This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/fW-vmq3lP_3MyQWkZHy-CbMNL3I.roa File: fW-vmq3lP_3MyQWkZHy-CbMNL3I.roa (raw, json) Hash identifier: tS5uriJcYFbYG/ALXKZnCG1DLjQm/ccSm8DkPwEWxXI= Subject key identifier: 7D:6F:AF:9A:AD:E5:3F:FD:CC:C9:05:A4:64:7C:BE:09:B3:0D:2F:72 Certificate issuer: /CN=86b22303de4b0a870fcfe7b6556c024f75c76a34 Certificate serial: 019B79ED5DFCB951243266F6D481032B9C54 Authority key identifier: 86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/fW-vmq3lP_3MyQWkZHy-CbMNL3I.roa Signing time: Thu 01 Jan 2026 14:19:17 +0000 ROA not before: Thu 01 Jan 2026 14:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48722 IP address blocks: 185.140.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:5d:fc:b9:51:24:32:66:f6:d4:81:03:2b:9c:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b22303de4b0a870fcfe7b6556c024f75c76a34 Validity Not Before: Jan 1 14:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d6faf9aade53ffdccc905a4647cbe09b30d2f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:aa:e6:b3:43:c4:1d:12:8c:d8:7b:73:9b:10: f9:30:47:a3:d8:7c:66:e0:64:57:ec:fc:ca:6f:66: 7d:e7:15:e1:a5:13:50:ea:89:da:b6:e0:cc:ff:27: 83:22:27:c9:b1:21:94:d3:cf:d1:ff:93:82:85:1d: 79:e9:7c:a0:f8:ed:46:15:57:c7:ea:20:8f:97:65: 78:0e:fe:0c:4f:5d:95:cd:1f:2d:f0:df:1a:1e:e8: d6:0b:f6:30:e5:90:e8:e7:7f:82:75:db:34:40:a1: 9f:a3:75:de:83:98:49:1e:a0:c4:e9:a8:5a:ef:a5: b1:24:a5:b1:e0:8e:bc:e3:ce:44:b3:b8:78:00:20: c5:0e:5b:88:66:1f:49:f5:2b:b2:2b:fc:76:af:e2: a0:c4:9f:88:a1:3b:57:15:3d:11:41:b8:90:18:a6: 6d:47:4e:f8:26:46:98:77:bf:f0:4d:3b:c1:03:b1: 97:a0:e9:fb:a4:45:e7:9f:d6:fb:4b:fd:ea:39:fd: 74:a1:48:e9:3a:26:f7:05:f1:08:bd:c2:16:f5:86: e4:de:09:da:2e:73:e6:df:43:b6:9a:6b:d9:8d:ff: d6:9b:99:19:2b:81:63:95:0c:3f:a1:f1:8a:d1:0f: a6:8b:b1:f8:35:89:12:f6:9b:78:58:e2:af:ec:08: 15:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6F:AF:9A:AD:E5:3F:FD:CC:C9:05:A4:64:7C:BE:09:B3:0D:2F:72 X509v3 Authority Key Identifier: keyid:86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/fW-vmq3lP_3MyQWkZHy-CbMNL3I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.140.132.0/23 Signature Algorithm: sha256WithRSAEncryption 90:ee:c2:9b:10:37:d0:d7:10:c7:7e:67:26:1a:29:a8:ec:46: d6:1b:e6:8e:01:db:45:5d:9e:8f:99:00:55:ea:5e:ca:83:1d: 9e:c0:12:78:34:f4:a4:ee:e3:ef:ef:2f:8f:01:a2:d8:f8:0c: 23:f2:c4:8a:25:32:61:c5:3c:68:58:a2:db:05:d7:28:02:45: a3:db:22:0c:80:26:64:5f:ea:ec:4a:b9:32:13:97:68:11:67: 02:25:61:28:24:37:e7:93:50:c9:54:a7:eb:4f:e0:ff:72:d8: 0c:3d:d3:1a:cf:0b:e4:a2:e2:6b:50:f6:a5:24:e0:c2:5c:22: a3:e5:c6:da:1b:71:aa:22:00:94:24:38:6b:a0:4c:76:db:85: bb:38:1c:27:25:bb:63:6d:64:40:d3:08:48:bb:2e:fe:47:7a: 06:11:c0:62:a3:c5:d6:85:46:70:49:d5:93:67:f0:3d:69:a6: 1c:78:d9:cf:67:46:c3:1d:81:2f:1f:c7:aa:b4:1e:d1:1f:0e: 09:12:22:f5:3c:2d:bd:be:c3:b4:bb:ba:25:4e:cb:e6:14:6a: 9e:06:33:72:58:38:22:0b:77:ae:28:dd:12:96:9d:67:77:c3: 68:bc:97:70:90:cb:96:25:5f:24:b6:c0:0b:07:ca:bc:33:d7: 2c:8d:79:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57V38uVEkMmb21IEDK5xUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2YjIyMzAzZGU0YjBhODcwZmNmZTdiNjU1NmMwMjRmNzVj NzZhMzQwHhcNMjYwMTAxMTQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDZmYWY5YWFkZTUzZmZkY2NjOTA1YTQ2NDdjYmUwOWIzMGQyZjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Krms0PEHRKM2HtzmxD5MEej2Hxm 4GRX7PzKb2Z95xXhpRNQ6onatuDM/yeDIifJsSGU08/R/5OChR156Xyg+O1GFVfH 6iCPl2V4Dv4MT12VzR8t8N8aHujWC/Yw5ZDo53+Cdds0QKGfo3Xeg5hJHqDE6aha 76WxJKWx4I68485Es7h4ACDFDluIZh9J9SuyK/x2r+KgxJ+IoTtXFT0RQbiQGKZt R074JkaYd7/wTTvBA7GXoOn7pEXnn9b7S/3qOf10oUjpOib3BfEIvcIW9Ybk3gna LnPm30O2mmvZjf/Wm5kZK4FjlQw/ofGK0Q+mi7H4NYkS9pt4WOKv7AgV9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH1vr5qt5T/9zMkFpGR8vgmzDS9yMB8GA1UdIwQY MBaAFIayIwPeSwqHD8/ntlVsAk91x2o0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHJJakE5NUxDb2NQei1lMlZXd0NUM1hIYWpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hZmQ3MGYtYzMwMC00OWNiLWI3Mjkt NzJhYjU5ODdmNjA5LzEvZlctdm1xM2xQXzNNeVFXa1pIeS1DYk1OTDNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hZmQ3MGYtYzMwMC00OWNiLWI3MjktNzJhYjU5ODdmNjA5 LzEvaHJJakE5NUxDb2NQei1lMlZXd0NUM1hIYWpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuYyEMA0G CSqGSIb3DQEBCwUAA4IBAQCQ7sKbEDfQ1xDHfmcmGimo7EbWG+aOAdtFXZ6PmQBV 6l7Kgx2ewBJ4NPSk7uPv7y+PAaLY+Awj8sSKJTJhxTxoWKLbBdcoAkWj2yIMgCZk X+rsSrkyE5doEWcCJWEoJDfnk1DJVKfrT+D/ctgMPdMazwvkouJrUPalJODCXCKj 5cbaG3GqIgCUJDhroEx224W7OBwnJbtjbWRA0whIuy7+R3oGEcBio8XWhUZwSdWT Z/A9aaYceNnPZ0bDHYEvH8eqtB7RHw4JEiL1PC29vsO0u7olTsvmFGqeBjNyWDgi C3euKN0Slp1nd8NovJdwkMuWJV8ktsALB8q8M9csjXno -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:53 2026 by rpki-client