This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/_chBVEiIFGC5r20fIYTsPORg6rk.roa File: _chBVEiIFGC5r20fIYTsPORg6rk.roa (raw, json) Hash identifier: x/qbcI8zbCXOFAC/IalZJH/FotXUoS1HPt4P46/aRNU= Subject key identifier: FD:C8:41:54:48:88:14:60:B9:AF:6D:1F:21:84:EC:3C:E4:60:EA:B9 Certificate issuer: /CN=7e86dcde711d545353974b33955108d9df40b6e9 Certificate serial: 019B7A5AFB1900E990CAEBD7DCC940EAC328 Authority key identifier: 7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/_chBVEiIFGC5r20fIYTsPORg6rk.roa Signing time: Thu 01 Jan 2026 16:19:01 +0000 ROA not before: Thu 01 Jan 2026 16:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199803 IP address blocks: 185.138.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:fb:19:00:e9:90:ca:eb:d7:dc:c9:40:ea:c3:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e86dcde711d545353974b33955108d9df40b6e9 Validity Not Before: Jan 1 16:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fdc8415448881460b9af6d1f2184ec3ce460eab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fb:38:be:bf:6f:c1:b5:e6:a0:3f:d2:7c:54: 24:b2:b7:43:2d:e7:a8:78:f0:26:c1:22:55:83:3c: 90:ba:e9:ac:9a:e7:73:5c:87:c3:ab:be:4d:c4:43: 5a:dd:7e:0f:91:6f:d7:65:12:60:9d:4a:5d:77:dd: 4b:c2:4a:f2:0c:89:78:ff:0b:55:d9:06:8b:75:a5: fc:b7:fb:70:6b:7d:9d:a3:e6:66:00:42:7d:19:63: b4:3e:b7:b2:72:39:16:3c:02:1e:87:d8:8b:d5:fd: 9a:12:d2:d9:28:bf:0a:be:4a:a6:7f:ac:90:54:0d: e8:33:62:d1:40:0f:32:c3:50:76:ed:68:88:de:ee: c1:71:7e:e7:29:ff:7e:46:39:64:3f:4c:59:47:62: 26:ca:80:96:1a:bf:ff:1a:bb:1e:15:05:d2:d8:98: 95:61:46:2f:7e:91:ed:af:cb:5f:75:0f:e8:14:5c: 04:85:d0:2e:a5:c6:12:25:92:08:d0:25:07:1b:8a: 7f:ad:48:ed:3f:e0:cd:e5:eb:69:82:68:21:6d:51: 8b:20:fb:9e:22:52:0c:79:e1:77:c4:b0:c8:c3:e3: a8:ed:04:8e:ac:50:07:5f:43:25:9d:bb:30:83:99: a0:01:2d:e1:d0:8f:fa:26:cc:82:f5:f5:83:94:ba: f6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C8:41:54:48:88:14:60:B9:AF:6D:1F:21:84:EC:3C:E4:60:EA:B9 X509v3 Authority Key Identifier: keyid:7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/_chBVEiIFGC5r20fIYTsPORg6rk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.138.108.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:2e:a9:82:30:72:db:4a:ff:7f:c6:e7:e8:3b:72:8d:c1:ca: b2:0b:5d:f6:de:08:3e:16:c8:1e:cf:bc:03:a8:fa:f5:f9:a7: 73:85:ba:d7:ce:cc:7d:dd:28:e2:01:27:00:01:e9:1d:9f:4a: af:d2:4f:19:bc:ca:e1:74:24:43:12:c6:4b:f1:b1:99:c7:db: 6e:3b:02:af:d1:6d:68:b2:d1:6e:02:5a:50:56:e7:8d:da:42: b5:b1:95:48:a7:e4:37:8f:85:cb:5f:fb:1f:af:2e:56:0f:26: ff:b1:d4:31:27:63:65:92:e3:d0:2c:df:8e:e2:38:44:82:92: b7:8e:02:48:4f:0d:4a:d4:f8:d4:8d:61:f0:9f:19:e5:8a:6f: 8a:23:d7:d2:71:68:b5:74:96:fd:a3:e9:13:3c:2a:d9:e6:8a: 27:8e:4f:e8:98:db:63:b8:fe:73:c3:18:a9:a2:99:91:ce:95: 46:3c:fb:bd:c6:fe:a9:48:8b:fd:b8:16:43:2e:8f:d2:83:b5: b3:5e:54:e2:84:d5:c0:83:e0:c7:50:bf:ed:8d:3c:3b:e1:58: 97:bc:1a:59:48:80:df:e7:b8:47:32:29:84:76:6b:13:d2:1d: a6:58:74:c6:59:32:ea:61:71:03:b6:98:30:96:eb:a4:f0:31: 98:2c:86:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WvsZAOmQyuvX3MlA6sMoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlODZkY2RlNzExZDU0NTM1Mzk3NGIzMzk1NTEwOGQ5ZGY0 MGI2ZTkwHhcNMjYwMTAxMTYxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGM4NDE1NDQ4ODgxNDYwYjlhZjZkMWYyMTg0ZWMzY2U0NjBlYWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufs4vr9vwbXmoD/SfFQksrdDLeeo ePAmwSJVgzyQuumsmudzXIfDq75NxENa3X4PkW/XZRJgnUpdd91LwkryDIl4/wtV 2QaLdaX8t/twa32do+ZmAEJ9GWO0PreycjkWPAIeh9iL1f2aEtLZKL8Kvkqmf6yQ VA3oM2LRQA8yw1B27WiI3u7BcX7nKf9+RjlkP0xZR2ImyoCWGr//GrseFQXS2JiV YUYvfpHtr8tfdQ/oFFwEhdAupcYSJZII0CUHG4p/rUjtP+DN5etpgmghbVGLIPue IlIMeeF3xLDIw+Oo7QSOrFAHX0Mlnbswg5mgAS3h0I/6JsyC9fWDlLr2GwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP3IQVRIiBRgua9tHyGE7DzkYOq5MB8GA1UdIwQY MBaAFH6G3N5xHVRTU5dLM5VRCNnfQLbpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZm9iYzNuRWRWRk5UbDBzemxWRUkyZDlBdHVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny82M2U0MTMtMzVjYS00OWUwLTgyODUt MzVmMWE5MDg4YjQyLzEvX2NoQlZFaUlGR0M1cjIwZklZVHNQT1JnNnJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny82M2U0MTMtMzVjYS00OWUwLTgyODUtMzVmMWE5MDg4YjQy LzEvZm9iYzNuRWRWRk5UbDBzemxWRUkyZDlBdHVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuYpsMA0G CSqGSIb3DQEBCwUAA4IBAQBNLqmCMHLbSv9/xufoO3KNwcqyC1323gg+Fsgez7wD qPr1+adzhbrXzsx93SjiAScAAekdn0qv0k8ZvMrhdCRDEsZL8bGZx9tuOwKv0W1o stFuAlpQVueN2kK1sZVIp+Q3j4XLX/sfry5WDyb/sdQxJ2NlkuPQLN+O4jhEgpK3 jgJITw1K1PjUjWHwnxnlim+KI9fScWi1dJb9o+kTPCrZ5oonjk/omNtjuP5zwxip opmRzpVGPPu9xv6pSIv9uBZDLo/Sg7WzXlTihNXAg+DHUL/tjTw74ViXvBpZSIDf 57hHMimEdmsT0h2mWHTGWTLqYXEDtpgwluuk8DGYLIZi -----END CERTIFICATE-----Generated at Tue Feb 10 02:33:32 2026 by rpki-client