This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/F7I5rnkHLQ8PitpUJJXzJQnZJaU.roa File: F7I5rnkHLQ8PitpUJJXzJQnZJaU.roa (raw, json) Hash identifier: mzXoIYY5/cdBAcGj+HsD/eRCWuIVU1w+4VfWf00hQ20= Subject key identifier: 17:B2:39:AE:79:07:2D:0F:0F:8A:DA:54:24:95:F3:25:09:D9:25:A5 Certificate issuer: /CN=88fb410a3bfc7340b667b4f221c7cb806267896e Certificate serial: 019BA1F396B9939C8621164FEA0EEB0EE3FA Authority key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/F7I5rnkHLQ8PitpUJJXzJQnZJaU.roa Signing time: Fri 09 Jan 2026 08:50:54 +0000 ROA not before: Fri 09 Jan 2026 08:50:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213657 IP address blocks: 185.229.12.0/24 maxlen: 24 185.231.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:f3:96:b9:93:9c:86:21:16:4f:ea:0e:eb:0e:e3:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88fb410a3bfc7340b667b4f221c7cb806267896e Validity Not Before: Jan 9 08:50:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17b239ae79072d0f0f8ada542495f32509d925a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:96:ee:fd:9e:15:5a:33:bf:02:f7:82:d0:30: 66:c6:d3:f5:90:b8:77:17:d3:33:be:54:b9:37:59: e0:5a:b1:59:93:3e:78:cc:18:38:aa:24:fa:7f:4b: 69:3a:49:36:ef:06:c6:ed:54:3e:f6:95:84:c4:54: ce:e5:10:b7:2e:8f:df:70:8d:64:24:16:eb:92:27: 68:f3:43:25:9d:9e:7c:ae:63:26:9c:a1:25:ef:3a: 30:2a:02:58:8b:33:8e:5b:f6:44:da:4a:41:85:64: 79:77:27:b2:fe:a8:3a:d1:d2:f1:e4:6b:05:c9:0e: 0e:a3:73:bb:0e:90:dc:fe:06:5d:16:30:74:24:bf: e8:10:f8:d2:16:cb:24:08:e0:93:47:2e:67:39:e1: a0:cc:89:90:1f:83:c2:07:8a:5d:68:0a:ff:86:4b: 08:56:40:3b:1e:ba:bc:33:08:58:b8:59:bd:b3:4d: 24:f6:43:1d:1c:78:04:75:e9:a9:85:23:17:8c:f5: a9:3d:2e:81:db:9d:28:c6:eb:f9:83:57:0f:a9:fe: 32:74:ed:93:e1:10:82:bb:04:9a:98:02:39:8a:de: b7:9b:d4:88:e8:c4:ef:e9:f8:7f:2f:f3:ef:9e:5b: 31:08:ad:3b:8a:d1:64:cb:ef:d6:32:ca:cc:9c:c7: b3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B2:39:AE:79:07:2D:0F:0F:8A:DA:54:24:95:F3:25:09:D9:25:A5 X509v3 Authority Key Identifier: keyid:88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/F7I5rnkHLQ8PitpUJJXzJQnZJaU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.229.12.0/24 185.231.111.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:d1:f9:06:9c:ba:f2:da:25:76:a0:1c:ba:df:2d:50:0c:a3: 77:bd:d0:49:e7:6b:5f:43:ad:7f:f1:42:a7:d9:a6:34:04:9f: e1:49:2c:08:1e:10:e2:a6:f7:4a:90:2e:b8:6d:38:fa:6a:cc: 95:a8:7e:87:4b:65:66:2f:3d:b5:ad:ee:c6:af:50:a2:4a:36: 8b:fc:c8:8f:eb:6e:86:2c:64:1e:74:9f:15:eb:11:08:dd:57: 61:6c:fa:d8:5c:b1:b9:06:57:5a:3b:b1:a5:31:76:7e:8b:3f: f7:9e:89:22:ae:b8:c5:25:74:a0:ad:91:db:d4:6b:bd:8c:f1: a2:36:4a:d4:32:fa:ba:2c:0e:f6:7e:dd:46:ee:9d:a1:d6:53: 45:9e:dd:d1:16:f4:12:b3:c3:9d:f0:3f:81:59:e5:b7:8e:bf: 20:cb:4d:e4:df:9b:4d:cd:ed:ad:43:d5:83:3b:ae:14:20:28: 1e:03:95:29:bb:9e:c8:0f:e5:fa:83:73:00:e3:21:49:de:9a: 65:12:92:a3:10:a9:22:a5:cc:d1:ed:86:5c:92:f8:71:66:b1: 24:03:6f:f2:24:9c:bd:84:8a:6a:35:b7:30:ec:cb:dc:77:22: e3:96:39:a0:b5:0c:5e:1d:91:ba:bb:bd:45:65:3a:6f:8b:58: 92:99:61:b8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZuh85a5k5yGIRZP6g7rDuP6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZmI0MTBhM2JmYzczNDBiNjY3YjRmMjIxYzdjYjgwNjI2 Nzg5NmUwHhcNMjYwMTA5MDg1MDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2IyMzlhZTc5MDcyZDBmMGY4YWRhNTQyNDk1ZjMyNTA5ZDkyNWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Zbu/Z4VWjO/AveC0DBmxtP1kLh3 F9MzvlS5N1ngWrFZkz54zBg4qiT6f0tpOkk27wbG7VQ+9pWExFTO5RC3Lo/fcI1k JBbrkido80MlnZ58rmMmnKEl7zowKgJYizOOW/ZE2kpBhWR5dyey/qg60dLx5GsF yQ4Oo3O7DpDc/gZdFjB0JL/oEPjSFsskCOCTRy5nOeGgzImQH4PCB4pdaAr/hksI VkA7Hrq8MwhYuFm9s00k9kMdHHgEdemphSMXjPWpPS6B250oxuv5g1cPqf4ydO2T 4RCCuwSamAI5it63m9SI6MTv6fh/L/PvnlsxCK07itFky+/WMsrMnMezjwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBeyOa55By0PD4raVCSV8yUJ2SWlMB8GA1UdIwQY MBaAFIj7QQo7/HNAtme08iHHy4BiZ4luMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80NDYyNGYtMjMxZC00NjZjLWJiMDIt YjM4YzgwOTUxOTgxLzEvRjdJNXJua0hMUThQaXRwVUpKWHpKUW5aSmFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80NDYyNGYtMjMxZC00NjZjLWJiMDItYjM4YzgwOTUxOTgx LzEvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAueUMAwQA uedvMA0GCSqGSIb3DQEBCwUAA4IBAQAt0fkGnLry2iV2oBy63y1QDKN3vdBJ52tf Q61/8UKn2aY0BJ/hSSwIHhDipvdKkC64bTj6asyVqH6HS2VmLz21re7Gr1CiSjaL /MiP626GLGQedJ8V6xEI3VdhbPrYXLG5BldaO7GlMXZ+iz/3nokirrjFJXSgrZHb 1Gu9jPGiNkrUMvq6LA72ft1G7p2h1lNFnt3RFvQSs8Od8D+BWeW3jr8gy03k35tN ze2tQ9WDO64UICgeA5Upu57ID+X6g3MA4yFJ3pplEpKjEKkipczR7YZckvhxZrEk A2/yJJy9hIpqNbcw7MvcdyLjljmgtQxeHZG6u71FZTpvi1iSmWG4 -----END CERTIFICATE-----Generated at Wed Jan 21 16:15:37 2026 by rpki-client