This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/fxml6X6RQAn0rnCF7UcyPPHDlSM.roa File: fxml6X6RQAn0rnCF7UcyPPHDlSM.roa (raw, json) Hash identifier: a27AW/vQtgWKJVubyWNJsfqn7BeJp/kgORFP8iI7QAM= Subject key identifier: 7F:19:A5:E9:7E:91:40:09:F4:AE:70:85:ED:47:32:3C:F1:C3:95:23 Certificate issuer: /CN=241ed58e426975e299875897caff9552640d9c09 Certificate serial: 019B7910CB013B80E989C88C0AC600A7292F Authority key identifier: 24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/fxml6X6RQAn0rnCF7UcyPPHDlSM.roa Signing time: Thu 01 Jan 2026 10:18:22 +0000 ROA not before: Thu 01 Jan 2026 10:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15826 IP address blocks: 80.247.224.0/20 maxlen: 20 185.20.84.0/22 maxlen: 22 2a00:1a60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:cb:01:3b:80:e9:89:c8:8c:0a:c6:00:a7:29:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=241ed58e426975e299875897caff9552640d9c09 Validity Not Before: Jan 1 10:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f19a5e97e914009f4ae7085ed47323cf1c39523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5f:28:04:e7:b2:20:53:79:01:32:49:f4:07: fd:26:a0:63:c6:7c:4a:60:e6:65:1b:ca:0a:cb:eb: b3:da:a3:5b:6d:6e:65:70:f3:9f:f2:4c:84:38:18: 5f:6b:73:67:f4:1a:f4:a4:b9:a0:13:17:4f:b8:7b: 37:05:be:93:5a:52:70:b9:dc:9f:c9:b9:8c:d2:8a: 53:f1:9c:a7:c2:2a:98:a4:8e:9d:ad:75:b7:b0:56: cb:28:69:8e:f9:cc:4b:fa:c0:ba:46:39:67:49:a8: 48:46:32:1f:72:d9:2c:d6:8d:e6:a8:53:98:a5:09: e7:86:79:60:01:fa:9a:ee:f9:ed:5f:61:b7:92:5a: 55:af:5c:40:6a:0d:2a:a3:52:df:3f:79:4e:0f:b2: b2:0f:7d:c2:f0:7e:af:78:1f:b4:29:af:52:15:f5: 3d:91:6c:58:a6:b3:69:5a:f0:20:56:e5:71:f4:b2: 66:92:8c:ac:d1:46:2e:3a:93:5e:43:38:3e:a5:de: 2c:02:da:c3:ab:a9:2d:7e:d0:a9:7e:4d:26:fc:a7: 84:3d:81:60:9b:c0:5d:6b:aa:d6:7f:9a:16:11:93: 56:46:b5:4c:c4:4d:35:99:f9:06:4c:1b:36:d2:be: 83:b5:e1:d2:b8:12:72:2d:18:cb:5a:c6:87:e8:6e: 0a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:19:A5:E9:7E:91:40:09:F4:AE:70:85:ED:47:32:3C:F1:C3:95:23 X509v3 Authority Key Identifier: keyid:24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/fxml6X6RQAn0rnCF7UcyPPHDlSM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.247.224.0/20 185.20.84.0/22 IPv6: 2a00:1a60::/32 Signature Algorithm: sha256WithRSAEncryption 5b:e1:53:87:6e:b8:7d:d8:3b:a4:8e:91:0a:90:f7:01:ce:b7: 1c:f1:6a:87:6c:73:08:9f:8e:9f:34:cb:b3:d1:a7:6f:9c:95: b5:2f:49:97:05:d4:2d:ea:78:0d:44:a9:c6:de:19:b7:19:20: 91:92:99:20:db:3c:75:be:51:fb:35:a4:bb:18:33:d3:fe:6a: d9:8e:64:b2:ad:8a:60:49:1e:25:ee:5c:80:b6:a8:f4:2e:98: ab:09:5c:e4:1a:97:5e:ff:77:8d:f7:f3:e1:e0:18:b4:17:39: f8:9c:90:67:7c:f4:0f:21:ad:db:25:70:4e:f0:11:df:a9:43: b5:a9:1f:6e:b5:3e:38:85:ec:71:9a:b6:56:73:f0:62:fb:0e: 72:85:cd:c9:38:6f:94:05:a4:1e:0e:7a:97:e3:da:f5:8e:27: c1:55:bd:de:e5:7a:da:be:87:b0:c9:71:3e:bd:a8:45:69:9c: 30:b4:91:e6:d4:b2:ea:ff:8d:41:42:2b:80:43:44:5c:1f:68: 17:03:de:63:b2:12:11:df:18:e8:f1:32:5f:40:34:6a:d0:4c: 8e:95:51:be:36:c0:ec:c7:dc:b2:49:09:c0:0b:97:08:50:fb: 62:e7:13:40:21:da:56:91:ee:83:e2:36:de:99:99:7b:64:0a: 9b:aa:a8:1c -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5EMsBO4DpiciMCsYApykvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MWVkNThlNDI2OTc1ZTI5OTg3NTg5N2NhZmY5NTUyNjQw ZDljMDkwHhcNMjYwMTAxMTAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjE5YTVlOTdlOTE0MDA5ZjRhZTcwODVlZDQ3MzIzY2YxYzM5NTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl8oBOeyIFN5ATJJ9Af9JqBjxnxK YOZlG8oKy+uz2qNbbW5lcPOf8kyEOBhfa3Nn9Br0pLmgExdPuHs3Bb6TWlJwudyf ybmM0opT8ZynwiqYpI6drXW3sFbLKGmO+cxL+sC6RjlnSahIRjIfctks1o3mqFOY pQnnhnlgAfqa7vntX2G3klpVr1xAag0qo1LfP3lOD7KyD33C8H6veB+0Ka9SFfU9 kWxYprNpWvAgVuVx9LJmkoys0UYuOpNeQzg+pd4sAtrDq6ktftCpfk0m/KeEPYFg m8Bda6rWf5oWEZNWRrVMxE01mfkGTBs20r6DteHSuBJyLRjLWsaH6G4KiwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFH8Zpel+kUAJ9K5whe1HMjzxw5UjMB8GA1UdIwQY MBaAFCQe1Y5CaXXimYdYl8r/lVJkDZwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkI3VmprSnBkZUtaaDFpWHl2LVZVbVFObkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9mNWRjNjItYmU2OC00NjYzLTg0ZGUt NTU0NWI4OTAxNDM4LzEvZnhtbDZYNlJRQW4wcm5DRjdVY3lQUEhEbFNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9mNWRjNjItYmU2OC00NjYzLTg0ZGUtNTU0NWI4OTAxNDM4 LzEvSkI3VmprSnBkZUtaaDFpWHl2LVZVbVFObkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEUPfgAwQC uRRUMA0EAgACMAcDBQAqABpgMA0GCSqGSIb3DQEBCwUAA4IBAQBb4VOHbrh92Duk jpEKkPcBzrcc8WqHbHMIn46fNMuz0advnJW1L0mXBdQt6ngNRKnG3hm3GSCRkpkg 2zx1vlH7NaS7GDPT/mrZjmSyrYpgSR4l7lyAtqj0LpirCVzkGpde/3eN9/Ph4Bi0 Fzn4nJBnfPQPIa3bJXBO8BHfqUO1qR9utT44hexxmrZWc/Bi+w5yhc3JOG+UBaQe DnqX49r1jifBVb3e5XravoewyXE+vahFaZwwtJHm1LLq/41BQiuAQ0RcH2gXA95j shIR3xjo8TJfQDRq0EyOlVG+NsDsx9yySQnAC5cIUPti5xNAIdpWke6D4jbemZl7 ZAqbqqgc -----END CERTIFICATE-----Generated at Mon Feb 9 22:59:36 2026 by rpki-client