This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/fF_JColRqe6k3b-dBUqfmSs3itY.roa File: fF_JColRqe6k3b-dBUqfmSs3itY.roa (raw, json) Hash identifier: QBb4ezm0BlO8dOz2Yfe88q5rYV5TSLEjJ01d5h6AZcw= Subject key identifier: 7C:5F:C9:0A:89:51:A9:EE:A4:DD:BF:9D:05:4A:9F:99:2B:37:8A:D6 Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Certificate serial: 019B7E388CAD439E77EF19B9986C0CA2FC9B Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/fF_JColRqe6k3b-dBUqfmSs3itY.roa Signing time: Fri 02 Jan 2026 10:19:53 +0000 ROA not before: Fri 02 Jan 2026 10:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3758 IP address blocks: 37.0.10.0/23 maxlen: 24 85.202.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:8c:ad:43:9e:77:ef:19:b9:98:6c:0c:a2:fc:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Validity Not Before: Jan 2 10:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c5fc90a8951a9eea4ddbf9d054a9f992b378ad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0b:72:69:2e:8f:d3:08:bd:01:f0:37:8f:03: c7:00:7c:2b:0e:49:c5:3e:2e:e0:9e:bd:9e:44:73: 38:23:5e:a7:35:58:36:a0:d6:88:35:ff:72:19:5a: d4:0c:5e:17:6a:c9:d4:21:ae:46:2b:27:be:5f:d5: d9:8b:31:f8:77:26:6c:d4:77:74:ac:f2:59:88:ec: c6:1b:e8:9c:b7:44:8b:44:1b:d9:3c:e6:3d:0e:95: e8:e3:97:1a:cf:d9:a2:1a:10:96:41:f8:60:bd:4f: 56:59:c7:bd:88:3b:2f:f8:98:8c:7d:43:c2:07:bd: c0:3b:b7:72:e9:cb:4f:ef:1d:61:5f:c5:f2:04:9a: 63:b9:b9:a2:ac:fd:69:01:7f:00:17:e5:de:24:d0: eb:b6:48:5e:ca:d8:8c:18:48:e2:a3:ac:ff:0d:ee: 95:6e:18:a1:41:f4:46:12:7c:78:a0:5d:f9:c5:a6: 9b:00:30:91:27:ce:c0:f0:ff:bc:b1:e3:dc:15:05: 41:b1:0a:fd:a3:42:49:1d:d4:b4:c2:f8:16:10:1e: 9d:7e:a9:92:14:5d:d2:d0:bb:ef:1f:92:f4:c9:eb: d7:2a:a2:7f:3d:a9:99:17:a4:0f:34:5d:76:f6:f6: 9a:6e:26:e7:f9:02:42:9f:b3:8e:63:9c:00:6c:b7: fe:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:5F:C9:0A:89:51:A9:EE:A4:DD:BF:9D:05:4A:9F:99:2B:37:8A:D6 X509v3 Authority Key Identifier: keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/fF_JColRqe6k3b-dBUqfmSs3itY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.0.10.0/23 85.202.168.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:1c:72:ec:d8:5d:ab:5c:d6:2c:99:0a:6e:c7:d3:21:7c:34: 96:7c:8c:a2:06:00:02:97:6c:55:57:f2:d9:79:d5:99:d8:5a: 57:d2:fd:83:23:cd:35:bb:32:04:d9:e1:84:9c:cc:eb:1d:01: a9:66:07:f3:e9:da:d7:82:a1:d2:62:e3:e0:4c:a6:91:0e:92: 81:e2:1b:8d:67:18:bc:68:46:88:7f:06:ac:15:71:b5:f3:b5: c7:00:7b:6b:7e:fd:17:86:9b:0c:f0:09:33:0a:99:a6:e3:ac: 00:e6:e9:54:52:f0:c5:43:9d:bc:dc:8f:0b:a7:3a:51:7e:bf: 27:9a:78:af:3e:41:1f:50:b4:4b:b3:cb:fe:8b:07:22:f2:63: 2c:b4:d3:2c:f4:07:48:15:56:57:4f:79:9d:4c:c8:82:9d:7e: 19:74:4d:a2:e3:77:00:32:bc:fe:5f:ef:4d:b1:59:0a:8b:ca: 52:4d:af:a9:6c:d2:ad:f9:36:a1:ed:51:0d:c7:89:2d:fa:7e: 2c:80:e7:96:a0:3e:e6:a6:7b:7c:b1:2f:b1:de:70:e5:b6:c7: c0:56:0f:cc:82:64:b4:e8:71:3d:1b:c9:fd:df:9c:c8:27:0b: 19:9d:de:8b:32:c8:18:df:bd:e6:ac:13:b9:ca:f8:5f:42:76: 4c:17:cb:03 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OIytQ5537xm5mGwMovybMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk MTRjYzYwHhcNMjYwMTAyMTAxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzVmYzkwYTg5NTFhOWVlYTRkZGJmOWQwNTRhOWY5OTJiMzc4YWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgtyaS6P0wi9AfA3jwPHAHwrDknF Pi7gnr2eRHM4I16nNVg2oNaINf9yGVrUDF4XasnUIa5GKye+X9XZizH4dyZs1Hd0 rPJZiOzGG+ict0SLRBvZPOY9DpXo45caz9miGhCWQfhgvU9WWce9iDsv+JiMfUPC B73AO7dy6ctP7x1hX8XyBJpjubmirP1pAX8AF+XeJNDrtkheytiMGEjio6z/De6V bhihQfRGEnx4oF35xaabADCRJ87A8P+8sePcFQVBsQr9o0JJHdS0wvgWEB6dfqmS FF3S0LvvH5L0yevXKqJ/PamZF6QPNF129vaabibn+QJCn7OOY5wAbLf+cQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHxfyQqJUanupN2/nQVKn5krN4rWMB8GA1UdIwQY MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt ZDFiYjZiNGRkNzAxLzEvZkZfSkNvbFJxZTZrM2ItZEJVcWZtU3MzaXRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBJQAKAwQC VcqoMA0GCSqGSIb3DQEBCwUAA4IBAQAsHHLs2F2rXNYsmQpux9MhfDSWfIyiBgAC l2xVV/LZedWZ2FpX0v2DI801uzIE2eGEnMzrHQGpZgfz6drXgqHSYuPgTKaRDpKB 4huNZxi8aEaIfwasFXG187XHAHtrfv0XhpsM8AkzCpmm46wA5ulUUvDFQ5283I8L pzpRfr8nmnivPkEfULRLs8v+iwci8mMstNMs9AdIFVZXT3mdTMiCnX4ZdE2i43cA Mrz+X+9NsVkKi8pSTa+pbNKt+Tah7VENx4kt+n4sgOeWoD7mpnt8sS+x3nDltsfA Vg/MgmS06HE9G8n935zIJwsZnd6LMsgY373mrBO5yvhfQnZMF8sD -----END CERTIFICATE-----Generated at Wed Jan 21 12:18:03 2026 by rpki-client