This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/fCweoVy2pE-RI3KiJqu_U9vP31o.roa File: fCweoVy2pE-RI3KiJqu_U9vP31o.roa (raw, json) Hash identifier: Izz1/Qkh1zmgocHLfNEMhHk5Leqh7AEpEEvpIvvT/eA= Subject key identifier: 7C:2C:1E:A1:5C:B6:A4:4F:91:23:72:A2:26:AB:BF:53:DB:CF:DF:5A Certificate issuer: /CN=9ff3396374cbf5d767125f02dcf0f97296323092 Certificate serial: 019B79ED3DCC5F8CE9AE38E8415CA0A72AAA Authority key identifier: 9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/fCweoVy2pE-RI3KiJqu_U9vP31o.roa Signing time: Thu 01 Jan 2026 14:19:09 +0000 ROA not before: Thu 01 Jan 2026 14:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59890 IP address blocks: 147.78.248.0/22 maxlen: 24 185.67.172.0/22 maxlen: 24 185.251.200.0/22 maxlen: 24 194.208.128.0/19 maxlen: 21 194.208.176.0/21 maxlen: 22 2a05:1140::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:3d:cc:5f:8c:e9:ae:38:e8:41:5c:a0:a7:2a:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ff3396374cbf5d767125f02dcf0f97296323092 Validity Not Before: Jan 1 14:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c2c1ea15cb6a44f912372a226abbf53dbcfdf5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:42:6f:31:e9:58:a3:5e:6e:c1:b9:1d:19:00: 11:61:86:d0:06:2c:fe:18:91:d4:e4:3b:e7:29:51: 7d:0a:39:00:d8:17:48:a6:6b:63:d8:e1:c9:3c:36: 58:6d:36:c9:38:4a:5e:e8:34:d0:d5:cb:14:9e:8a: 7a:36:4d:c5:1c:5a:73:1d:4c:54:6e:7d:7d:a6:cc: c6:41:7e:94:5a:91:49:83:2f:12:2d:ab:ef:fa:1c: cb:57:ed:98:8d:29:b4:3d:15:3d:74:46:f3:33:6a: 9d:d1:a9:49:00:3b:66:1f:3f:c1:fd:33:a3:09:d5: 94:8f:1c:78:ec:9d:2a:e3:e9:13:32:48:9b:2e:6e: 9f:52:5b:c0:20:12:cc:6e:49:80:28:d6:97:a7:3e: 10:f2:cc:a0:20:40:e2:f3:1f:e9:4c:d4:57:c6:e8: 13:2e:b4:77:50:8d:a5:01:94:39:42:38:ce:95:01: 53:b5:68:74:8b:3e:19:e8:6a:30:ba:17:bb:b7:aa: 13:48:f3:a2:b3:66:a0:7b:c9:20:cb:02:72:90:07: 0f:5e:24:ac:16:0e:3e:ef:43:c9:54:f3:89:1e:aa: 9f:27:41:6c:ef:3e:cb:07:27:10:25:3e:79:27:bc: 02:be:35:b9:68:ad:01:9e:5e:8f:94:2b:c5:db:5e: 09:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:2C:1E:A1:5C:B6:A4:4F:91:23:72:A2:26:AB:BF:53:DB:CF:DF:5A X509v3 Authority Key Identifier: keyid:9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/fCweoVy2pE-RI3KiJqu_U9vP31o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.248.0/22 185.67.172.0/22 185.251.200.0/22 194.208.128.0/19 194.208.176.0/21 IPv6: 2a05:1140::/29 Signature Algorithm: sha256WithRSAEncryption 6f:d3:66:d3:63:e5:d6:bf:9c:d6:f9:54:b4:42:85:65:3a:54: 9d:81:d1:37:08:66:13:2c:8f:61:79:95:85:12:be:76:f5:55: 8c:b6:02:42:f4:15:11:cf:fe:6d:60:45:09:c8:47:db:3b:c6: 96:88:f1:15:3f:f5:ec:bb:6b:9e:e1:80:79:7c:3b:fe:50:87: de:87:68:d8:f5:f1:48:96:58:e3:b7:20:09:78:e3:48:85:a9: 28:a3:2c:f3:5e:ad:0d:f8:6e:29:58:89:56:04:fc:1f:a4:9e: ad:52:6d:f2:0f:c5:72:2f:3d:a5:25:b5:a3:c6:8d:80:d7:65: 12:0c:7a:57:24:0b:9a:a6:18:81:34:63:1d:96:d8:9d:43:7e: 4d:72:3c:67:4a:27:b0:ab:4e:53:77:5b:f8:bc:28:18:b0:8e: 22:99:76:13:3c:46:ae:4d:b8:bd:94:73:e2:3b:07:b8:f1:06: 0c:88:8f:13:0c:97:b0:b2:d8:57:91:5e:5a:c9:ac:ce:81:39: e1:c8:17:70:04:9b:31:12:3e:e9:a3:1b:fc:27:e3:b7:49:f9: c8:7d:44:2e:4c:af:af:15:cc:13:b2:58:d7:8f:bf:f6:64:d9: 5e:c3:50:6d:ce:01:a3:b1:21:11:c9:17:48:83:4f:bf:a1:33: d7:6a:30:08 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt57T3MX4zprjjoQVygpyqqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZjMzOTYzNzRjYmY1ZDc2NzEyNWYwMmRjZjBmOTcyOTYz MjMwOTIwHhcNMjYwMTAxMTQxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzJjMWVhMTVjYjZhNDRmOTEyMzcyYTIyNmFiYmY1M2RiY2ZkZjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEJvMelYo15uwbkdGQARYYbQBiz+ GJHU5DvnKVF9CjkA2BdIpmtj2OHJPDZYbTbJOEpe6DTQ1csUnop6Nk3FHFpzHUxU bn19pszGQX6UWpFJgy8SLavv+hzLV+2YjSm0PRU9dEbzM2qd0alJADtmHz/B/TOj CdWUjxx47J0q4+kTMkibLm6fUlvAIBLMbkmAKNaXpz4Q8sygIEDi8x/pTNRXxugT LrR3UI2lAZQ5QjjOlQFTtWh0iz4Z6Gowuhe7t6oTSPOis2age8kgywJykAcPXiSs Fg4+70PJVPOJHqqfJ0Fs7z7LBycQJT55J7wCvjW5aK0Bnl6PlCvF214JCwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFHwsHqFctqRPkSNyoiarv1Pbz99aMB8GA1UdIwQY MBaAFJ/zOWN0y/XXZxJfAtzw+XKWMjCSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbl9NNVkzVEw5ZGRuRWw4QzNQRDVjcFl5TUpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zMTYwMjAtOWZjNS00YjdjLWFlNDEt ZTk1NTQ0ODNmZmE3LzEvZkN3ZW9WeTJwRS1SSTNLaUpxdV9VOXZQMzFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zMTYwMjAtOWZjNS00YjdjLWFlNDEtZTk1NTQ0ODNmZmE3 LzEvbl9NNVkzVEw5ZGRuRWw4QzNQRDVjcFl5TUpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCk074AwQC uUOsAwQCufvIAwQFwtCAAwQDwtCwMA0EAgACMAcDBQMqBRFAMA0GCSqGSIb3DQEB CwUAA4IBAQBv02bTY+XWv5zW+VS0QoVlOlSdgdE3CGYTLI9heZWFEr529VWMtgJC 9BURz/5tYEUJyEfbO8aWiPEVP/Xsu2ue4YB5fDv+UIfeh2jY9fFIlljjtyAJeONI hakooyzzXq0N+G4pWIlWBPwfpJ6tUm3yD8VyLz2lJbWjxo2A12USDHpXJAuaphiB NGMdltidQ35NcjxnSiewq05Td1v4vCgYsI4imXYTPEauTbi9lHPiOwe48QYMiI8T DJewsthXkV5ayazOgTnhyBdwBJsxEj7poxv8J+O3SfnIfUQuTK+vFcwTsljXj7/2 ZNlew1BtzgGjsSERyRdIg0+/oTPXajAI -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:17 2026 by rpki-client