This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/F_3SEAz-EKjAxo_g2p-mjUGzRIs.roa File: F_3SEAz-EKjAxo_g2p-mjUGzRIs.roa (raw, json) Hash identifier: j/8Kr9e/zq+L0yS9GkMCdBYgA7yMxgnitG1QiH62Ck0= Subject key identifier: 17:FD:D2:10:0C:FE:10:A8:C0:C6:8F:E0:DA:9F:A6:8D:41:B3:44:8B Certificate issuer: /CN=c7770135d0f0d30a868df551d8752d4b4badc2c1 Certificate serial: 019B78344E0D892B666E678527C9DEECE5C5 Authority key identifier: C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/F_3SEAz-EKjAxo_g2p-mjUGzRIs.roa Signing time: Thu 01 Jan 2026 06:17:32 +0000 ROA not before: Thu 01 Jan 2026 06:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51942 IP address blocks: 81.173.44.0/22 maxlen: 22 91.221.150.0/23 maxlen: 23 185.133.36.0/22 maxlen: 22 2001:67c:16b4::/48 maxlen: 48 2a06:21c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:4e:0d:89:2b:66:6e:67:85:27:c9:de:ec:e5:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7770135d0f0d30a868df551d8752d4b4badc2c1 Validity Not Before: Jan 1 06:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17fdd2100cfe10a8c0c68fe0da9fa68d41b3448b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7f:f6:8d:2d:17:d1:00:b1:f5:69:06:04:92: 7f:1f:97:d5:58:37:d8:7f:2e:b4:a0:df:d1:9c:36: 5e:df:80:f9:79:07:27:20:42:68:c5:c0:c2:9f:e5: ba:34:ac:fd:89:10:58:c8:0d:c6:ba:01:ac:44:98: 95:61:54:6c:a6:0a:54:0d:f5:eb:74:af:ef:e0:e0: bb:97:12:bf:eb:0c:f9:b9:b4:aa:55:5a:3b:70:80: 10:be:88:4d:dc:4e:66:15:0e:2b:28:6e:8a:47:50: 74:e6:5c:43:d1:83:39:35:75:4a:29:7f:81:5f:d0: e3:79:11:7d:63:e0:4f:03:67:39:80:55:2b:2c:95: e3:47:36:15:ae:e0:69:54:9d:23:aa:cb:80:d3:4c: 5e:14:a2:61:1a:b0:62:bb:4a:93:e7:08:f2:38:30: 00:a1:db:35:92:35:d8:e8:5d:b1:61:18:35:9b:20: a2:92:2a:18:b9:76:82:5f:2c:86:8f:90:f9:c0:48: b1:f8:ed:30:cf:96:c0:cd:ed:5d:2c:1d:8c:53:6d: e9:a4:49:31:c7:71:b1:51:b8:97:3b:1d:39:44:33: c4:36:c6:e7:78:f1:76:20:08:b8:ca:83:28:e7:29: 67:38:20:1e:6e:3e:6f:3f:47:88:b6:10:4c:10:25: d5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FD:D2:10:0C:FE:10:A8:C0:C6:8F:E0:DA:9F:A6:8D:41:B3:44:8B X509v3 Authority Key Identifier: keyid:C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/F_3SEAz-EKjAxo_g2p-mjUGzRIs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.173.44.0/22 91.221.150.0/23 185.133.36.0/22 IPv6: 2001:67c:16b4::/48 2a06:21c0::/29 Signature Algorithm: sha256WithRSAEncryption 22:ae:89:cf:21:59:30:db:0a:5e:1e:b5:d7:e6:04:b2:49:01: e1:7b:9d:5e:5c:a5:63:a7:64:72:86:31:89:c4:86:57:19:94: 40:4b:2d:3f:b2:82:c0:16:c5:06:72:39:e5:db:2e:f0:c2:c6: cb:9e:3c:51:e4:0c:7c:9a:f6:fa:b9:97:91:8b:a4:ad:88:2f: c6:33:93:bb:ea:9d:f6:5c:ec:b8:21:11:cc:9f:cb:7e:18:09: c9:70:21:52:fa:93:c1:57:c3:0a:91:c4:66:20:f8:90:92:73: f5:8c:b0:2b:db:49:17:37:9c:0c:bb:3f:8f:57:a2:a0:c8:a9: d0:68:b5:5b:e0:1b:29:a8:75:96:67:8c:a4:a6:a3:5f:f6:1e: 27:5f:ad:1b:ab:78:91:f9:97:4f:8b:56:f4:1b:60:5e:2a:be: 49:7d:33:6d:43:00:38:5c:c5:d5:9f:66:0d:8f:2a:7d:d1:54: 6f:70:18:73:84:35:ed:dd:a2:81:60:04:e0:a5:ca:c1:a2:11: 12:8b:e6:9d:6a:0f:2d:48:6a:96:eb:c1:c8:26:fb:fa:ff:11: ff:3b:7c:00:f1:ea:0d:cc:59:af:d7:dd:12:af:4f:35:3f:2a: 9f:f3:d0:70:32:eb:8d:b3:c4:1a:df:72:73:be:bc:71:a8:c5: fb:2d:88:0f -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt4NE4NiStmbmeFJ8ne7OXFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NzcwMTM1ZDBmMGQzMGE4NjhkZjU1MWQ4NzUyZDRiNGJh ZGMyYzEwHhcNMjYwMTAxMDYxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2ZkZDIxMDBjZmUxMGE4YzBjNjhmZTBkYTlmYTY4ZDQxYjM0NDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5X/2jS0X0QCx9WkGBJJ/H5fVWDfY fy60oN/RnDZe34D5eQcnIEJoxcDCn+W6NKz9iRBYyA3GugGsRJiVYVRspgpUDfXr dK/v4OC7lxK/6wz5ubSqVVo7cIAQvohN3E5mFQ4rKG6KR1B05lxD0YM5NXVKKX+B X9DjeRF9Y+BPA2c5gFUrLJXjRzYVruBpVJ0jqsuA00xeFKJhGrBiu0qT5wjyODAA ods1kjXY6F2xYRg1myCikioYuXaCXyyGj5D5wEix+O0wz5bAze1dLB2MU23ppEkx x3GxUbiXOx05RDPENsbnePF2IAi4yoMo5ylnOCAebj5vP0eIthBMECXVGwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFBf90hAM/hCowMaP4Nqfpo1Bs0SLMB8GA1UdIwQY MBaAFMd3ATXQ8NMKho31Udh1LUtLrcLBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDNjQk5kRHcwd3FHamZWUjJIVXRTMHV0d3NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iOTcwNzAtYzVmNC00NDEwLTk0YjUt ZDY0ZDc1Mzk0MDM3LzEvRl8zU0VBei1FS2pBeG9fZzJwLW1qVUd6UklzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9iOTcwNzAtYzVmNC00NDEwLTk0YjUtZDY0ZDc1Mzk0MDM3 LzEveDNjQk5kRHcwd3FHamZWUjJIVXRTMHV0d3NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAYBAIAATASAwQCUa0sAwQB W92WAwQCuYUkMBYEAgACMBADBwAgAQZ8FrQDBQMqBiHAMA0GCSqGSIb3DQEBCwUA A4IBAQAironPIVkw2wpeHrXX5gSySQHhe51eXKVjp2RyhjGJxIZXGZRASy0/soLA FsUGcjnl2y7wwsbLnjxR5Ax8mvb6uZeRi6StiC/GM5O76p32XOy4IRHMn8t+GAnJ cCFS+pPBV8MKkcRmIPiQknP1jLAr20kXN5wMuz+PV6KgyKnQaLVb4BspqHWWZ4yk pqNf9h4nX60bq3iR+ZdPi1b0G2BeKr5JfTNtQwA4XMXVn2YNjyp90VRvcBhzhDXt 3aKBYATgpcrBohESi+adag8tSGqW68HIJvv6/xH/O3wA8eoNzFmv190Sr081Pyqf 89BwMuuNs8Qa33JzvrxxqMX7LYgP -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:23 2026 by rpki-client