This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/43pN-WIjxrlIQNotsgt3YfTiHeI.roa File: 43pN-WIjxrlIQNotsgt3YfTiHeI.roa (raw, json) Hash identifier: 1+7ecs4b6WUw0OVverAERc7DZquSqzhJFqQu6TpVJ2A= Subject key identifier: E3:7A:4D:F9:62:23:C6:B9:48:40:DA:2D:B2:0B:77:61:F4:E2:1D:E2 Certificate issuer: /CN=88a62cf8100e8c1b475443fd94cd58d8ef2a33ae Certificate serial: 019B79EC229FD8D3429D2DEC99145E2E04A2 Authority key identifier: 88:A6:2C:F8:10:0E:8C:1B:47:54:43:FD:94:CD:58:D8:EF:2A:33:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/43pN-WIjxrlIQNotsgt3YfTiHeI.roa Signing time: Thu 01 Jan 2026 14:17:56 +0000 ROA not before: Thu 01 Jan 2026 14:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201127 IP address blocks: 77.39.220.0/22 maxlen: 24 185.84.88.0/22 maxlen: 24 2a05:a3c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 23:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:22:9f:d8:d3:42:9d:2d:ec:99:14:5e:2e:04:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88a62cf8100e8c1b475443fd94cd58d8ef2a33ae Validity Not Before: Jan 1 14:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e37a4df96223c6b94840da2db20b7761f4e21de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c0:46:00:34:d0:2b:cb:b6:59:95:15:d1:f0: 84:7a:94:57:14:aa:9d:75:b1:eb:ae:56:44:68:82: 96:45:3b:4b:ea:59:f8:47:61:d7:68:f7:ab:bf:6c: f9:ba:43:25:64:9f:a9:3a:3b:92:3d:e9:2f:dd:db: 6d:6a:17:e0:63:c4:a4:fd:62:3f:10:f2:2b:79:e2: 98:97:18:00:fe:12:3d:b6:3e:a6:4c:68:55:a8:d9: 11:f5:fe:53:5d:25:db:ec:29:ca:bb:17:d0:52:63: 66:08:f3:71:5c:66:b9:3d:da:f0:6d:47:86:84:fc: ae:8a:a3:9c:d7:69:7d:86:3b:be:22:af:41:b8:01: 7d:5e:68:8f:e9:4e:e4:b7:48:44:41:ea:68:02:a8: cb:cc:63:b8:9e:59:8e:9a:61:e7:f7:24:60:7f:10: b5:6a:38:df:96:22:b6:30:1f:8d:5d:e9:b1:f2:0f: 55:9f:67:01:ce:a4:20:05:0a:ba:d2:32:74:83:30: 93:27:d7:10:48:96:b0:ae:0b:54:93:32:d0:b2:c2: dd:a4:f6:f4:ec:a7:e6:2c:9e:c8:c5:a6:a5:e7:29: a5:0d:f5:f5:ca:5d:b3:9a:da:ec:3a:3c:04:0e:91: 99:69:40:be:2c:b5:8a:f5:d6:18:b1:5c:b8:70:8a: f2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:7A:4D:F9:62:23:C6:B9:48:40:DA:2D:B2:0B:77:61:F4:E2:1D:E2 X509v3 Authority Key Identifier: keyid:88:A6:2C:F8:10:0E:8C:1B:47:54:43:FD:94:CD:58:D8:EF:2A:33:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/43pN-WIjxrlIQNotsgt3YfTiHeI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.39.220.0/22 185.84.88.0/22 IPv6: 2a05:a3c0::/29 Signature Algorithm: sha256WithRSAEncryption 79:c3:f2:f1:cb:5c:18:78:6e:76:19:7c:a9:f1:13:23:c0:e7: 0a:cc:92:13:16:9a:45:45:3e:c9:03:5c:02:12:64:15:56:a9: 61:cc:d1:e3:16:43:ce:91:9a:53:82:da:4f:cc:1a:67:23:be: d8:b9:5d:aa:5a:2f:20:00:a3:e7:97:06:38:ae:7c:bd:17:63: d3:cd:9b:75:bb:85:83:2d:58:8e:99:69:5e:b6:48:fb:56:90: 08:33:fe:02:d4:14:0d:11:7e:7d:df:5e:4d:45:d0:ca:79:a6: 6d:cb:5f:27:f0:7d:c6:36:6b:82:53:8f:d6:cd:d1:d1:e6:aa: 42:bb:37:4a:d5:78:27:29:75:b5:ef:20:7c:f5:34:c8:14:16: b3:0e:2b:97:89:a7:64:23:ab:1f:40:c4:69:90:3d:32:c7:3a: d9:3d:3f:0b:62:f7:1c:75:73:f1:f7:5a:75:99:85:99:b0:fd: 41:93:d1:1f:ad:0f:2f:24:c7:e2:fc:a1:90:87:ca:5b:1d:79: 48:8b:0b:ab:74:9c:55:55:e0:c6:6b:1f:c7:0c:8a:0f:e4:96: 3c:48:59:1f:e6:b2:bc:4e:0f:11:5f:97:52:08:c8:19:95:4d: d3:3f:46:33:bc:f5:7d:b1:f0:1b:6a:4c:29:e9:57:1a:b7:c9: 20:b4:1d:8c -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57CKf2NNCnS3smRReLgSiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YTYyY2Y4MTAwZThjMWI0NzU0NDNmZDk0Y2Q1OGQ4ZWYy YTMzYWUwHhcNMjYwMTAxMTQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzdhNGRmOTYyMjNjNmI5NDg0MGRhMmRiMjBiNzc2MWY0ZTIxZGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8BGADTQK8u2WZUV0fCEepRXFKqd dbHrrlZEaIKWRTtL6ln4R2HXaPerv2z5ukMlZJ+pOjuSPekv3dttahfgY8Sk/WI/ EPIreeKYlxgA/hI9tj6mTGhVqNkR9f5TXSXb7CnKuxfQUmNmCPNxXGa5PdrwbUeG hPyuiqOc12l9hju+Iq9BuAF9XmiP6U7kt0hEQepoAqjLzGO4nlmOmmHn9yRgfxC1 ajjfliK2MB+NXemx8g9Vn2cBzqQgBQq60jJ0gzCTJ9cQSJawrgtUkzLQssLdpPb0 7KfmLJ7Ixaal5ymlDfX1yl2zmtrsOjwEDpGZaUC+LLWK9dYYsVy4cIrysQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFON6TfliI8a5SEDaLbILd2H04h3iMB8GA1UdIwQY MBaAFIimLPgQDowbR1RD/ZTNWNjvKjOuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUtZcy1CQU9qQnRIVkVQOWxNMVkyTzhxTTY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lZWYwMzUtMjYyOS00ZTNlLWJlYmMt MTVhMGRkZGQ3NDljLzEvNDNwTi1XSWp4cmxJUU5vdHNndDNZZlRpSGVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9lZWYwMzUtMjYyOS00ZTNlLWJlYmMtMTVhMGRkZGQ3NDlj LzEvaUtZcy1CQU9qQnRIVkVQOWxNMVkyTzhxTTY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCTSfcAwQC uVRYMA0EAgACMAcDBQMqBaPAMA0GCSqGSIb3DQEBCwUAA4IBAQB5w/Lxy1wYeG52 GXyp8RMjwOcKzJITFppFRT7JA1wCEmQVVqlhzNHjFkPOkZpTgtpPzBpnI77YuV2q Wi8gAKPnlwY4rny9F2PTzZt1u4WDLViOmWletkj7VpAIM/4C1BQNEX59315NRdDK eaZty18n8H3GNmuCU4/WzdHR5qpCuzdK1XgnKXW17yB89TTIFBazDiuXiadkI6sf QMRpkD0yxzrZPT8LYvccdXPx91p1mYWZsP1Bk9EfrQ8vJMfi/KGQh8pbHXlIiwur dJxVVeDGax/HDIoP5JY8SFkf5rK8Tg8RX5dSCMgZlU3TP0YzvPV9sfAbakwp6Vca t8kgtB2M -----END CERTIFICATE-----Generated at Tue Feb 10 08:36:52 2026 by rpki-client