This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/fdxnE6OfHNBIxSHNeftFUDRkCRU.roa File: fdxnE6OfHNBIxSHNeftFUDRkCRU.roa (raw, json) Hash identifier: HDC+q+SW4WD25e2aLXsOvAx6Hurmlvfu1WT0y7vE/Wg= Subject key identifier: 7D:DC:67:13:A3:9F:1C:D0:48:C5:21:CD:79:FB:45:50:34:64:09:15 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7DA3C157E696D2DB84E2C292F29C6 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/fdxnE6OfHNBIxSHNeftFUDRkCRU.roa Signing time: Thu 01 Jan 2026 18:17:56 +0000 ROA not before: Thu 01 Jan 2026 18:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201673 IP address blocks: 85.254.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:da:3c:15:7e:69:6d:2d:b8:4e:2c:29:2f:29:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ddc6713a39f1cd048c521cd79fb455034640915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f5:55:95:61:17:0d:92:2f:c3:24:67:8f:9a: 00:f7:c6:83:a6:d7:6e:05:37:b2:f7:b7:80:ae:e8: cd:b4:56:4c:08:4a:60:19:1d:57:6b:71:3c:df:ae: 37:22:70:1f:42:b6:b7:80:3c:13:05:ac:21:61:3a: ba:d9:7b:c5:69:41:55:cd:72:a1:bb:40:00:de:86: a4:ee:39:2d:5c:a3:9a:a5:cc:30:f6:3b:2d:db:ac: 06:72:e8:fa:75:45:5a:bc:3e:4e:10:8c:46:d3:08: c5:b3:50:57:da:4b:df:5d:6e:fb:6a:90:e2:a7:5d: 83:84:b8:d6:e7:18:4b:49:53:51:d5:a5:21:5d:e8: 96:57:2e:52:f9:98:9f:06:f6:37:a9:9c:31:a6:08: a1:33:08:56:5b:1e:db:56:aa:bd:be:4a:5a:e1:51: bc:db:40:78:de:84:0d:13:34:f9:78:ee:d1:ac:d0: ae:cf:a0:45:b6:5c:21:24:ef:9a:ff:9e:ea:41:e4: 68:48:f7:10:b3:b1:ae:7c:33:4c:a5:1e:37:10:ed: 30:f0:96:35:68:12:a3:52:4e:4c:8e:c1:ef:f2:2d: 14:d5:67:86:f0:9c:b0:d9:3f:7b:5c:50:a4:c3:6e: dd:c7:fd:07:6d:19:50:f9:de:74:ad:79:b8:e4:b8: 8d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:DC:67:13:A3:9F:1C:D0:48:C5:21:CD:79:FB:45:50:34:64:09:15 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/fdxnE6OfHNBIxSHNeftFUDRkCRU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.254.148.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:50:2d:9d:1f:18:41:83:ad:6d:f4:70:ba:0d:54:a4:e4:4d: 26:94:01:58:c2:a5:76:d4:2d:9a:9f:5b:1d:1d:36:79:49:ba: 0b:dd:26:87:2d:a3:c6:33:8e:8f:87:27:e9:6a:78:7a:64:3d: 3f:ff:00:02:ab:85:80:8e:b0:0e:5d:9f:26:26:17:ed:e6:e7: 2e:4e:03:b4:3b:b9:6b:7c:9f:34:bf:ad:43:eb:ad:f4:b7:8b: 76:e6:82:60:06:28:3d:8b:9a:38:95:6d:26:b5:f2:36:f9:4a: 45:8a:66:92:08:bf:f2:29:5d:d8:fc:80:3f:c5:24:d9:c8:aa: b5:75:b0:00:de:99:c8:c9:aa:ab:de:1b:2d:9d:e0:6d:3b:0d: b1:ff:37:54:64:bc:5e:33:26:6e:39:ba:85:de:1b:a7:f5:99: aa:35:69:84:7f:d2:49:40:13:1d:24:4d:03:43:35:ca:4f:6a: 21:2d:71:e4:06:7c:40:e7:62:4f:05:28:7c:9e:0a:67:08:c3: 26:50:8c:2e:1f:af:9e:14:98:e4:11:33:e2:f1:8a:aa:ff:14: 2d:e8:cd:44:be:cb:df:d9:e0:ed:ae:b8:c0:57:ee:32:f3:39: 67:b4:ba:3f:c3:37:8c:87:8d:e2:6d:17:a9:f0:74:9b:40:31: 84:ee:f0:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x9o8FX5pbS24TiwpLynGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGRjNjcxM2EzOWYxY2QwNDhjNTIxY2Q3OWZiNDU1MDM0NjQwOTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvVVlWEXDZIvwyRnj5oA98aDptdu BTey97eArujNtFZMCEpgGR1Xa3E83643InAfQra3gDwTBawhYTq62XvFaUFVzXKh u0AA3oak7jktXKOapcww9jst26wGcuj6dUVavD5OEIxG0wjFs1BX2kvfXW77apDi p12DhLjW5xhLSVNR1aUhXeiWVy5S+ZifBvY3qZwxpgihMwhWWx7bVqq9vkpa4VG8 20B43oQNEzT5eO7RrNCuz6BFtlwhJO+a/57qQeRoSPcQs7GufDNMpR43EO0w8JY1 aBKjUk5MjsHv8i0U1WeG8Jyw2T97XFCkw27dx/0HbRlQ+d50rXm45LiNeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH3cZxOjnxzQSMUhzXn7RVA0ZAkVMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvZmR4bkU2T2ZITkJJeFNITmVmdEZVRFJrQ1JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVf6UMA0G CSqGSIb3DQEBCwUAA4IBAQB9UC2dHxhBg61t9HC6DVSk5E0mlAFYwqV21C2an1sd HTZ5SboL3SaHLaPGM46Phyfpanh6ZD0//wACq4WAjrAOXZ8mJhft5ucuTgO0O7lr fJ80v61D6630t4t25oJgBig9i5o4lW0mtfI2+UpFimaSCL/yKV3Y/IA/xSTZyKq1 dbAA3pnIyaqr3hstneBtOw2x/zdUZLxeMyZuObqF3hun9ZmqNWmEf9JJQBMdJE0D QzXKT2ohLXHkBnxA52JPBSh8ngpnCMMmUIwuH6+eFJjkETPi8Yqq/xQt6M1Evsvf 2eDtrrjAV+4y8zlntLo/wzeMh43ibRep8HSbQDGE7vD/ -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:30 2026 by rpki-client