This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/fG4rAo9hnNmK3VLhmWi71rIfAd8.roa File: fG4rAo9hnNmK3VLhmWi71rIfAd8.roa (raw, json) Hash identifier: gGzEO/u7SMQDSlMk5ffb5FzkNVdHLmHQvEqqwyoxESc= Subject key identifier: 7C:6E:2B:02:8F:61:9C:D9:8A:DD:52:E1:99:68:BB:D6:B2:1F:01:DF Certificate issuer: /CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683 Certificate serial: 019B7AC7C98429B6248AB7721DE0D007C0DC Authority key identifier: 03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/fG4rAo9hnNmK3VLhmWi71rIfAd8.roa Signing time: Thu 01 Jan 2026 18:17:52 +0000 ROA not before: Thu 01 Jan 2026 18:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 185.201.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:c9:84:29:b6:24:8a:b7:72:1d:e0:d0:07:c0:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683 Validity Not Before: Jan 1 18:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c6e2b028f619cd98add52e19968bbd6b21f01df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c9:d7:60:b4:b2:58:e4:55:a5:30:32:15:85: a4:33:31:af:bd:5e:d2:77:54:86:0a:64:35:ed:ed: 76:99:7a:d0:a1:e1:8e:78:19:bd:2e:2f:c1:ee:5a: fd:10:73:4f:13:24:72:9c:8f:a1:67:86:6e:94:26: da:a4:a9:2c:bd:c9:e9:37:81:e8:34:2a:01:f9:4d: 5b:3c:24:04:98:4c:12:75:29:47:00:24:ff:b4:07: ad:af:cb:30:08:16:c4:7e:26:97:e7:c5:11:46:42: f4:9e:6f:d4:52:f6:90:06:81:87:34:d0:40:21:35: 00:f0:40:26:af:cc:c1:de:e1:46:dd:ae:80:71:83: 52:5a:04:96:25:63:fb:8a:2a:60:08:18:7f:85:6b: 81:be:1a:61:b7:33:97:cf:11:8a:2f:06:ee:0c:3d: 4d:f4:28:10:66:8b:0b:21:fa:db:7c:b7:77:53:ea: 2a:e9:82:40:51:cf:74:09:ab:17:06:9f:a1:53:62: 0d:a2:0d:c4:6c:69:c2:5b:d5:90:3d:7d:c1:cb:1e: 70:f3:dd:d9:a3:d6:22:cf:ea:dd:76:f7:b9:28:89: a9:ce:f8:94:15:14:1c:b1:fa:5d:d7:56:98:fb:dc: 2f:17:fb:f5:c6:32:c1:d6:86:4d:01:c7:23:4c:38: 00:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:6E:2B:02:8F:61:9C:D9:8A:DD:52:E1:99:68:BB:D6:B2:1F:01:DF X509v3 Authority Key Identifier: keyid:03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/fG4rAo9hnNmK3VLhmWi71rIfAd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.201.69.0/24 Signature Algorithm: sha256WithRSAEncryption b4:c2:02:16:e0:21:98:1e:a8:7a:ff:44:10:e0:1a:95:f3:33: de:29:1d:61:a2:eb:30:5f:04:23:0c:0c:61:e1:b1:bb:92:7a: f6:ed:c3:63:83:79:1d:80:11:8a:31:4e:be:c0:6f:94:fb:36: eb:71:31:aa:7a:a6:c7:90:33:dd:78:c7:9e:bb:96:08:cc:ce: 63:b8:13:22:d5:f5:c3:d9:b0:eb:4b:51:1b:71:8e:41:ea:22: 32:98:9c:10:e0:a1:8e:07:d7:53:27:db:5f:80:29:cc:7c:2f: 1f:c6:c0:f2:4c:b1:7d:f9:28:fd:29:54:13:a1:25:54:da:94: e4:34:75:e2:3d:e4:dd:2f:d9:b2:ec:e2:36:98:80:fa:75:fc: 5e:1b:43:05:71:b7:be:01:fb:26:5b:e1:18:85:8b:40:01:fe: ac:fe:5e:b0:49:b4:da:b4:3d:59:32:85:e0:58:df:94:fb:0e: 94:d5:2f:15:87:7e:e5:61:95:d0:b6:29:b8:8c:6e:7e:fe:34: 21:f9:da:c9:83:4e:00:fa:33:f6:ba:f1:f7:20:c0:22:da:60: 1a:29:70:d1:d2:f8:07:b7:2b:73:d8:28:22:60:d4:78:b6:77: b1:a6:66:2d:60:35:20:8e:c5:77:13:be:b7:a5:77:ef:a8:55: 5a:51:fd:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x8mEKbYkirdyHeDQB8DcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZjdlN2NmODE3NmUzMDI3NjRkNDgyOTlmYzIyYTliZGM2 YmE2ODMwHhcNMjYwMTAxMTgxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzZlMmIwMjhmNjE5Y2Q5OGFkZDUyZTE5OTY4YmJkNmIyMWYwMWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38nXYLSyWORVpTAyFYWkMzGvvV7S d1SGCmQ17e12mXrQoeGOeBm9Li/B7lr9EHNPEyRynI+hZ4ZulCbapKksvcnpN4Ho NCoB+U1bPCQEmEwSdSlHACT/tAetr8swCBbEfiaX58URRkL0nm/UUvaQBoGHNNBA ITUA8EAmr8zB3uFG3a6AcYNSWgSWJWP7iipgCBh/hWuBvhphtzOXzxGKLwbuDD1N 9CgQZosLIfrbfLd3U+oq6YJAUc90CasXBp+hU2INog3EbGnCW9WQPX3Byx5w893Z o9Yiz+rddve5KImpzviUFRQcsfpd11aY+9wvF/v1xjLB1oZNAccjTDgADwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHxuKwKPYZzZit1S4Zlou9ayHwHfMB8GA1UdIwQY MBaAFAP358+BduMCdk1IKZ/CKpvca6aDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQV9mbno0RjI0d0oyVFVncG44SXFtOXhycG9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hZTQ1NDctMmNhMi00Y2JkLWExYjUt M2NmM2I0NjNhODZhLzEvZkc0ckFvOWhuTm1LM1ZMaG1XaTcxcklmQWQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9hZTQ1NDctMmNhMi00Y2JkLWExYjUtM2NmM2I0NjNhODZh LzEvQV9mbno0RjI0d0oyVFVncG44SXFtOXhycG9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuclFMA0G CSqGSIb3DQEBCwUAA4IBAQC0wgIW4CGYHqh6/0QQ4BqV8zPeKR1houswXwQjDAxh 4bG7knr27cNjg3kdgBGKMU6+wG+U+zbrcTGqeqbHkDPdeMeeu5YIzM5juBMi1fXD 2bDrS1EbcY5B6iIymJwQ4KGOB9dTJ9tfgCnMfC8fxsDyTLF9+Sj9KVQToSVU2pTk NHXiPeTdL9my7OI2mID6dfxeG0MFcbe+AfsmW+EYhYtAAf6s/l6wSbTatD1ZMoXg WN+U+w6U1S8Vh37lYZXQtim4jG5+/jQh+drJg04A+jP2uvH3IMAi2mAaKXDR0vgH tytz2CgiYNR4tnexpmYtYDUgjsV3E763pXfvqFVaUf1/ -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:17 2026 by rpki-client