This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/FdbE8gLBJPaXpYaXJBSvvCFsnb4.roa File: FdbE8gLBJPaXpYaXJBSvvCFsnb4.roa (raw, json) Hash identifier: dTLvAdXPyt6Wu2rqAm637RJ0hAUBe/Pvjzn8bfwfdaw= Subject key identifier: 15:D6:C4:F2:02:C1:24:F6:97:A5:86:97:24:14:AF:BC:21:6C:9D:BE Certificate issuer: /CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157 Certificate serial: 019B7EA632610A930D29EF81B2245324EE05 Authority key identifier: 87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/FdbE8gLBJPaXpYaXJBSvvCFsnb4.roa Signing time: Fri 02 Jan 2026 12:19:39 +0000 ROA not before: Fri 02 Jan 2026 12:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8145 IP address blocks: 85.208.92.0/22 maxlen: 22 85.208.92.0/24 maxlen: 24 85.208.93.0/24 maxlen: 24 85.208.94.0/24 maxlen: 24 2a09:84c0::/30 maxlen: 30 2a09:84c0::/32 maxlen: 32 2a09:84c1::/32 maxlen: 32 2a09:84c2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:32:61:0a:93:0d:29:ef:81:b2:24:53:24:ee:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157 Validity Not Before: Jan 2 12:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15d6c4f202c124f697a586972414afbc216c9dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c1:10:87:14:d9:7e:80:58:43:a0:d2:3a:a9: 33:05:ce:9e:cd:7e:ce:67:ff:4f:40:9a:d5:36:47: cc:93:02:f8:6f:39:a5:52:a9:9c:6c:7d:dc:71:2a: ee:67:54:36:fc:29:e0:3b:34:49:6b:df:1f:5b:06: 9a:8b:1f:d0:eb:c2:c7:22:c5:35:11:2d:7e:46:ca: 38:ff:84:6a:dd:7d:40:1f:c3:e8:f5:c4:b2:72:75: 00:fd:5a:21:c6:16:99:f4:4c:6f:52:c6:78:da:33: 68:7e:cb:7f:29:8c:b3:0c:45:05:a3:9d:5f:26:62: e0:5a:6e:77:6e:d2:75:f7:c2:c6:ab:06:29:fd:80: de:8d:5e:34:d9:d1:41:93:f6:ef:3c:a5:3f:ad:b0: be:f8:17:8c:c4:75:d1:15:58:6f:0e:99:e0:75:40: d6:f5:68:f7:ac:5f:07:53:af:ef:68:b6:26:6a:89: fd:6b:d1:14:31:0a:cd:b2:a2:9e:7e:ae:75:8e:ad: cd:e9:3c:15:8a:75:6d:30:f1:87:1c:f9:09:0f:b2: 80:1b:89:a1:75:b1:2f:78:3e:a2:35:f0:95:15:26: 5e:61:cc:54:ce:bf:88:13:20:fb:2b:6e:e5:2d:0c: 30:bf:e6:60:6b:6b:81:54:a6:9f:47:b1:96:d1:1d: dc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D6:C4:F2:02:C1:24:F6:97:A5:86:97:24:14:AF:BC:21:6C:9D:BE X509v3 Authority Key Identifier: keyid:87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/FdbE8gLBJPaXpYaXJBSvvCFsnb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.208.92.0/22 IPv6: 2a09:84c0::/30 Signature Algorithm: sha256WithRSAEncryption 1c:81:de:7f:31:56:a8:7a:40:1c:d6:d8:17:38:02:d0:a0:92: b5:2a:d6:12:c2:b1:11:88:a3:a7:c9:6d:0c:91:5c:24:d7:18: 28:eb:e3:46:55:2c:08:2b:c7:ce:01:16:db:ee:77:68:3f:14: 22:0e:6b:24:b5:ed:8d:30:05:f4:68:86:18:5a:7f:68:dc:fb: 85:90:c7:d5:37:95:db:2d:31:e4:57:b7:d2:7a:60:92:e0:f5: 4e:b5:73:45:53:a8:08:71:3d:b8:7f:8d:dd:e7:2e:ef:c8:80: eb:af:49:31:1a:07:c3:c4:0d:b0:f2:82:4b:9c:10:be:09:a4: 0c:03:6c:2e:09:b5:8f:bd:5a:a6:86:cb:2f:81:5d:38:46:cc: 35:5a:d5:bb:a9:9a:bf:2d:4c:61:5d:31:7a:36:e3:d4:d4:dc: 20:b6:33:94:16:16:42:f2:ac:d4:76:68:fd:41:5b:c6:61:0d: 31:fa:93:17:c1:0c:1b:ff:b5:6b:44:f3:d7:e8:c0:a0:b8:1b: 10:c5:d4:a9:63:99:5f:dc:88:98:6e:42:c2:bb:14:ce:d6:c6: 0d:d3:e9:42:1a:0e:04:6d:ba:76:8d:ee:71:7c:55:b1:a3:d9: 2d:30:d4:40:29:5e:63:9b:7e:10:04:4b:1c:45:71:0d:49:8f: 97:ea:65:01 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pjJhCpMNKe+BsiRTJO4FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YjNjYjJkNmZiNjhlNmVkYjg0NDJmZWIwYWJmYzk1YWVi NWIxNTcwHhcNMjYwMTAyMTIxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWQ2YzRmMjAyYzEyNGY2OTdhNTg2OTcyNDE0YWZiYzIxNmM5ZGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8EQhxTZfoBYQ6DSOqkzBc6ezX7O Z/9PQJrVNkfMkwL4bzmlUqmcbH3ccSruZ1Q2/CngOzRJa98fWwaaix/Q68LHIsU1 ES1+Rso4/4Rq3X1AH8Po9cSycnUA/VohxhaZ9ExvUsZ42jNofst/KYyzDEUFo51f JmLgWm53btJ198LGqwYp/YDejV402dFBk/bvPKU/rbC++BeMxHXRFVhvDpngdUDW 9Wj3rF8HU6/vaLYmaon9a9EUMQrNsqKefq51jq3N6TwVinVtMPGHHPkJD7KAG4mh dbEveD6iNfCVFSZeYcxUzr+IEyD7K27lLQwwv+Zga2uBVKafR7GW0R3cpwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBXWxPICwST2l6WGlyQUr7whbJ2+MB8GA1UdIwQY MBaAFIezyy1vto5u24RC/rCr/JWutbFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDdQTExXLTJqbTdiaEVMLXNLdjhsYTYxc1ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy85OWQ5YTYtMTNiZS00MGFiLWJlNTMt YjQyYTRjM2U5MTZiLzEvRmRiRThnTEJKUGFYcFlhWEpCU3Z2Q0ZzbmI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy85OWQ5YTYtMTNiZS00MGFiLWJlNTMtYjQyYTRjM2U5MTZi LzEvaDdQTExXLTJqbTdiaEVMLXNLdjhsYTYxc1ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCVdBcMA0E AgACMAcDBQIqCYTAMA0GCSqGSIb3DQEBCwUAA4IBAQAcgd5/MVaoekAc1tgXOALQ oJK1KtYSwrERiKOnyW0MkVwk1xgo6+NGVSwIK8fOARbb7ndoPxQiDmskte2NMAX0 aIYYWn9o3PuFkMfVN5XbLTHkV7fSemCS4PVOtXNFU6gIcT24f43d5y7vyIDrr0kx GgfDxA2w8oJLnBC+CaQMA2wuCbWPvVqmhssvgV04Rsw1WtW7qZq/LUxhXTF6NuPU 1NwgtjOUFhZC8qzUdmj9QVvGYQ0x+pMXwQwb/7VrRPPX6MCguBsQxdSpY5lf3IiY bkLCuxTO1sYN0+lCGg4Ebbp2je5xfFWxo9ktMNRAKV5jm34QBEscRXENSY+X6mUB -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:29 2026 by rpki-client