This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/fSnqZnwOIrhOfhDZkhdGS2yAncE.roa File: fSnqZnwOIrhOfhDZkhdGS2yAncE.roa (raw, json) Hash identifier: SVnN30Tg3P99sk9b/ymDGPmYqstKVPGeMKeKX2k4XeY= Subject key identifier: 7D:29:EA:66:7C:0E:22:B8:4E:7E:10:D9:92:17:46:4B:6C:80:9D:C1 Certificate issuer: /CN=661e7174bf9e9ea1b64a92ba65ffcf1e931cce32 Certificate serial: 019B7B3655C50928E7E0BDDDB26E2CA506E4 Authority key identifier: 66:1E:71:74:BF:9E:9E:A1:B6:4A:92:BA:65:FF:CF:1E:93:1C:CE:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/fSnqZnwOIrhOfhDZkhdGS2yAncE.roa Signing time: Thu 01 Jan 2026 20:18:37 +0000 ROA not before: Thu 01 Jan 2026 20:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30875 IP address blocks: 185.101.108.0/22 maxlen: 22 185.101.111.240/28 maxlen: 28 2a06:1d00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:55:c5:09:28:e7:e0:bd:dd:b2:6e:2c:a5:06:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=661e7174bf9e9ea1b64a92ba65ffcf1e931cce32 Validity Not Before: Jan 1 20:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d29ea667c0e22b84e7e10d99217464b6c809dc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:47:f2:94:fe:b9:9d:0f:9f:98:50:78:74:cc: 33:d5:e5:b7:01:8c:6e:0e:bc:03:fd:a7:27:ce:00: b3:90:1e:e3:4c:dd:a1:48:38:0e:84:c8:30:f2:54: dd:81:dc:10:ee:18:c6:79:dd:09:92:48:8a:f4:73: b0:f8:20:da:f9:93:73:fb:f2:62:13:8c:17:7c:36: 3c:13:20:27:7d:51:ab:bf:ab:04:94:3e:a8:6b:b2: 16:a1:2a:39:83:bc:7d:08:81:c9:d1:c9:36:13:c6: 93:e9:4c:10:0c:ed:a4:c7:48:71:1a:3f:0d:21:27: 6e:17:ba:1b:91:32:d1:01:55:41:12:b4:29:f7:c0: 5e:2b:e9:fc:1e:42:16:ae:de:5f:7e:01:fd:cc:58: 9a:3a:5a:a3:e6:02:dc:ea:b7:9e:fd:90:8c:85:4b: 83:a9:de:7d:78:3b:ea:95:78:c6:c3:ff:4b:9a:be: 18:28:7e:a7:1d:b1:d5:5a:57:dc:1e:0a:33:5c:1f: a4:14:97:13:b6:ec:3b:96:5a:21:aa:63:d6:32:6b: f2:7a:5d:90:0d:20:15:68:91:8e:45:8e:bd:bb:a7: f2:a6:0a:8f:09:84:f1:fd:e7:3c:9a:63:e7:bc:78: d5:ec:02:f3:cc:98:95:b2:9c:22:b7:70:d2:99:fb: 81:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:29:EA:66:7C:0E:22:B8:4E:7E:10:D9:92:17:46:4B:6C:80:9D:C1 X509v3 Authority Key Identifier: keyid:66:1E:71:74:BF:9E:9E:A1:B6:4A:92:BA:65:FF:CF:1E:93:1C:CE:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/fSnqZnwOIrhOfhDZkhdGS2yAncE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.101.108.0/22 IPv6: 2a06:1d00::/29 Signature Algorithm: sha256WithRSAEncryption 6e:7f:8d:9d:cb:47:ad:81:9d:d7:77:76:eb:a4:7a:1c:01:1e: f6:0c:16:0d:b7:fc:f6:40:ea:4f:b7:78:29:b9:8f:de:be:92: b9:d6:91:52:90:a3:76:01:0b:e2:8e:b2:f0:20:1f:ae:cd:34: 9b:cb:95:c4:cc:52:d0:e0:d8:1f:76:9c:a4:38:10:cb:4c:2e: ec:17:ee:be:ed:da:a4:57:78:b8:dc:40:a7:de:1b:28:e6:7c: 2d:db:11:9a:14:94:55:2a:d5:3a:02:e3:66:2a:7e:bc:fe:e3: 91:2e:24:26:00:73:d5:b3:db:f7:8b:ac:78:04:b7:32:9c:e0: 0d:6b:e0:7a:5f:1b:de:7a:43:65:e7:f8:2c:0b:57:d7:b3:8f: dc:5e:38:96:3a:e9:c2:4f:9c:e4:c4:11:fd:d9:60:fa:7c:89: f0:85:d5:ea:bf:1e:f3:cd:a7:32:33:ee:e7:ff:66:d8:ea:7e: 35:ff:a1:ab:c3:8f:3a:f8:cc:5e:8d:b4:90:c1:72:bc:c3:f0: 82:c6:fa:a5:37:e6:31:49:7f:25:96:32:30:a6:c2:07:7b:fe: 20:4b:da:e7:60:66:cb:dd:f8:bc:a2:46:98:6d:bb:e0:88:4e: 1e:86:bf:1d:44:e9:97:cb:01:6e:55:86:d6:84:b1:84:2f:4f: 04:bb:03:ff -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NlXFCSjn4L3dsm4spQbkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MWU3MTc0YmY5ZTllYTFiNjRhOTJiYTY1ZmZjZjFlOTMx Y2NlMzIwHhcNMjYwMTAxMjAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDI5ZWE2NjdjMGUyMmI4NGU3ZTEwZDk5MjE3NDY0YjZjODA5ZGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkfylP65nQ+fmFB4dMwz1eW3AYxu DrwD/acnzgCzkB7jTN2hSDgOhMgw8lTdgdwQ7hjGed0JkkiK9HOw+CDa+ZNz+/Ji E4wXfDY8EyAnfVGrv6sElD6oa7IWoSo5g7x9CIHJ0ck2E8aT6UwQDO2kx0hxGj8N ISduF7obkTLRAVVBErQp98BeK+n8HkIWrt5ffgH9zFiaOlqj5gLc6ree/ZCMhUuD qd59eDvqlXjGw/9Lmr4YKH6nHbHVWlfcHgozXB+kFJcTtuw7llohqmPWMmvyel2Q DSAVaJGORY69u6fypgqPCYTx/ec8mmPnvHjV7ALzzJiVspwit3DSmfuBCQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFH0p6mZ8DiK4Tn4Q2ZIXRktsgJ3BMB8GA1UdIwQY MBaAFGYecXS/np6htkqSumX/zx6THM4yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmg1eGRMLWVucUcyU3BLNlpmX1BIcE1jempJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jMjczODktZGUxMi00ZDEzLTk4ODAt NmJkODQ0ZWE4NmM3LzEvZlNucVpud09JcmhPZmhEWmtoZEdTMnlBbmNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9jMjczODktZGUxMi00ZDEzLTk4ODAtNmJkODQ0ZWE4NmM3 LzEvWmg1eGRMLWVucUcyU3BLNlpmX1BIcE1jempJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWVsMA0E AgACMAcDBQMqBh0AMA0GCSqGSIb3DQEBCwUAA4IBAQBuf42dy0etgZ3Xd3brpHoc AR72DBYNt/z2QOpPt3gpuY/evpK51pFSkKN2AQvijrLwIB+uzTSby5XEzFLQ4Ngf dpykOBDLTC7sF+6+7dqkV3i43ECn3hso5nwt2xGaFJRVKtU6AuNmKn68/uORLiQm AHPVs9v3i6x4BLcynOANa+B6XxveekNl5/gsC1fXs4/cXjiWOunCT5zkxBH92WD6 fInwhdXqvx7zzacyM+7n/2bY6n41/6Grw486+MxejbSQwXK8w/CCxvqlN+YxSX8l ljIwpsIHe/4gS9rnYGbL3fi8okaYbbvgiE4ehr8dROmXywFuVYbWhLGEL08EuwP/ -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:59 2026 by rpki-client