This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/d6FAMSfNl2gbD2ScLEgzLE-605E.roa File: d6FAMSfNl2gbD2ScLEgzLE-605E.roa (raw, json) Hash identifier: l07FqBPeIjXy39cMyHowPybra02ZZrSFD0biG31Mu5M= Subject key identifier: 77:A1:40:31:27:CD:97:68:1B:0F:64:9C:2C:48:33:2C:4F:BA:D3:91 Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8 Certificate serial: 019B7F8172A3125F36BCCE8C643932615FDE Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/d6FAMSfNl2gbD2ScLEgzLE-605E.roa Signing time: Fri 02 Jan 2026 16:19:08 +0000 ROA not before: Fri 02 Jan 2026 16:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22516 IP address blocks: 168.199.0.0/24 maxlen: 24 168.199.4.0/24 maxlen: 24 168.199.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:72:a3:12:5f:36:bc:ce:8c:64:39:32:61:5f:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8 Validity Not Before: Jan 2 16:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77a1403127cd97681b0f649c2c48332c4fbad391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0d:12:41:ce:99:27:cd:d1:9c:0b:53:9b:10: 7e:91:1b:32:68:49:06:33:9e:8f:d0:a4:a4:42:1c: 35:c2:c7:7f:4b:8d:02:ff:6c:28:51:6f:d3:a8:cb: 0e:72:de:9c:65:c2:b0:f2:f7:3b:70:5f:78:b4:08: d3:63:fd:c8:bb:5b:79:a4:fa:e2:54:2b:91:ca:13: ef:39:3b:be:d0:3d:96:df:25:ac:c4:c4:d3:57:b1: 1e:df:a6:af:cd:41:18:4e:81:47:12:99:c4:84:5b: 2d:ac:54:3b:34:e2:96:76:e6:f7:ef:14:ec:47:e0: 72:af:05:9c:28:be:75:e4:5f:e2:d9:b1:ec:70:15: 3a:2b:ce:a2:9c:23:cd:38:4b:59:ff:a3:94:2c:c8: 3d:e2:35:76:f9:ae:7a:0d:29:aa:b4:e0:e1:be:5b: 1f:37:f9:fa:6c:ef:9d:4d:cc:21:4c:14:c2:dc:71: e6:fb:77:6e:5e:8b:92:7f:c9:7b:b7:2c:22:85:54: 62:91:90:0b:48:ac:b7:20:74:44:e8:bc:35:58:20: 65:96:48:d1:09:a1:cc:16:a5:c3:8a:d8:01:a1:aa: cb:28:e5:f8:18:dc:5b:91:c7:ad:f2:a8:b9:62:3c: 40:ed:ab:28:1f:3a:61:a5:2d:3f:f0:8d:e6:2b:13: 1e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A1:40:31:27:CD:97:68:1B:0F:64:9C:2C:48:33:2C:4F:BA:D3:91 X509v3 Authority Key Identifier: keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/d6FAMSfNl2gbD2ScLEgzLE-605E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.199.0.0/24 168.199.4.0/24 168.199.126.0/24 Signature Algorithm: sha256WithRSAEncryption 44:88:a6:12:f4:13:02:d8:ba:6e:fd:1a:da:82:16:eb:c0:cc: 65:16:a5:8d:c1:bb:de:b7:a3:c5:42:c4:b0:13:6c:29:19:a0: 6e:69:39:99:d9:80:cc:59:fa:2a:7f:c1:3c:dd:91:75:cf:49: a8:b7:bf:2b:d2:20:4d:ac:62:75:12:9f:b6:17:85:b7:bf:53: da:87:a1:b1:7a:de:d2:b1:19:a1:6c:b7:f8:53:6c:bc:8c:27: b9:63:1c:d4:ef:69:c0:e9:60:f8:27:e6:60:7f:7f:cc:ee:e4: 99:68:fc:b9:16:e1:f2:f4:26:db:b4:be:2f:16:3d:ee:96:c3: 10:af:f5:98:da:44:a8:4f:5a:26:01:52:87:51:16:5d:d1:d5: 3a:31:9d:43:0e:4f:be:1d:93:5a:a4:d1:29:25:d8:8b:1f:23: 44:ca:b6:18:10:c7:52:42:57:af:2e:02:13:74:9a:13:7e:00: 21:fc:aa:7e:e8:bf:b4:6f:f6:99:43:13:26:6d:35:0f:d1:39: 2b:fb:50:7a:24:18:56:60:3c:44:b6:8d:ba:85:a9:0b:07:b0: e7:b3:be:8b:2c:34:11:7f:d7:7d:b5:2a:dc:e6:f6:9a:62:e8: 4f:f3:3e:cc:13:8b:84:d4:b4:2b:24:a4:7d:78:57:4c:a0:17: 18:6d:f5:26 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/gXKjEl82vM6MZDkyYV/eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4 ODE3ZDgwHhcNMjYwMTAyMTYxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2ExNDAzMTI3Y2Q5NzY4MWIwZjY0OWMyYzQ4MzMyYzRmYmFkMzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw0SQc6ZJ83RnAtTmxB+kRsyaEkG M56P0KSkQhw1wsd/S40C/2woUW/TqMsOct6cZcKw8vc7cF94tAjTY/3Iu1t5pPri VCuRyhPvOTu+0D2W3yWsxMTTV7Ee36avzUEYToFHEpnEhFstrFQ7NOKWdub37xTs R+ByrwWcKL515F/i2bHscBU6K86inCPNOEtZ/6OULMg94jV2+a56DSmqtODhvlsf N/n6bO+dTcwhTBTC3HHm+3duXouSf8l7tywihVRikZALSKy3IHRE6Lw1WCBllkjR CaHMFqXDitgBoarLKOX4GNxbkcet8qi5YjxA7asoHzphpS0/8I3mKxMePwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHehQDEnzZdoGw9knCxIMyxPutORMB8GA1UdIwQY MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt MmQxOTE4YmExYzBlLzEvZDZGQU1TZk5sMmdiRDJTY0xFZ3pMRS02MDVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAqMcAAwQA qMcEAwQAqMd+MA0GCSqGSIb3DQEBCwUAA4IBAQBEiKYS9BMC2Lpu/RraghbrwMxl FqWNwbvet6PFQsSwE2wpGaBuaTmZ2YDMWfoqf8E83ZF1z0mot78r0iBNrGJ1Ep+2 F4W3v1Pah6Gxet7SsRmhbLf4U2y8jCe5YxzU72nA6WD4J+Zgf3/M7uSZaPy5FuHy 9CbbtL4vFj3ulsMQr/WY2kSoT1omAVKHURZd0dU6MZ1DDk++HZNapNEpJdiLHyNE yrYYEMdSQlevLgITdJoTfgAh/Kp+6L+0b/aZQxMmbTUP0Tkr+1B6JBhWYDxEto26 hakLB7Dns76LLDQRf9d9tSrc5vaaYuhP8z7ME4uE1LQrJKR9eFdMoBcYbfUm -----END CERTIFICATE-----Generated at Fri Jan 9 16:51:09 2026 by rpki-client