This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/fQazRsuQA7KoggBdQ3lwX4Pk9DE.roa File: fQazRsuQA7KoggBdQ3lwX4Pk9DE.roa (raw, json) Hash identifier: gfbrsTU/I0e+W/MQFr0NClUgyaIVv/jWpNgk1NCWi8I= Subject key identifier: 7D:06:B3:46:CB:90:03:B2:A8:82:00:5D:43:79:70:5F:83:E4:F4:31 Certificate issuer: /CN=7178700f1619ec1cd34d9700392153ec4b6231fc Certificate serial: 019B7F15EC51F3C2BE0080BD161D635FE118 Authority key identifier: 71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/fQazRsuQA7KoggBdQ3lwX4Pk9DE.roa Signing time: Fri 02 Jan 2026 14:21:41 +0000 ROA not before: Fri 02 Jan 2026 14:21:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60129 IP address blocks: 185.56.24.0/22 maxlen: 22 185.249.240.0/22 maxlen: 22 2a02:4fe0::/32 maxlen: 32 2a0b:4780::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ec:51:f3:c2:be:00:80:bd:16:1d:63:5f:e1:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7178700f1619ec1cd34d9700392153ec4b6231fc Validity Not Before: Jan 2 14:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d06b346cb9003b2a882005d4379705f83e4f431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b7:67:fa:b3:c5:63:cf:bc:21:cf:0f:a3:03: b1:d8:b3:ec:74:84:73:1a:31:f4:6f:22:78:46:04: 4d:c0:e0:f4:e4:ca:c9:5a:5e:0e:4b:12:ff:1b:9e: 14:12:8d:34:db:58:bc:0c:4a:a7:42:3d:26:7a:56: c0:b0:2b:93:cb:64:75:cd:2a:ec:35:41:3e:2d:f6: 00:cd:ef:4e:ec:17:57:82:87:a7:de:c8:a1:e1:8b: 7b:50:b3:ea:56:1e:3c:e4:17:c6:cf:95:ac:39:7a: 81:26:b2:d4:3e:d8:06:34:7e:41:37:a5:17:4f:6f: 7f:b3:c2:02:88:36:74:ef:7c:3d:7a:3f:86:ad:98: f4:d0:2f:78:60:b2:31:a0:a4:67:6c:ba:cc:fe:01: 48:08:52:c6:e7:dd:49:0a:5f:50:56:ef:80:04:8f: 10:f5:92:aa:ef:57:3c:42:45:f0:e0:35:c9:91:92: 3e:3f:7f:6b:63:33:7c:6d:9e:33:65:8b:01:41:7d: 64:5c:ee:86:02:1d:d1:41:5e:69:3a:ce:3e:d8:23: 65:b1:1a:b0:5e:a7:f3:d5:3f:88:c2:39:44:4f:25: 35:9e:ec:59:bc:d5:67:65:8a:12:e9:e8:4d:c1:bf: f8:71:a5:cf:7e:c7:0f:d6:8b:ff:c3:13:83:dd:96: 2b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:06:B3:46:CB:90:03:B2:A8:82:00:5D:43:79:70:5F:83:E4:F4:31 X509v3 Authority Key Identifier: keyid:71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/fQazRsuQA7KoggBdQ3lwX4Pk9DE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.56.24.0/22 185.249.240.0/22 IPv6: 2a02:4fe0::/32 2a0b:4780::/29 Signature Algorithm: sha256WithRSAEncryption 40:6f:17:8e:69:76:05:fb:d8:bd:ef:5f:bf:c5:22:c1:15:60: 52:60:aa:ef:f9:ef:af:e5:24:b8:43:2b:0b:11:42:8d:1b:c7: 0c:10:8b:39:d1:f0:59:a9:03:12:64:8a:3f:9f:93:0a:f8:4b: 55:b7:98:17:81:bd:a4:48:28:88:fb:86:66:06:e0:a0:3c:4e: 6d:f7:e0:4b:ba:8a:40:f9:2e:76:78:a4:09:86:93:da:27:06: 05:44:38:8c:d3:71:2a:08:55:75:d3:c6:3e:ef:ea:f3:ab:86: cc:5c:d1:dc:4b:60:13:73:c5:bb:91:58:bd:a4:b8:10:e6:1f: d4:a6:c9:60:1a:72:3f:c9:3d:b1:68:11:27:5f:52:c0:d9:4d: c6:7e:67:d1:c0:c8:c9:e9:53:93:2a:10:87:67:5d:5f:1a:53: 01:1d:83:c0:0e:9f:e3:fb:dc:46:e4:ef:a9:b4:60:30:9c:73: 95:97:ea:04:ef:fe:99:fe:a1:d6:72:1e:f2:45:b7:09:d9:2f: 1d:d9:c2:d8:d8:09:62:ab:a8:7c:d9:72:55:70:27:b1:03:36: ad:9c:1d:ce:f2:73:f4:c8:44:c0:53:e5:37:67:41:45:c8:c0: b5:8c:6b:b6:54:bb:bd:cb:e4:bb:41:d3:33:a4:28:d4:e3:ce: 45:f0:c9:17 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt/FexR88K+AIC9Fh1jX+EYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNzg3MDBmMTYxOWVjMWNkMzRkOTcwMDM5MjE1M2VjNGI2 MjMxZmMwHhcNMjYwMTAyMTQyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDA2YjM0NmNiOTAwM2IyYTg4MjAwNWQ0Mzc5NzA1ZjgzZTRmNDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrdn+rPFY8+8Ic8PowOx2LPsdIRz GjH0byJ4RgRNwOD05MrJWl4OSxL/G54UEo0021i8DEqnQj0melbAsCuTy2R1zSrs NUE+LfYAze9O7BdXgoen3sih4Yt7ULPqVh485BfGz5WsOXqBJrLUPtgGNH5BN6UX T29/s8ICiDZ073w9ej+GrZj00C94YLIxoKRnbLrM/gFICFLG591JCl9QVu+ABI8Q 9ZKq71c8QkXw4DXJkZI+P39rYzN8bZ4zZYsBQX1kXO6GAh3RQV5pOs4+2CNlsRqw Xqfz1T+IwjlETyU1nuxZvNVnZYoS6ehNwb/4caXPfscP1ov/wxOD3ZYrRQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFH0Gs0bLkAOyqIIAXUN5cF+D5PQxMB8GA1UdIwQY MBaAFHF4cA8WGewc002XADkhU+xLYjH8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1hod0R4WVo3QnpUVFpjQU9TRlQ3RXRpTWZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iNTg1YWMtODYxOC00MTVhLTg3ZWMt ZDFkOGRiMTQ4ZWMyLzEvZlFhelJzdVFBN0tvZ2dCZFEzbHdYNFBrOURFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iNTg1YWMtODYxOC00MTVhLTg3ZWMtZDFkOGRiMTQ4ZWMy LzEvY1hod0R4WVo3QnpUVFpjQU9TRlQ3RXRpTWZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCuTgYAwQC ufnwMBQEAgACMA4DBQAqAk/gAwUDKgtHgDANBgkqhkiG9w0BAQsFAAOCAQEAQG8X jml2BfvYve9fv8UiwRVgUmCq7/nvr+UkuEMrCxFCjRvHDBCLOdHwWakDEmSKP5+T CvhLVbeYF4G9pEgoiPuGZgbgoDxObffgS7qKQPkudnikCYaT2icGBUQ4jNNxKghV ddPGPu/q86uGzFzR3EtgE3PFu5FYvaS4EOYf1KbJYBpyP8k9sWgRJ19SwNlNxn5n 0cDIyelTkyoQh2ddXxpTAR2DwA6f4/vcRuTvqbRgMJxzlZfqBO/+mf6h1nIe8kW3 CdkvHdnC2NgJYquofNlyVXAnsQM2rZwdzvJz9MhEwFPlN2dBRcjAtYxrtlS7vcvk u0HTM6Qo1OPORfDJFw== -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:35 2026 by rpki-client