This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/Der6FTM0zFNBcUHHMY71MrqTmEc.roa File: Der6FTM0zFNBcUHHMY71MrqTmEc.roa (raw, json) Hash identifier: 15RROQNtC1R+TRcA+13wCXLiC5eJf1QCPFeKw8n24YU= Subject key identifier: 0D:EA:FA:15:33:34:CC:53:41:71:41:C7:31:8E:F5:32:BA:93:98:47 Certificate issuer: /CN=14a6b0862b2b303b302c3c2349a5ac8d0f906b06 Certificate serial: 019B7C12AF2083825C2BABBD7E7E2FE7144B Authority key identifier: 14:A6:B0:86:2B:2B:30:3B:30:2C:3C:23:49:A5:AC:8D:0F:90:6B:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/Der6FTM0zFNBcUHHMY71MrqTmEc.roa Signing time: Fri 02 Jan 2026 00:19:17 +0000 ROA not before: Fri 02 Jan 2026 00:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209318 IP address blocks: 77.95.115.0/24 maxlen: 24 85.209.208.0/22 maxlen: 24 2a09:9fc0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:af:20:83:82:5c:2b:ab:bd:7e:7e:2f:e7:14:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14a6b0862b2b303b302c3c2349a5ac8d0f906b06 Validity Not Before: Jan 2 00:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0deafa153334cc53417141c7318ef532ba939847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8b:61:69:0c:13:1f:d9:b2:53:52:c5:48:d3: 4e:4a:a3:48:ef:1b:b5:02:c9:ea:41:12:ad:3e:44: 61:78:5c:f9:ed:7e:37:a3:48:fc:ec:48:ee:09:5c: 31:1c:2a:54:c9:0e:d6:c6:96:d6:99:0f:60:b0:d2: 90:6e:27:46:d2:aa:0f:3f:3c:e9:fc:8a:06:8c:5d: 1a:c0:2b:7c:b4:55:9a:0c:db:a7:72:dd:d5:49:4a: 2c:be:5f:86:8e:c9:03:5d:c8:ee:07:f9:12:ed:99: 33:bc:07:aa:e1:9f:7a:9a:81:52:fd:51:ef:5d:ef: 81:6f:5c:ef:f9:82:a4:c7:92:4c:c4:e7:cb:ff:45: 32:16:cd:58:df:a8:d2:8d:fd:76:6f:7f:3f:71:41: 2b:08:a4:c3:a7:58:7a:80:53:58:dc:f9:fc:16:29: 7f:2b:31:c8:3d:6c:07:f8:84:71:ab:95:3a:a7:8c: 53:dc:17:81:37:41:48:ef:80:ec:e1:07:f5:80:d6: f3:35:80:22:7b:44:2c:9f:4e:a5:8f:0f:9c:7a:63: f3:a1:4c:eb:97:a7:a6:a9:b2:29:02:18:d4:8a:0b: 9c:61:f7:b9:0a:b0:5c:73:b3:94:32:ad:0a:66:19: 77:7d:a1:ea:1e:ae:c6:6b:e7:9a:fd:73:48:f1:af: 0f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:EA:FA:15:33:34:CC:53:41:71:41:C7:31:8E:F5:32:BA:93:98:47 X509v3 Authority Key Identifier: keyid:14:A6:B0:86:2B:2B:30:3B:30:2C:3C:23:49:A5:AC:8D:0F:90:6B:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/Der6FTM0zFNBcUHHMY71MrqTmEc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.95.115.0/24 85.209.208.0/22 IPv6: 2a09:9fc0::/29 Signature Algorithm: sha256WithRSAEncryption 98:53:dd:65:98:5d:08:c3:95:65:a4:ab:77:30:cf:6f:e0:43: 4e:e6:83:58:2b:70:14:f1:2f:e8:29:47:3b:62:c8:70:74:81: 98:10:e7:0c:28:3c:ce:e5:39:49:2f:6f:06:d8:ba:f0:50:62: d1:92:51:69:da:47:76:c1:30:24:eb:b9:3a:d6:66:e1:e8:2c: e0:43:02:34:e7:79:ae:d9:32:3f:e5:84:0e:51:95:2d:70:6f: 7d:4f:f7:ed:01:8b:f0:83:ed:a9:ef:8a:43:06:15:10:68:fc: 44:44:91:f2:17:b6:5e:01:2b:ca:8c:a4:28:b8:7a:ec:91:85: ee:8b:4d:51:e6:db:5b:5d:f7:84:99:15:cb:6c:be:1a:91:55: b1:c2:ac:63:a2:12:73:2e:bb:fc:ff:b5:9b:af:28:a3:b3:af: 4d:78:b5:fb:14:e1:7e:81:44:67:0f:b5:82:c2:eb:17:48:dc: c9:bf:c7:11:9e:2b:ce:59:0e:51:16:d3:63:54:98:19:25:a4: cb:3f:48:7a:ab:ec:9f:5e:65:69:7e:4a:9c:40:3f:fa:16:0b: 6c:a5:2b:c0:1a:70:7c:42:a3:c7:00:f7:85:b6:fb:30:ff:14: 96:0b:43:7d:42:84:7c:26:8f:ef:2f:bf:c8:e5:03:6e:ec:3d: 8b:14:db:de -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8Eq8gg4JcK6u9fn4v5xRLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YTZiMDg2MmIyYjMwM2IzMDJjM2MyMzQ5YTVhYzhkMGY5 MDZiMDYwHhcNMjYwMTAyMDAxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGVhZmExNTMzMzRjYzUzNDE3MTQxYzczMThlZjUzMmJhOTM5ODQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44thaQwTH9myU1LFSNNOSqNI7xu1 AsnqQRKtPkRheFz57X43o0j87EjuCVwxHCpUyQ7WxpbWmQ9gsNKQbidG0qoPPzzp /IoGjF0awCt8tFWaDNunct3VSUosvl+GjskDXcjuB/kS7ZkzvAeq4Z96moFS/VHv Xe+Bb1zv+YKkx5JMxOfL/0UyFs1Y36jSjf12b38/cUErCKTDp1h6gFNY3Pn8Fil/ KzHIPWwH+IRxq5U6p4xT3BeBN0FI74Ds4Qf1gNbzNYAie0Qsn06ljw+cemPzoUzr l6emqbIpAhjUigucYfe5CrBcc7OUMq0KZhl3faHqHq7Ga+ea/XNI8a8PHwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFA3q+hUzNMxTQXFBxzGO9TK6k5hHMB8GA1UdIwQY MBaAFBSmsIYrKzA7MCw8I0mlrI0PkGsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkthd2hpc3JNRHN3TER3alNhV3NqUS1RYXdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS84ZDk5MWUtM2VjZS00YTExLWI0NjMt NzUxY2YzYTVlMWUxLzEvRGVyNkZUTTB6Rk5CY1VISE1ZNzFNcnFUbUVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS84ZDk5MWUtM2VjZS00YTExLWI0NjMtNzUxY2YzYTVlMWUx LzEvRkthd2hpc3JNRHN3TER3alNhV3NqUS1RYXdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQATV9zAwQC VdHQMA0EAgACMAcDBQMqCZ/AMA0GCSqGSIb3DQEBCwUAA4IBAQCYU91lmF0Iw5Vl pKt3MM9v4ENO5oNYK3AU8S/oKUc7YshwdIGYEOcMKDzO5TlJL28G2LrwUGLRklFp 2kd2wTAk67k61mbh6CzgQwI053mu2TI/5YQOUZUtcG99T/ftAYvwg+2p74pDBhUQ aPxERJHyF7ZeASvKjKQouHrskYXui01R5ttbXfeEmRXLbL4akVWxwqxjohJzLrv8 /7Wbryijs69NeLX7FOF+gURnD7WCwusXSNzJv8cRnivOWQ5RFtNjVJgZJaTLP0h6 q+yfXmVpfkqcQD/6FgtspSvAGnB8QqPHAPeFtvsw/xSWC0N9QoR8Jo/vL7/I5QNu 7D2LFNve -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:48 2026 by rpki-client