58:17:25:14:a7:59:54:1f: 1f:7a:81:6c:0c:ce:c5:d0:ef:ed:66:95:d7:26:b7:d2:56:92: f1:e5:07:94:80:f5:b9:5d:d9:62:9a:da:63:56:bd:a0:e1:bb: 17:b6:b3:32:ed:6e:48:f7:be:a3:1e:c1:dd:39:21:6e:8d:e5: 48:0c:57:20:1c:00:7f:97:16:51:59:b6:d3:c2:f1:a4:15:14: 3d:2a:7e:b1:e8:d6:73:45:39:85:37:a6:e3:8f:35:a1:db:c1: 0a:9c:0c:21:d2:d5:e3:e8:c8:c0:8d:76:54:42:7c:62:c0:d1: 2a:49:34:97:4a:32:f6:6d:ac:1d:fa:3b:0a:a9:07:10:ae:dc: a5:a8:2c:7a:86:cd:0b:37:d2:26:51:64:54:05:dc:3a:6c:36: 43:61:3b:09:2e:cc:7d:bd:7c:5c:7a:34:a2:0c:80:cd:e1:72: 8b:e3:62:70:8c:91:f9:ef:00:68:06:4a:f0:b2:84:27:5f:19: ef:17:2a:b1:6c:8a:b9:e9:1a:64:b2:be:0e:9c:b8:15:26:8f: cc:09:42:90 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt6x8CVqFxoL1vEHcgvYxIrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2IxN2M1NjI5NWFkNmJkMTEzNzRhMjI1NTQzNmZkNzFiY2ZhOWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl83/oBfvXNIKUj5g7IyU8mETUkW7 zt3o/nfII13saUzbYgf4BZIkibPg136Q2pYSS1o1QMTQ47+KBfwgav6dLP9N4mNl vkcMBUx5Kp7ng3kQRp5hLG9VVDSseSOPRjLo6rNXZ05LW/yZd9dXD6K3lzGCuHFn 7NDZJXKa4lchNSJQvTLcI4Uj/XEnaVaFG8W/zo16UniinjTWONpyV9pBkJY+O/eN 7gj4TpTQu3CyLt4f2gPOSMnwB46pf2eFvfXWomt5pdPIp5bv1sP45rsuODE8nhNh FsSof6AdjAF4ygdJlFwtMHnt2WIt75EdsSiyKX63Ni//EToiaWs2NCL85wIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFHyxfFYpWta9ETdKIlVDb9cbz6mgMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvZkxGOFZpbGExcjBSTjBvaVZVTnYxeHZQcWFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAVf4dAwQB Vf6yAwQAn5SpAwQAn5SxAwQBuRtcAwQAuRtfMA0GCSqGSIb3DQEBCwUAA4IBAQC1 6dG7Q/X/c/Yj7ShPTPZdWoy04YKqv1Xrib7U4TPJ1RghADtQgDkOwJjAo1kcWBcl FKdZVB8feoFsDM7F0O/tZpXXJrfSVpLx5QeUgPW5XdlimtpjVr2g4bsXtrMy7W5I 976jHsHdOSFujeVIDFcgHAB/lxZRWbbTwvGkFRQ9Kn6x6NZzRTmFN6bjjzWh28EK nAwh0tXj6MjAjXZUQnxiwNEqSTSXSjL2bawd+jsKqQcQrtylqCx6hs0LN9ImUWRU Bdw6bDZDYTsJLsx9vXxcejSiDIDN4XKL42JwjJH57wBoBkrwsoQnXxnvFyqxbIq5 6Rpksr4OnLgVJo/MCUKQ -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:49 2026 by rpki-client