This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/FfR87_mXj0CIVmHYTnyUObXrTyI.roa File: FfR87_mXj0CIVmHYTnyUObXrTyI.roa (raw, json) Hash identifier: p3ixpnoniD5wmyp+DsfoQYYTf3OUtsn8VxkoKytvyOM= Subject key identifier: 15:F4:7C:EF:F9:97:8F:40:88:56:61:D8:4E:7C:94:39:B5:EB:4F:22 Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55 Certificate serial: 019B7D5C6CFB29A214ABDCE724FFDEB37747 Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/FfR87_mXj0CIVmHYTnyUObXrTyI.roa Signing time: Fri 02 Jan 2026 06:19:27 +0000 ROA not before: Fri 02 Jan 2026 06:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58061 IP address blocks: 185.121.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:6c:fb:29:a2:14:ab:dc:e7:24:ff:de:b3:77:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55 Validity Not Before: Jan 2 06:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15f47ceff9978f40885661d84e7c9439b5eb4f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:07:95:6f:6e:65:24:25:2b:84:f3:bb:47:f7: f0:40:83:03:9f:36:0a:41:d7:0b:d8:fb:e8:fa:d0: 50:15:a6:fd:dc:7f:5d:e4:43:63:32:22:0e:0d:55: 69:5c:58:e5:09:05:b2:bc:f5:93:f2:4c:6d:ef:eb: 79:44:af:3d:60:8e:62:77:e9:af:55:d6:b5:1f:eb: 46:c5:7b:b3:87:b4:c0:e0:9d:43:72:20:91:52:a2: 12:ac:72:17:4c:ad:e2:fa:03:ca:f6:ef:69:c0:68: f7:9e:68:35:8f:d3:ed:0c:a9:21:6d:9a:00:39:e4: 6e:d4:32:46:26:b2:1e:2b:53:e4:f2:bc:79:2e:ef: 29:d0:cd:21:73:fd:fd:08:d8:17:43:31:f3:cb:29: 5f:d7:be:69:26:87:13:4a:0a:06:22:87:81:36:07: c1:76:62:58:07:e4:80:c8:2c:bc:b5:3a:06:70:a1: 38:d1:c6:4a:86:42:e6:7c:99:1a:61:6e:ec:c7:88: 19:b0:19:28:39:ff:9e:ad:fb:03:56:8c:80:0c:7b: 56:8e:6a:ac:09:94:7b:37:76:26:c8:33:20:88:84: b6:16:87:a9:67:55:75:c6:d8:75:e5:b2:a0:12:a3: 59:a8:2c:e4:a1:8c:09:37:14:f8:83:10:a1:2e:98: 1c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F4:7C:EF:F9:97:8F:40:88:56:61:D8:4E:7C:94:39:B5:EB:4F:22 X509v3 Authority Key Identifier: keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/FfR87_mXj0CIVmHYTnyUObXrTyI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.227.0/24 Signature Algorithm: sha256WithRSAEncryption f6:45:c1:c5:8b:8c:c9:25:c4:e7:2e:3c:c2:bf:95:0c:d9:67: 2f:99:4c:42:dd:23:85:f4:29:8c:80:3e:7f:f3:9a:b3:a9:ed: a5:30:28:c9:04:b7:5d:f5:b7:1a:ce:b1:e5:23:47:90:22:c9: 8a:a9:7e:41:79:9f:19:19:c9:2c:01:b0:20:2a:e8:2f:69:0f: 04:f4:92:f0:e9:9a:71:c5:d5:a0:75:25:0e:c3:18:85:27:28: b7:e8:90:38:a7:b2:ab:70:c9:f5:65:01:3c:40:7e:a5:8d:84: e1:b4:d7:4d:79:fb:ef:71:93:f5:f3:71:14:f7:25:33:6a:ad: c0:42:ce:b0:aa:4d:2f:cb:77:5f:ce:0f:76:d8:69:48:84:ce: f6:27:9b:28:01:87:96:78:9a:3d:b2:5b:8d:e0:88:34:85:d2: d8:5b:aa:41:1d:87:1c:86:b2:3c:53:99:96:f2:9d:4f:19:00: 56:18:95:c8:46:ee:8b:58:53:0a:1b:8c:f5:3a:be:be:7c:22: c0:fa:1d:7e:bf:ea:5a:08:04:f7:52:76:10:2b:ef:78:b5:49: c6:83:02:f0:72:59:f7:a0:61:86:ff:ca:31:b8:80:df:e0:41: 19:ed:bd:0b:77:66:00:4a:77:9b:27:1b:92:46:97:54:e2:28: ce:f4:53:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XGz7KaIUq9znJP/es3dHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NzljYzQzYzI0NjlmZmE1Y2Y4YjdhYzYzOWIwMWYzYTc2 OGFjNTUwHhcNMjYwMTAyMDYxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWY0N2NlZmY5OTc4ZjQwODg1NjYxZDg0ZTdjOTQzOWI1ZWI0ZjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAeVb25lJCUrhPO7R/fwQIMDnzYK QdcL2Pvo+tBQFab93H9d5ENjMiIODVVpXFjlCQWyvPWT8kxt7+t5RK89YI5id+mv Vda1H+tGxXuzh7TA4J1DciCRUqISrHIXTK3i+gPK9u9pwGj3nmg1j9PtDKkhbZoA OeRu1DJGJrIeK1Pk8rx5Lu8p0M0hc/39CNgXQzHzyylf175pJocTSgoGIoeBNgfB dmJYB+SAyCy8tToGcKE40cZKhkLmfJkaYW7sx4gZsBkoOf+erfsDVoyADHtWjmqs CZR7N3YmyDMgiIS2FoepZ1V1xth15bKgEqNZqCzkoYwJNxT4gxChLpgcRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBX0fO/5l49AiFZh2E58lDm1608iMB8GA1UdIwQY MBaAFCl5zEPCRp/6XPi3rGObAfOnaKxVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lNDBmOWQtMDBmNC00MGQ5LThiOGQt NDBlYWViYzFjNDdlLzEvRmZSODdfbVhqMENJVm1IWVRueVVPYlhyVHlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9lNDBmOWQtMDBmNC00MGQ5LThiOGQtNDBlYWViYzFjNDdl LzEvS1huTVE4SkduX3BjLUxlc1k1c0I4NmRvckZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXnjMA0G CSqGSIb3DQEBCwUAA4IBAQD2RcHFi4zJJcTnLjzCv5UM2WcvmUxC3SOF9CmMgD5/ 85qzqe2lMCjJBLdd9bcazrHlI0eQIsmKqX5BeZ8ZGcksAbAgKugvaQ8E9JLw6Zpx xdWgdSUOwxiFJyi36JA4p7KrcMn1ZQE8QH6ljYThtNdNefvvcZP183EU9yUzaq3A Qs6wqk0vy3dfzg922GlIhM72J5soAYeWeJo9sluN4Ig0hdLYW6pBHYcchrI8U5mW 8p1PGQBWGJXIRu6LWFMKG4z1Or6+fCLA+h1+v+paCAT3UnYQK+94tUnGgwLwcln3 oGGG/8oxuIDf4EEZ7b0Ld2YASnebJxuSRpdU4ijO9FNG -----END CERTIFICATE-----Generated at Thu Jan 22 21:35:49 2026 by rpki-client