This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/ssFgEvQaOxn1bVNWbgkIqqVCO7w.roa File: ssFgEvQaOxn1bVNWbgkIqqVCO7w.roa (raw, json) Hash identifier: hwJ1nu3zOiqOogdc9jXDw2wMUcpERaX1zFgf/BAycx4= Subject key identifier: B2:C1:60:12:F4:1A:3B:19:F5:6D:53:56:6E:09:08:AA:A5:42:3B:BC Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 019B7FF1691A8232E3168C6F9662D68B1D0F Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/ssFgEvQaOxn1bVNWbgkIqqVCO7w.roa Signing time: Fri 02 Jan 2026 18:21:26 +0000 ROA not before: Fri 02 Jan 2026 18:21:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31898 IP address blocks: 207.244.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:69:1a:82:32:e3:16:8c:6f:96:62:d6:8b:1d:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Jan 2 18:21:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2c16012f41a3b19f56d53566e0908aaa5423bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4d:26:47:b8:67:11:0c:64:63:ac:d5:2d:71: 10:b4:ec:2d:ac:34:e2:9d:f5:97:72:ec:21:de:21: 9f:08:c9:4e:eb:c3:65:42:07:a8:8c:1d:2f:48:fc: 2f:6b:8b:ca:42:84:99:ad:99:d7:4b:1d:ab:4f:5b: 23:7b:9b:4a:3d:d8:53:52:a8:44:b3:63:37:d7:49: 46:94:91:41:ae:94:64:48:95:b2:ae:7b:88:7d:df: 32:23:10:12:af:88:40:84:ef:4e:8e:d8:43:15:27: bf:5d:18:e6:fb:15:0a:50:1e:6b:2e:19:d8:d6:53: 30:e4:4d:f9:6a:a5:a1:95:91:d2:3a:4a:09:f8:04: 4a:43:1b:0a:3e:4b:b4:ee:81:36:b4:8a:85:29:55: 2d:fa:83:b6:57:fb:ed:1c:d3:98:a4:3d:90:1a:ba: 06:3a:a2:5f:50:da:33:13:4f:ea:8d:2a:9d:99:1a: bc:83:2b:7a:22:9c:b3:8d:7e:6c:20:af:3a:54:95: 29:9c:55:53:17:c5:2c:cd:fe:c0:a0:b0:d5:f7:9d: c9:d1:10:54:c4:79:ec:97:25:2d:fb:b6:3c:2e:4f: 78:29:20:be:c3:42:3c:52:8b:f2:4a:4a:bc:1d:5f: 2c:ae:2d:6f:b1:47:24:f5:49:cb:b2:24:17:a1:d9: 7f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C1:60:12:F4:1A:3B:19:F5:6D:53:56:6E:09:08:AA:A5:42:3B:BC X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/ssFgEvQaOxn1bVNWbgkIqqVCO7w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.244.208.0/24 Signature Algorithm: sha256WithRSAEncryption a1:ab:98:aa:00:07:f3:43:34:f2:2c:56:f0:a1:84:3c:10:0f: 2e:95:65:fe:11:5f:e1:03:02:63:23:63:da:c6:30:39:68:5c: 9f:83:46:d4:93:97:4d:9b:d9:30:13:10:08:62:64:3b:e4:29: 9a:dc:76:88:79:fc:34:0e:68:31:2a:79:cc:e8:35:d3:2b:60: ab:25:74:8c:a2:a2:4b:08:a5:4d:ef:06:4a:48:aa:06:8c:41: bd:36:32:d5:28:8b:0f:54:d5:47:74:47:42:c7:02:f8:74:4c: c7:8c:45:25:48:5b:0e:ae:f5:bb:b6:6e:55:d5:34:d1:42:d8: 46:7c:57:d4:45:5c:f1:13:3a:54:76:e9:72:fd:10:f4:53:72: b7:34:10:f8:85:80:bc:d1:eb:b6:54:ad:35:a7:4d:20:2a:1a: b6:c2:6e:bd:38:29:43:02:a4:27:80:4f:08:26:1c:e9:50:76: 01:71:59:0a:37:6d:93:7a:48:3d:70:11:bb:63:0a:e6:e4:71: 29:a1:bc:b2:43:b7:81:2b:d1:cb:cd:5b:98:0f:38:0f:30:0a: b5:21:fd:fd:a2:63:b0:32:95:80:e4:a1:04:cd:96:92:48:3b: 46:05:31:52:49:2b:74:15:d4:04:0d:e3:fb:5b:41:41:94:a1: ec:d1:3c:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8WkagjLjFoxvlmLWix0PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjYwMTAyMTgyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmMxNjAxMmY0MWEzYjE5ZjU2ZDUzNTY2ZTA5MDhhYWE1NDIzYmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy00mR7hnEQxkY6zVLXEQtOwtrDTi nfWXcuwh3iGfCMlO68NlQgeojB0vSPwva4vKQoSZrZnXSx2rT1sje5tKPdhTUqhE s2M310lGlJFBrpRkSJWyrnuIfd8yIxASr4hAhO9OjthDFSe/XRjm+xUKUB5rLhnY 1lMw5E35aqWhlZHSOkoJ+ARKQxsKPku07oE2tIqFKVUt+oO2V/vtHNOYpD2QGroG OqJfUNozE0/qjSqdmRq8gyt6IpyzjX5sIK86VJUpnFVTF8Uszf7AoLDV953J0RBU xHnslyUt+7Y8Lk94KSC+w0I8UovySkq8HV8sri1vsUck9UnLsiQXodl/uQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLLBYBL0GjsZ9W1TVm4JCKqlQju8MB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvc3NGZ0V2UWFPeG4xYlZOV2Jna0lxcVZDTzd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/TQMA0G CSqGSIb3DQEBCwUAA4IBAQChq5iqAAfzQzTyLFbwoYQ8EA8ulWX+EV/hAwJjI2Pa xjA5aFyfg0bUk5dNm9kwExAIYmQ75Cma3HaIefw0DmgxKnnM6DXTK2CrJXSMoqJL CKVN7wZKSKoGjEG9NjLVKIsPVNVHdEdCxwL4dEzHjEUlSFsOrvW7tm5V1TTRQthG fFfURVzxEzpUduly/RD0U3K3NBD4hYC80eu2VK01p00gKhq2wm69OClDAqQngE8I JhzpUHYBcVkKN22Tekg9cBG7Ywrm5HEpobyyQ7eBK9HLzVuYDzgPMAq1If39omOw MpWA5KEEzZaSSDtGBTFSSSt0FdQEDeP7W0FBlKHs0TxR -----END CERTIFICATE-----Generated at Sat Jan 10 20:49:46 2026 by rpki-client