This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/_IFdJfE78-zROqcic2dU-ZWfcFY.roa File: _IFdJfE78-zROqcic2dU-ZWfcFY.roa (raw, json) Hash identifier: uiQtuxAVoE5FJEhMehigG75HbGFAiF/XJZ1c54451JI= Subject key identifier: FC:81:5D:25:F1:3B:F3:EC:D1:3A:A7:22:73:67:54:F9:95:9F:70:56 Certificate issuer: /CN=9bbae6e3ed766de47aba6693bb5af8a648974310 Certificate serial: 019C237D74CBEFFC62F3E2AD4E52FBC1FF58 Authority key identifier: 9B:BA:E6:E3:ED:76:6D:E4:7A:BA:66:93:BB:5A:F8:A6:48:97:43:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/_IFdJfE78-zROqcic2dU-ZWfcFY.roa Signing time: Tue 03 Feb 2026 12:32:30 +0000 ROA not before: Tue 03 Feb 2026 12:32:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50825 IP address blocks: 5.181.92.0/22 maxlen: 24 78.24.96.0/22 maxlen: 24 178.17.0.0/20 maxlen: 24 185.63.96.0/22 maxlen: 24 185.160.20.0/22 maxlen: 24 2a03:c20::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.mft rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:23:7d:74:cb:ef:fc:62:f3:e2:ad:4e:52:fb:c1:ff:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bbae6e3ed766de47aba6693bb5af8a648974310 Validity Not Before: Feb 3 12:32:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc815d25f13bf3ecd13aa722736754f9959f7056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4e:54:e0:81:57:e1:1d:5b:41:53:78:da:ec: 50:22:6b:74:8e:94:b1:a8:5d:3e:ac:ba:56:5e:c3: 69:c4:a1:74:4e:b3:0f:0f:8d:09:42:47:13:ca:ba: 68:04:4f:18:f4:35:88:9e:2b:41:9e:30:77:92:3e: 57:19:eb:4d:7c:1b:0f:4d:ae:aa:a3:8f:33:ad:3d: 47:f8:b7:78:e0:d6:78:8a:4f:64:76:23:c8:38:79: 73:e7:9e:fb:03:d5:4d:85:97:07:d2:20:c2:b7:79: 79:29:e7:fe:bc:9e:03:13:32:a3:45:32:82:82:5a: 6e:1b:97:6e:62:4d:0c:1c:a5:0c:7a:2b:53:72:4e: 65:44:a7:3e:b2:58:43:55:a6:e3:14:d7:da:88:33: b3:7e:f1:02:34:c4:a0:c5:67:48:41:2f:15:e6:4c: 49:c9:81:a7:02:5d:b4:76:b2:c9:f9:88:fa:70:a3: 9d:81:74:b5:dd:93:20:e7:a1:6c:41:d8:69:bb:f9: 82:3c:c4:29:b4:e6:bb:62:36:a0:fa:9f:fa:9a:bd: 45:f4:84:cf:ff:5c:62:35:39:0e:87:3d:0c:b8:e2: 01:05:44:c6:c7:fd:e2:83:eb:16:c7:5b:6c:fc:42: 20:35:6e:08:29:30:3b:17:22:23:ec:fb:0c:bb:86: 6c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:81:5D:25:F1:3B:F3:EC:D1:3A:A7:22:73:67:54:F9:95:9F:70:56 X509v3 Authority Key Identifier: keyid:9B:BA:E6:E3:ED:76:6D:E4:7A:BA:66:93:BB:5A:F8:A6:48:97:43:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/_IFdJfE78-zROqcic2dU-ZWfcFY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.92.0/22 78.24.96.0/22 178.17.0.0/20 185.63.96.0/22 185.160.20.0/22 IPv6: 2a03:c20::/29 Signature Algorithm: sha256WithRSAEncryption 24:11:df:3b:d2:e0:3d:4f:a9:4c:a8:e2:39:2d:fb:22:0c:32: 56:be:f6:38:0a:24:ff:52:d8:92:ed:58:a7:4f:ab:20:b9:29: 18:eb:23:92:89:ae:d2:8d:8d:74:32:60:8e:fc:4d:7e:4b:28: 6a:72:11:82:62:b9:81:bd:a8:2f:95:ac:90:d4:6b:b5:d2:c5: 34:1e:12:85:20:73:95:c7:55:0e:00:cf:bb:4c:6f:21:e9:e0: a2:90:9f:ee:9c:0c:7e:7d:e8:a1:7f:a7:d7:f3:ec:60:c7:0a: 1b:17:7b:53:4a:83:12:f5:b4:1f:d2:06:08:d8:8d:02:84:c8: 46:54:f2:bd:80:b7:94:cf:50:63:81:60:da:40:fb:5e:5e:74: 19:1d:36:97:67:16:d6:16:fa:1a:2e:24:26:31:74:80:d1:09: 00:dc:39:c4:47:32:30:6a:cb:79:bc:a1:da:71:cd:24:2c:4b: 39:61:9f:cf:03:73:12:7f:24:df:44:e9:38:be:36:30:05:82: d3:21:cb:81:32:23:b6:1b:3a:82:52:f3:98:98:65:f2:6f:c7: c9:59:0f:9f:06:f7:f9:28:0b:59:07:50:a3:6d:4b:cc:45:8c: 91:db:bf:0e:c5:52:10:f0:b4:bf:75:be:ff:72:32:0f:38:1a: bd:5c:c8:54 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZwjfXTL7/xi8+KtTlL7wf9YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYmFlNmUzZWQ3NjZkZTQ3YWJhNjY5M2JiNWFmOGE2NDg5 NzQzMTAwHhcNMjYwMjAzMTIzMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzgxNWQyNWYxM2JmM2VjZDEzYWE3MjI3MzY3NTRmOTk1OWY3MDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiU5U4IFX4R1bQVN42uxQImt0jpSx qF0+rLpWXsNpxKF0TrMPD40JQkcTyrpoBE8Y9DWInitBnjB3kj5XGetNfBsPTa6q o48zrT1H+Ld44NZ4ik9kdiPIOHlz5577A9VNhZcH0iDCt3l5Kef+vJ4DEzKjRTKC glpuG5duYk0MHKUMeitTck5lRKc+slhDVabjFNfaiDOzfvECNMSgxWdIQS8V5kxJ yYGnAl20drLJ+Yj6cKOdgXS13ZMg56FsQdhpu/mCPMQptOa7Yjag+p/6mr1F9ITP /1xiNTkOhz0MuOIBBUTGx/3ig+sWx1ts/EIgNW4IKTA7FyIj7PsMu4ZspQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFPyBXSXxO/Ps0TqnInNnVPmVn3BWMB8GA1UdIwQY MBaAFJu65uPtdm3kerpmk7ta+KZIl0MQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTdybTQtMTJiZVI2dW1hVHUxcjRwa2lYUXhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9kMzk1M2ItYjk0Mi00Yjc1LTljOWQt OTg1YzY0ZmUyN2VlLzEvX0lGZEpmRTc4LXpST3FjaWMyZFUtWldmY0ZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9kMzk1M2ItYjk0Mi00Yjc1LTljOWQtOTg1YzY0ZmUyN2Vl LzEvbTdybTQtMTJiZVI2dW1hVHUxcjRwa2lYUXhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCBbVcAwQC ThhgAwQEshEAAwQCuT9gAwQCuaAUMA0EAgACMAcDBQMqAwwgMA0GCSqGSIb3DQEB CwUAA4IBAQAkEd870uA9T6lMqOI5LfsiDDJWvvY4CiT/UtiS7VinT6sguSkY6yOS ia7SjY10MmCO/E1+SyhqchGCYrmBvagvlayQ1Gu10sU0HhKFIHOVx1UOAM+7TG8h 6eCikJ/unAx+feihf6fX8+xgxwobF3tTSoMS9bQf0gYI2I0ChMhGVPK9gLeUz1Bj gWDaQPteXnQZHTaXZxbWFvoaLiQmMXSA0QkA3DnERzIwast5vKHacc0kLEs5YZ/P A3MSfyTfROk4vjYwBYLTIcuBMiO2GzqCUvOYmGXyb8fJWQ+fBvf5KAtZB1CjbUvM RYyR278OxVIQ8LS/db7/cjIPOBq9XMhU -----END CERTIFICATE-----Generated at Tue Feb 10 06:23:35 2026 by rpki-client