This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/FCrI_OtnxQ-1-z-8biyHW_0Jr3k.roa File: FCrI_OtnxQ-1-z-8biyHW_0Jr3k.roa (raw, json) Hash identifier: UDISGnchaBY9CTjsTbG4ZtPwcxVzVNzDL/kKcPoMHj8= Subject key identifier: 14:2A:C8:FC:EB:67:C5:0F:B5:FB:3F:BC:6E:2C:87:5B:FD:09:AF:79 Certificate issuer: /CN=668d7f75ef42f0bd71aa9c66668e0a33dbe1634f Certificate serial: 019B7C13214413DDBE488FBA26D1C35FAFD3 Authority key identifier: 66:8D:7F:75:EF:42:F0:BD:71:AA:9C:66:66:8E:0A:33:DB:E1:63:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/FCrI_OtnxQ-1-z-8biyHW_0Jr3k.roa Signing time: Fri 02 Jan 2026 00:19:47 +0000 ROA not before: Fri 02 Jan 2026 00:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198089 IP address blocks: 85.222.240.0/20 maxlen: 24 141.136.120.0/21 maxlen: 24 157.97.192.0/18 maxlen: 24 185.46.28.0/22 maxlen: 24 2a01:8580::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:21:44:13:dd:be:48:8f:ba:26:d1:c3:5f:af:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=668d7f75ef42f0bd71aa9c66668e0a33dbe1634f Validity Not Before: Jan 2 00:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=142ac8fceb67c50fb5fb3fbc6e2c875bfd09af79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:52:22:28:d7:bd:fb:b6:cd:d1:e3:d9:6d:6a: 3c:de:9f:0f:2c:61:c3:a9:7f:e4:ad:05:e3:7a:26: 11:76:9c:27:3b:f4:c4:f7:69:d9:70:04:78:2b:c8: 67:0e:03:16:45:2c:c7:b2:a3:2a:d8:89:76:47:92: 60:66:9a:b8:35:3f:6f:03:2d:89:bb:bc:7f:9b:a3: 70:0e:3d:3a:c0:2a:d6:5d:1a:52:92:2c:09:f3:bd: 95:2b:09:5f:07:a8:e1:fd:b3:85:2b:33:5b:a5:4d: 99:98:82:58:4a:9d:8d:f2:f1:2e:13:1b:d6:c9:8f: 1b:d5:9b:5c:6c:29:b0:2b:ab:30:97:e5:7d:2a:cf: 79:34:b9:89:65:2b:d7:7e:9d:06:f2:19:90:d3:7e: 34:9a:08:89:c3:58:c2:7b:c9:2c:f8:7f:03:24:f1: 51:a3:1d:b1:d9:3f:b8:46:79:79:cd:ac:13:83:ee: 7a:4a:23:1d:c7:29:0c:c9:0b:0e:8c:41:2b:19:ea: 6b:89:bf:bf:70:1a:71:75:35:4f:01:a9:15:c1:64: 9b:dd:ff:d9:fc:c8:93:b9:16:f1:3b:2b:a8:31:06: 53:45:7b:f6:3d:13:2f:af:8c:23:b8:44:e5:b1:d6: d3:7d:49:61:80:a6:9c:eb:1e:74:22:66:44:42:97: 3e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2A:C8:FC:EB:67:C5:0F:B5:FB:3F:BC:6E:2C:87:5B:FD:09:AF:79 X509v3 Authority Key Identifier: keyid:66:8D:7F:75:EF:42:F0:BD:71:AA:9C:66:66:8E:0A:33:DB:E1:63:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/FCrI_OtnxQ-1-z-8biyHW_0Jr3k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.222.240.0/20 141.136.120.0/21 157.97.192.0/18 185.46.28.0/22 IPv6: 2a01:8580::/32 Signature Algorithm: sha256WithRSAEncryption 03:fb:c3:83:ca:14:f4:ff:29:d4:6d:db:8f:ea:4d:7b:4d:6e: 41:a6:cf:93:13:09:4e:c4:ee:f2:65:6f:72:af:48:2a:4d:80: a1:1d:86:bf:13:0a:60:d9:e7:f3:58:4f:99:68:b5:54:83:96: e7:95:c9:80:2f:ab:a7:5b:4b:52:ac:c4:d2:82:b4:47:30:67: e3:9f:34:74:92:c9:13:c0:fb:d9:61:36:b9:8d:5d:79:ce:ec: 1c:cf:de:74:93:c8:46:1f:74:f9:27:d2:84:d0:0c:8d:81:7e: 56:d8:2a:76:63:7c:4d:fd:bd:e6:d4:19:1d:26:58:80:d3:84: 11:de:fe:d2:23:f0:f5:f9:54:cd:4a:96:f7:ca:31:91:6d:7d: 70:4e:0a:ff:98:fe:44:63:e8:2a:f2:5e:22:f9:b3:05:ca:48: 80:16:86:d3:89:30:76:85:a4:ad:aa:98:14:d3:a5:f6:85:6f: 31:7b:d9:53:59:58:bb:a9:46:08:91:3f:68:94:03:9a:f1:cd: 47:56:51:be:13:e9:0f:c3:c1:ff:0a:f8:8d:7e:e8:24:b1:2d: cd:ff:6f:12:bd:0f:2d:00:a6:23:85:1d:44:81:3b:45:fc:4b: ca:3a:82:9c:03:3a:e8:d1:b4:68:04:8b:6a:55:3e:ab:4f:83: 85:8b:38:05 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt8EyFEE92+SI+6JtHDX6/TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OGQ3Zjc1ZWY0MmYwYmQ3MWFhOWM2NjY2OGUwYTMzZGJl MTYzNGYwHhcNMjYwMTAyMDAxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDJhYzhmY2ViNjdjNTBmYjVmYjNmYmM2ZTJjODc1YmZkMDlhZjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VIiKNe9+7bN0ePZbWo83p8PLGHD qX/krQXjeiYRdpwnO/TE92nZcAR4K8hnDgMWRSzHsqMq2Il2R5JgZpq4NT9vAy2J u7x/m6NwDj06wCrWXRpSkiwJ872VKwlfB6jh/bOFKzNbpU2ZmIJYSp2N8vEuExvW yY8b1ZtcbCmwK6swl+V9Ks95NLmJZSvXfp0G8hmQ0340mgiJw1jCe8ks+H8DJPFR ox2x2T+4Rnl5zawTg+56SiMdxykMyQsOjEErGeprib+/cBpxdTVPAakVwWSb3f/Z /MiTuRbxOyuoMQZTRXv2PRMvr4wjuETlsdbTfUlhgKac6x50ImZEQpc++QIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFBQqyPzrZ8UPtfs/vG4sh1v9Ca95MB8GA1UdIwQY MBaAFGaNf3XvQvC9caqcZmaOCjPb4WNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm8xX2RlOUM4TDF4cXB4bVpvNEtNOXZoWTA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi81M2Y3NWUtNDJiOS00ZmFlLWIxYmUt MjZlN2YzZjJiMTFlLzEvRkNySV9PdG54US0xLXotOGJpeUhXXzBKcjNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi81M2Y3NWUtNDJiOS00ZmFlLWIxYmUtMjZlN2YzZjJiMTFl LzEvWm8xX2RlOUM4TDF4cXB4bVpvNEtNOXZoWTA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEVd7wAwQD jYh4AwQGnWHAAwQCuS4cMA0EAgACMAcDBQAqAYWAMA0GCSqGSIb3DQEBCwUAA4IB AQAD+8ODyhT0/ynUbduP6k17TW5Bps+TEwlOxO7yZW9yr0gqTYChHYa/Ewpg2efz WE+ZaLVUg5bnlcmAL6unW0tSrMTSgrRHMGfjnzR0kskTwPvZYTa5jV15zuwcz950 k8hGH3T5J9KE0AyNgX5W2Cp2Y3xN/b3m1BkdJliA04QR3v7SI/D1+VTNSpb3yjGR bX1wTgr/mP5EY+gq8l4i+bMFykiAFobTiTB2haStqpgU06X2hW8xe9lTWVi7qUYI kT9olAOa8c1HVlG+E+kPw8H/CviNfugksS3N/28SvQ8tAKYjhR1EgTtF/EvKOoKc Azro0bRoBItqVT6rT4OFizgF -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:54 2026 by rpki-client