This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/f6iqlfdMArGL77ftRWPuRND2qEw.roa File: f6iqlfdMArGL77ftRWPuRND2qEw.roa (raw, json) Hash identifier: Y4n4zPlQ5X9WdhdswqlaVDVx5UOEzkW5UgOyIaM7S3Y= Subject key identifier: 7F:A8:AA:95:F7:4C:02:B1:8B:EF:B7:ED:45:63:EE:44:D0:F6:A8:4C Certificate issuer: /CN=2794556395b47bf43e0d5d556e7e255b6c8accc2 Certificate serial: 019B7DCB58763457D240485BAE00211F5B8A Authority key identifier: 27:94:55:63:95:B4:7B:F4:3E:0D:5D:55:6E:7E:25:5B:6C:8A:CC:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/f6iqlfdMArGL77ftRWPuRND2qEw.roa Signing time: Fri 02 Jan 2026 08:20:37 +0000 ROA not before: Fri 02 Jan 2026 08:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39702 IP address blocks: 185.133.12.0/22 maxlen: 22 2a05:fe80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:58:76:34:57:d2:40:48:5b:ae:00:21:1f:5b:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2794556395b47bf43e0d5d556e7e255b6c8accc2 Validity Not Before: Jan 2 08:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fa8aa95f74c02b18befb7ed4563ee44d0f6a84c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:61:71:57:0b:5a:9b:4c:0c:52:47:dc:5e:6a: 6a:39:45:b6:cd:49:44:7c:12:5f:4a:07:61:18:6c: f5:c3:17:0e:18:13:ec:61:50:62:28:93:8e:08:75: 31:5f:77:a6:93:80:94:b1:3e:a5:85:eb:72:a1:bd: e0:62:5f:26:a0:9d:3c:f3:f8:d0:8e:1a:0a:34:5f: b6:ee:a1:79:53:56:3e:8d:c8:18:f7:56:13:79:7b: e5:81:54:4b:eb:67:c6:6b:ff:03:5f:f1:75:fa:fe: 75:85:aa:0b:33:14:32:46:69:6e:ef:3f:ca:bb:15: d5:30:2d:0b:0a:0f:83:63:6c:04:e6:35:4d:07:e0: 33:70:5a:37:7d:71:dd:f1:85:1e:51:4b:0a:63:52: fd:4c:15:a3:b1:55:86:2b:97:ff:e5:51:8d:4f:25: 06:fe:dc:77:e3:77:8b:52:be:9c:46:bb:db:17:dc: 88:7e:b7:46:a1:93:e6:d2:40:e0:3f:55:36:c4:14: e5:4a:e8:0b:97:3e:55:68:6a:7f:91:22:36:2f:22: 19:20:16:43:72:e2:63:81:74:d9:ad:ef:83:f1:11: 16:95:41:30:1e:db:0a:a0:5e:57:4c:70:76:b4:66: a5:cd:77:81:ad:d3:f3:db:4d:28:2c:f0:36:33:a0: a9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A8:AA:95:F7:4C:02:B1:8B:EF:B7:ED:45:63:EE:44:D0:F6:A8:4C X509v3 Authority Key Identifier: keyid:27:94:55:63:95:B4:7B:F4:3E:0D:5D:55:6E:7E:25:5B:6C:8A:CC:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/f6iqlfdMArGL77ftRWPuRND2qEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.12.0/22 IPv6: 2a05:fe80::/29 Signature Algorithm: sha256WithRSAEncryption 25:73:c7:c8:42:59:0c:05:61:bc:71:e3:de:1b:ad:f9:cb:b5: 19:05:a2:7f:b2:47:e7:32:00:d6:e1:1e:3f:b4:03:ef:36:15: 75:be:41:7f:ec:10:a1:25:c0:be:15:21:6a:96:3f:96:36:6b: 55:e3:2b:43:d9:9b:30:da:34:9f:e4:06:af:85:eb:ee:ed:f8: b8:f4:38:63:89:a5:64:7b:73:42:ee:ab:11:04:68:20:9b:b2: 4b:2b:e9:fb:2c:b3:dc:84:d8:c1:08:7d:b9:65:65:9c:44:82: 6d:37:5a:29:8d:fd:65:3d:44:e4:97:c7:1c:ee:1d:0d:15:f0: c6:bf:4c:d1:f8:b1:71:d7:44:62:f5:d6:4b:d9:a0:9e:9b:c5: 64:bb:3c:b5:45:21:36:12:97:a3:fb:eb:41:60:1e:88:b0:8f: b8:42:68:fd:55:0f:b8:18:94:8d:9f:69:68:14:cc:22:da:13: ba:b1:c1:1b:8d:b8:bd:e8:1c:20:2a:04:08:b6:bd:3d:fa:29: b6:21:9c:ee:80:f5:31:4d:d2:0f:82:97:68:c8:6a:6e:6b:40: 7a:5d:39:69:ab:6e:e3:f3:3b:8c:07:23:70:44:09:6e:a8:39: de:8e:55:29:b1:b4:9a:77:7c:95:2f:b5:c8:6a:dc:d5:fa:4d: 7c:78:db:be -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9y1h2NFfSQEhbrgAhH1uKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OTQ1NTYzOTViNDdiZjQzZTBkNWQ1NTZlN2UyNTViNmM4 YWNjYzIwHhcNMjYwMTAyMDgyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmE4YWE5NWY3NGMwMmIxOGJlZmI3ZWQ0NTYzZWU0NGQwZjZhODRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2FxVwtam0wMUkfcXmpqOUW2zUlE fBJfSgdhGGz1wxcOGBPsYVBiKJOOCHUxX3emk4CUsT6lhetyob3gYl8moJ088/jQ jhoKNF+27qF5U1Y+jcgY91YTeXvlgVRL62fGa/8DX/F1+v51haoLMxQyRmlu7z/K uxXVMC0LCg+DY2wE5jVNB+AzcFo3fXHd8YUeUUsKY1L9TBWjsVWGK5f/5VGNTyUG /tx343eLUr6cRrvbF9yIfrdGoZPm0kDgP1U2xBTlSugLlz5VaGp/kSI2LyIZIBZD cuJjgXTZre+D8REWlUEwHtsKoF5XTHB2tGalzXeBrdPz200oLPA2M6Cp6wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFH+oqpX3TAKxi++37UVj7kTQ9qhMMB8GA1UdIwQY MBaAFCeUVWOVtHv0Pg1dVW5+JVtsiszCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjVSVlk1VzBlX1EtRFYxVmJuNGxXMnlLek1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9hNWI2ZjctZjU1MS00NDFiLWJiOGYt NzlkYTdhYWFhM2IyLzEvZjZpcWxmZE1BckdMNzdmdFJXUHVSTkQycUV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9hNWI2ZjctZjU1MS00NDFiLWJiOGYtNzlkYTdhYWFhM2Iy LzEvSjVSVlk1VzBlX1EtRFYxVmJuNGxXMnlLek1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYUMMA0E AgACMAcDBQMqBf6AMA0GCSqGSIb3DQEBCwUAA4IBAQAlc8fIQlkMBWG8cePeG635 y7UZBaJ/skfnMgDW4R4/tAPvNhV1vkF/7BChJcC+FSFqlj+WNmtV4ytD2Zsw2jSf 5Aavhevu7fi49DhjiaVke3NC7qsRBGggm7JLK+n7LLPchNjBCH25ZWWcRIJtN1op jf1lPUTkl8cc7h0NFfDGv0zR+LFx10Ri9dZL2aCem8Vkuzy1RSE2Epej++tBYB6I sI+4Qmj9VQ+4GJSNn2loFMwi2hO6scEbjbi96BwgKgQItr09+im2IZzugPUxTdIP gpdoyGpua0B6XTlpq27j8zuMByNwRAluqDnejlUpsbSad3yVL7XIatzV+k18eNu+ -----END CERTIFICATE-----Generated at Tue Jan 27 12:41:36 2026 by rpki-client