This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/zXpI_ZkMZjomMfSewt7eA9Kg9dk.roa File: zXpI_ZkMZjomMfSewt7eA9Kg9dk.roa (raw, json) Hash identifier: AKFEqvG1w5Wb8V0Q0PMXn0i+G8aiBs1A75NxMO1M+zY= Subject key identifier: CD:7A:48:FD:99:0C:66:3A:26:31:F4:9E:C2:DE:DE:03:D2:A0:F5:D9 Certificate issuer: /CN=fc79488ab4e1ac0f4bd467d2b4d3621c6b18eea0 Certificate serial: 019B797F26AAC0F669E72003EA0212FB63FE Authority key identifier: FC:79:48:8A:B4:E1:AC:0F:4B:D4:67:D2:B4:D3:62:1C:6B:18:EE:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/zXpI_ZkMZjomMfSewt7eA9Kg9dk.roa Signing time: Thu 01 Jan 2026 12:18:54 +0000 ROA not before: Thu 01 Jan 2026 12:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206765 IP address blocks: 185.177.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:26:aa:c0:f6:69:e7:20:03:ea:02:12:fb:63:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc79488ab4e1ac0f4bd467d2b4d3621c6b18eea0 Validity Not Before: Jan 1 12:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd7a48fd990c663a2631f49ec2dede03d2a0f5d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e4:e6:f1:c4:9e:37:6d:6d:e6:b2:0f:86:97: f2:71:b9:81:20:09:f0:bf:12:20:a4:42:95:54:98: a5:16:b4:56:5f:d5:a4:a8:5e:bd:72:27:03:5b:31: 99:13:d1:a2:ed:44:2c:8d:d7:22:88:40:b5:4c:c4: 37:e8:d9:bd:aa:05:80:3d:e8:b6:21:b0:3c:9e:e9: 93:fe:73:1c:41:0f:2c:df:1a:6d:96:96:d2:18:35: 4d:0e:9c:d7:01:1f:d4:55:79:b1:9b:bb:40:a1:d0: 61:d2:95:ae:2d:73:db:42:bf:b9:06:32:ce:37:3e: 08:53:0b:38:0a:61:0e:77:bd:6b:14:80:0c:d6:83: 66:d5:14:43:83:99:fb:2f:5c:ed:43:ad:18:c8:93: a8:a8:ca:67:96:33:ca:7c:c0:f6:c7:e6:80:d1:96: 48:e3:c6:19:4c:94:02:c0:47:6e:1f:96:ba:95:09: bb:ba:72:7a:73:72:a0:50:4f:85:aa:21:54:d3:ca: 8a:82:11:a8:8d:e5:5a:ad:9a:12:5e:b9:0a:06:08: ea:27:16:98:8f:d3:f9:8b:c7:c3:8f:c2:b2:0f:fe: cb:b3:ad:3a:d1:21:98:7a:b1:33:9a:26:ac:eb:b1: 1a:6f:f3:cf:53:e8:80:b7:a1:de:84:03:37:63:1b: 74:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:7A:48:FD:99:0C:66:3A:26:31:F4:9E:C2:DE:DE:03:D2:A0:F5:D9 X509v3 Authority Key Identifier: keyid:FC:79:48:8A:B4:E1:AC:0F:4B:D4:67:D2:B4:D3:62:1C:6B:18:EE:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/zXpI_ZkMZjomMfSewt7eA9Kg9dk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.177.16.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:e9:b0:f2:30:d4:28:a3:dd:37:d1:82:ab:46:af:ab:10:6f: ad:61:46:60:1b:4a:f7:d2:fd:48:35:d6:15:28:6a:7f:4f:f1: 44:83:ff:98:1e:e1:e7:c7:14:57:ec:85:f6:e7:07:79:9e:2b: c0:65:06:48:2b:5e:06:00:ab:68:62:f9:25:2d:94:17:ef:ba: b0:1a:f9:6e:7e:f0:33:fa:5c:e5:b2:df:6d:a3:c5:3b:3b:3a: ba:f9:12:a6:c6:50:2e:27:2b:f8:fb:c5:18:00:06:ca:8a:e3: 22:9d:37:86:1e:4d:16:c0:cf:a5:73:70:6b:ad:75:30:ad:3d: 3c:37:8c:5e:46:a5:3f:e7:e6:d1:97:c4:fe:3d:d6:37:05:eb: e6:84:f0:0a:1a:e4:2b:8f:28:0c:34:fd:70:5d:0c:11:a3:59: df:0c:ef:5f:e3:21:16:45:e7:c6:3b:83:82:69:2d:12:0f:74: 61:4e:3c:56:24:dd:d9:89:5a:63:fe:2d:f9:a1:97:cd:d0:3e: 65:42:25:2b:db:4b:e3:80:15:86:e7:81:12:98:8b:53:c3:ff: 5d:38:40:f4:83:de:71:f5:47:f5:e6:f7:ee:e2:7e:56:2a:c7: dd:54:6f:aa:07:88:09:3d:1e:84:1b:6a:47:49:7d:9f:94:01: b2:69:60:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fyaqwPZp5yAD6gIS+2P+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNzk0ODhhYjRlMWFjMGY0YmQ0NjdkMmI0ZDM2MjFjNmIx OGVlYTAwHhcNMjYwMTAxMTIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDdhNDhmZDk5MGM2NjNhMjYzMWY0OWVjMmRlZGUwM2QyYTBmNWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+Tm8cSeN21t5rIPhpfycbmBIAnw vxIgpEKVVJilFrRWX9WkqF69cicDWzGZE9Gi7UQsjdciiEC1TMQ36Nm9qgWAPei2 IbA8numT/nMcQQ8s3xptlpbSGDVNDpzXAR/UVXmxm7tAodBh0pWuLXPbQr+5BjLO Nz4IUws4CmEOd71rFIAM1oNm1RRDg5n7L1ztQ60YyJOoqMpnljPKfMD2x+aA0ZZI 48YZTJQCwEduH5a6lQm7unJ6c3KgUE+FqiFU08qKghGojeVarZoSXrkKBgjqJxaY j9P5i8fDj8KyD/7Ls6060SGYerEzmias67Eab/PPU+iAt6HehAM3Yxt0WQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM16SP2ZDGY6JjH0nsLe3gPSoPXZMB8GA1UdIwQY MBaAFPx5SIq04awPS9Rn0rTTYhxrGO6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0hsSWlyVGhyQTlMMUdmU3ROTmlIR3NZN3FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hOTBkYmYtODZkNi00OGNlLThhNmMt ODZhYTAwZTEzNzQ2LzEvelhwSV9aa01aam9tTWZTZXd0N2VBOUtnOWRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9hOTBkYmYtODZkNi00OGNlLThhNmMtODZhYTAwZTEzNzQ2 LzEvX0hsSWlyVGhyQTlMMUdmU3ROTmlIR3NZN3FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubEQMA0G CSqGSIb3DQEBCwUAA4IBAQA/6bDyMNQoo9030YKrRq+rEG+tYUZgG0r30v1INdYV KGp/T/FEg/+YHuHnxxRX7IX25wd5nivAZQZIK14GAKtoYvklLZQX77qwGvlufvAz +lzlst9to8U7Ozq6+RKmxlAuJyv4+8UYAAbKiuMinTeGHk0WwM+lc3BrrXUwrT08 N4xeRqU/5+bRl8T+PdY3BevmhPAKGuQrjygMNP1wXQwRo1nfDO9f4yEWRefGO4OC aS0SD3RhTjxWJN3ZiVpj/i35oZfN0D5lQiUr20vjgBWG54ESmItTw/9dOED0g95x 9Uf15vfu4n5WKsfdVG+qB4gJPR6EG2pHSX2flAGyaWAI -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:17 2026 by rpki-client