This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8e416c-5550-4e81-a8c4-d6235b5fe67a/1/fg2keJiLPQ1Lp8zNFtbhuRbEUZg.roa File: fg2keJiLPQ1Lp8zNFtbhuRbEUZg.roa (raw, json) Hash identifier: 9rgZFVm/+xf3aqaKnvisLSlE97CCBEk/hCKouFczB4k= Subject key identifier: 7E:0D:A4:78:98:8B:3D:0D:4B:A7:CC:CD:16:D6:E1:B9:16:C4:51:98 Certificate issuer: /CN=5b00790bae3cd85a50e4f934388361763ebfbe5a Certificate serial: 019B7F15B5B4D9557F9C43B3FADF12B98CE4 Authority key identifier: 5B:00:79:0B:AE:3C:D8:5A:50:E4:F9:34:38:83:61:76:3E:BF:BE:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwB5C6482FpQ5Pk0OINhdj6_vlo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8e416c-5550-4e81-a8c4-d6235b5fe67a/1/fg2keJiLPQ1Lp8zNFtbhuRbEUZg.roa Signing time: Fri 02 Jan 2026 14:21:27 +0000 ROA not before: Fri 02 Jan 2026 14:21:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 185.225.161.0/24 maxlen: 24 185.249.220.0/24 maxlen: 24 212.11.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/8e416c-5550-4e81-a8c4-d6235b5fe67a/1/WwB5C6482FpQ5Pk0OINhdj6_vlo.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/8e416c-5550-4e81-a8c4-d6235b5fe67a/1/WwB5C6482FpQ5Pk0OINhdj6_vlo.mft rsync://rpki.ripe.net/repository/DEFAULT/WwB5C6482FpQ5Pk0OINhdj6_vlo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:b5:b4:d9:55:7f:9c:43:b3:fa:df:12:b9:8c:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b00790bae3cd85a50e4f934388361763ebfbe5a Validity Not Before: Jan 2 14:21:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e0da478988b3d0d4ba7cccd16d6e1b916c45198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ec:78:5f:57:d5:25:b7:6d:b3:67:13:31:ce: a6:ce:65:bf:8f:7e:6d:c4:08:d0:f0:ae:ff:d2:0c: e6:90:ca:c6:32:c0:a3:ba:52:28:13:aa:a4:b7:6c: bf:ff:e1:f3:71:1c:a9:06:db:48:77:27:be:71:66: 74:5c:a3:45:55:76:e6:b2:63:b2:63:db:b9:c9:ab: 0d:23:ac:7a:db:e8:08:62:10:a8:8f:fc:2f:4c:4c: 80:c2:03:a3:11:25:14:51:f9:d3:4f:ba:54:aa:cb: 7b:a5:9a:8e:68:f6:11:3a:b9:37:27:54:ee:92:c1: f2:d3:e1:c2:83:0b:ff:2f:80:99:d0:7a:a7:c9:8b: 83:5b:ec:c5:30:ed:0d:17:7a:13:cf:3b:bd:2b:b6: 25:b3:d8:81:4d:0d:0d:b5:e1:42:22:fc:19:01:d5: 4e:e1:ac:45:b8:1f:ab:64:de:46:cd:03:0e:90:49: 87:d4:f9:ff:8a:2e:7b:5f:fc:76:c8:d3:d7:aa:bf: 83:61:3d:48:db:5c:18:cc:fa:b6:0e:3b:53:e8:05: e5:d2:02:2f:f2:19:03:51:fe:35:89:77:3e:6c:62: e6:51:df:ea:22:e4:b6:5f:0e:a4:54:47:ec:84:91: c6:06:ee:93:1c:c2:e0:84:58:f9:23:0d:c6:5f:1b: 9c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:0D:A4:78:98:8B:3D:0D:4B:A7:CC:CD:16:D6:E1:B9:16:C4:51:98 X509v3 Authority Key Identifier: keyid:5B:00:79:0B:AE:3C:D8:5A:50:E4:F9:34:38:83:61:76:3E:BF:BE:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwB5C6482FpQ5Pk0OINhdj6_vlo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8e416c-5550-4e81-a8c4-d6235b5fe67a/1/fg2keJiLPQ1Lp8zNFtbhuRbEUZg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8e416c-5550-4e81-a8c4-d6235b5fe67a/1/WwB5C6482FpQ5Pk0OINhdj6_vlo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.161.0/24 185.249.220.0/24 212.11.79.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:7c:40:0c:63:4f:3c:b8:49:4d:70:f8:05:12:30:e1:b7:a6: d7:75:08:68:ca:4a:ea:cd:1f:22:f4:b8:e0:38:b1:6d:36:b4: 47:a3:4d:43:5c:f4:bc:e7:b1:ff:16:16:a9:ad:51:6c:db:00: 2b:86:e2:ed:e0:2e:e2:a0:be:d0:e4:3c:73:b2:3a:e4:5b:ef: 3c:52:0c:4b:21:8f:b9:ec:e9:b1:e9:3a:c8:68:44:2a:95:ea: a8:bb:32:ca:cb:1e:0c:b0:44:a1:57:ab:7b:6d:ad:42:dc:16: a2:2e:eb:26:98:0f:8a:3c:b7:b2:e7:8a:21:c2:b1:ff:5f:a2: d4:86:b8:2f:98:38:a9:85:36:82:05:09:bf:68:fb:e1:d3:68: e8:9c:5d:64:13:6a:39:31:c9:4d:5a:11:aa:9e:bd:b0:60:dd: 27:54:d3:3e:da:4b:8f:fe:fc:e9:84:c4:f9:9e:dc:77:7e:0a: 45:c5:e7:20:82:93:b8:0e:2a:2f:48:b8:47:59:95:61:4d:aa: 6f:55:91:a3:fd:b3:35:9f:d7:31:dc:c4:c4:99:e8:fb:90:24: 8b:d0:bf:16:8c:d3:cc:38:d2:e8:ea:2e:d2:34:c1:96:80:4a: 65:01:1b:a9:e2:96:5c:f5:6b:2b:26:a2:0e:a0:8a:14:75:4d: bd:52:18:38 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FbW02VV/nEOz+t8SuYzkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMDA3OTBiYWUzY2Q4NWE1MGU0ZjkzNDM4ODM2MTc2M2Vi ZmJlNWEwHhcNMjYwMTAyMTQyMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTBkYTQ3ODk4OGIzZDBkNGJhN2NjY2QxNmQ2ZTFiOTE2YzQ1MTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+x4X1fVJbdts2cTMc6mzmW/j35t xAjQ8K7/0gzmkMrGMsCjulIoE6qkt2y//+HzcRypBttIdye+cWZ0XKNFVXbmsmOy Y9u5yasNI6x62+gIYhCoj/wvTEyAwgOjESUUUfnTT7pUqst7pZqOaPYROrk3J1Tu ksHy0+HCgwv/L4CZ0HqnyYuDW+zFMO0NF3oTzzu9K7Yls9iBTQ0NteFCIvwZAdVO 4axFuB+rZN5GzQMOkEmH1Pn/ii57X/x2yNPXqr+DYT1I21wYzPq2DjtT6AXl0gIv 8hkDUf41iXc+bGLmUd/qIuS2Xw6kVEfshJHGBu6THMLghFj5Iw3GXxuc5wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFH4NpHiYiz0NS6fMzRbW4bkWxFGYMB8GA1UdIwQY MBaAFFsAeQuuPNhaUOT5NDiDYXY+v75aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3dCNUM2NDgyRnBRNVBrME9JTmhkajZfdmxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84ZTQxNmMtNTU1MC00ZTgxLWE4YzQt ZDYyMzViNWZlNjdhLzEvZmcya2VKaUxQUTFMcDh6TkZ0Ymh1UmJFVVpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi84ZTQxNmMtNTU1MC00ZTgxLWE4YzQtZDYyMzViNWZlNjdh LzEvV3dCNUM2NDgyRnBRNVBrME9JTmhkajZfdmxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAueGhAwQA ufncAwQA1AtPMA0GCSqGSIb3DQEBCwUAA4IBAQBPfEAMY088uElNcPgFEjDht6bX dQhoykrqzR8i9LjgOLFtNrRHo01DXPS857H/FhaprVFs2wArhuLt4C7ioL7Q5Dxz sjrkW+88UgxLIY+57Omx6TrIaEQqleqouzLKyx4MsEShV6t7ba1C3BaiLusmmA+K PLey54ohwrH/X6LUhrgvmDiphTaCBQm/aPvh02jonF1kE2o5MclNWhGqnr2wYN0n VNM+2kuP/vzphMT5ntx3fgpFxecggpO4DiovSLhHWZVhTapvVZGj/bM1n9cx3MTE mej7kCSL0L8WjNPMONLo6i7SNMGWgEplARup4pZc9WsrJqIOoIoUdU29Uhg4 -----END CERTIFICATE-----Generated at Fri Jan 9 06:25:47 2026 by rpki-client