This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/Fh3fxSNW3QZEpIYUfBjx_kqS2o0.roa File: Fh3fxSNW3QZEpIYUfBjx_kqS2o0.roa (raw, json) Hash identifier: DQ4/igbo+rv2kpc7T7st9wWdy+ENKm7eM93V1cXm0hA= Subject key identifier: 16:1D:DF:C5:23:56:DD:06:44:A4:86:14:7C:18:F1:FE:4A:92:DA:8D Certificate issuer: /CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75 Certificate serial: 019B7BA39894FA1E7DEEDC3A0806FD779BEA Authority key identifier: A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/Fh3fxSNW3QZEpIYUfBjx_kqS2o0.roa Signing time: Thu 01 Jan 2026 22:17:57 +0000 ROA not before: Thu 01 Jan 2026 22:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51324 IP address blocks: 185.80.144.0/22 maxlen: 24 2a05:7dc2:1000::/36 maxlen: 36 2a05:7dc2:2000::/36 maxlen: 36 2a05:7dc2:3000::/36 maxlen: 36 2a05:7dc2:4000::/36 maxlen: 36 2a05:7dc2:5000::/36 maxlen: 36 2a05:7dc2:6000::/36 maxlen: 36 2a05:7dc2:7000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:98:94:fa:1e:7d:ee:dc:3a:08:06:fd:77:9b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75 Validity Not Before: Jan 1 22:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=161ddfc52356dd0644a486147c18f1fe4a92da8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a7:b6:40:be:f4:28:2b:3f:7a:1c:49:38:b3: 3e:95:26:f1:bd:69:29:4a:e0:8a:89:83:8c:2d:d1: 07:f5:f2:d6:b2:7e:2e:a0:22:ba:56:1e:14:96:a1: bc:5e:5b:98:75:e8:b0:32:2f:89:22:f8:ba:48:82: dd:e2:b3:ff:e1:60:ae:d0:f4:7d:61:3a:bd:c8:9c: 4c:66:4d:a8:92:89:09:f2:dd:bb:ea:38:e5:40:65: 93:a5:12:42:aa:60:45:b4:f8:00:e2:42:75:0a:4a: 9f:f9:a3:73:3e:2b:f8:99:8f:45:21:9a:05:e3:4f: 29:ad:0f:ed:55:80:9d:d3:55:68:89:df:6a:28:1f: 77:4a:63:2e:9d:31:44:c4:d6:15:25:47:51:e7:8a: ba:15:52:1e:0b:8b:04:cd:75:c9:3c:c9:3c:a2:23: 82:42:00:0c:0b:d3:e8:fb:31:49:bb:3b:78:71:9c: 2a:66:a2:a2:bd:6d:3a:cb:e5:19:3f:4b:b6:7c:f9: 46:df:db:d3:0a:de:ba:50:eb:85:fb:37:e0:dc:a2: ef:dd:ee:ee:37:2f:2c:80:c6:af:45:1c:91:31:b1: 8c:79:cb:3d:dc:4e:37:95:ee:4f:5a:bc:40:53:a3: 80:7f:39:23:73:7a:95:bb:ae:53:ae:aa:2a:4d:82: d6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:1D:DF:C5:23:56:DD:06:44:A4:86:14:7C:18:F1:FE:4A:92:DA:8D X509v3 Authority Key Identifier: keyid:A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/Fh3fxSNW3QZEpIYUfBjx_kqS2o0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.80.144.0/22 IPv6: 2a05:7dc2:1000::-2a05:7dc2:7fff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 8a:dc:90:63:50:d6:53:40:a8:99:11:32:3c:e3:5c:f8:82:04: 08:6f:59:b1:17:7b:30:cf:df:d5:a7:4b:35:55:9c:bd:15:38: 02:df:80:f8:e3:86:d2:18:cc:d1:20:9a:88:13:31:90:9e:be: ce:d4:db:6e:aa:35:f2:1c:01:ba:90:06:39:0a:8f:ad:54:c1: f0:1f:78:f0:a3:ad:26:a9:ec:7c:1d:7b:6c:b5:a1:81:b2:f8: f8:67:1b:90:e7:82:88:ec:93:61:8a:62:1f:d0:ee:68:85:83: a0:e0:60:2a:21:7c:f0:1c:dc:3a:d6:b2:0a:59:e3:fd:80:e6: cf:58:4a:e9:d4:fb:f3:42:57:eb:10:fa:04:a9:67:50:f1:e5: 67:d3:e1:93:08:9f:d1:55:f4:e0:4d:72:78:62:1e:d1:fa:41: 1d:71:b4:1c:b8:da:b6:92:2a:b3:34:ee:6c:f5:13:9f:46:f0: 8f:91:5e:81:76:2c:41:30:f2:fc:d7:aa:de:da:ba:cd:81:78: b2:ea:cd:ed:e4:07:f2:bd:9f:ea:20:dc:5b:54:8e:e8:95:41: 26:b2:2f:e7:c1:53:8b:a9:fe:25:85:47:14:72:d6:ae:ee:1d: 77:05:28:ba:ca:8f:ed:db:e6:2a:ea:2c:9a:3e:79:fe:16:7d: 2e:2f:09:9f -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt7o5iU+h597tw6CAb9d5vqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZmM1NjMwZDU3YjE5NzFmM2EyNTZlZDZkOTgzYWZhZDZi MjhkNzUwHhcNMjYwMTAxMjIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjFkZGZjNTIzNTZkZDA2NDRhNDg2MTQ3YzE4ZjFmZTRhOTJkYThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6e2QL70KCs/ehxJOLM+lSbxvWkp SuCKiYOMLdEH9fLWsn4uoCK6Vh4UlqG8XluYdeiwMi+JIvi6SILd4rP/4WCu0PR9 YTq9yJxMZk2okokJ8t276jjlQGWTpRJCqmBFtPgA4kJ1Ckqf+aNzPiv4mY9FIZoF 408prQ/tVYCd01Void9qKB93SmMunTFExNYVJUdR54q6FVIeC4sEzXXJPMk8oiOC QgAMC9Po+zFJuzt4cZwqZqKivW06y+UZP0u2fPlG39vTCt66UOuF+zfg3KLv3e7u Ny8sgMavRRyRMbGMecs93E43le5PWrxAU6OAfzkjc3qVu65TrqoqTYLWCwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFBYd38UjVt0GRKSGFHwY8f5KktqNMB8GA1UdIwQY MBaAFKn8VjDVexlx86JW7W2YOvrWso11MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWZ4V01OVjdHWEh6b2xidGJaZzYtdGF5alhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wZjA3ODgtZjFjNC00ZWFlLWIwYzMt YzVkNGYwYTAwOTA3LzEvRmgzZnhTTlczUVpFcElZVWZCanhfa3FTMm8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8wZjA3ODgtZjFjNC00ZWFlLWIwYzMtYzVkNGYwYTAwOTA3 LzEvcWZ4V01OVjdHWEh6b2xidGJaZzYtdGF5alhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQCuVCQMBgE AgACMBIwEAMGBCoFfcIQAwYHKgV9wgAwDQYJKoZIhvcNAQELBQADggEBAIrckGNQ 1lNAqJkRMjzjXPiCBAhvWbEXezDP39WnSzVVnL0VOALfgPjjhtIYzNEgmogTMZCe vs7U226qNfIcAbqQBjkKj61UwfAfePCjrSap7Hwde2y1oYGy+PhnG5Dngojsk2GK Yh/Q7miFg6DgYCohfPAc3DrWsgpZ4/2A5s9YSunU+/NCV+sQ+gSpZ1Dx5WfT4ZMI n9FV9OBNcnhiHtH6QR1xtBy42raSKrM07mz1E59G8I+RXoF2LEEw8vzXqt7aus2B eLLqze3kB/K9n+og3FtUjuiVQSayL+fBU4up/iWFRxRy1q7uHXcFKLrKj+3b5irq LJo+ef4WfS4vCZ8= -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:06 2026 by rpki-client