This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/aZfqaIa_bktc0XTanoEHKkOjRso.roa File: aZfqaIa_bktc0XTanoEHKkOjRso.roa (raw, json) Hash identifier: mjs8YYHIWn4rHP7Qb2KDD/bwrim/6L1hngAF7LoemgM= Subject key identifier: 69:97:EA:68:86:BF:6E:4B:5C:D1:74:DA:9E:81:07:2A:43:A3:46:CA Certificate issuer: /CN=fcbe62378bb580af4ed70bfa35abc840945d7803 Certificate serial: 019B7C11C4239589858C34137CEF84FA74C5 Authority key identifier: FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/aZfqaIa_bktc0XTanoEHKkOjRso.roa Signing time: Fri 02 Jan 2026 00:18:17 +0000 ROA not before: Fri 02 Jan 2026 00:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42300 IP address blocks: 77.240.240.0/22 maxlen: 22 77.240.240.0/24 maxlen: 24 77.240.241.0/24 maxlen: 24 77.240.242.0/24 maxlen: 24 77.240.243.0/24 maxlen: 24 178.236.200.0/24 maxlen: 24 178.236.201.0/24 maxlen: 24 178.236.202.0/24 maxlen: 24 194.15.248.0/22 maxlen: 22 194.15.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:c4:23:95:89:85:8c:34:13:7c:ef:84:fa:74:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcbe62378bb580af4ed70bfa35abc840945d7803 Validity Not Before: Jan 2 00:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6997ea6886bf6e4b5cd174da9e81072a43a346ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:54:c6:06:8e:af:df:6d:d2:e9:be:76:c9:b9: 8d:04:53:9a:a1:4d:a9:13:ad:20:ba:6d:1d:40:2a: 16:32:cc:cc:15:1c:93:26:87:53:aa:8a:37:2f:96: 5d:86:18:dc:5e:c6:e9:6a:e9:8f:47:d1:7e:c8:2d: bf:67:2c:a1:ce:0f:74:39:4d:a4:d9:a8:3b:04:4a: 09:a8:e2:a4:1e:5d:ba:ef:4f:a9:de:c1:ca:ce:13: 0b:a0:11:35:ec:30:24:5f:c0:99:75:53:fd:a3:2c: 58:fa:56:52:8b:d5:d5:b9:e7:b9:3c:d5:cf:5c:ab: b4:9b:a6:27:e7:17:f9:19:ae:9d:46:c3:1a:e8:73: a8:1c:a8:60:cb:96:84:09:5f:8e:1a:fa:01:9b:68: c6:e0:36:57:ef:72:ec:11:3a:f9:a7:d8:74:bb:0b: 51:f8:94:5f:64:02:28:c3:b7:fb:1d:39:19:eb:77: ae:40:ff:79:c2:1d:b7:dd:45:c7:3b:e7:99:3f:d9: d6:ee:df:b0:50:41:f7:b7:5a:12:39:e8:76:02:45: f7:f9:30:e8:1e:4f:4f:4f:73:74:f0:83:4e:13:21: 6e:2b:10:d6:1a:a9:1c:2e:6b:d8:36:5d:b3:f6:95: 38:df:be:d7:d5:3f:a4:b5:39:86:31:1b:30:e1:5f: b8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:97:EA:68:86:BF:6E:4B:5C:D1:74:DA:9E:81:07:2A:43:A3:46:CA X509v3 Authority Key Identifier: keyid:FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/aZfqaIa_bktc0XTanoEHKkOjRso.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.240.240.0/22 178.236.200.0-178.236.202.255 194.15.248.0/22 Signature Algorithm: sha256WithRSAEncryption 50:73:df:a2:02:3c:d5:4b:56:a3:b7:90:ca:13:87:7a:51:6f: 89:0b:06:c0:bb:ca:b3:60:f2:49:56:75:ca:1a:8f:4a:9b:c4: fe:56:e9:ef:7e:cf:97:dc:35:76:bf:48:ef:52:f8:50:01:99: c1:e1:57:2b:db:1e:95:01:10:e4:4d:9e:75:5e:19:03:5d:a7: e3:1e:b1:68:5e:81:cb:26:1c:61:8f:cd:51:af:08:fc:12:b6: 64:60:4c:f0:8d:72:7a:d8:26:e4:48:89:40:f3:39:7f:9b:69: 75:2f:bd:c2:74:3a:64:00:13:80:ea:ec:d1:b6:45:70:f1:d0: f8:8e:0e:dd:0e:9b:c9:dd:c8:20:1e:2d:00:91:8c:60:27:49: e0:b3:67:5d:a6:2a:8a:a6:96:10:c2:1b:16:31:16:86:2c:e4: c6:63:4a:70:71:97:82:dc:12:c8:8e:e7:ce:76:51:27:9e:c7: fd:c9:49:72:6a:0e:28:ff:f6:e1:57:b5:c1:77:3f:bb:f8:e1: e3:4a:13:f4:b2:84:e2:fb:76:dc:5a:46:8c:ff:52:5d:2c:d6: fe:2d:34:73:02:21:21:72:d3:43:02:1a:d0:a1:a1:60:d8:87: c5:92:9a:f2:8e:ac:80:fb:71:d0:31:98:7c:da:28:be:2d:7f: f5:f6:31:00 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt8EcQjlYmFjDQTfO+E+nTFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYmU2MjM3OGJiNTgwYWY0ZWQ3MGJmYTM1YWJjODQwOTQ1 ZDc4MDMwHhcNMjYwMTAyMDAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTk3ZWE2ODg2YmY2ZTRiNWNkMTc0ZGE5ZTgxMDcyYTQzYTM0NmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFTGBo6v323S6b52ybmNBFOaoU2p E60gum0dQCoWMszMFRyTJodTqoo3L5ZdhhjcXsbpaumPR9F+yC2/Zyyhzg90OU2k 2ag7BEoJqOKkHl2670+p3sHKzhMLoBE17DAkX8CZdVP9oyxY+lZSi9XVuee5PNXP XKu0m6Yn5xf5Ga6dRsMa6HOoHKhgy5aECV+OGvoBm2jG4DZX73LsETr5p9h0uwtR +JRfZAIow7f7HTkZ63euQP95wh233UXHO+eZP9nW7t+wUEH3t1oSOeh2AkX3+TDo Hk9PT3N08INOEyFuKxDWGqkcLmvYNl2z9pU4377X1T+ktTmGMRsw4V+4nQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFGmX6miGv25LXNF02p6BBypDo0bKMB8GA1UdIwQY MBaAFPy+YjeLtYCvTtcL+jWryECUXXgDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0w1aU40dTFnSzlPMXd2Nk5hdklRSlJkZUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iOGQyOWMtMzMzMy00OTNjLTk3Mzkt ZGY1NmVjNjcwZGU3LzEvYVpmcWFJYV9ia3RjMFhUYW5vRUhLa09qUnNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9iOGQyOWMtMzMzMy00OTNjLTk3MzktZGY1NmVjNjcwZGU3 LzEvX0w1aU40dTFnSzlPMXd2Nk5hdklRSlJkZUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCTfDwMAwD BAOy7MgDBACy7MoDBALCD/gwDQYJKoZIhvcNAQELBQADggEBAFBz36ICPNVLVqO3 kMoTh3pRb4kLBsC7yrNg8klWdcoaj0qbxP5W6e9+z5fcNXa/SO9S+FABmcHhVyvb HpUBEORNnnVeGQNdp+MesWhegcsmHGGPzVGvCPwStmRgTPCNcnrYJuRIiUDzOX+b aXUvvcJ0OmQAE4Dq7NG2RXDx0PiODt0Om8ndyCAeLQCRjGAnSeCzZ12mKoqmlhDC GxYxFoYs5MZjSnBxl4LcEsiO5852USeex/3JSXJqDij/9uFXtcF3P7v44eNKE/Sy hOL7dtxaRoz/Ul0s1v4tNHMCISFy00MCGtChoWDYh8WSmvKOrID7cdAxmHzaKL4t f/X2MQA= -----END CERTIFICATE-----Generated at Mon Feb 9 23:44:48 2026 by rpki-client