This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/f3D8udSu3dtjbrLKnmWOz8XvfiA.roa File: f3D8udSu3dtjbrLKnmWOz8XvfiA.roa (raw, json) Hash identifier: YroX+SuNccqs1wKABD1fzKE71I0H5UXZNMrp81qcCCU= Subject key identifier: 7F:70:FC:B9:D4:AE:DD:DB:63:6E:B2:CA:9E:65:8E:CF:C5:EF:7E:20 Certificate issuer: /CN=e84cbf6ee0fbcabf79eb74bc6248f396cf0aeae4 Certificate serial: 019B7CED249E7D6937ACE5F0BF096BA07EA8 Authority key identifier: E8:4C:BF:6E:E0:FB:CA:BF:79:EB:74:BC:62:48:F3:96:CF:0A:EA:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ey_buD7yr9563S8Ykjzls8K6uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/f3D8udSu3dtjbrLKnmWOz8XvfiA.roa Signing time: Fri 02 Jan 2026 04:17:54 +0000 ROA not before: Fri 02 Jan 2026 04:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202714 IP address blocks: 185.150.4.0/22 maxlen: 22 2a0d:1e40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/6Ey_buD7yr9563S8Ykjzls8K6uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/6Ey_buD7yr9563S8Ykjzls8K6uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/6Ey_buD7yr9563S8Ykjzls8K6uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:24:9e:7d:69:37:ac:e5:f0:bf:09:6b:a0:7e:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e84cbf6ee0fbcabf79eb74bc6248f396cf0aeae4 Validity Not Before: Jan 2 04:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f70fcb9d4aedddb636eb2ca9e658ecfc5ef7e20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b2:b3:54:41:e3:1b:24:44:ab:b8:dd:47:a1: 75:84:ef:81:ba:02:d8:77:64:09:93:c8:16:7f:4a: 33:30:72:4d:2c:47:89:42:ed:3a:8f:4a:bb:b3:85: b3:45:fe:6f:9b:10:70:8c:cd:f3:ea:e3:bf:cb:b1: 82:13:13:ee:77:04:90:a5:c7:d0:6f:2d:a5:ee:73: 73:9d:a8:11:17:06:a8:bf:a7:fc:c5:14:0c:6a:bb: f9:37:ae:4b:c7:fa:28:a7:56:4b:f7:7b:25:48:a7: 47:ce:bb:05:a5:18:84:04:4f:cb:26:6f:02:4f:61: 96:0f:1d:f6:2f:3a:97:27:a2:05:b4:2d:f0:46:41: 33:dc:b0:e0:5a:a7:5f:88:d0:52:5a:eb:5f:dc:10: a2:0d:63:44:8e:51:9e:cc:f1:67:63:6e:92:ff:0e: ec:c2:0a:8c:af:51:1f:32:4e:f8:79:3c:38:11:7d: f7:4c:68:7a:fb:c6:42:4a:3d:d5:ec:c6:84:76:c2: 21:7b:8c:cb:d3:16:c7:04:db:2b:c2:03:01:4c:66: 52:63:5c:93:76:c9:9a:b5:22:2e:cf:99:c7:7c:45: 35:0a:a2:9c:8d:80:ea:32:b8:9c:7c:17:db:5b:c2: 62:61:4e:c5:48:3d:3a:34:08:ab:9a:43:b3:bc:70: 66:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:70:FC:B9:D4:AE:DD:DB:63:6E:B2:CA:9E:65:8E:CF:C5:EF:7E:20 X509v3 Authority Key Identifier: keyid:E8:4C:BF:6E:E0:FB:CA:BF:79:EB:74:BC:62:48:F3:96:CF:0A:EA:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ey_buD7yr9563S8Ykjzls8K6uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/f3D8udSu3dtjbrLKnmWOz8XvfiA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/52da35-26cb-4fea-bcd8-d3a38c76ad4d/1/6Ey_buD7yr9563S8Ykjzls8K6uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.150.4.0/22 IPv6: 2a0d:1e40::/29 Signature Algorithm: sha256WithRSAEncryption 29:67:be:b6:9d:10:76:b8:bf:37:60:77:d5:bd:f4:8b:7c:f4: 4d:16:da:0a:21:b9:48:20:99:67:a3:fa:10:2b:d5:f9:e1:40: f4:4f:55:5d:ad:c7:7b:b4:f2:77:bf:f0:36:c9:2f:79:b4:2f: 39:42:9c:c6:7a:ae:b0:61:d6:44:bb:0b:08:ba:09:cd:6e:b7: fd:ca:4c:90:41:c9:9b:75:72:ea:a3:12:47:e8:8c:ac:dc:b1: de:e1:6d:83:73:f7:33:91:73:b0:04:65:4f:69:17:27:db:5c: cd:46:42:c4:ea:b8:95:e3:8d:c1:5a:71:1d:52:42:c1:76:40: 24:d1:54:1b:bb:ad:bc:5d:90:21:ab:35:2c:65:c7:46:10:d8: 5e:be:09:46:d6:80:dc:c7:57:75:21:f5:42:c9:d6:9c:cd:0a: 30:4d:98:af:8f:9e:5c:f9:cf:5b:ed:5b:2c:53:97:f3:a7:b6: 8d:4d:5d:9e:59:7e:c1:05:a3:84:57:63:d3:4f:98:f4:38:56: 5f:ba:3a:b1:29:7e:01:e5:06:46:fe:20:02:3f:10:f7:0c:84: dd:71:36:02:6a:48:72:f0:04:4b:df:aa:70:33:24:c4:46:07: 50:6e:ac:b6:85:37:89:20:fa:ff:f9:74:11:68:33:08:b4:4a: 35:f8:22:2e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87SSefWk3rOXwvwlroH6oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NGNiZjZlZTBmYmNhYmY3OWViNzRiYzYyNDhmMzk2Y2Yw YWVhZTQwHhcNMjYwMTAyMDQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjcwZmNiOWQ0YWVkZGRiNjM2ZWIyY2E5ZTY1OGVjZmM1ZWY3ZTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LKzVEHjGyREq7jdR6F1hO+BugLY d2QJk8gWf0ozMHJNLEeJQu06j0q7s4WzRf5vmxBwjM3z6uO/y7GCExPudwSQpcfQ by2l7nNznagRFwaov6f8xRQMarv5N65Lx/oop1ZL93slSKdHzrsFpRiEBE/LJm8C T2GWDx32LzqXJ6IFtC3wRkEz3LDgWqdfiNBSWutf3BCiDWNEjlGezPFnY26S/w7s wgqMr1EfMk74eTw4EX33TGh6+8ZCSj3V7MaEdsIhe4zL0xbHBNsrwgMBTGZSY1yT dsmatSIuz5nHfEU1CqKcjYDqMricfBfbW8JiYU7FSD06NAirmkOzvHBmUwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFH9w/LnUrt3bY26yyp5ljs/F734gMB8GA1UdIwQY MBaAFOhMv27g+8q/eet0vGJI85bPCurkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkV5X2J1RDd5cjk1NjNTOFlranpsczhLNnVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC81MmRhMzUtMjZjYi00ZmVhLWJjZDgt ZDNhMzhjNzZhZDRkLzEvZjNEOHVkU3UzZHRqYnJMS25tV096OFh2ZmlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC81MmRhMzUtMjZjYi00ZmVhLWJjZDgtZDNhMzhjNzZhZDRk LzEvNkV5X2J1RDd5cjk1NjNTOFlranpsczhLNnVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZYEMA0E AgACMAcDBQMqDR5AMA0GCSqGSIb3DQEBCwUAA4IBAQApZ762nRB2uL83YHfVvfSL fPRNFtoKIblIIJlno/oQK9X54UD0T1Vdrcd7tPJ3v/A2yS95tC85QpzGeq6wYdZE uwsIugnNbrf9ykyQQcmbdXLqoxJH6Iys3LHe4W2Dc/czkXOwBGVPaRcn21zNRkLE 6riV443BWnEdUkLBdkAk0VQbu628XZAhqzUsZcdGENhevglG1oDcx1d1IfVCydac zQowTZivj55c+c9b7VssU5fzp7aNTV2eWX7BBaOEV2PTT5j0OFZfujqxKX4B5QZG /iACPxD3DITdcTYCakhy8ARL36pwMyTERgdQbqy2hTeJIPr/+XQRaDMItEo1+CIu -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:46 2026 by rpki-client