This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/ffJru2iXovOn8xs2WVN9pOzMdK0.roa File: ffJru2iXovOn8xs2WVN9pOzMdK0.roa (raw, json) Hash identifier: B4JwF5Q6Be6Q1TqEFtIyQe6gOkWGIwkFzL5H0f2rYLE= Subject key identifier: 7D:F2:6B:BB:68:97:A2:F3:A7:F3:1B:36:59:53:7D:A4:EC:CC:74:AD Certificate issuer: /CN=753cff430f7f1751e697bb30f87fef397cc17fa6 Certificate serial: 019B791045D8E1C95F279914992502472E81 Authority key identifier: 75:3C:FF:43:0F:7F:17:51:E6:97:BB:30:F8:7F:EF:39:7C:C1:7F:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/ffJru2iXovOn8xs2WVN9pOzMdK0.roa Signing time: Thu 01 Jan 2026 10:17:48 +0000 ROA not before: Thu 01 Jan 2026 10:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8816 IP address blocks: 185.84.228.0/22 maxlen: 22 212.45.128.0/19 maxlen: 19 212.121.64.0/19 maxlen: 19 217.174.112.0/20 maxlen: 20 2a02:4d0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:45:d8:e1:c9:5f:27:99:14:99:25:02:47:2e:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=753cff430f7f1751e697bb30f87fef397cc17fa6 Validity Not Before: Jan 1 10:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7df26bbb6897a2f3a7f31b3659537da4eccc74ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:18:f1:96:cd:f0:f0:65:f7:7f:d2:7f:d3:ca: fe:db:ea:cb:63:57:3b:c9:49:e6:c8:cb:6c:13:aa: 85:34:ca:08:dc:2d:5c:fa:b4:a9:c8:46:d2:4e:30: 5c:71:df:40:4a:e6:5d:74:43:3e:df:3e:88:78:1b: b6:fe:71:07:32:70:8f:b0:a3:54:9b:cc:28:cb:c9: 93:7a:bb:00:4d:78:bc:8f:f3:5b:7b:86:4d:ca:ce: cc:26:db:f7:cb:25:41:19:ea:69:ea:2e:03:ae:0f: 71:64:cb:15:b7:d6:e5:ae:48:44:29:04:4d:10:4f: f0:8b:4c:cb:e7:36:4e:6f:05:3e:9a:47:76:a0:e8: 16:a8:a6:9d:7c:10:c5:38:d5:64:4a:5a:2e:82:c8: cd:59:c7:80:d8:42:d4:84:a1:4a:10:98:2e:9f:7b: 86:d1:af:34:b0:15:02:18:86:e9:e5:8f:0f:60:39: 94:44:db:e1:ee:c0:31:bc:c4:6a:9d:46:63:b6:6c: a6:7e:9a:27:78:25:bb:9a:dc:c7:51:32:bf:ed:2b: 17:a0:f2:7d:0f:20:41:af:9b:28:ef:18:47:90:5a: 5f:3b:f1:82:94:c8:74:4d:c5:c8:aa:c7:90:24:cf: 12:db:5f:8f:f6:11:fe:38:8e:9e:a5:5d:ba:c9:a7: 98:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F2:6B:BB:68:97:A2:F3:A7:F3:1B:36:59:53:7D:A4:EC:CC:74:AD X509v3 Authority Key Identifier: keyid:75:3C:FF:43:0F:7F:17:51:E6:97:BB:30:F8:7F:EF:39:7C:C1:7F:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/ffJru2iXovOn8xs2WVN9pOzMdK0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.84.228.0/22 212.45.128.0/19 212.121.64.0/19 217.174.112.0/20 IPv6: 2a02:4d0::/32 Signature Algorithm: sha256WithRSAEncryption 1c:46:c1:ed:f8:10:91:e5:c8:63:95:2b:d5:7a:36:28:07:e3: 34:7e:2a:4c:66:3e:d4:b8:52:be:73:4f:1b:a0:a5:10:45:eb: fc:94:af:b5:c3:5a:ae:78:8a:12:2b:95:7c:1a:c2:3f:c3:ab: 28:e3:95:30:06:ce:e4:f9:4f:cf:ce:21:31:8a:3b:f0:06:6e: 39:e7:3b:e5:df:14:c4:3b:fc:88:cf:7d:ca:9f:fb:f6:6b:71: d3:6e:c5:3d:d4:e6:15:4d:e2:d8:ca:a3:14:2f:b2:05:fd:d9: 86:a3:19:a3:af:a9:51:e2:b8:6f:92:f7:0d:6b:59:c3:07:8f: f3:8c:63:cd:6c:30:2f:62:44:f7:22:ab:1e:ba:82:84:19:20: 62:cf:84:07:ef:f4:ba:62:9b:4d:0f:42:83:e0:77:69:e0:38: 67:ae:53:df:3e:03:f2:1a:dd:7e:77:68:ba:55:75:8d:9c:b1: 80:2a:f0:65:8e:49:83:59:d6:ad:62:49:22:93:93:3a:8d:f4: a4:07:97:d2:52:60:f9:8c:a5:f8:77:b6:21:75:df:b6:03:9d: cb:f9:41:ec:e6:f1:c8:3c:5d:ba:b4:9b:b5:72:1d:ee:4d:de: b4:68:95:97:db:38:c6:bf:3c:16:6e:a8:0a:cc:d0:d6:a3:4a: 6c:ab:de:fd -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt5EEXY4clfJ5kUmSUCRy6BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1M2NmZjQzMGY3ZjE3NTFlNjk3YmIzMGY4N2ZlZjM5N2Nj MTdmYTYwHhcNMjYwMTAxMTAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGYyNmJiYjY4OTdhMmYzYTdmMzFiMzY1OTUzN2RhNGVjY2M3NGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBjxls3w8GX3f9J/08r+2+rLY1c7 yUnmyMtsE6qFNMoI3C1c+rSpyEbSTjBccd9ASuZddEM+3z6IeBu2/nEHMnCPsKNU m8woy8mTersATXi8j/Nbe4ZNys7MJtv3yyVBGepp6i4Drg9xZMsVt9blrkhEKQRN EE/wi0zL5zZObwU+mkd2oOgWqKadfBDFONVkSlougsjNWceA2ELUhKFKEJgun3uG 0a80sBUCGIbp5Y8PYDmURNvh7sAxvMRqnUZjtmymfponeCW7mtzHUTK/7SsXoPJ9 DyBBr5so7xhHkFpfO/GClMh0TcXIqseQJM8S21+P9hH+OI6epV26yaeYPQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFH3ya7tol6Lzp/MbNllTfaTszHStMB8GA1UdIwQY MBaAFHU8/0MPfxdR5pe7MPh/7zl8wX+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFR6X1F3OV9GMUhtbDdzdy1IX3ZPWHpCZjZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS82MDJiZmUtN2E0MC00ZjVhLTllYzkt MzdhNWQ5Y2E2NTU4LzEvZmZKcnUyaVhvdk9uOHhzMldWTjlwT3pNZEswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS82MDJiZmUtN2E0MC00ZjVhLTllYzktMzdhNWQ5Y2E2NTU4 LzEvZFR6X1F3OV9GMUhtbDdzdy1IX3ZPWHpCZjZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCuVTkAwQF 1C2AAwQF1HlAAwQE2a5wMA0EAgACMAcDBQAqAgTQMA0GCSqGSIb3DQEBCwUAA4IB AQAcRsHt+BCR5chjlSvVejYoB+M0fipMZj7UuFK+c08boKUQRev8lK+1w1queIoS K5V8GsI/w6so45UwBs7k+U/PziExijvwBm455zvl3xTEO/yIz33Kn/v2a3HTbsU9 1OYVTeLYyqMUL7IF/dmGoxmjr6lR4rhvkvcNa1nDB4/zjGPNbDAvYkT3IqseuoKE GSBiz4QH7/S6YptND0KD4Hdp4DhnrlPfPgPyGt1+d2i6VXWNnLGAKvBljkmDWdat Ykkik5M6jfSkB5fSUmD5jKX4d7Yhdd+2A53L+UHs5vHIPF26tJu1ch3uTd60aJWX 2zjGvzwWbqgKzNDWo0psq979 -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:17 2026 by rpki-client