This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/FcdGXNwe-mMVDTtN1Ybn6RQnnIQ.roa File: FcdGXNwe-mMVDTtN1Ybn6RQnnIQ.roa (raw, json) Hash identifier: bVNuxo+zD5Ulx5b7MORNeBrZDodMMSew9N+io27yssY= Subject key identifier: 15:C7:46:5C:DC:1E:FA:63:15:0D:3B:4D:D5:86:E7:E9:14:27:9C:84 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EB34C9F084677868D066566BB9B0A Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/FcdGXNwe-mMVDTtN1Ybn6RQnnIQ.roa Signing time: Thu 01 Jan 2026 12:18:25 +0000 ROA not before: Thu 01 Jan 2026 12:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210110 IP address blocks: 185.145.244.0/24 maxlen: 24 2a0e:aa07:e02f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b3:4c:9f:08:46:77:86:8d:06:65:66:bb:9b:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15c7465cdc1efa63150d3b4dd586e7e914279c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:86:f8:07:48:79:a5:5c:3a:06:ee:9c:c0:49: fc:32:a5:b9:da:ad:e5:fd:28:37:df:48:52:65:f8: 7a:b3:a6:d6:ce:68:87:9a:46:8b:ec:b9:f2:bf:d0: ac:6c:77:8f:94:03:b7:82:cd:a4:7f:9a:d9:23:c7: 30:3e:d3:d4:a4:c1:0a:37:57:46:23:24:ca:26:ac: 30:25:af:e3:8f:77:fa:59:7c:82:5b:d5:cd:ce:d5: ad:cc:47:76:ef:39:c9:c1:06:90:69:d4:1e:cd:89: e6:e0:18:0c:d3:e4:09:d7:63:f3:e3:87:18:26:e8: 1c:6b:6f:12:4a:27:61:3b:0b:c6:c1:62:6e:3e:75: 95:f9:b8:31:2f:91:fd:c6:c2:c8:6d:0a:2e:03:51: 8e:12:c4:91:bd:13:e7:17:da:c5:6e:82:99:15:f8: 87:5e:4e:32:38:43:b8:e2:ac:0c:71:04:ac:7e:36: 91:f7:a3:d2:20:6e:c3:54:57:a0:d8:ef:6d:73:39: df:39:5c:a9:a0:28:31:cc:16:2c:28:7f:b9:4f:4a: 05:5f:86:63:64:eb:fa:d7:98:8d:ed:3c:52:43:40: e3:44:be:e1:17:f6:4f:09:40:2e:34:87:95:ed:f0: 8f:9e:df:e8:17:2d:59:8a:fb:c9:d7:02:85:9e:3b: c0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C7:46:5C:DC:1E:FA:63:15:0D:3B:4D:D5:86:E7:E9:14:27:9C:84 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/FcdGXNwe-mMVDTtN1Ybn6RQnnIQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.145.244.0/24 IPv6: 2a0e:aa07:e02f::/48 Signature Algorithm: sha256WithRSAEncryption 6d:45:7a:19:92:fb:a1:bd:0b:b6:63:06:57:17:cd:c7:53:33: c0:dc:d1:c1:8a:6b:1c:4b:2c:97:2d:a2:a1:43:14:ad:ab:19: 29:ce:ae:e0:ea:21:3f:a1:2c:2f:af:91:ee:7b:b6:86:96:c2: 84:35:07:e0:3c:db:c9:7f:ac:a9:5d:b5:de:48:0c:de:60:bf: 54:e1:f4:37:72:7a:30:c8:2a:d5:84:0a:46:76:57:43:29:81: a8:f0:a9:f4:7c:85:1e:cd:d6:b8:63:86:36:09:16:24:31:07: ef:8b:60:50:0f:c7:bd:00:c1:3d:c7:62:f3:8a:cd:7c:96:2d: 03:fc:41:71:b8:20:f4:8e:49:e4:cf:12:a7:8a:0d:a5:bc:a0: 12:0f:ee:3f:70:63:cb:eb:7e:a8:36:00:9e:79:71:d1:4f:ce: 0b:4a:c5:48:27:2f:d8:92:25:6c:67:be:de:5f:68:11:0c:f9: ee:13:6c:b4:8a:e8:2a:f1:b6:8f:23:be:17:05:03:7b:c0:75: eb:4d:cf:cc:95:64:ab:14:b3:2f:42:ff:74:b1:fb:70:4b:3d: 68:ee:05:65:55:23:17:c4:c3:27:ef:fd:fb:21:21:ea:52:f3: b8:3b:fd:5f:18:f2:92:35:d7:68:c3:8e:6e:40:31:15:fd:36: 56:fa:e4:31 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5frNMnwhGd4aNBmVmu5sKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWM3NDY1Y2RjMWVmYTYzMTUwZDNiNGRkNTg2ZTdlOTE0Mjc5Yzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYb4B0h5pVw6Bu6cwEn8MqW52q3l /Sg330hSZfh6s6bWzmiHmkaL7Lnyv9CsbHePlAO3gs2kf5rZI8cwPtPUpMEKN1dG IyTKJqwwJa/jj3f6WXyCW9XNztWtzEd27znJwQaQadQezYnm4BgM0+QJ12Pz44cY Jugca28SSidhOwvGwWJuPnWV+bgxL5H9xsLIbQouA1GOEsSRvRPnF9rFboKZFfiH Xk4yOEO44qwMcQSsfjaR96PSIG7DVFeg2O9tcznfOVypoCgxzBYsKH+5T0oFX4Zj ZOv615iN7TxSQ0DjRL7hF/ZPCUAuNIeV7fCPnt/oFy1ZivvJ1wKFnjvAsQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBXHRlzcHvpjFQ07TdWG5+kUJ5yEMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvRmNkR1hOd2UtbU1WRFR0TjFZYm42UlFubklRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuZH0MA8E AgACMAkDBwAqDqoH4C8wDQYJKoZIhvcNAQELBQADggEBAG1FehmS+6G9C7ZjBlcX zcdTM8Dc0cGKaxxLLJctoqFDFK2rGSnOruDqIT+hLC+vke57toaWwoQ1B+A828l/ rKldtd5IDN5gv1Th9DdyejDIKtWECkZ2V0MpgajwqfR8hR7N1rhjhjYJFiQxB++L YFAPx70AwT3HYvOKzXyWLQP8QXG4IPSOSeTPEqeKDaW8oBIP7j9wY8vrfqg2AJ55 cdFPzgtKxUgnL9iSJWxnvt5faBEM+e4TbLSK6Crxto8jvhcFA3vAdetNz8yVZKsU sy9C/3Sx+3BLPWjuBWVVIxfEwyfv/fshIepS87g7/V8Y8pI112jDjm5AMRX9Nlb6 5DE= -----END CERTIFICATE-----Generated at Tue Jan 6 21:31:59 2026 by rpki-client