This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/fMF9qnlP4WB5LHh5V8LwNwc9f4Q.roa File: fMF9qnlP4WB5LHh5V8LwNwc9f4Q.roa (raw, json) Hash identifier: fmzVayjcNIPJoq0/A+Ybi5cj066xRm3fDk6Fawjmxcg= Subject key identifier: 7C:C1:7D:AA:79:4F:E1:60:79:2C:78:79:57:C2:F0:37:07:3D:7F:84 Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3 Certificate serial: 019B7F83F8DFDAE53FED2CA3A30561769A98 Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/fMF9qnlP4WB5LHh5V8LwNwc9f4Q.roa Signing time: Fri 02 Jan 2026 16:21:53 +0000 ROA not before: Fri 02 Jan 2026 16:21:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48753 IP address blocks: 37.221.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:f8:df:da:e5:3f:ed:2c:a3:a3:05:61:76:9a:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3 Validity Not Before: Jan 2 16:21:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cc17daa794fe160792c787957c2f037073d7f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f0:c0:4b:46:27:0d:8e:aa:d0:38:c7:33:04: 15:4f:eb:9e:a4:7f:b1:c3:fa:a3:b4:74:67:50:95: 6f:45:cd:46:c8:37:14:7d:3b:08:d4:55:49:73:b7: 1e:23:38:93:19:b7:e5:60:98:52:f3:76:8f:5a:70: 81:fa:cd:98:b9:ea:c0:70:67:0b:79:b5:f9:da:ab: a2:a2:b6:d0:03:6c:48:41:77:3a:dc:d4:8b:4f:af: 40:bc:86:af:ea:c8:db:08:13:fa:89:b0:31:f5:9d: d0:70:cb:af:94:03:3f:9f:92:62:90:9f:9d:40:2d: 96:df:29:04:77:ca:b5:62:14:31:72:93:1f:b7:48: d9:3f:72:f8:2a:73:6b:e9:32:2d:bd:e8:ea:ef:8f: 6d:04:21:5f:25:50:e2:f9:83:42:b0:80:2c:15:58: 39:6d:94:77:08:cd:1b:85:96:ad:09:8e:78:1d:10: ca:71:da:23:af:10:6d:5b:99:0b:21:a1:60:80:3c: 86:6e:13:ac:4a:17:67:e7:b5:49:fe:62:5b:7c:84: 9c:0e:3f:cf:dd:3f:bf:8b:ef:bc:ea:ed:5b:dd:05: 0c:1a:0b:74:96:ef:8a:fc:1a:8b:80:d1:c7:9b:f4: d8:cf:2e:b0:2c:d1:e6:2a:db:35:f1:cc:c1:0b:38: 59:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C1:7D:AA:79:4F:E1:60:79:2C:78:79:57:C2:F0:37:07:3D:7F:84 X509v3 Authority Key Identifier: keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/fMF9qnlP4WB5LHh5V8LwNwc9f4Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.221.66.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:ba:d4:dd:07:9d:59:ec:e9:16:cf:8e:91:8f:5e:7e:08:52: f6:cb:45:09:62:89:5b:cb:f0:05:f7:80:0d:22:39:36:ab:0f: 7d:6d:09:bc:8a:85:39:9a:74:11:98:a3:c1:b5:be:de:fd:17: 73:a7:b1:a4:7e:2f:14:e2:90:ae:db:40:31:e3:6a:f9:76:b3: b8:92:86:41:95:e3:62:7b:73:bf:9b:e2:7d:67:de:05:64:20: fb:0b:b6:a5:17:28:15:25:4c:77:09:4e:f2:9e:19:c5:27:ae: 68:34:b1:e3:ee:56:21:41:78:a2:f6:aa:86:72:d8:43:47:3d: 7a:7d:8b:90:05:b9:38:8f:65:ca:b9:08:7e:cf:7a:0f:39:37: b1:06:cf:51:08:e2:33:f4:56:64:8e:e4:d2:91:b5:37:7b:8f: a3:d4:34:a4:96:4b:b9:69:a5:c8:53:6d:99:2b:fc:90:f3:c1: f2:e4:aa:6a:c5:a5:f3:d3:cf:d3:bf:70:39:35:08:f3:cb:64: 6f:d3:a6:05:3d:9f:d0:0d:85:44:4b:80:ee:0c:1f:e4:43:3e: 9d:49:f5:b7:5c:9b:cf:55:05:a7:93:56:86:d3:90:9f:01:47: 42:a3:5c:93:30:58:de:59:29:38:33:4d:3f:30:03:dd:50:3e: c8:46:31:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g/jf2uU/7SyjowVhdpqYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYTI1YWFmZTNhOTg3MGU5NTI0YWZhMDI2NTk4N2VkNWE1 YTRkYTMwHhcNMjYwMTAyMTYyMTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2MxN2RhYTc5NGZlMTYwNzkyYzc4Nzk1N2MyZjAzNzA3M2Q3Zjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/DAS0YnDY6q0DjHMwQVT+uepH+x w/qjtHRnUJVvRc1GyDcUfTsI1FVJc7ceIziTGbflYJhS83aPWnCB+s2YuerAcGcL ebX52quiorbQA2xIQXc63NSLT69AvIav6sjbCBP6ibAx9Z3QcMuvlAM/n5JikJ+d QC2W3ykEd8q1YhQxcpMft0jZP3L4KnNr6TItvejq749tBCFfJVDi+YNCsIAsFVg5 bZR3CM0bhZatCY54HRDKcdojrxBtW5kLIaFggDyGbhOsShdn57VJ/mJbfIScDj/P 3T+/i++86u1b3QUMGgt0lu+K/BqLgNHHm/TYzy6wLNHmKts18czBCzhZoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHzBfap5T+FgeSx4eVfC8DcHPX+EMB8GA1UdIwQY MBaAFK2iWq/jqYcOlSSvoCZZh+1aWk2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUt OWQ1ODc1ZDg2MzczLzEvZk1GOXFubFA0V0I1TEhoNVY4THdOd2M5ZjRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUtOWQ1ODc1ZDg2Mzcz LzEvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJd1CMA0G CSqGSIb3DQEBCwUAA4IBAQBdutTdB51Z7OkWz46Rj15+CFL2y0UJYolby/AF94AN Ijk2qw99bQm8ioU5mnQRmKPBtb7e/Rdzp7Gkfi8U4pCu20Ax42r5drO4koZBleNi e3O/m+J9Z94FZCD7C7alFygVJUx3CU7ynhnFJ65oNLHj7lYhQXii9qqGcthDRz16 fYuQBbk4j2XKuQh+z3oPOTexBs9RCOIz9FZkjuTSkbU3e4+j1DSklku5aaXIU22Z K/yQ88Hy5KpqxaXz08/Tv3A5NQjzy2Rv06YFPZ/QDYVES4DuDB/kQz6dSfW3XJvP VQWnk1aG05CfAUdCo1yTMFjeWSk4M00/MAPdUD7IRjEq -----END CERTIFICATE-----Generated at Wed Jan 21 15:37:10 2026 by rpki-client