This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/fWRyoPqsq-qBSdxIWeERvOiM9FQ.roa File: fWRyoPqsq-qBSdxIWeERvOiM9FQ.roa (raw, json) Hash identifier: xi+aWZFnVHDnRFBiu1WZojI31+OjhpCl/iLDjILOSEk= Subject key identifier: 7D:64:72:A0:FA:AC:AB:EA:81:49:DC:48:59:E1:11:BC:E8:8C:F4:54 Certificate issuer: /CN=5e803b66b306008fb172c2dfd522b5655057360d Certificate serial: 019B7C7F2A85B0EE8838B15438353F25F6D6 Authority key identifier: 5E:80:3B:66:B3:06:00:8F:B1:72:C2:DF:D5:22:B5:65:50:57:36:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/fWRyoPqsq-qBSdxIWeERvOiM9FQ.roa Signing time: Fri 02 Jan 2026 02:17:47 +0000 ROA not before: Fri 02 Jan 2026 02:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200851 IP address blocks: 185.243.76.0/22 maxlen: 24 2a0d:a80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft rsync://rpki.ripe.net/repository/DEFAULT/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:2a:85:b0:ee:88:38:b1:54:38:35:3f:25:f6:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e803b66b306008fb172c2dfd522b5655057360d Validity Not Before: Jan 2 02:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d6472a0faacabea8149dc4859e111bce88cf454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:79:22:83:bb:f7:7d:0a:ab:11:b0:6c:7d:f8: e8:c4:48:23:59:11:5b:da:7d:19:d5:e9:2b:7d:00: d6:5d:32:66:02:73:53:ba:0f:5a:42:e2:a3:a7:d2: c0:1f:cd:69:5c:24:5b:c7:b4:6a:0a:e2:05:3b:fd: 16:b8:b6:22:02:3b:90:01:77:75:81:48:b1:7b:d7: 1f:8f:cb:40:29:a7:46:b9:23:9e:d8:8e:60:30:cb: 0b:17:f6:e0:52:26:82:02:bd:41:29:41:c6:aa:11: 05:cb:83:e9:14:b6:d9:fd:d8:57:de:6a:0b:43:c2: 66:49:e3:f6:a4:ff:ff:7a:39:7c:4a:5b:9e:37:a9: 46:37:49:54:74:7e:18:80:f2:ad:c7:c4:9a:09:21: a2:8c:a1:e3:9d:35:dd:c3:a3:41:57:f8:30:e6:db: c5:2c:98:b4:28:c8:24:ae:06:3d:57:b6:cb:74:dd: eb:21:64:a4:e8:43:6c:b3:3f:d4:71:2e:58:d9:ac: 26:ba:45:0a:ae:8d:2c:e0:e7:f9:47:b8:57:e9:89: 4a:3f:8b:3d:06:c4:c0:5d:6c:2e:c7:04:1d:8a:af: 5d:1c:2c:ec:ac:a5:fe:02:76:68:00:ed:6b:b0:9f: 6e:fa:b9:6a:6a:48:2d:ba:8d:b4:28:21:01:81:d8: 59:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:64:72:A0:FA:AC:AB:EA:81:49:DC:48:59:E1:11:BC:E8:8C:F4:54 X509v3 Authority Key Identifier: keyid:5E:80:3B:66:B3:06:00:8F:B1:72:C2:DF:D5:22:B5:65:50:57:36:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/fWRyoPqsq-qBSdxIWeERvOiM9FQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.243.76.0/22 IPv6: 2a0d:a80::/29 Signature Algorithm: sha256WithRSAEncryption 27:f7:a8:aa:83:be:0e:52:6d:08:48:02:2b:25:0a:13:1f:ef: b8:01:f9:bc:50:3f:db:8c:aa:94:a4:05:ea:9d:42:76:5c:6c: e3:42:83:b3:2e:04:01:9e:7d:51:ae:19:f3:a1:7d:35:89:b5: 5b:5c:60:38:cc:59:d5:0b:61:31:7b:06:2b:ba:22:1e:a5:62: 8e:ff:57:cf:59:7d:38:54:b9:0e:04:79:cb:cb:e5:65:5e:60: 61:52:0c:41:ff:b1:b2:47:d9:7f:46:b6:bf:40:7e:4d:d6:f5: 6a:d4:29:8d:8e:54:7b:1a:9c:93:35:69:f8:cd:59:c2:05:22: 46:4c:ab:3e:21:3f:b6:3b:6e:e7:af:81:e8:5d:e9:f4:67:21: 7a:0c:93:94:ee:81:8a:37:a6:08:3d:5d:9b:67:df:04:a8:95: 86:01:29:fc:f5:4e:5b:d0:39:90:aa:4f:b2:8f:17:1b:4a:70: a4:29:f8:11:25:71:b0:84:04:09:cf:c0:4f:23:4d:c8:5e:94: 88:3c:69:00:84:3c:e8:0b:62:b8:de:2b:dd:8c:73:8a:4c:92: f1:24:86:48:17:43:ad:d2:a8:56:b9:fc:39:55:4c:06:d6:e8: c3:86:5d:eb:da:b4:b2:00:f8:f9:6b:87:45:62:f4:05:61:5e: ef:c6:fa:18 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8fyqFsO6IOLFUODU/JfbWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlODAzYjY2YjMwNjAwOGZiMTcyYzJkZmQ1MjJiNTY1NTA1 NzM2MGQwHhcNMjYwMTAyMDIxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDY0NzJhMGZhYWNhYmVhODE0OWRjNDg1OWUxMTFiY2U4OGNmNDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnkig7v3fQqrEbBsffjoxEgjWRFb 2n0Z1ekrfQDWXTJmAnNTug9aQuKjp9LAH81pXCRbx7RqCuIFO/0WuLYiAjuQAXd1 gUixe9cfj8tAKadGuSOe2I5gMMsLF/bgUiaCAr1BKUHGqhEFy4PpFLbZ/dhX3moL Q8JmSeP2pP//ejl8SlueN6lGN0lUdH4YgPKtx8SaCSGijKHjnTXdw6NBV/gw5tvF LJi0KMgkrgY9V7bLdN3rIWSk6ENssz/UcS5Y2awmukUKro0s4Of5R7hX6YlKP4s9 BsTAXWwuxwQdiq9dHCzsrKX+AnZoAO1rsJ9u+rlqakgtuo20KCEBgdhZ0wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFH1kcqD6rKvqgUncSFnhEbzojPRUMB8GA1UdIwQY MBaAFF6AO2azBgCPsXLC39UitWVQVzYNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG9BN1pyTUdBSS14Y3NMZjFTSzFaVkJYTmcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85ZDM0MmMtN2NlNy00YzY5LWFlY2Ut OTM4NTA2YTlmMmE3LzEvZldSeW9QcXNxLXFCU2R4SVdlRVJ2T2lNOUZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy85ZDM0MmMtN2NlNy00YzY5LWFlY2UtOTM4NTA2YTlmMmE3 LzEvWG9BN1pyTUdBSS14Y3NMZjFTSzFaVkJYTmcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufNMMA0E AgACMAcDBQMqDQqAMA0GCSqGSIb3DQEBCwUAA4IBAQAn96iqg74OUm0ISAIrJQoT H++4Afm8UD/bjKqUpAXqnUJ2XGzjQoOzLgQBnn1RrhnzoX01ibVbXGA4zFnVC2Ex ewYruiIepWKO/1fPWX04VLkOBHnLy+VlXmBhUgxB/7GyR9l/Rra/QH5N1vVq1CmN jlR7GpyTNWn4zVnCBSJGTKs+IT+2O27nr4HoXen0ZyF6DJOU7oGKN6YIPV2bZ98E qJWGASn89U5b0DmQqk+yjxcbSnCkKfgRJXGwhAQJz8BPI03IXpSIPGkAhDzoC2K4 3ivdjHOKTJLxJIZIF0Ot0qhWufw5VUwG1ujDhl3r2rSyAPj5a4dFYvQFYV7vxvoY -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:41 2026 by rpki-client