This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/fKYfVT1YDQ8JUaTATaBTlPz4QNw.roa File: fKYfVT1YDQ8JUaTATaBTlPz4QNw.roa (raw, json) Hash identifier: oYpajimnxUNbsLq6vnCVkRjpUdwX5aoikIaxhzhw2Vw= Subject key identifier: 7C:A6:1F:55:3D:58:0D:0F:09:51:A4:C0:4D:A0:53:94:FC:F8:40:DC Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1 Certificate serial: 019B7E3885ED20DF53FC79813C595ACBF52D Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/fKYfVT1YDQ8JUaTATaBTlPz4QNw.roa Signing time: Fri 02 Jan 2026 10:19:51 +0000 ROA not before: Fri 02 Jan 2026 10:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 185.114.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:85:ed:20:df:53:fc:79:81:3c:59:5a:cb:f5:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1 Validity Not Before: Jan 2 10:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ca61f553d580d0f0951a4c04da05394fcf840dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5e:2f:54:aa:7a:44:d6:22:e3:eb:59:9e:5b: 0c:1b:6f:de:ae:72:55:3b:4b:6f:2f:75:0d:ff:2a: ee:bf:32:af:11:c6:28:5c:00:39:1f:9a:77:57:50: f1:ee:de:73:fb:06:62:70:0f:00:7f:46:ac:ec:46: 72:82:60:fc:fa:54:1b:ed:07:db:de:da:50:a8:dc: 0d:c3:61:61:90:01:55:4a:32:5f:55:9f:ce:43:0c: 0e:b9:09:30:07:6b:a5:7a:86:2e:33:e2:cd:2b:93: b2:2d:9b:b8:4b:e3:df:c0:ed:78:7a:d4:1c:08:9e: 72:92:1c:7e:47:49:5c:03:9b:9c:1c:82:22:65:f7: b6:26:4b:d8:65:95:9d:3a:6d:a0:e0:9a:7e:e4:b6: 6f:e4:70:be:d6:f7:3c:49:7c:73:2e:76:e1:1c:43: 8c:c6:76:eb:f1:d8:bf:4a:9e:3c:96:13:ea:ec:99: 1a:12:59:49:83:5d:b2:04:f4:3d:a2:e8:59:d0:cb: 46:c0:ce:94:5d:aa:82:35:31:ab:fe:04:03:30:98: 25:37:ef:21:bc:1c:53:cc:20:09:22:f5:e7:db:d4: 20:3b:d4:1f:b0:ba:70:13:08:68:9e:cb:c0:37:73: 8f:e7:2a:95:78:43:8e:ef:86:ab:f5:ac:67:9d:8d: 18:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A6:1F:55:3D:58:0D:0F:09:51:A4:C0:4D:A0:53:94:FC:F8:40:DC X509v3 Authority Key Identifier: keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/fKYfVT1YDQ8JUaTATaBTlPz4QNw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.114.35.0/24 Signature Algorithm: sha256WithRSAEncryption ae:59:5e:07:33:0f:29:90:3f:cf:8b:a9:35:41:79:a6:7a:30: a7:dc:78:cc:19:f4:78:e0:8b:23:87:1f:e2:a1:7b:4a:27:94: 37:e8:6e:f2:9a:38:f5:eb:94:7d:a2:c2:2a:f9:a4:3c:3c:95: db:b1:22:68:c8:cc:99:97:b6:8a:5d:8e:3b:bf:57:70:99:fa: 83:2a:83:a2:65:ad:9f:2e:04:47:9c:75:95:66:f0:b7:0a:a2: d1:29:8d:ab:db:a2:19:3b:f9:b4:5d:b7:fa:5f:ca:dd:93:60: 78:73:45:b8:dd:68:17:d3:b2:96:ee:21:5d:f0:24:72:97:c7: 03:0e:00:36:2b:06:76:f3:6f:93:4b:f5:d1:28:58:ef:c6:eb: d1:ff:1e:06:c4:cc:c1:0f:d2:98:5d:a8:53:ed:a8:56:96:7e: 9a:66:9c:29:c4:f6:7f:bf:f4:24:b1:dd:be:c4:48:c8:9b:8d: 70:ea:aa:0f:78:f4:c3:1d:8d:bc:49:ed:fe:35:d4:d7:4d:69: e4:15:2c:db:a0:08:ad:46:b2:0a:d9:d8:5b:78:22:ae:62:d8: e9:82:1a:e6:62:b7:46:8c:f3:57:02:b1:1d:f6:11:df:01:0a: 76:2e:34:ad:c5:5f:d6:40:75:c3:ee:6f:10:dc:ab:9d:33:14: 61:5d:4b:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OIXtIN9T/HmBPFlay/UtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMTRhN2UyYThjNzAxMjMyNWFlOTczZWQxYTJiYmEwNWIy YmI5YzEwHhcNMjYwMTAyMTAxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2E2MWY1NTNkNTgwZDBmMDk1MWE0YzA0ZGEwNTM5NGZjZjg0MGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul4vVKp6RNYi4+tZnlsMG2/ernJV O0tvL3UN/yruvzKvEcYoXAA5H5p3V1Dx7t5z+wZicA8Af0as7EZygmD8+lQb7Qfb 3tpQqNwNw2FhkAFVSjJfVZ/OQwwOuQkwB2uleoYuM+LNK5OyLZu4S+PfwO14etQc CJ5ykhx+R0lcA5ucHIIiZfe2JkvYZZWdOm2g4Jp+5LZv5HC+1vc8SXxzLnbhHEOM xnbr8di/Sp48lhPq7JkaEllJg12yBPQ9ouhZ0MtGwM6UXaqCNTGr/gQDMJglN+8h vBxTzCAJIvXn29QgO9QfsLpwEwhonsvAN3OP5yqVeEOO74ar9axnnY0Y9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHymH1U9WA0PCVGkwE2gU5T8+EDcMB8GA1UdIwQY MBaAFBIUp+KoxwEjJa6XPtGiu6BbK7nBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQt ZTljMzY0OWMxMjE4LzEvZktZZlZUMVlEUThKVWFUQVRhQlRsUHo0UU53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQtZTljMzY0OWMxMjE4 LzEvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXIjMA0G CSqGSIb3DQEBCwUAA4IBAQCuWV4HMw8pkD/Pi6k1QXmmejCn3HjMGfR44Isjhx/i oXtKJ5Q36G7ymjj165R9osIq+aQ8PJXbsSJoyMyZl7aKXY47v1dwmfqDKoOiZa2f LgRHnHWVZvC3CqLRKY2r26IZO/m0Xbf6X8rdk2B4c0W43WgX07KW7iFd8CRyl8cD DgA2KwZ282+TS/XRKFjvxuvR/x4GxMzBD9KYXahT7ahWln6aZpwpxPZ/v/Qksd2+ xEjIm41w6qoPePTDHY28Se3+NdTXTWnkFSzboAitRrIK2dhbeCKuYtjpghrmYrdG jPNXArEd9hHfAQp2LjStxV/WQHXD7m8Q3KudMxRhXUu9 -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:14 2026 by rpki-client