This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/fCShZlzeyORIZqRpva0LWa9CXcY.roa File: fCShZlzeyORIZqRpva0LWa9CXcY.roa (raw, json) Hash identifier: Zw1W+vklKFKa/7FceWUPbOmP+yw3OCVtUAYFmYvIIHY= Subject key identifier: 7C:24:A1:66:5C:DE:C8:E4:48:66:A4:69:BD:AD:0B:59:AF:42:5D:C6 Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Certificate serial: 019B7C80C41ADAE7193D66BEDA86CA4E156A Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/fCShZlzeyORIZqRpva0LWa9CXcY.roa Signing time: Fri 02 Jan 2026 02:19:32 +0000 ROA not before: Fri 02 Jan 2026 02:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211456 IP address blocks: 185.7.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:c4:1a:da:e7:19:3d:66:be:da:86:ca:4e:15:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Validity Not Before: Jan 2 02:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c24a1665cdec8e44866a469bdad0b59af425dc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4c:23:6b:11:6a:7e:42:e4:32:b0:ec:04:05: e2:bc:6d:d3:23:c9:fb:ed:6c:a0:cc:21:51:7f:28: 1b:82:80:ca:36:8a:e7:b1:f7:37:f4:cc:19:6d:40: 00:aa:33:4f:a6:cf:c5:69:4a:76:37:06:01:1a:74: 62:d0:f8:3d:6e:90:e1:b0:9b:69:62:b7:6a:6e:b9: 81:82:a1:1e:9f:f7:41:f0:da:1b:35:69:85:4c:c8: e6:56:21:a6:b4:81:d3:ca:0b:5e:24:e4:c0:96:49: 19:e5:77:14:ba:71:c9:d7:f7:0d:83:12:27:80:fa: 0e:66:ee:da:fb:fa:64:c8:2e:a9:e3:6d:04:f1:c6: e8:19:31:db:23:81:f8:e7:f2:73:e4:dc:98:38:e7: d3:be:88:88:8d:cb:eb:de:88:e2:2c:2c:a4:f7:f0: 69:d2:0e:98:e2:3c:66:c3:43:3f:4a:52:1b:b6:43: 8d:1a:cf:21:45:99:0a:7f:d3:22:00:13:3a:4b:f0: b2:c1:8a:ed:2a:86:d8:b6:e5:18:7b:53:96:1c:ed: f9:63:f4:57:2b:7b:e1:7e:8b:64:16:45:a7:9d:dc: 9c:69:07:c7:cd:61:74:db:b7:08:40:2d:1b:2a:dc: 0b:41:85:cd:be:46:1a:15:7b:1b:bc:5e:fe:a4:a6: 0c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:24:A1:66:5C:DE:C8:E4:48:66:A4:69:BD:AD:0B:59:AF:42:5D:C6 X509v3 Authority Key Identifier: keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/fCShZlzeyORIZqRpva0LWa9CXcY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.7.218.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:90:af:53:61:f7:c4:42:79:67:07:3d:ba:f0:fa:85:81:9b: f0:ec:3a:6d:cc:dc:e4:e6:34:0d:eb:93:4d:26:88:12:30:ad: 7b:ae:58:f9:ea:48:ed:d5:a6:4f:ca:8a:19:1e:42:96:51:76: 52:73:b5:2d:c2:e9:f5:19:2d:d8:37:85:cd:87:21:f3:71:fc: 73:8b:49:70:95:42:0c:4a:7e:1a:83:af:c1:81:3d:d9:aa:0f: 3f:25:14:de:bd:8f:68:75:ca:90:bf:4f:e6:d7:c4:61:55:25: 0c:d7:0e:02:16:99:d1:de:56:b9:e1:84:c3:8c:6b:c4:0d:a8: 71:be:b4:72:8b:21:2e:27:9d:c6:29:b9:e3:96:de:ee:e3:5d: a0:37:97:0c:22:a3:b4:c0:c5:45:a9:fd:80:c4:28:ae:30:43: 12:55:e2:e0:48:4c:ad:b3:28:40:58:fa:cb:57:65:79:69:28: 86:0a:90:21:83:f3:e6:4f:5a:d9:4c:64:36:fc:ab:e9:0d:4e: 65:25:6a:7e:37:d7:34:17:da:44:b2:43:23:5a:16:a5:bd:90: d6:6e:da:3e:61:d8:84:4a:8d:23:63:34:85:e3:5b:ca:93:0b: 8c:9a:12:29:55:ef:9d:fe:5a:9b:ab:08:f4:bd:ce:35:c8:c4: 9a:3c:bb:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gMQa2ucZPWa+2obKThVqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1N2IwYWMxMGI4NjQyYTI3ZGQzZDc0ZWQ2Y2I1ZWUwNDVl NjdiOTcwHhcNMjYwMTAyMDIxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzI0YTE2NjVjZGVjOGU0NDg2NmE0NjliZGFkMGI1OWFmNDI1ZGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10wjaxFqfkLkMrDsBAXivG3TI8n7 7WygzCFRfygbgoDKNornsfc39MwZbUAAqjNPps/FaUp2NwYBGnRi0Pg9bpDhsJtp YrdqbrmBgqEen/dB8NobNWmFTMjmViGmtIHTygteJOTAlkkZ5XcUunHJ1/cNgxIn gPoOZu7a+/pkyC6p420E8cboGTHbI4H45/Jz5NyYOOfTvoiIjcvr3ojiLCyk9/Bp 0g6Y4jxmw0M/SlIbtkONGs8hRZkKf9MiABM6S/CywYrtKobYtuUYe1OWHO35Y/RX K3vhfotkFkWnndycaQfHzWF027cIQC0bKtwLQYXNvkYaFXsbvF7+pKYMFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHwkoWZc3sjkSGakab2tC1mvQl3GMB8GA1UdIwQY MBaAFFV7CsELhkKifdPXTtbLXuBF5nuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYt ZmJlMWEwZDBhYTk4LzEvZkNTaFpsemV5T1JJWnFScHZhMExXYTlDWGNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYtZmJlMWEwZDBhYTk4 LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQfaMA0G CSqGSIb3DQEBCwUAA4IBAQAdkK9TYffEQnlnBz268PqFgZvw7DptzNzk5jQN65NN JogSMK17rlj56kjt1aZPyooZHkKWUXZSc7Utwun1GS3YN4XNhyHzcfxzi0lwlUIM Sn4ag6/BgT3Zqg8/JRTevY9odcqQv0/m18RhVSUM1w4CFpnR3la54YTDjGvEDahx vrRyiyEuJ53GKbnjlt7u412gN5cMIqO0wMVFqf2AxCiuMEMSVeLgSEytsyhAWPrL V2V5aSiGCpAhg/PmT1rZTGQ2/KvpDU5lJWp+N9c0F9pEskMjWhalvZDWbto+YdiE So0jYzSF41vKkwuMmhIpVe+d/lqbqwj0vc41yMSaPLvz -----END CERTIFICATE-----Generated at Tue Feb 10 04:31:26 2026 by rpki-client