This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/fczzCkb_2eHkiaUh2loE1L-X3Dc.roa File: fczzCkb_2eHkiaUh2loE1L-X3Dc.roa (raw, json) Hash identifier: yQHHlNkF+vXwUUV14v/AjylpWEMjSzOv1ynBII4ZKEk= Subject key identifier: 7D:CC:F3:0A:46:FF:D9:E1:E4:89:A5:21:DA:5A:04:D4:BF:97:DC:37 Certificate issuer: /CN=a42a9ef62b0c2bf1d3416539b2a04a26598c2c43 Certificate serial: 019B7B355BCA4702FADBB3302CE5218E9395 Authority key identifier: A4:2A:9E:F6:2B:0C:2B:F1:D3:41:65:39:B2:A0:4A:26:59:8C:2C:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/fczzCkb_2eHkiaUh2loE1L-X3Dc.roa Signing time: Thu 01 Jan 2026 20:17:33 +0000 ROA not before: Thu 01 Jan 2026 20:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43406 IP address blocks: 91.102.80.0/21 maxlen: 21 94.230.96.0/20 maxlen: 20 178.16.192.0/20 maxlen: 20 185.34.120.0/22 maxlen: 22 2a01:bc00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:5b:ca:47:02:fa:db:b3:30:2c:e5:21:8e:93:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a42a9ef62b0c2bf1d3416539b2a04a26598c2c43 Validity Not Before: Jan 1 20:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7dccf30a46ffd9e1e489a521da5a04d4bf97dc37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d9:81:61:e4:b3:1b:e6:65:a1:d0:01:19:f8: f3:28:11:cd:a3:ea:86:f2:e3:41:3f:d7:3c:02:65: 1f:71:37:ee:1e:ba:87:43:7d:8d:2e:61:e6:c5:91: c6:8d:ed:4d:ff:97:f1:58:45:ef:b4:3b:7b:c3:28: a8:79:05:0b:d6:53:3f:4a:91:e9:50:69:b7:94:ed: 20:8b:8e:2b:3d:99:48:13:bf:a3:c4:a4:2a:c3:b8: 37:4b:3a:5e:6c:fe:a7:bc:a2:42:52:13:a4:2e:b1: 5a:c6:86:64:00:af:9a:fe:ec:61:8c:e4:89:f7:31: 7b:3e:b4:39:0a:b2:47:aa:e5:8f:03:3e:fc:69:38: 52:de:40:44:75:05:6b:31:e1:8e:77:4e:3c:c6:27: 3f:77:61:00:99:d5:bd:3e:57:c8:1d:17:2e:b8:8f: 12:19:ba:af:e7:b6:dd:2f:33:a1:d7:83:9f:31:52: 37:a5:98:d6:6e:e9:5c:42:8e:ee:2d:36:2b:e0:ec: 7e:bb:ac:ca:5b:99:f7:00:0c:ae:60:90:36:70:bd: 4b:13:ee:31:05:20:6c:cd:d6:fe:cc:44:b3:e5:c0: d0:c8:f7:a2:3b:3f:70:4d:56:30:ef:16:36:94:c0: 58:b5:e7:1d:13:10:e5:2d:73:fc:a8:31:a1:b1:e7: 96:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:CC:F3:0A:46:FF:D9:E1:E4:89:A5:21:DA:5A:04:D4:BF:97:DC:37 X509v3 Authority Key Identifier: keyid:A4:2A:9E:F6:2B:0C:2B:F1:D3:41:65:39:B2:A0:4A:26:59:8C:2C:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/fczzCkb_2eHkiaUh2loE1L-X3Dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.102.80.0/21 94.230.96.0/20 178.16.192.0/20 185.34.120.0/22 IPv6: 2a01:bc00::/29 Signature Algorithm: sha256WithRSAEncryption 06:11:d4:e0:0a:84:50:c1:e0:65:3b:7b:fe:4e:50:6c:4a:8f: 9b:b6:9b:7e:11:ea:c5:3f:75:50:68:c3:b3:73:cc:79:e1:02: a2:cf:9f:83:dc:67:88:4c:0b:c0:a3:84:f1:53:d6:47:7f:03: e0:fb:5f:4d:f0:85:07:42:a4:8d:27:e9:51:5b:e2:ed:1f:f3: 8c:88:5e:82:a2:97:36:9c:0b:f7:2c:7b:45:e6:c4:2a:93:38: 31:16:33:37:0a:1d:60:b8:10:bf:44:ef:87:6a:8d:7d:76:44: 08:f5:b4:4c:03:18:8e:34:dc:89:d8:47:66:7b:a5:fb:ec:a1: d4:71:74:44:a6:b3:e3:66:ef:df:99:6e:27:7c:27:97:0f:b7: d4:3b:3c:b7:76:fc:59:a3:fd:d4:24:c0:13:e1:8c:17:05:0f: b0:71:74:d3:e6:0f:ee:7f:55:69:0f:d8:14:58:f9:82:cd:da: d9:89:87:f9:0d:76:a1:1a:b1:ad:b9:6a:8c:91:dc:08:f8:70: 9e:fe:15:34:65:1e:db:a1:af:a9:59:2c:44:b0:ed:b0:b9:8d: d0:a3:e2:2e:32:2d:4f:04:00:2b:39:16:95:2a:bd:7d:c1:60: 68:3a:37:f8:b1:96:e8:8b:c4:bc:e0:e6:69:50:ae:03:c3:48: 71:76:d5:aa -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt7NVvKRwL627MwLOUhjpOVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MmE5ZWY2MmIwYzJiZjFkMzQxNjUzOWIyYTA0YTI2NTk4 YzJjNDMwHhcNMjYwMTAxMjAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGNjZjMwYTQ2ZmZkOWUxZTQ4OWE1MjFkYTVhMDRkNGJmOTdkYzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NmBYeSzG+ZlodABGfjzKBHNo+qG 8uNBP9c8AmUfcTfuHrqHQ32NLmHmxZHGje1N/5fxWEXvtDt7wyioeQUL1lM/SpHp UGm3lO0gi44rPZlIE7+jxKQqw7g3SzpebP6nvKJCUhOkLrFaxoZkAK+a/uxhjOSJ 9zF7PrQ5CrJHquWPAz78aThS3kBEdQVrMeGOd048xic/d2EAmdW9PlfIHRcuuI8S Gbqv57bdLzOh14OfMVI3pZjWbulcQo7uLTYr4Ox+u6zKW5n3AAyuYJA2cL1LE+4x BSBszdb+zESz5cDQyPeiOz9wTVYw7xY2lMBYtecdExDlLXP8qDGhseeWZwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFH3M8wpG/9nh5ImlIdpaBNS/l9w3MB8GA1UdIwQY MBaAFKQqnvYrDCvx00FlObKgSiZZjCxDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcENxZTlpc01LX0hUUVdVNXNxQktKbG1NTEVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8yZDUyYWUtMzkyOC00NDllLTg2ZWIt NjZmMDUzZjZhNGY4LzEvZmN6ekNrYl8yZUhraWFVaDJsb0UxTC1YM0RjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8yZDUyYWUtMzkyOC00NDllLTg2ZWItNjZmMDUzZjZhNGY4 LzEvcENxZTlpc01LX0hUUVdVNXNxQktKbG1NTEVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDW2ZQAwQE XuZgAwQEshDAAwQCuSJ4MA0EAgACMAcDBQMqAbwAMA0GCSqGSIb3DQEBCwUAA4IB AQAGEdTgCoRQweBlO3v+TlBsSo+btpt+EerFP3VQaMOzc8x54QKiz5+D3GeITAvA o4TxU9ZHfwPg+19N8IUHQqSNJ+lRW+LtH/OMiF6Copc2nAv3LHtF5sQqkzgxFjM3 Ch1guBC/RO+Hao19dkQI9bRMAxiONNyJ2Edme6X77KHUcXREprPjZu/fmW4nfCeX D7fUOzy3dvxZo/3UJMAT4YwXBQ+wcXTT5g/uf1VpD9gUWPmCzdrZiYf5DXahGrGt uWqMkdwI+HCe/hU0ZR7boa+pWSxEsO2wuY3Qo+IuMi1PBAArORaVKr19wWBoOjf4 sZboi8S84OZpUK4Dw0hxdtWq -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:24 2026 by rpki-client