This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/TDwfp4rIi08J2i1D2xc2gTMPN8c.roa File: TDwfp4rIi08J2i1D2xc2gTMPN8c.roa (raw, json) Hash identifier: IrD9bh86XLcjQSDpy3yh8FKWxLQrtSlGJWXYqL6njZY= Subject key identifier: 4C:3C:1F:A7:8A:C8:8B:4F:09:DA:2D:43:DB:17:36:81:33:0F:37:C7 Certificate issuer: /CN=fb3bad7d0685995ced35108b2e11525a7aab1418 Certificate serial: 019B7CEE0220B98CF5E8FC5048DFB9EC18FD Authority key identifier: FB:3B:AD:7D:06:85:99:5C:ED:35:10:8B:2E:11:52:5A:7A:AB:14:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/TDwfp4rIi08J2i1D2xc2gTMPN8c.roa Signing time: Fri 02 Jan 2026 04:18:51 +0000 ROA not before: Fri 02 Jan 2026 04:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208025 IP address blocks: 217.198.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:02:20:b9:8c:f5:e8:fc:50:48:df:b9:ec:18:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb3bad7d0685995ced35108b2e11525a7aab1418 Validity Not Before: Jan 2 04:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c3c1fa78ac88b4f09da2d43db173681330f37c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4a:2e:9f:32:30:d9:e1:68:23:13:32:ef:df: e6:cf:99:f2:e3:f5:36:4a:53:2e:e4:1f:42:a5:f4: 7c:9d:46:c3:10:75:a0:a2:59:17:0a:6b:89:cc:8f: 88:55:b8:29:e3:10:8b:fb:a9:8f:9e:02:af:ce:93: b0:bd:62:1c:51:42:23:bd:ab:5b:d2:00:17:d6:bc: 51:c4:8b:46:5b:c5:a9:41:18:c8:54:78:ca:11:32: b5:d5:1b:d4:ca:b7:41:57:64:13:2d:f0:89:40:a6: 97:b1:1d:a7:5b:69:83:fa:14:9f:4d:7b:1a:b6:7d: 05:24:e3:6f:8f:d0:3e:c2:34:2e:f6:56:1c:7b:9e: ed:92:9e:82:36:6a:e5:be:8d:77:98:79:97:81:83: a2:b8:28:e9:1c:d2:2a:90:b5:d5:4e:cf:1a:e9:43: 91:9e:a4:c8:14:fc:af:b7:a3:14:6f:37:32:73:f7: 08:82:91:7b:f0:88:e6:63:21:0a:81:64:de:9c:a2: eb:5d:81:b3:4a:0f:5e:b8:6b:12:74:83:73:61:3f: ba:4f:bf:9d:5c:b1:8e:c5:f4:19:66:88:d6:af:55: 55:f5:58:25:a6:7d:51:b5:b4:f8:02:09:a4:8e:66: dc:35:df:20:23:4f:ef:09:ba:20:f5:f0:7b:b2:ae: ae:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:3C:1F:A7:8A:C8:8B:4F:09:DA:2D:43:DB:17:36:81:33:0F:37:C7 X509v3 Authority Key Identifier: keyid:FB:3B:AD:7D:06:85:99:5C:ED:35:10:8B:2E:11:52:5A:7A:AB:14:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/TDwfp4rIi08J2i1D2xc2gTMPN8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.198.185.0/24 Signature Algorithm: sha256WithRSAEncryption 92:49:c4:78:26:f2:cf:17:58:9e:87:ce:e7:60:db:c5:a5:83: b5:70:e1:82:52:53:54:5b:4c:0e:99:7d:84:05:b2:e8:2f:f2: c4:ce:b7:54:6f:37:c1:25:9f:59:7e:5a:04:60:7f:e9:a7:3a: 0d:a8:bd:0f:d7:9e:26:51:62:c2:33:05:b8:8a:2e:70:92:a1: 4c:80:b7:fc:a6:ee:0e:09:df:cf:5c:04:de:db:19:a0:08:39: 3c:81:2f:ae:bf:80:fe:5c:2c:09:a6:0d:62:8b:40:6a:52:3d: 8c:c8:10:a5:13:73:47:43:b9:cf:1a:50:77:86:7e:4c:46:dd: 0c:6b:11:da:f0:38:17:61:c8:84:34:43:da:11:49:ac:f0:15: 76:eb:f4:f5:fa:89:eb:3d:18:b7:e3:73:b1:7b:f4:5d:c0:8e: 65:3c:3e:76:8d:9d:c6:4f:a7:6b:9a:7c:3f:48:03:00:8b:bb: 5b:83:be:19:c5:25:9e:96:ce:e8:99:ac:e9:7f:a3:d7:0a:dc: 30:00:cb:f5:20:91:f8:05:82:55:ff:99:e3:1a:d7:4e:9a:06: 3a:42:3c:26:1a:7e:50:1d:c5:4b:2a:19:a7:84:60:00:84:b9: c1:a3:1b:43:33:1e:99:84:41:9c:b0:04:2d:1e:11:c0:9f:e5: b7:d4:35:5f -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt87gIguYz16PxQSN+57Bj9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiM2JhZDdkMDY4NTk5NWNlZDM1MTA4YjJlMTE1MjVhN2Fh YjE0MTgwHhcNMjYwMTAyMDQxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzNjMWZhNzhhYzg4YjRmMDlkYTJkNDNkYjE3MzY4MTMzMGYzN2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokounzIw2eFoIxMy79/mz5ny4/U2 SlMu5B9CpfR8nUbDEHWgolkXCmuJzI+IVbgp4xCL+6mPngKvzpOwvWIcUUIjvatb 0gAX1rxRxItGW8WpQRjIVHjKETK11RvUyrdBV2QTLfCJQKaXsR2nW2mD+hSfTXsa tn0FJONvj9A+wjQu9lYce57tkp6CNmrlvo13mHmXgYOiuCjpHNIqkLXVTs8a6UOR nqTIFPyvt6MUbzcyc/cIgpF78IjmYyEKgWTenKLrXYGzSg9euGsSdINzYT+6T7+d XLGOxfQZZojWr1VV9Vglpn1RtbT4AgmkjmbcNd8gI0/vCbog9fB7sq6uCQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFEw8H6eKyItPCdotQ9sXNoEzDzfHMB8GA1UdIwQY MBaAFPs7rX0GhZlc7TUQiy4RUlp6qxQYMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS16dXRmUWFGbVZ6dE5SQ0xMaEZTV25xckZCZy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvNzlkNzQ2LTAzZjktNGM3MS1hZmM3 LWU1ZDBiNzZkZTViOC8xL1REd2ZwNHJJaTA4SjJpMUQyeGMyZ1RNUE44Yy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvN2EvNzlkNzQ2LTAzZjktNGM3MS1hZmM3LWU1ZDBiNzZkZTVi OC8xLzEtenV0ZlFhRm1WenROUkNMTGhGU1ducXJGQmcuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADZxrkw DQYJKoZIhvcNAQELBQADggEBAJJJxHgm8s8XWJ6Hzudg28Wlg7Vw4YJSU1RbTA6Z fYQFsugv8sTOt1RvN8Eln1l+WgRgf+mnOg2ovQ/XniZRYsIzBbiKLnCSoUyAt/ym 7g4J389cBN7bGaAIOTyBL66/gP5cLAmmDWKLQGpSPYzIEKUTc0dDuc8aUHeGfkxG 3QxrEdrwOBdhyIQ0Q9oRSazwFXbr9PX6ies9GLfjc7F79F3AjmU8PnaNncZPp2ua fD9IAwCLu1uDvhnFJZ6WzuiZrOl/o9cK3DAAy/UgkfgFglX/meMa106aBjpCPCYa flAdxUsqGaeEYACEucGjG0MzHpmEQZywBC0eEcCf5bfUNV8= -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:33 2026 by rpki-client