This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/fBddF7C7xbAg2lSx9dz5Evpp-XM.roa File: fBddF7C7xbAg2lSx9dz5Evpp-XM.roa (raw, json) Hash identifier: hdpsyDmzHdv6BAE+WOBGhoxvxbC94oCx33rnPYE0nco= Subject key identifier: 7C:17:5D:17:B0:BB:C5:B0:20:DA:54:B1:F5:DC:F9:12:FA:69:F9:73 Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019B7E38256877BB615F00129DB964C129C2 Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/fBddF7C7xbAg2lSx9dz5Evpp-XM.roa Signing time: Fri 02 Jan 2026 10:19:27 +0000 ROA not before: Fri 02 Jan 2026 10:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50673 IP address blocks: 146.185.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 01:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:25:68:77:bb:61:5f:00:12:9d:b9:64:c1:29:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 2 10:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c175d17b0bbc5b020da54b1f5dcf912fa69f973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:23:de:c4:41:71:c2:f6:c4:33:32:31:24:f2: 19:fe:c3:e5:86:39:63:d4:c0:2d:11:0d:b9:46:41: c7:09:66:35:a0:f7:96:7f:a9:d9:36:c0:e5:12:40: 00:77:1f:06:c4:43:9b:2f:f9:6c:f4:8e:c3:a3:34: 7d:1b:00:1f:ae:d6:7e:b7:44:21:fd:dd:0e:ee:50: 4f:c5:74:54:60:a2:45:25:32:2b:9f:02:a3:ab:31: f7:31:03:dd:31:35:24:6e:85:d4:23:b1:68:80:c0: 9c:12:b1:b1:bf:0e:da:4a:2a:67:74:3f:3e:9b:c3: 51:ea:fb:f0:72:aa:a5:85:7d:a5:88:25:16:e6:04: 6f:7b:ff:8b:6b:1c:bc:ca:d7:7b:46:32:49:df:0e: 67:79:a3:14:f5:55:70:d4:dd:9c:f1:a9:a8:e0:01: 8d:a0:c1:8d:55:31:94:10:a4:87:d6:ed:52:9f:72: 8e:0c:bd:9c:bd:5b:02:51:83:86:55:45:6c:8d:0a: 86:e3:51:f6:6b:a1:67:41:e2:ba:42:eb:16:e6:0d: ac:22:db:a0:0b:38:ec:f1:ef:2a:7f:0e:03:19:e6: b2:55:1b:19:3e:49:1f:03:31:4a:2b:e4:b9:65:44: 35:54:8f:41:7d:3e:c1:38:9e:4b:b6:5f:f2:21:f9: 0d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:17:5D:17:B0:BB:C5:B0:20:DA:54:B1:F5:DC:F9:12:FA:69:F9:73 X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/fBddF7C7xbAg2lSx9dz5Evpp-XM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.185.253.0/24 Signature Algorithm: sha256WithRSAEncryption 98:ab:af:13:75:7f:30:b6:6b:f0:cb:78:ba:1d:64:b1:6d:32: 85:18:dc:17:13:46:4b:69:00:db:47:87:3e:db:87:b0:42:2e: 64:69:ac:8d:eb:4e:19:92:e8:bc:3c:85:cb:58:52:61:bb:1d: 9d:44:51:47:b6:41:9c:89:a9:46:81:dc:bf:52:33:67:be:81: 10:7c:e8:3e:e7:df:d7:db:fb:f2:36:a9:c2:a2:20:cd:f7:70: 4a:66:07:d8:c6:78:c5:f4:3f:02:44:da:9b:a0:5c:a0:0d:4a: 27:8e:21:5b:41:fd:24:72:c8:61:b3:ff:da:d1:aa:cd:e3:18: 8f:95:5d:b1:3c:ac:0a:ab:8b:80:db:93:8d:cd:f5:92:26:29: 83:2c:38:20:88:bd:38:7d:9c:54:7a:4b:9e:ec:59:cf:d0:2e: f2:46:93:53:f0:4d:e5:95:76:43:61:98:cc:69:a1:5a:73:90: 19:98:99:2a:26:5b:b1:e8:17:6b:06:b0:38:69:a6:28:2f:76: 76:ec:dd:ec:0f:88:bc:66:18:07:22:eb:07:72:bf:a6:08:57: 4a:d0:de:73:80:76:55:af:9c:be:81:5a:6f:1b:60:78:64:35: 4e:a1:f9:2e:0f:30:4f:a6:65:02:4e:df:04:64:21:5a:4e:b3: fc:fe:23:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OCVod7thXwASnblkwSnCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTAyMTAxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzE3NWQxN2IwYmJjNWIwMjBkYTU0YjFmNWRjZjkxMmZhNjlmOTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iPexEFxwvbEMzIxJPIZ/sPlhjlj 1MAtEQ25RkHHCWY1oPeWf6nZNsDlEkAAdx8GxEObL/ls9I7DozR9GwAfrtZ+t0Qh /d0O7lBPxXRUYKJFJTIrnwKjqzH3MQPdMTUkboXUI7FogMCcErGxvw7aSipndD8+ m8NR6vvwcqqlhX2liCUW5gRve/+Laxy8ytd7RjJJ3w5neaMU9VVw1N2c8amo4AGN oMGNVTGUEKSH1u1Sn3KODL2cvVsCUYOGVUVsjQqG41H2a6FnQeK6QusW5g2sItug Czjs8e8qfw4DGeayVRsZPkkfAzFKK+S5ZUQ1VI9BfT7BOJ5Ltl/yIfkN3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHwXXRewu8WwINpUsfXc+RL6aflzMB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvZkJkZEY3Qzd4YkFnMmxTeDlkejVFdnBwLVhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkrn9MA0G CSqGSIb3DQEBCwUAA4IBAQCYq68TdX8wtmvwy3i6HWSxbTKFGNwXE0ZLaQDbR4c+ 24ewQi5kaayN604Zkui8PIXLWFJhux2dRFFHtkGcialGgdy/UjNnvoEQfOg+59/X 2/vyNqnCoiDN93BKZgfYxnjF9D8CRNqboFygDUonjiFbQf0kcshhs//a0arN4xiP lV2xPKwKq4uA25ONzfWSJimDLDggiL04fZxUekue7FnP0C7yRpNT8E3llXZDYZjM aaFac5AZmJkqJlux6BdrBrA4aaYoL3Z27N3sD4i8ZhgHIusHcr+mCFdK0N5zgHZV r5y+gVpvG2B4ZDVOofkuDzBPpmUCTt8EZCFaTrP8/iMw -----END CERTIFICATE-----Generated at Sun Jan 11 11:45:39 2026 by rpki-client