This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/P7jjKXYODa6b0nJrUcOuqIoDy-Y.roa File: P7jjKXYODa6b0nJrUcOuqIoDy-Y.roa (raw, json) Hash identifier: WbzeNFSAMqkRYOfSuJZB8Gq+eo7K35ASCXWClSmDC1M= Subject key identifier: 3F:B8:E3:29:76:0E:0D:AE:9B:D2:72:6B:51:C3:AE:A8:8A:03:CB:E6 Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Certificate serial: 019B79ED3B6A41231CF0A075DC7E84875356 Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/P7jjKXYODa6b0nJrUcOuqIoDy-Y.roa Signing time: Thu 01 Jan 2026 14:19:08 +0000 ROA not before: Thu 01 Jan 2026 14:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210906 IP address blocks: 86.104.227.0/24 maxlen: 24 162.218.157.0/24 maxlen: 24 193.200.96.0/23 maxlen: 23 194.29.70.0/24 maxlen: 24 194.29.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:3b:6a:41:23:1c:f0:a0:75:dc:7e:84:87:53:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Validity Not Before: Jan 1 14:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fb8e329760e0dae9bd2726b51c3aea88a03cbe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ec:00:4b:f8:94:ca:76:27:95:cf:b6:65:77: 39:5c:78:06:e4:6b:36:3a:9b:d4:a6:79:05:e0:2c: 43:eb:e6:eb:92:7d:9b:b9:db:35:81:ad:e9:0f:95: 3e:0a:4e:9c:0b:ae:dc:14:e0:d7:a1:b5:67:e0:ab: 8b:e7:0d:ab:74:21:3d:a1:90:49:96:7c:fc:1a:97: 0b:e4:5b:2a:ef:d3:81:10:bc:ed:f9:17:2e:a0:18: f4:45:23:54:d7:d4:3e:69:97:0a:bc:55:f6:11:fa: 07:df:bd:c4:5e:73:a1:c1:8d:4a:df:a2:f3:5b:28: fe:5b:af:16:6d:af:07:25:1b:1d:57:3f:80:aa:59: 80:ab:d9:e9:f2:bc:4c:48:ab:fd:f2:70:ab:fa:98: 70:9d:81:44:94:98:a8:79:38:6a:13:f8:f0:8d:e3: e8:a9:ca:5b:81:6f:44:c0:1d:a1:fb:12:8f:42:04: 68:76:68:7f:71:c7:ea:f0:31:aa:7f:84:1e:e3:0f: 09:04:fa:a6:b7:12:83:12:e2:51:a2:f9:5a:40:fd: d0:04:ab:09:4a:8b:e6:c0:49:10:6c:cc:eb:36:fb: 12:24:3e:1b:6e:5d:e3:d9:ae:2b:41:b7:e6:f5:b3: 76:c3:f5:9a:df:26:ea:de:99:65:6b:d5:7c:10:cf: a1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B8:E3:29:76:0E:0D:AE:9B:D2:72:6B:51:C3:AE:A8:8A:03:CB:E6 X509v3 Authority Key Identifier: keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/P7jjKXYODa6b0nJrUcOuqIoDy-Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.104.227.0/24 162.218.157.0/24 193.200.96.0/23 194.29.70.0/24 194.29.80.0/24 Signature Algorithm: sha256WithRSAEncryption 36:d9:6b:87:c6:3e:c2:9d:bd:b6:8f:d6:6d:df:91:8d:68:5f: b5:59:0b:6d:b0:82:3b:ea:a6:27:92:18:46:9b:9e:c9:7e:8b: 77:7f:b5:15:b6:ac:2d:d9:06:ee:df:74:1d:a1:c9:f9:9a:31: 1a:4c:42:4f:ed:42:ba:d9:39:8f:e6:d8:9e:d5:3c:18:b5:8a: ae:80:c7:ff:c5:77:f0:53:12:cd:f8:50:89:09:a4:10:d3:93: c3:e5:6a:1a:70:19:2e:ed:95:7a:61:ed:c3:88:ed:7d:e5:1f: 1c:e4:13:0b:cf:08:b1:44:39:cb:02:9e:69:51:0d:a3:d4:d5: 23:04:b2:41:23:d5:1c:9e:8c:be:71:26:3b:f8:a8:df:60:e9: 6b:a3:50:e6:a1:d2:11:1f:ab:cb:a2:78:23:4f:ec:9b:ac:4d: ff:36:86:04:d2:2e:bd:e5:1a:93:f2:ed:95:b8:ab:d3:d9:7e: cc:51:af:1f:92:0e:37:a6:5a:45:d6:43:b4:df:96:4b:0a:a2: f1:35:e2:98:9e:85:6e:72:6f:5a:f8:ac:67:42:18:17:80:b8: 9f:c6:74:23:6b:cd:60:cb:cf:3d:01:78:b4:45:bf:c8:61:ff: c4:fc:69:67:9e:cb:ce:46:31:6f:f6:d3:a0:3b:a9:99:07:69: 4f:39:29:63 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt57TtqQSMc8KB13H6Eh1NWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5 MTk3ZjIwHhcNMjYwMTAxMTQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmI4ZTMyOTc2MGUwZGFlOWJkMjcyNmI1MWMzYWVhODhhMDNjYmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uwAS/iUynYnlc+2ZXc5XHgG5Gs2 OpvUpnkF4CxD6+brkn2buds1ga3pD5U+Ck6cC67cFODXobVn4KuL5w2rdCE9oZBJ lnz8GpcL5Fsq79OBELzt+RcuoBj0RSNU19Q+aZcKvFX2EfoH373EXnOhwY1K36Lz Wyj+W68Wba8HJRsdVz+AqlmAq9np8rxMSKv98nCr+phwnYFElJioeThqE/jwjePo qcpbgW9EwB2h+xKPQgRodmh/ccfq8DGqf4Qe4w8JBPqmtxKDEuJRovlaQP3QBKsJ SovmwEkQbMzrNvsSJD4bbl3j2a4rQbfm9bN2w/Wa3ybq3plla9V8EM+hPQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFD+44yl2Dg2um9Jya1HDrqiKA8vmMB8GA1UdIwQY MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt MmQxNDNkN2I4NTNjLzEvUDdqaktYWU9EYTZiMG5KclVjT3VxSW9EeS1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAVmjjAwQA otqdAwQBwchgAwQAwh1GAwQAwh1QMA0GCSqGSIb3DQEBCwUAA4IBAQA22WuHxj7C nb22j9Zt35GNaF+1WQttsII76qYnkhhGm57Jfot3f7UVtqwt2Qbu33Qdocn5mjEa TEJP7UK62TmP5tie1TwYtYqugMf/xXfwUxLN+FCJCaQQ05PD5WoacBku7ZV6Ye3D iO195R8c5BMLzwixRDnLAp5pUQ2j1NUjBLJBI9Ucnoy+cSY7+KjfYOlro1DmodIR H6vLongjT+ybrE3/NoYE0i695RqT8u2VuKvT2X7MUa8fkg43plpF1kO035ZLCqLx NeKYnoVucm9a+KxnQhgXgLifxnQja81gy889AXi0Rb/IYf/E/GlnnsvORjFv9tOg O6mZB2lPOSlj -----END CERTIFICATE-----Generated at Wed Jan 21 13:24:53 2026 by rpki-client