This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/ffQqOYtzV0vtgYfe4tRpGeFzilA.roa File: ffQqOYtzV0vtgYfe4tRpGeFzilA.roa (raw, json) Hash identifier: VIsXjcMNaGxYTFvRgl1kJIXozlkVcFZu20HsFS54hDw= Subject key identifier: 7D:F4:2A:39:8B:73:57:4B:ED:81:87:DE:E2:D4:69:19:E1:73:8A:50 Certificate issuer: /CN=0239a40bef930438d53cd07f07ff9153e2fb9be8 Certificate serial: 019B797F0896F52AAF102BAF76510BB787F8 Authority key identifier: 02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/ffQqOYtzV0vtgYfe4tRpGeFzilA.roa Signing time: Thu 01 Jan 2026 12:18:46 +0000 ROA not before: Thu 01 Jan 2026 12:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1449 IP address blocks: 185.97.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:08:96:f5:2a:af:10:2b:af:76:51:0b:b7:87:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0239a40bef930438d53cd07f07ff9153e2fb9be8 Validity Not Before: Jan 1 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7df42a398b73574bed8187dee2d46919e1738a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:22:e0:c7:68:cd:d2:6f:84:fc:66:cb:8f:35: fa:27:5c:e9:e0:3a:6d:96:89:15:5b:2a:d3:89:5c: 1b:44:fb:2b:97:0a:7d:f6:75:1c:1c:53:05:a0:33: 2c:2c:90:f3:78:f2:85:ad:39:02:de:96:53:e0:e5: 23:f4:02:02:d0:49:f1:e2:a9:ee:63:25:f6:69:5a: bf:ed:70:e2:7b:e8:21:48:4a:7a:8b:53:90:de:d6: 05:3b:9b:ff:c3:cb:a8:05:48:07:fe:f5:e8:9e:60: c7:6c:1e:cb:a3:c6:35:c0:72:25:28:23:de:2b:4a: d1:d8:e2:14:52:0e:75:b8:34:0a:65:93:22:6a:58: ad:9b:e4:58:33:66:4e:64:10:44:f0:85:a3:41:4a: 0a:a6:72:e2:f4:63:ac:4e:d3:0a:31:bd:c2:68:71: f3:37:a1:91:3a:4d:92:e8:ed:35:6f:40:30:8c:31: fa:6a:b6:77:36:a6:e3:f8:e7:72:15:b7:4d:e9:6e: a6:59:fa:88:07:98:92:2a:45:e0:e3:ef:4f:8a:2b: 38:91:bd:b0:1f:8c:cb:22:26:5f:53:2b:44:f0:bf: 13:47:c8:1f:b9:10:84:46:8e:78:93:20:aa:df:49: 5e:89:0d:75:50:07:c3:58:42:7a:0d:67:72:d0:90: 95:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F4:2A:39:8B:73:57:4B:ED:81:87:DE:E2:D4:69:19:E1:73:8A:50 X509v3 Authority Key Identifier: keyid:02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/ffQqOYtzV0vtgYfe4tRpGeFzilA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.97.80.0/22 Signature Algorithm: sha256WithRSAEncryption 87:a8:32:28:5d:d4:46:bc:17:38:89:a7:58:40:a2:38:8c:2a: 6e:fd:d4:eb:29:cc:69:6a:fc:42:da:28:5a:c4:28:9e:ad:66: c7:38:9f:3d:cd:10:a8:eb:40:a4:93:57:1e:62:0f:88:f9:cb: 2a:32:7d:6c:72:1a:72:27:5d:c1:1b:09:61:ca:3e:b4:2e:4c: 61:a4:ce:06:5e:e8:f0:cb:13:4b:f3:9f:19:28:54:b8:ef:43: d2:5b:cc:4e:0c:eb:85:7f:1a:fb:fb:c8:bb:62:ff:96:b9:14: 35:9c:f5:36:dd:c9:7c:74:b7:a0:ec:07:f5:d3:89:22:81:ee: 2f:ab:0d:58:19:ec:34:55:15:ec:36:78:60:a8:c1:ef:b2:c0: e2:1e:ed:57:dd:1b:90:f7:3d:54:7e:11:fb:07:4e:ed:a1:66: ba:bb:58:13:c9:ae:51:5b:51:f5:22:a1:e0:df:3f:73:aa:94: a6:46:9c:62:74:9b:42:e8:36:09:7f:71:3d:06:72:20:e3:61: 24:76:09:69:cb:f5:f9:0b:a0:02:01:78:83:6f:1c:c9:f6:53: d4:25:8b:cb:1c:c5:09:45:7f:e6:eb:5d:e5:24:2b:a0:af:15: 93:03:01:ce:80:cd:8f:e9:6c:42:68:f8:39:90:f1:70:3a:1d: ce:94:84:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fwiW9SqvECuvdlELt4f4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMzlhNDBiZWY5MzA0MzhkNTNjZDA3ZjA3ZmY5MTUzZTJm YjliZTgwHhcNMjYwMTAxMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGY0MmEzOThiNzM1NzRiZWQ4MTg3ZGVlMmQ0NjkxOWUxNzM4YTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iLgx2jN0m+E/GbLjzX6J1zp4Dpt lokVWyrTiVwbRPsrlwp99nUcHFMFoDMsLJDzePKFrTkC3pZT4OUj9AIC0Enx4qnu YyX2aVq/7XDie+ghSEp6i1OQ3tYFO5v/w8uoBUgH/vXonmDHbB7Lo8Y1wHIlKCPe K0rR2OIUUg51uDQKZZMialitm+RYM2ZOZBBE8IWjQUoKpnLi9GOsTtMKMb3CaHHz N6GROk2S6O01b0AwjDH6arZ3Nqbj+OdyFbdN6W6mWfqIB5iSKkXg4+9Piis4kb2w H4zLIiZfUytE8L8TR8gfuRCERo54kyCq30leiQ11UAfDWEJ6DWdy0JCVwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH30KjmLc1dL7YGH3uLUaRnhc4pQMB8GA1UdIwQY MBaAFAI5pAvvkwQ41TzQfwf/kVPi+5voMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWpta0MtLVRCRGpWUE5CX0JfLVJVLUw3bS1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yZmNlY2QtMWI2Yy00YWU5LTlkMzYt NmQzODEyYWE1ZWI1LzEvZmZRcU9ZdHpWMHZ0Z1lmZTR0UnBHZUZ6aWxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8yZmNlY2QtMWI2Yy00YWU5LTlkMzYtNmQzODEyYWE1ZWI1 LzEvQWpta0MtLVRCRGpWUE5CX0JfLVJVLUw3bS1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWFQMA0G CSqGSIb3DQEBCwUAA4IBAQCHqDIoXdRGvBc4iadYQKI4jCpu/dTrKcxpavxC2iha xCierWbHOJ89zRCo60Ckk1ceYg+I+csqMn1schpyJ13BGwlhyj60LkxhpM4GXujw yxNL858ZKFS470PSW8xODOuFfxr7+8i7Yv+WuRQ1nPU23cl8dLeg7Af104kige4v qw1YGew0VRXsNnhgqMHvssDiHu1X3RuQ9z1UfhH7B07toWa6u1gTya5RW1H1IqHg 3z9zqpSmRpxidJtC6DYJf3E9BnIg42Ekdglpy/X5C6ACAXiDbxzJ9lPUJYvLHMUJ RX/m613lJCugrxWTAwHOgM2P6WxCaPg5kPFwOh3OlIRE -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:34 2026 by rpki-client