This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/fd8Ev0hcgslfyVKkXYe9Nwx0kyc.roa File: fd8Ev0hcgslfyVKkXYe9Nwx0kyc.roa (raw, json) Hash identifier: ZQjqK7exhVB66BBUdBf2gOZ8d37Zs6sdCNMpDp0YRYQ= Subject key identifier: 7D:DF:04:BF:48:5C:82:C9:5F:C9:52:A4:5D:87:BD:37:0C:74:93:27 Certificate issuer: /CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab Certificate serial: 019B7C135443808733B6F829492E0045D9A5 Authority key identifier: 2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/fd8Ev0hcgslfyVKkXYe9Nwx0kyc.roa Signing time: Fri 02 Jan 2026 00:20:00 +0000 ROA not before: Fri 02 Jan 2026 00:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56532 IP address blocks: 91.224.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:54:43:80:87:33:b6:f8:29:49:2e:00:45:d9:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab Validity Not Before: Jan 2 00:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ddf04bf485c82c95fc952a45d87bd370c749327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b2:65:fc:10:77:ea:3d:58:18:a8:ed:34:71: 3d:9a:e1:bf:43:1e:c0:9c:93:a7:1b:30:47:55:2e: b9:90:e8:36:ad:b0:4f:9a:b2:d0:08:d9:65:74:f4: d9:3d:a1:b7:75:be:6a:6b:bb:af:e5:1a:9c:db:0e: 76:0d:d0:70:a1:f2:86:71:a2:8e:da:ef:06:85:41: 65:46:54:c2:30:48:b7:16:65:16:a4:63:3b:3f:9a: dd:cc:71:12:70:75:b4:dc:35:2f:53:2a:1d:6c:9a: 5a:f8:5b:a1:c5:0f:d2:56:6f:ae:bc:a1:96:38:1a: a3:79:5e:32:6d:68:71:15:2a:20:ff:f8:63:1d:34: 6d:35:56:3b:db:b3:a0:e2:1c:d2:2e:30:7e:67:62: f4:15:dc:6c:76:5a:ca:40:a0:cd:44:70:c9:bb:5d: 97:6b:52:25:65:6e:91:db:eb:92:ff:9b:02:5e:1e: 0d:e9:a2:75:5f:0b:e2:ae:bc:a6:35:7f:14:6c:51: 67:06:9b:32:65:c4:8a:f9:ab:64:ff:50:13:bb:10: b4:d2:2b:a8:eb:2b:83:33:33:b1:d1:cd:07:73:be: d5:c5:20:cf:df:45:ef:66:ba:51:2b:d5:7b:f7:a1: e6:91:5a:9d:4d:b9:29:60:0a:65:9a:bd:08:ac:cb: 55:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:DF:04:BF:48:5C:82:C9:5F:C9:52:A4:5D:87:BD:37:0C:74:93:27 X509v3 Authority Key Identifier: keyid:2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/fd8Ev0hcgslfyVKkXYe9Nwx0kyc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.226.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:7e:c8:71:61:b6:0e:1e:52:b7:61:e7:f5:2f:ae:7c:05:26: de:60:00:15:19:ae:3b:9f:6a:d2:3c:3b:9e:05:54:72:7a:6c: 69:ec:63:f0:01:50:bb:21:f3:28:62:d9:95:26:d4:6f:74:87: 18:de:28:61:02:f7:48:6d:23:23:18:04:ea:91:0d:2b:8c:1c: 83:9e:59:69:83:65:4e:d2:08:74:3c:d3:2e:ce:a8:42:b5:50: 34:48:52:a3:64:a1:2b:81:fe:dd:fd:39:a3:6c:83:66:bb:29: 79:69:3b:d0:f1:04:7e:ca:4e:48:88:f9:c9:b1:b3:f0:7d:a1: 88:df:36:68:95:45:af:7b:8f:2f:06:a7:45:e4:e5:80:fe:94: 44:8d:ac:63:8f:28:f4:23:86:4a:b9:05:24:cd:9b:f0:ef:58: c2:e7:f8:6e:01:4b:2a:50:32:64:25:44:6f:09:79:db:4d:13: 82:b7:d2:14:ca:47:46:f5:24:38:29:67:34:78:2b:20:74:2a: 01:cb:83:75:0e:4e:20:b8:c2:c3:b6:57:23:9a:af:ea:d7:a0: 0a:60:4f:2d:18:21:46:1d:20:69:30:01:c2:82:30:3c:b9:62: e6:77:9a:1d:e2:37:3d:0c:64:32:ed:4a:12:f9:f8:1c:fd:59: 7a:80:58:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E1RDgIcztvgpSS4ARdmlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZGE1ZjAzZWFmNTEzYTc3ZjJlYzIwZGU1YmIxNjcyYzVk Mjc5YWIwHhcNMjYwMTAyMDAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGRmMDRiZjQ4NWM4MmM5NWZjOTUyYTQ1ZDg3YmQzNzBjNzQ5MzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLJl/BB36j1YGKjtNHE9muG/Qx7A nJOnGzBHVS65kOg2rbBPmrLQCNlldPTZPaG3db5qa7uv5Rqc2w52DdBwofKGcaKO 2u8GhUFlRlTCMEi3FmUWpGM7P5rdzHEScHW03DUvUyodbJpa+FuhxQ/SVm+uvKGW OBqjeV4ybWhxFSog//hjHTRtNVY727Og4hzSLjB+Z2L0FdxsdlrKQKDNRHDJu12X a1IlZW6R2+uS/5sCXh4N6aJ1XwvirrymNX8UbFFnBpsyZcSK+atk/1ATuxC00iuo 6yuDMzOx0c0Hc77VxSDP30XvZrpRK9V796HmkVqdTbkpYAplmr0IrMtVvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH3fBL9IXILJX8lSpF2HvTcMdJMnMB8GA1UdIwQY MBaAFCzaXwPq9ROnfy7CDeW7FnLF0nmrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE5wZkEtcjFFNmRfTHNJTjVic1djc1hTZWFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8zODM4YzQtNmU0Ni00OWE4LThjMTQt YWU4YjhkNzg4NzAwLzEvZmQ4RXYwaGNnc2xmeVZLa1hZZTlOd3gwa3ljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS8zODM4YzQtNmU0Ni00OWE4LThjMTQtYWU4YjhkNzg4NzAw LzEvTE5wZkEtcjFFNmRfTHNJTjVic1djc1hTZWFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+DiMA0G CSqGSIb3DQEBCwUAA4IBAQA/fshxYbYOHlK3Yef1L658BSbeYAAVGa47n2rSPDue BVRyemxp7GPwAVC7IfMoYtmVJtRvdIcY3ihhAvdIbSMjGATqkQ0rjByDnllpg2VO 0gh0PNMuzqhCtVA0SFKjZKErgf7d/TmjbINmuyl5aTvQ8QR+yk5IiPnJsbPwfaGI 3zZolUWve48vBqdF5OWA/pREjaxjjyj0I4ZKuQUkzZvw71jC5/huAUsqUDJkJURv CXnbTROCt9IUykdG9SQ4KWc0eCsgdCoBy4N1Dk4guMLDtlcjmq/q16AKYE8tGCFG HSBpMAHCgjA8uWLmd5od4jc9DGQy7UoS+fgc/Vl6gFhi -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:19 2026 by rpki-client