This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/fTxk1v0fF8AuZDNoAxUqc_RyNH4.roa File: fTxk1v0fF8AuZDNoAxUqc_RyNH4.roa (raw, json) Hash identifier: Lw+QNTmoYW+7xrFoYnex4ne1svS2EO7auyLRmtTAxxI= Subject key identifier: 7D:3C:64:D6:FD:1F:17:C0:2E:64:33:68:03:15:2A:73:F4:72:34:7E Certificate issuer: /CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f Certificate serial: 019B7C112C78A4E3CFD8236EB7CB0C6FC55B Authority key identifier: 32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/fTxk1v0fF8AuZDNoAxUqc_RyNH4.roa Signing time: Fri 02 Jan 2026 00:17:38 +0000 ROA not before: Fri 02 Jan 2026 00:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 87.251.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:2c:78:a4:e3:cf:d8:23:6e:b7:cb:0c:6f:c5:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f Validity Not Before: Jan 2 00:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d3c64d6fd1f17c02e64336803152a73f472347e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d1:a9:24:5d:61:1e:2f:a7:a0:ad:7d:6d:18: 01:67:68:6d:e7:96:37:5b:b6:24:c6:7d:ab:02:f2: 30:72:a9:09:3e:49:6c:f3:47:9d:5c:2b:7c:c7:2f: 0f:bb:f4:bb:99:fc:83:4e:fc:55:a2:fa:44:ea:cc: 0b:9b:91:ee:3e:8e:86:40:10:c4:60:e0:59:fc:af: f8:9a:ca:cd:51:6f:e5:67:0e:0a:29:e8:f9:c3:53: b0:2a:6d:9e:be:90:02:84:81:3a:76:68:e5:4b:59: e6:03:31:ee:fb:a5:59:35:27:14:79:75:32:01:82: 00:75:1d:99:58:6e:7e:2b:1b:1f:f5:b8:cc:2b:09: 49:d3:6f:4c:ba:17:2c:0a:b2:1f:11:de:0a:a5:3f: 28:cc:80:c3:06:00:bf:c4:1f:20:00:c8:ac:a2:31: e3:12:d1:29:f5:5e:54:81:c5:a6:de:85:dc:ac:86: c0:de:c4:70:db:63:46:74:44:83:62:9a:e5:13:0d: 39:2b:39:49:83:71:33:48:ed:b9:86:12:5b:91:e4: fb:1f:ab:25:ec:74:ec:77:a8:01:72:ac:09:ff:48: 3e:de:28:e0:32:db:58:8b:08:33:e4:0e:c2:4e:59: d5:20:48:42:c3:c9:a2:0a:55:8c:bd:17:37:83:bd: 2c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:3C:64:D6:FD:1F:17:C0:2E:64:33:68:03:15:2A:73:F4:72:34:7E X509v3 Authority Key Identifier: keyid:32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/fTxk1v0fF8AuZDNoAxUqc_RyNH4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.251.20.0/23 Signature Algorithm: sha256WithRSAEncryption b9:3d:78:92:09:40:b5:6d:38:1d:f5:dd:c6:85:5f:a9:e1:83: d5:25:b4:a9:39:0e:f2:55:d9:96:74:5e:78:b0:5f:a7:48:1b: b3:a4:12:0a:1f:86:0b:9b:e7:34:62:ef:c5:5f:94:be:6e:54: 9c:c9:b3:0f:3a:ee:98:3c:e0:f2:77:b5:06:f9:6d:ce:8a:2d: d9:76:a5:ae:3d:40:db:ad:28:c3:ea:bb:c4:f6:36:05:16:82: c0:81:15:8b:68:c2:8d:08:37:2c:84:60:f9:92:c8:f6:a9:fd: de:de:b9:e1:b0:16:c9:43:7f:67:33:5a:f2:25:c4:c5:6b:f6: 6b:1f:db:64:27:7c:78:38:23:26:ae:1a:e3:3d:a0:d4:30:bf: cf:29:98:7a:9e:e4:42:c3:f1:3c:c6:8f:80:8f:e1:6e:6e:2f: a4:ff:30:33:6f:4d:e4:05:39:65:ae:0c:33:c0:2b:fc:e3:cd: 0e:1a:6a:87:ab:18:38:2a:b3:3e:f3:67:fb:67:88:35:a3:00: 60:3e:eb:d5:db:d0:5a:49:ba:f8:ee:64:b7:c7:43:35:91:c6: df:3c:5f:a6:42:cd:ec:8e:14:43:ac:25:28:53:e1:4d:82:19: eb:e1:4f:9b:f0:4f:72:07:c4:fb:ca:c9:d7:db:b5:58:c9:9d: d8:c2:f0:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ESx4pOPP2CNut8sMb8VbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZjZkZTMwYTliOGY3NjQ4NDM0NGQwY2QzYjZjMDI3M2Vh ZGQzNmYwHhcNMjYwMTAyMDAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDNjNjRkNmZkMWYxN2MwMmU2NDMzNjgwMzE1MmE3M2Y0NzIzNDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtGpJF1hHi+noK19bRgBZ2ht55Y3 W7Ykxn2rAvIwcqkJPkls80edXCt8xy8Pu/S7mfyDTvxVovpE6swLm5HuPo6GQBDE YOBZ/K/4msrNUW/lZw4KKej5w1OwKm2evpAChIE6dmjlS1nmAzHu+6VZNScUeXUy AYIAdR2ZWG5+Kxsf9bjMKwlJ029MuhcsCrIfEd4KpT8ozIDDBgC/xB8gAMisojHj EtEp9V5UgcWm3oXcrIbA3sRw22NGdESDYprlEw05KzlJg3EzSO25hhJbkeT7H6sl 7HTsd6gBcqwJ/0g+3ijgMttYiwgz5A7CTlnVIEhCw8miClWMvRc3g70srwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH08ZNb9HxfALmQzaAMVKnP0cjR+MB8GA1UdIwQY MBaAFDL23jCpuPdkhDRNDNO2wCc+rdNvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXZiZU1LbTQ5MlNFTkUwTTA3YkFKejZ0MDI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jYmQwNjAtYWQ2OC00ZjVmLWFkNWUt YzA0MDQ0MzdlODViLzEvZlR4azF2MGZGOEF1WkROb0F4VXFjX1J5Tkg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9jYmQwNjAtYWQ2OC00ZjVmLWFkNWUtYzA0MDQ0MzdlODVi LzEvTXZiZU1LbTQ5MlNFTkUwTTA3YkFKejZ0MDI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBV/sUMA0G CSqGSIb3DQEBCwUAA4IBAQC5PXiSCUC1bTgd9d3GhV+p4YPVJbSpOQ7yVdmWdF54 sF+nSBuzpBIKH4YLm+c0Yu/FX5S+blScybMPOu6YPODyd7UG+W3Oii3ZdqWuPUDb rSjD6rvE9jYFFoLAgRWLaMKNCDcshGD5ksj2qf3e3rnhsBbJQ39nM1ryJcTFa/Zr H9tkJ3x4OCMmrhrjPaDUML/PKZh6nuRCw/E8xo+Aj+Fubi+k/zAzb03kBTllrgwz wCv8480OGmqHqxg4KrM+82f7Z4g1owBgPuvV29BaSbr47mS3x0M1kcbfPF+mQs3s jhRDrCUoU+FNghnr4U+b8E9yB8T7ysnX27VYyZ3YwvBC -----END CERTIFICATE-----Generated at Fri Jan 9 06:25:48 2026 by rpki-client