This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/_pFw1M_LxWF-tK9gXqaVnNopZlc.roa File: _pFw1M_LxWF-tK9gXqaVnNopZlc.roa (raw, json) Hash identifier: ath0PSyjXUpmRHBuIYRm7IvaVnfoTyInZ3ULpEebhQ0= Subject key identifier: FE:91:70:D4:CF:CB:C5:61:7E:B4:AF:60:5E:A6:95:9C:DA:29:66:57 Certificate issuer: /CN=7117386973fbf88a867c82a8867b050fca60b011 Certificate serial: 019B77C71F54CE0752FD555B9BA04BC42198 Authority key identifier: 71:17:38:69:73:FB:F8:8A:86:7C:82:A8:86:7B:05:0F:CA:60:B0:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/_pFw1M_LxWF-tK9gXqaVnNopZlc.roa Signing time: Thu 01 Jan 2026 04:18:17 +0000 ROA not before: Thu 01 Jan 2026 04:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64478 IP address blocks: 185.162.244.0/24 maxlen: 24 185.162.245.0/24 maxlen: 24 185.162.246.0/24 maxlen: 24 185.162.247.0/24 maxlen: 24 2a0a:800::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:1f:54:ce:07:52:fd:55:5b:9b:a0:4b:c4:21:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7117386973fbf88a867c82a8867b050fca60b011 Validity Not Before: Jan 1 04:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe9170d4cfcbc5617eb4af605ea6959cda296657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:33:4d:a8:83:8d:cc:f3:af:ee:0e:6d:dc:01: 53:a3:2b:92:ac:60:ab:ff:b9:cf:a8:a9:f3:f1:5f: c3:12:a9:3f:31:db:ad:ff:f6:e1:f1:34:a9:df:01: 8c:00:e5:c7:b4:15:08:e0:2d:a8:21:eb:34:f5:53: d9:31:c2:8d:2c:dd:0e:ee:7f:08:03:78:ae:33:47: f5:25:d7:16:9a:9b:c7:0a:4f:f8:ec:dc:c6:9f:c5: ac:ab:dd:b7:83:6e:1e:1c:ef:fc:5d:28:0e:96:60: 35:23:3f:05:93:d7:fe:ce:5c:93:66:17:d2:32:f6: 8e:28:43:30:2c:a7:a7:fe:9e:9e:c5:24:e1:05:63: 81:2d:9e:53:f0:7c:d1:5d:09:0b:18:d8:a8:a9:a0: 74:e9:9f:96:53:6a:3f:25:a2:8b:49:d3:13:bb:be: b0:2b:5d:05:69:98:4a:76:3f:c4:a7:fc:67:4e:15: e1:1d:8f:2c:2e:91:3f:45:1e:c2:6e:45:de:7b:bb: 21:ec:3d:f9:fc:70:1f:ce:c9:00:78:21:3b:7c:65: 2c:27:d0:ba:c9:bf:99:f6:2a:c1:9f:25:93:a2:ac: a8:48:3e:f5:b1:48:1a:3d:77:71:9e:4e:7b:5f:7a: b3:ab:02:ae:24:20:7e:cf:42:b0:0e:62:31:71:f7: 16:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:91:70:D4:CF:CB:C5:61:7E:B4:AF:60:5E:A6:95:9C:DA:29:66:57 X509v3 Authority Key Identifier: keyid:71:17:38:69:73:FB:F8:8A:86:7C:82:A8:86:7B:05:0F:CA:60:B0:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/_pFw1M_LxWF-tK9gXqaVnNopZlc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.162.244.0/22 IPv6: 2a0a:800::/29 Signature Algorithm: sha256WithRSAEncryption 8a:68:c7:61:4b:44:e4:11:1c:f8:b6:3b:fa:79:0c:63:23:8c: 6e:5c:a2:e5:f8:8f:7c:58:18:d1:e4:db:f0:39:cb:bc:7d:a5: f9:e0:d1:b7:9a:12:e8:1a:f1:b1:56:da:6d:ec:0e:af:7e:cd: b7:2e:cf:43:af:e0:b5:93:21:01:04:b6:34:71:6b:de:30:04: bb:ea:e5:82:25:86:af:c4:70:b1:d1:ab:b2:16:1b:be:49:d2: c8:4f:42:be:a5:03:c7:08:b5:a7:e7:db:1d:ec:fc:bd:17:4e: 12:7d:1e:bb:66:e7:08:5d:20:4d:6f:78:3e:6f:46:42:88:7b: 9d:07:e2:82:c8:23:c2:3a:8a:f7:9d:2e:32:65:97:fa:7c:2b: 0a:fd:18:d6:49:33:cf:cd:f8:29:86:93:7d:ba:7a:e6:8e:b0: 23:58:9b:cc:63:2f:59:82:43:0a:79:b0:90:f2:5f:a8:53:4c: a1:30:59:22:07:5f:fc:88:f0:73:d4:4c:c2:75:b8:b5:2d:3a: f4:33:e5:c6:c9:4f:38:e8:59:20:d1:69:a0:49:e9:1b:de:58: 23:35:4b:6b:d1:86:6d:63:bd:75:1d:61:18:fd:ac:62:f4:d2: b3:2f:b5:85:e2:3e:d4:d3:5a:10:dd:61:9e:78:02:7f:fb:da: 46:b7:68:63 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xx9UzgdS/VVbm6BLxCGYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMTczODY5NzNmYmY4OGE4NjdjODJhODg2N2IwNTBmY2E2 MGIwMTEwHhcNMjYwMTAxMDQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTkxNzBkNGNmY2JjNTYxN2ViNGFmNjA1ZWE2OTU5Y2RhMjk2NjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jNNqIONzPOv7g5t3AFToyuSrGCr /7nPqKnz8V/DEqk/Mdut//bh8TSp3wGMAOXHtBUI4C2oIes09VPZMcKNLN0O7n8I A3iuM0f1JdcWmpvHCk/47NzGn8Wsq923g24eHO/8XSgOlmA1Iz8Fk9f+zlyTZhfS MvaOKEMwLKen/p6exSThBWOBLZ5T8HzRXQkLGNioqaB06Z+WU2o/JaKLSdMTu76w K10FaZhKdj/Ep/xnThXhHY8sLpE/RR7CbkXee7sh7D35/HAfzskAeCE7fGUsJ9C6 yb+Z9irBnyWToqyoSD71sUgaPXdxnk57X3qzqwKuJCB+z0KwDmIxcfcWMwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFP6RcNTPy8VhfrSvYF6mlZzaKWZXMB8GA1UdIwQY MBaAFHEXOGlz+/iKhnyCqIZ7BQ/KYLARMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1JjNGFYUDctSXFHZklLb2huc0ZEOHBnc0JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi83OTM4MDUtZTRlOS00MmUyLTgzODYt OWYzMDNlYTY3ZTY1LzEvX3BGdzFNX0x4V0YtdEs5Z1hxYVZuTm9wWmxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi83OTM4MDUtZTRlOS00MmUyLTgzODYtOWYzMDNlYTY3ZTY1 LzEvY1JjNGFYUDctSXFHZklLb2huc0ZEOHBnc0JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuaL0MA0E AgACMAcDBQMqCggAMA0GCSqGSIb3DQEBCwUAA4IBAQCKaMdhS0TkERz4tjv6eQxj I4xuXKLl+I98WBjR5NvwOcu8faX54NG3mhLoGvGxVtpt7A6vfs23Ls9Dr+C1kyEB BLY0cWveMAS76uWCJYavxHCx0auyFhu+SdLIT0K+pQPHCLWn59sd7Py9F04SfR67 ZucIXSBNb3g+b0ZCiHudB+KCyCPCOor3nS4yZZf6fCsK/RjWSTPPzfgphpN9unrm jrAjWJvMYy9ZgkMKebCQ8l+oU0yhMFkiB1/8iPBz1EzCdbi1LTr0M+XGyU846Fkg 0WmgSekb3lgjNUtr0YZtY711HWEY/axi9NKzL7WF4j7U01oQ3WGeeAJ/+9pGt2hj -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:19 2026 by rpki-client