This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/fmO_cJJIWL7br-OZ8uK1pYf79R0.roa File: fmO_cJJIWL7br-OZ8uK1pYf79R0.roa (raw, json) Hash identifier: h4lYHROqYC4qC7Eq3rmsQYBSXX0qs6JnTQffOn1CDgA= Subject key identifier: 7E:63:BF:70:92:48:58:BE:DB:AF:E3:99:F2:E2:B5:A5:87:FB:F5:1D Certificate issuer: /CN=039b01353e51a3a87e835963bd8833ed81853d77 Certificate serial: 019B7F1358F6C4101471E0082E21735B6D10 Authority key identifier: 03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/fmO_cJJIWL7br-OZ8uK1pYf79R0.roa Signing time: Fri 02 Jan 2026 14:18:52 +0000 ROA not before: Fri 02 Jan 2026 14:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35260 IP address blocks: 217.26.112.0/20 maxlen: 20 2a00:1ac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:58:f6:c4:10:14:71:e0:08:2e:21:73:5b:6d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=039b01353e51a3a87e835963bd8833ed81853d77 Validity Not Before: Jan 2 14:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e63bf70924858bedbafe399f2e2b5a587fbf51d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a7:fd:bb:19:25:86:19:61:60:ad:0d:26:0e: eb:52:35:62:b9:05:be:22:a8:18:0a:79:2c:7a:2d: 60:7b:c9:a0:7a:42:b5:ac:e5:21:af:20:32:0d:01: 5e:ab:cf:83:0a:e9:64:9d:b6:e6:c8:5d:e8:25:18: 66:66:0c:0c:21:4a:5c:bc:61:d0:5f:ec:40:c1:e8: 81:76:34:ec:b8:be:53:ce:f1:14:32:ef:89:e6:c3: dc:6e:a8:b0:fe:57:61:a1:a6:77:e2:a1:a0:6f:2b: c4:0b:ef:f6:51:33:b4:43:16:0a:44:19:78:57:8a: f3:33:ff:dc:1f:0d:fd:99:7c:3b:26:2c:20:f5:b1: 80:f2:61:04:63:a5:41:c1:09:95:6c:41:3a:af:20: 71:a3:89:4f:5f:74:99:25:ad:7b:5b:f6:86:d4:f1: 4f:e5:95:72:d7:b4:59:e2:82:28:20:62:28:e1:ba: c0:f1:90:5d:f0:5d:22:b8:5e:1d:07:89:a9:9a:97: 31:68:56:9b:ea:5f:c2:e1:c5:77:e6:22:e1:ff:3a: 25:52:75:09:b2:93:0d:bf:8d:47:bb:67:b6:1a:f8: 66:f7:36:b0:43:a2:9f:ee:d2:c1:b0:b8:5f:94:d2: 7b:3b:40:24:8a:64:72:5a:86:8f:7f:e7:e0:46:25: 6e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:63:BF:70:92:48:58:BE:DB:AF:E3:99:F2:E2:B5:A5:87:FB:F5:1D X509v3 Authority Key Identifier: keyid:03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/fmO_cJJIWL7br-OZ8uK1pYf79R0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.26.112.0/20 IPv6: 2a00:1ac0::/32 Signature Algorithm: sha256WithRSAEncryption 8f:cb:07:74:8f:76:ab:81:d9:8f:31:46:79:c3:e5:59:fc:37: a9:2a:58:3a:65:fd:6d:10:71:f6:a4:6f:5d:0b:23:72:b6:2b: d8:1e:e5:b2:2c:c7:c8:e4:9b:48:4b:e3:9b:82:a1:20:37:8b: 08:33:5e:5e:f1:44:99:68:08:db:ef:cf:e0:e5:00:4e:db:a6: 5d:a2:14:b6:e5:9f:a5:be:4f:5f:1d:bf:55:97:d9:db:6c:32: 5a:ee:ff:41:42:9b:a5:b8:13:03:ca:3f:39:99:60:74:eb:55: 2e:22:0f:2f:eb:ae:66:0f:81:11:55:a8:be:37:f6:be:7e:d9: 07:00:99:f0:56:31:1b:23:6f:4d:0e:66:26:48:ce:8d:06:2e: 70:39:f8:4f:d9:e9:93:c9:23:84:d4:50:cf:5b:fd:57:c4:2a: 1c:99:24:c4:33:65:ca:8b:f6:2b:11:01:a4:aa:60:61:a9:dc: c0:d4:05:a5:19:6d:a8:38:7c:24:d2:e1:86:f3:05:40:11:ac: 8b:e5:3f:a3:3a:d4:da:58:50:5d:ac:ab:f1:d3:52:90:3f:d5: a9:22:4d:2f:f3:d9:ec:1b:a0:d3:8d:7e:ef:5c:eb:49:b0:a6: be:03:45:fe:a0:45:e4:11:8f:41:8a:ca:82:6f:34:f4:5a:f7: 05:36:ee:19 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/E1j2xBAUceAILiFzW20QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzOWIwMTM1M2U1MWEzYTg3ZTgzNTk2M2JkODgzM2VkODE4 NTNkNzcwHhcNMjYwMTAyMTQxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTYzYmY3MDkyNDg1OGJlZGJhZmUzOTlmMmUyYjVhNTg3ZmJmNTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKf9uxklhhlhYK0NJg7rUjViuQW+ IqgYCnksei1ge8mgekK1rOUhryAyDQFeq8+DCulknbbmyF3oJRhmZgwMIUpcvGHQ X+xAweiBdjTsuL5TzvEUMu+J5sPcbqiw/ldhoaZ34qGgbyvEC+/2UTO0QxYKRBl4 V4rzM//cHw39mXw7Jiwg9bGA8mEEY6VBwQmVbEE6ryBxo4lPX3SZJa17W/aG1PFP 5ZVy17RZ4oIoIGIo4brA8ZBd8F0iuF4dB4mpmpcxaFab6l/C4cV35iLh/zolUnUJ spMNv41Hu2e2Gvhm9zawQ6Kf7tLBsLhflNJ7O0AkimRyWoaPf+fgRiVuwwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFH5jv3CSSFi+26/jmfLitaWH+/UdMB8GA1UdIwQY MBaAFAObATU+UaOofoNZY72IM+2BhT13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTVzQk5UNVJvNmgtZzFsanZZZ3o3WUdGUFhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8yY2Y4OGYtMmM2YS00YjQ4LWEyNWUt NGE4YjZiNDA4MmIxLzEvZm1PX2NKSklXTDdici1PWjh1SzFwWWY3OVIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS8yY2Y4OGYtMmM2YS00YjQ4LWEyNWUtNGE4YjZiNDA4MmIx LzEvQTVzQk5UNVJvNmgtZzFsanZZZ3o3WUdGUFhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQE2RpwMA0E AgACMAcDBQAqABrAMA0GCSqGSIb3DQEBCwUAA4IBAQCPywd0j3argdmPMUZ5w+VZ /DepKlg6Zf1tEHH2pG9dCyNytivYHuWyLMfI5JtIS+ObgqEgN4sIM15e8USZaAjb 78/g5QBO26ZdohS25Z+lvk9fHb9Vl9nbbDJa7v9BQpuluBMDyj85mWB061UuIg8v 665mD4ERVai+N/a+ftkHAJnwVjEbI29NDmYmSM6NBi5wOfhP2emTySOE1FDPW/1X xCocmSTEM2XKi/YrEQGkqmBhqdzA1AWlGW2oOHwk0uGG8wVAEayL5T+jOtTaWFBd rKvx01KQP9WpIk0v89nsG6DTjX7vXOtJsKa+A0X+oEXkEY9BisqCbzT0WvcFNu4Z -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:16 2026 by rpki-client