This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/fPRlwfum5S94TDmiag4C6spD880.roa File: fPRlwfum5S94TDmiag4C6spD880.roa (raw, json) Hash identifier: ZzylLRoUT9zsEapi8GsuZqpy4Y9pfeQIqfn5/Lz1+TU= Subject key identifier: 7C:F4:65:C1:FB:A6:E5:2F:78:4C:39:A2:6A:0E:02:EA:CA:43:F3:CD Certificate issuer: /CN=6ecb3fb3bea8cc8e36e3da7d9c47049bfc6ffb14 Certificate serial: 019B7C12E21344E4CBB3B8BBEA7396CDCFBC Authority key identifier: 6E:CB:3F:B3:BE:A8:CC:8E:36:E3:DA:7D:9C:47:04:9B:FC:6F:FB:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/fPRlwfum5S94TDmiag4C6spD880.roa Signing time: Fri 02 Jan 2026 00:19:30 +0000 ROA not before: Fri 02 Jan 2026 00:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201559 IP address blocks: 185.70.216.0/22 maxlen: 32 2a05:2c00::/30 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.crl rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:e2:13:44:e4:cb:b3:b8:bb:ea:73:96:cd:cf:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ecb3fb3bea8cc8e36e3da7d9c47049bfc6ffb14 Validity Not Before: Jan 2 00:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cf465c1fba6e52f784c39a26a0e02eaca43f3cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7d:e9:59:2f:26:a1:c4:01:c7:b7:44:b7:f2: 9a:4c:53:bd:fc:08:43:f9:f5:de:8e:05:7c:d9:d5: 2b:b1:78:bb:70:2e:8b:98:7e:93:04:3f:68:41:a2: 66:b0:8e:05:8f:62:f5:6a:ba:b2:0a:c2:a9:33:a8: d5:55:85:59:bf:f7:e2:94:f8:8a:48:ed:2a:3a:90: 8e:e8:5c:ce:cc:10:d6:c1:45:f1:da:b8:04:ad:b5: 40:79:65:cb:70:b1:ca:b3:30:7e:82:7b:42:43:31: 4c:5f:e5:18:b4:be:18:65:08:dc:9c:ab:c2:b5:26: 31:c0:ac:a3:78:04:7c:27:84:d2:73:5b:9c:e4:8f: 5f:1a:98:d6:55:9a:75:e9:7b:df:39:8e:8d:86:19: 08:48:cf:5b:8a:da:b1:eb:c8:11:82:e7:cc:63:60: 09:25:89:b7:ce:4e:54:43:24:24:f7:20:b7:4f:19: 32:15:68:84:d9:d1:65:38:62:12:df:41:06:15:ed: f9:19:06:69:d6:83:11:ce:c9:d4:10:8b:5e:10:0d: 72:44:de:66:e6:b2:35:4d:a5:2e:7d:e1:2a:3e:bd: 9d:29:bb:86:a9:6c:1a:00:14:2e:2d:8f:bb:14:0d: ab:e4:79:5f:c2:c7:12:f8:88:26:09:3d:0f:b2:91: dd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F4:65:C1:FB:A6:E5:2F:78:4C:39:A2:6A:0E:02:EA:CA:43:F3:CD X509v3 Authority Key Identifier: keyid:6E:CB:3F:B3:BE:A8:CC:8E:36:E3:DA:7D:9C:47:04:9B:FC:6F:FB:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/fPRlwfum5S94TDmiag4C6spD880.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.70.216.0/22 IPv6: 2a05:2c00::/30 Signature Algorithm: sha256WithRSAEncryption 55:09:4e:bf:17:8a:64:eb:8a:e6:14:dc:3a:8f:74:be:6a:68: 16:5e:9c:2d:46:e6:bc:c2:f4:b6:2b:85:05:22:14:a1:5e:41: 61:7c:4b:5b:a7:c7:e1:b7:14:02:9a:71:bf:c5:83:e7:cf:b8: be:24:56:75:1b:fa:31:62:02:6f:19:dc:ae:95:25:c9:85:aa: e5:b5:c0:ff:5b:9b:a4:17:ac:67:bc:ca:b5:b9:6e:90:d2:75: e1:21:22:46:a4:b1:3a:3b:bd:2b:9d:97:a9:b3:a3:91:d6:57: fc:d5:96:fd:74:cd:98:73:52:46:d4:b2:33:7d:d0:bc:0a:cf: 17:d6:59:f2:61:71:ad:3b:67:5a:ad:19:78:e4:e2:15:9a:75: fe:e9:dd:dc:83:41:65:1c:3e:93:2b:ab:e6:2a:ea:c1:86:66: b4:07:da:30:36:25:95:da:41:44:19:a8:b9:fe:72:1e:a4:d8: 79:55:ee:3d:c8:b3:69:e7:4a:eb:30:a5:cd:20:df:75:61:de: 16:8d:01:37:ce:fd:ce:c3:f6:39:82:da:dc:33:12:c8:b1:81: 53:79:02:a4:01:14:1b:9a:c8:10:5a:c5:30:e6:21:e5:81:a7: 74:3a:0a:93:85:30:68:45:34:dd:d4:2e:ac:60:ed:57:42:82: e9:53:cb:42 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8EuITROTLs7i76nOWzc+8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlY2IzZmIzYmVhOGNjOGUzNmUzZGE3ZDljNDcwNDliZmM2 ZmZiMTQwHhcNMjYwMTAyMDAxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2Y0NjVjMWZiYTZlNTJmNzg0YzM5YTI2YTBlMDJlYWNhNDNmM2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm33pWS8mocQBx7dEt/KaTFO9/AhD +fXejgV82dUrsXi7cC6LmH6TBD9oQaJmsI4Fj2L1arqyCsKpM6jVVYVZv/filPiK SO0qOpCO6FzOzBDWwUXx2rgErbVAeWXLcLHKszB+gntCQzFMX+UYtL4YZQjcnKvC tSYxwKyjeAR8J4TSc1uc5I9fGpjWVZp16XvfOY6NhhkISM9bitqx68gRgufMY2AJ JYm3zk5UQyQk9yC3TxkyFWiE2dFlOGIS30EGFe35GQZp1oMRzsnUEIteEA1yRN5m 5rI1TaUufeEqPr2dKbuGqWwaABQuLY+7FA2r5HlfwscS+IgmCT0PspHdfwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHz0ZcH7puUveEw5omoOAurKQ/PNMB8GA1UdIwQY MBaAFG7LP7O+qMyONuPafZxHBJv8b/sUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnNzX3M3Nm96STQyNDlwOW5FY0VtX3h2LXhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8wYmE3ZTItNjNhMi00YzQxLTg2YjUt YTM3MGY0YmEyZDJiLzEvZlBSbHdmdW01Uzk0VERtaWFnNEM2c3BEODgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS8wYmE3ZTItNjNhMi00YzQxLTg2YjUtYTM3MGY0YmEyZDJi LzEvYnNzX3M3Nm96STQyNDlwOW5FY0VtX3h2LXhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuUbYMA0E AgACMAcDBQIqBSwAMA0GCSqGSIb3DQEBCwUAA4IBAQBVCU6/F4pk64rmFNw6j3S+ amgWXpwtRua8wvS2K4UFIhShXkFhfEtbp8fhtxQCmnG/xYPnz7i+JFZ1G/oxYgJv GdyulSXJharltcD/W5ukF6xnvMq1uW6Q0nXhISJGpLE6O70rnZeps6OR1lf81Zb9 dM2Yc1JG1LIzfdC8Cs8X1lnyYXGtO2darRl45OIVmnX+6d3cg0FlHD6TK6vmKurB hma0B9owNiWV2kFEGai5/nIepNh5Ve49yLNp50rrMKXNIN91Yd4WjQE3zv3Ow/Y5 gtrcMxLIsYFTeQKkARQbmsgQWsUw5iHlgad0OgqThTBoRTTd1C6sYO1XQoLpU8tC -----END CERTIFICATE-----Generated at Tue Feb 10 08:37:33 2026 by rpki-client