This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/gFTfnJYc2V1LVsfRNUUiK-FUI9U.roa File: gFTfnJYc2V1LVsfRNUUiK-FUI9U.roa (raw, json) Hash identifier: m8is5BMhC18gH/bsyYfQI/5z05HbQux2gKkK/YneuSc= Subject key identifier: 80:54:DF:9C:96:1C:D9:5D:4B:56:C7:D1:35:45:22:2B:E1:54:23:D5 Certificate issuer: /CN=f7f4902d240b25d7eb77f4f02e24f233f44a9a13 Certificate serial: 019B7CEE2F0F5B4B9560C173DCDBD81B96B0 Authority key identifier: F7:F4:90:2D:24:0B:25:D7:EB:77:F4:F0:2E:24:F2:33:F4:4A:9A:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/gFTfnJYc2V1LVsfRNUUiK-FUI9U.roa Signing time: Fri 02 Jan 2026 04:19:02 +0000 ROA not before: Fri 02 Jan 2026 04:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201985 IP address blocks: 185.57.16.0/24 maxlen: 24 185.57.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/9_SQLSQLJdfrd_TwLiTyM_RKmhM.crl rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/9_SQLSQLJdfrd_TwLiTyM_RKmhM.mft rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:2f:0f:5b:4b:95:60:c1:73:dc:db:d8:1b:96:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7f4902d240b25d7eb77f4f02e24f233f44a9a13 Validity Not Before: Jan 2 04:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8054df9c961cd95d4b56c7d13545222be15423d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ee:39:78:88:5b:97:db:18:e4:d0:5e:06:62: 8d:38:53:06:ec:1c:73:3e:cc:b0:cc:42:7a:a0:42: f4:f0:35:f6:72:5c:b7:c1:fa:32:74:c7:72:62:b8: 1b:a1:8f:98:82:c4:23:56:fa:35:40:40:26:2e:a0: 55:fc:60:49:73:7f:69:3c:a9:ee:ae:49:1b:c0:b4: e8:dc:50:71:fe:ab:91:32:05:d9:e4:f6:86:ad:99: 5a:d8:5a:7d:cd:15:f6:aa:18:a1:dd:c5:e8:22:79: 45:a9:32:60:c7:85:f1:de:64:d6:dc:ca:84:6a:25: 6d:aa:4c:2d:71:ef:e6:26:0e:40:77:bb:af:c5:94: 3c:e7:69:57:72:1a:09:04:bd:1a:b8:bb:08:ea:42: f2:f7:1b:69:89:fd:4e:db:87:81:51:66:75:19:62: 97:67:78:cf:bd:33:c0:38:5a:ab:d6:6d:2e:6b:82: 83:ad:11:62:86:05:a4:25:72:63:cb:53:07:96:ce: c7:21:8f:fe:d9:04:d9:f5:be:41:a0:13:99:63:12: 75:c5:65:5f:58:ba:e5:ee:9d:75:dc:84:7b:de:22: 53:d8:d1:09:a5:72:11:a8:3c:31:16:5b:63:64:1e: e5:f7:a6:4e:a4:42:af:8a:3b:79:54:ea:53:98:e9: 3f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:54:DF:9C:96:1C:D9:5D:4B:56:C7:D1:35:45:22:2B:E1:54:23:D5 X509v3 Authority Key Identifier: keyid:F7:F4:90:2D:24:0B:25:D7:EB:77:F4:F0:2E:24:F2:33:F4:4A:9A:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/gFTfnJYc2V1LVsfRNUUiK-FUI9U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/9_SQLSQLJdfrd_TwLiTyM_RKmhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.57.16.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:e7:ab:a1:79:46:47:a3:74:0a:3f:58:57:3e:7a:07:bc:37: 3d:c1:b7:29:0c:f6:5e:df:b2:69:62:7c:b9:ce:5c:c2:70:e5: 56:c1:3c:53:d9:5d:fe:3d:10:4a:8c:54:ee:f2:6d:a5:d8:b4: a0:09:b4:e6:ae:51:51:d0:5c:76:76:e4:4d:47:d3:da:71:ad: 33:2f:8d:f7:0c:19:53:62:e1:54:25:c0:ca:74:c4:c3:df:c5: 27:eb:73:fc:58:72:ff:16:bd:ab:0b:d2:c0:15:7f:4b:5f:98: 10:dd:10:f7:d6:5a:c8:6f:a9:7a:b2:29:13:7d:a1:92:33:ac: 63:04:bb:c5:c9:9c:6c:97:d0:0d:33:55:58:2e:42:de:35:62: 57:88:68:bc:ff:d3:1e:22:56:ba:e4:c7:1e:66:e4:f9:29:a6: 63:55:9e:06:1b:39:47:26:bb:14:63:14:30:b5:ad:30:0e:2f: 00:f3:69:30:55:c9:e3:3c:65:ed:9e:a4:6e:0c:15:00:3d:dc: dc:c6:42:74:9e:58:b3:40:15:e1:e9:4f:69:a5:d4:dc:0b:0d: 86:29:d4:b4:02:49:1b:09:c1:d8:ad:83:6b:52:33:fe:43:67: 17:53:f9:b7:7b:b6:2a:29:0a:0e:7b:65:47:ca:77:62:9f:61: 42:ee:97:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87i8PW0uVYMFz3NvYG5awMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ZjQ5MDJkMjQwYjI1ZDdlYjc3ZjRmMDJlMjRmMjMzZjQ0 YTlhMTMwHhcNMjYwMTAyMDQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDU0ZGY5Yzk2MWNkOTVkNGI1NmM3ZDEzNTQ1MjIyYmUxNTQyM2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO45eIhbl9sY5NBeBmKNOFMG7Bxz PsywzEJ6oEL08DX2cly3wfoydMdyYrgboY+YgsQjVvo1QEAmLqBV/GBJc39pPKnu rkkbwLTo3FBx/quRMgXZ5PaGrZla2Fp9zRX2qhih3cXoInlFqTJgx4Xx3mTW3MqE aiVtqkwtce/mJg5Ad7uvxZQ852lXchoJBL0auLsI6kLy9xtpif1O24eBUWZ1GWKX Z3jPvTPAOFqr1m0ua4KDrRFihgWkJXJjy1MHls7HIY/+2QTZ9b5BoBOZYxJ1xWVf WLrl7p113IR73iJT2NEJpXIRqDwxFltjZB7l96ZOpEKvijt5VOpTmOk/uQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIBU35yWHNldS1bH0TVFIivhVCPVMB8GA1UdIwQY MBaAFPf0kC0kCyXX63f08C4k8jP0SpoTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOV9TUUxTUUxKZGZyZF9Ud0xpVHlNX1JLbWhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9jNmE0ZmUtYTc2MC00YzRjLTgxYjAt NTNhYjg4YzVmMmM3LzEvZ0ZUZm5KWWMyVjFMVnNmUk5VVWlLLUZVSTlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9jNmE0ZmUtYTc2MC00YzRjLTgxYjAtNTNhYjg4YzVmMmM3 LzEvOV9TUUxTUUxKZGZyZF9Ud0xpVHlNX1JLbWhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuTkQMA0G CSqGSIb3DQEBCwUAA4IBAQA656uheUZHo3QKP1hXPnoHvDc9wbcpDPZe37JpYny5 zlzCcOVWwTxT2V3+PRBKjFTu8m2l2LSgCbTmrlFR0Fx2duRNR9Paca0zL433DBlT YuFUJcDKdMTD38Un63P8WHL/Fr2rC9LAFX9LX5gQ3RD31lrIb6l6sikTfaGSM6xj BLvFyZxsl9ANM1VYLkLeNWJXiGi8/9MeIla65MceZuT5KaZjVZ4GGzlHJrsUYxQw ta0wDi8A82kwVcnjPGXtnqRuDBUAPdzcxkJ0nlizQBXh6U9ppdTcCw2GKdS0Akkb CcHYrYNrUjP+Q2cXU/m3e7YqKQoOe2VHyndin2FC7pdI -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:01 2026 by rpki-client