This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fNcZUGLV_G1ZT3GPJF8oy4KasOw.roa File: fNcZUGLV_G1ZT3GPJF8oy4KasOw.roa (raw, json) Hash identifier: HZX2WrFpNtqwEInQJ9ZgnRzc58HvhcvWWSa3GJiGiN0= Subject key identifier: 7C:D7:19:50:62:D5:FC:6D:59:4F:71:8F:24:5F:28:CB:82:9A:B0:EC Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019A92F36C184AA5B90502443B6E896C1649 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fNcZUGLV_G1ZT3GPJF8oy4KasOw.roa Signing time: Mon 17 Nov 2025 17:53:37 +0000 ROA not before: Mon 17 Nov 2025 17:53:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 397630 IP address blocks: 77.90.59.0/24 maxlen: 24 85.118.167.0/24 maxlen: 24 94.249.169.0/24 maxlen: 24 94.249.172.0/24 maxlen: 24 94.249.177.0/24 maxlen: 24 178.18.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:92:f3:6c:18:4a:a5:b9:05:02:44:3b:6e:89:6c:16:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 17 17:53:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7cd7195062d5fc6d594f718f245f28cb829ab0ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:27:36:15:35:bf:78:85:91:73:83:71:ed:6a: a9:e6:bb:9c:38:aa:4b:c4:b9:c5:ed:25:db:ad:e9: 47:c3:1b:6e:e8:f0:6c:bf:79:f9:70:63:c0:ec:81: a5:d5:96:d6:f4:62:cb:2f:b3:3b:75:d8:c7:01:19: 3a:60:c1:01:70:b7:8f:2b:ed:3a:e8:f3:c8:60:18: 56:e7:38:2b:ec:0a:36:9a:a3:b1:f4:83:78:bd:1b: 62:a7:d8:8c:e0:45:12:7c:b5:3d:5d:ea:e5:64:a6: 39:03:7e:54:9e:cb:7a:f5:8c:40:6a:24:93:c9:29: 78:f1:39:eb:7e:01:5a:12:ca:6d:7c:2d:84:05:5d: f8:b7:ca:c3:9b:bb:c2:31:ca:34:01:e1:cc:d7:de: 05:ad:77:bb:30:f9:b5:79:24:98:c3:2d:5e:ff:fa: a0:9f:31:14:06:cb:4c:9d:25:2a:87:55:54:50:54: b1:2d:92:71:fc:0c:af:8e:d1:eb:e1:76:37:71:83: b1:f1:ff:fd:3a:a0:df:56:4e:98:67:16:cf:48:93: 9b:ec:7a:6c:3a:15:22:31:00:15:a7:72:cf:7e:45: 1c:04:34:9a:e7:00:65:3f:dd:13:af:fe:a0:80:d6: ad:08:d7:82:7c:30:fc:5b:6d:f9:be:02:3b:a9:4a: 29:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D7:19:50:62:D5:FC:6D:59:4F:71:8F:24:5F:28:CB:82:9A:B0:EC X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fNcZUGLV_G1ZT3GPJF8oy4KasOw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.59.0/24 85.118.167.0/24 94.249.169.0/24 94.249.172.0/24 94.249.177.0/24 178.18.144.0/24 Signature Algorithm: sha256WithRSAEncryption c0:92:80:84:83:77:73:7d:36:8e:32:4e:75:08:a4:8d:55:7e: 46:d4:1b:68:e1:ee:6a:90:17:08:d4:69:af:86:96:c5:29:e3: 4f:c2:a3:5c:96:82:d4:3b:fc:7a:65:b9:ef:d9:82:2b:8b:f2: 14:7f:e9:35:26:e3:ec:f3:a1:3c:bb:ca:5a:5a:65:77:f3:02: 97:01:41:b1:90:7b:f7:aa:12:c1:b9:eb:5a:9c:c6:b0:ad:b6: ad:a2:5d:36:e4:67:3d:f2:7b:65:55:de:ee:9e:47:68:29:44: e6:af:89:ce:51:a4:0e:b4:96:8f:c7:e3:fa:4d:96:95:9b:c9: 60:01:a7:72:b4:8a:b0:cd:c7:79:ce:b3:29:79:ea:a2:e3:35: 03:d9:11:d9:e0:25:92:88:f8:b2:37:cb:6b:8e:4c:7b:8f:0d: 16:13:d1:a7:4f:a0:0c:cf:d8:02:f5:64:ef:fe:1d:ba:33:11: 0e:79:69:09:f1:55:00:8d:c2:ab:3f:e3:2b:bc:6f:ed:8a:30: 63:90:e8:0b:a5:0d:d7:c5:38:6c:6e:fa:4d:20:94:41:66:76: af:08:12:56:8e:e3:f7:ae:63:7d:f8:10:61:08:80:dd:89:96: d3:11:5f:d4:57:c0:d1:3c:64:fb:58:ba:8f:64:12:e4:eb:0e: 5b:61:33:b5 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZqS82wYSqW5BQJEO26JbBZJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTE3MTc1MzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2Q3MTk1MDYyZDVmYzZkNTk0ZjcxOGYyNDVmMjhjYjgyOWFiMGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSc2FTW/eIWRc4Nx7Wqp5rucOKpL xLnF7SXbrelHwxtu6PBsv3n5cGPA7IGl1ZbW9GLLL7M7ddjHARk6YMEBcLePK+06 6PPIYBhW5zgr7Ao2mqOx9IN4vRtip9iM4EUSfLU9XerlZKY5A35Unst69YxAaiST ySl48TnrfgFaEsptfC2EBV34t8rDm7vCMco0AeHM194FrXe7MPm1eSSYwy1e//qg nzEUBstMnSUqh1VUUFSxLZJx/AyvjtHr4XY3cYOx8f/9OqDfVk6YZxbPSJOb7Hps OhUiMQAVp3LPfkUcBDSa5wBlP90Tr/6ggNatCNeCfDD8W235vgI7qUopOwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFHzXGVBi1fxtWU9xjyRfKMuCmrDsMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvZk5jWlVHTFZfRzFaVDNHUEpGOG95NEthc093LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQATVo7AwQA VXanAwQAXvmpAwQAXvmsAwQAXvmxAwQAshKQMA0GCSqGSIb3DQEBCwUAA4IBAQDA koCEg3dzfTaOMk51CKSNVX5G1Bto4e5qkBcI1GmvhpbFKeNPwqNcloLUO/x6Zbnv 2YIri/IUf+k1JuPs86E8u8paWmV38wKXAUGxkHv3qhLBuetanMawrbatol025Gc9 8ntlVd7unkdoKUTmr4nOUaQOtJaPx+P6TZaVm8lgAadytIqwzcd5zrMpeeqi4zUD 2RHZ4CWSiPiyN8trjkx7jw0WE9GnT6AMz9gC9WTv/h26MxEOeWkJ8VUAjcKrP+Mr vG/tijBjkOgLpQ3XxThsbvpNIJRBZnavCBJWjuP3rmN9+BBhCIDdiZbTEV/UV8DR PGT7WLqPZBLk6w5bYTO1 -----END CERTIFICATE-----Generated at Fri Dec 5 15:39:51 2025 by rpki-client