This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/ffyLyRVME5oJGVerDANtY5IMHo8.roa File: ffyLyRVME5oJGVerDANtY5IMHo8.roa (raw, json) Hash identifier: KCiQSpQfQbYAD6/iMj3Iuvok4R8kKREKJx6rRxehp2s= Subject key identifier: 7D:FC:8B:C9:15:4C:13:9A:09:19:57:AB:0C:03:6D:63:92:0C:1E:8F Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073 Certificate serial: 019B7834F541E988E666A6BBF895EB969EA3 Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/ffyLyRVME5oJGVerDANtY5IMHo8.roa Signing time: Thu 01 Jan 2026 06:18:15 +0000 ROA not before: Thu 01 Jan 2026 06:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34144 IP address blocks: 85.88.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f5:41:e9:88:e6:66:a6:bb:f8:95:eb:96:9e:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073 Validity Not Before: Jan 1 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7dfc8bc9154c139a091957ab0c036d63920c1e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6f:fb:77:e0:f9:3b:c3:e5:84:3d:ac:a3:73: 44:58:53:99:48:e2:fc:a2:65:e8:1d:79:4e:66:fe: c9:26:9f:f9:7f:1b:92:82:8a:7a:f4:fc:f0:5b:d9: a3:a9:70:86:2e:e3:7f:0c:b8:ac:c0:bf:3a:37:20: bb:00:50:b3:8b:5a:ef:5d:fc:be:2d:10:3a:8a:fd: df:21:e8:4a:9b:fa:9d:5e:70:86:eb:c1:b3:3e:70: 70:f1:b5:d1:8c:aa:42:59:70:c9:71:72:6c:7d:0f: 4d:5f:e6:2b:f1:ff:f1:ba:49:53:5c:c3:8f:52:8e: de:83:cb:b5:7c:f9:be:b7:4e:bd:7c:45:b1:54:5d: 43:b4:46:da:a9:a7:93:dd:eb:17:39:95:77:46:13: 8e:e7:6f:73:bc:82:2e:da:6c:88:cb:9e:fe:9e:e0: 48:94:9b:5f:90:cd:b6:e8:2e:58:0e:af:23:a8:15: 4e:30:e9:f7:99:ae:12:da:26:a4:e3:e7:2d:49:6b: 44:d9:03:e4:ac:81:67:2f:b3:53:f1:11:e2:a3:3c: 6c:c9:2e:27:9c:c5:7e:97:38:a9:ef:09:a5:3c:7c: 89:21:9a:19:22:fa:08:03:a1:8a:c2:37:b1:40:80: 3b:ef:5d:83:66:72:76:ab:10:f0:b8:53:67:12:00: 57:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:FC:8B:C9:15:4C:13:9A:09:19:57:AB:0C:03:6D:63:92:0C:1E:8F X509v3 Authority Key Identifier: keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/ffyLyRVME5oJGVerDANtY5IMHo8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.88.39.0/24 Signature Algorithm: sha256WithRSAEncryption 70:24:55:c4:aa:85:97:23:5d:f3:f1:0c:d8:23:a9:89:c8:15: 45:5f:7d:67:59:95:96:a9:cf:e1:28:64:2a:72:06:fc:fe:9b: 9f:37:9e:58:df:29:6d:fa:0e:c8:f5:7c:4f:57:0a:51:6b:d2: ad:df:01:cc:06:15:ef:3d:f1:fa:86:fd:a7:b1:0b:3f:16:2d: 9f:d8:5f:f9:05:54:7a:8b:2a:52:37:7b:cd:b2:da:6e:17:6a: e6:54:0f:21:89:40:4a:c5:29:d8:7e:dd:08:32:8f:4f:c1:e0: 3a:4a:91:69:98:2b:d3:9a:cb:25:8c:a4:c1:d8:af:06:db:2a: 18:d6:d6:de:3f:46:5f:a1:36:43:f2:82:6d:16:55:e6:b0:26: 13:67:1b:c8:65:27:7f:4b:03:ec:d6:c7:81:6a:e8:de:75:41: 98:3b:6c:78:23:d6:26:fb:aa:f0:89:81:60:0e:1f:04:5a:91: c2:63:c8:c5:be:e8:f8:cd:f4:f9:ae:88:c9:8b:62:55:8b:15: 64:75:6a:7d:c8:11:60:6e:55:7c:84:95:d9:7d:2c:dd:f2:0c: fe:d4:af:ce:eb:b3:7c:e3:38:48:2a:ae:a2:87:69:6f:12:01: 7f:ef:a8:41:36:6a:ab:1a:d1:dd:83:6d:ff:e6:f9:96:ef:0e: 23:64:08:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NPVB6YjmZqa7+JXrlp6jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx NWQwNzMwHhcNMjYwMTAxMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGZjOGJjOTE1NGMxMzlhMDkxOTU3YWIwYzAzNmQ2MzkyMGMxZThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2/7d+D5O8PlhD2so3NEWFOZSOL8 omXoHXlOZv7JJp/5fxuSgop69PzwW9mjqXCGLuN/DLiswL86NyC7AFCzi1rvXfy+ LRA6iv3fIehKm/qdXnCG68GzPnBw8bXRjKpCWXDJcXJsfQ9NX+Yr8f/xuklTXMOP Uo7eg8u1fPm+t069fEWxVF1DtEbaqaeT3esXOZV3RhOO529zvIIu2myIy57+nuBI lJtfkM226C5YDq8jqBVOMOn3ma4S2iak4+ctSWtE2QPkrIFnL7NT8RHiozxsyS4n nMV+lzip7wmlPHyJIZoZIvoIA6GKwjexQIA7712DZnJ2qxDwuFNnEgBXeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH38i8kVTBOaCRlXqwwDbWOSDB6PMB8GA1UdIwQY MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt ZWQxZjMwY2MxYzU3LzEvZmZ5THlSVk1FNW9KR1ZlckRBTnRZNUlNSG84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3 LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVVgnMA0G CSqGSIb3DQEBCwUAA4IBAQBwJFXEqoWXI13z8QzYI6mJyBVFX31nWZWWqc/hKGQq cgb8/pufN55Y3ylt+g7I9XxPVwpRa9Kt3wHMBhXvPfH6hv2nsQs/Fi2f2F/5BVR6 iypSN3vNstpuF2rmVA8hiUBKxSnYft0IMo9PweA6SpFpmCvTmssljKTB2K8G2yoY 1tbeP0ZfoTZD8oJtFlXmsCYTZxvIZSd/SwPs1seBaujedUGYO2x4I9Ym+6rwiYFg Dh8EWpHCY8jFvuj4zfT5rojJi2JVixVkdWp9yBFgblV8hJXZfSzd8gz+1K/O67N8 4zhIKq6ih2lvEgF/76hBNmqrGtHdg23/5vmW7w4jZAiE -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:31 2026 by rpki-client