This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/aF7v3qADYWY84iDVnBXjUoNs2q0.roa File: aF7v3qADYWY84iDVnBXjUoNs2q0.roa (raw, json) Hash identifier: UTtxRNeTVJA3d2EKc255mid7X/sjTsVlyiz9BWCKyZM= Subject key identifier: 68:5E:EF:DE:A0:03:61:66:3C:E2:20:D5:9C:15:E3:52:83:6C:DA:AD Certificate issuer: /CN=17fff1e78c37499d72d108ba728ef029b7f0e7f3 Certificate serial: 019B76EABC8D5E23EB6A0276CB61F9E429CD Authority key identifier: 17:FF:F1:E7:8C:37:49:9D:72:D1:08:BA:72:8E:F0:29:B7:F0:E7:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/aF7v3qADYWY84iDVnBXjUoNs2q0.roa Signing time: Thu 01 Jan 2026 00:17:33 +0000 ROA not before: Thu 01 Jan 2026 00:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2589 IP address blocks: 85.119.96.0/21 maxlen: 24 178.251.168.0/21 maxlen: 24 185.21.20.0/22 maxlen: 24 2a00:ea40::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:bc:8d:5e:23:eb:6a:02:76:cb:61:f9:e4:29:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17fff1e78c37499d72d108ba728ef029b7f0e7f3 Validity Not Before: Jan 1 00:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=685eefdea00361663ce220d59c15e352836cdaad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5c:e2:cd:e0:c7:cc:56:1d:a9:76:2e:10:c9: ea:09:84:93:da:ee:3d:fc:48:3e:bd:ee:b7:d2:01: e1:ff:0f:39:81:b5:c9:0d:01:38:8e:ad:36:6b:98: 2e:f2:56:0a:a7:97:d2:82:7c:95:e4:f0:b8:ec:67: ac:a2:9b:1b:07:a7:20:25:f8:ee:9c:32:39:68:d0: a5:58:0a:3a:57:ed:4a:33:c7:01:bd:8f:7f:d7:31: b7:50:14:01:80:dc:3c:09:21:43:47:d5:7f:39:1e: cf:35:3e:d3:fa:e8:b6:7b:1c:88:67:88:65:77:40: 5f:67:1b:17:8f:62:2b:21:08:66:12:28:e7:88:64: 95:5c:7f:c1:ce:ef:71:61:28:90:79:96:c4:85:b7: bc:2a:ea:8c:23:3a:ec:da:e9:3b:3f:fa:b6:8b:e3: a3:3e:5a:40:ad:52:0f:3e:93:aa:6a:cc:4a:6b:a1: f9:83:51:63:9f:b9:fd:0d:60:6c:c8:46:0b:43:cc: 95:b6:c8:11:cf:1f:2d:f5:5b:aa:e4:5c:4a:18:45: 48:23:b1:f2:7e:15:1f:d2:bf:00:13:2c:b2:0c:9c: 0e:05:a1:3a:f0:27:26:3f:2d:0c:28:43:f3:06:33: c1:87:bd:25:84:8a:7e:ef:ab:ca:f9:e6:b0:1b:bd: 86:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5E:EF:DE:A0:03:61:66:3C:E2:20:D5:9C:15:E3:52:83:6C:DA:AD X509v3 Authority Key Identifier: keyid:17:FF:F1:E7:8C:37:49:9D:72:D1:08:BA:72:8E:F0:29:B7:F0:E7:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/aF7v3qADYWY84iDVnBXjUoNs2q0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.119.96.0/21 178.251.168.0/21 185.21.20.0/22 IPv6: 2a00:ea40::/32 Signature Algorithm: sha256WithRSAEncryption 8c:81:62:69:e4:8f:71:71:80:df:ef:f8:72:e1:0a:ff:07:9d: 93:19:6b:bd:ae:48:35:21:e6:41:99:a7:8d:93:ea:47:05:fc: 1b:7b:9a:6c:d7:fe:ed:29:16:66:ec:7b:c9:3e:34:20:2d:48: 4a:6d:ae:47:00:77:68:57:4b:49:fe:05:bb:7e:64:19:00:8c: 26:fa:a2:be:2b:8e:66:47:08:a5:39:3f:83:29:a6:5b:fe:40: 8b:77:2f:2c:b6:73:a7:c0:7e:04:55:d3:9c:20:7f:4e:55:27: bc:66:0c:9e:71:4f:33:c1:8a:c8:a1:6d:25:17:fc:0a:b4:9b: ea:7e:53:56:e8:f7:59:af:b1:36:1e:19:14:c5:91:95:41:12: d3:bf:c9:aa:af:df:2d:f4:3c:38:71:89:ec:fe:46:5c:b5:09: c2:b0:d0:74:9f:ed:f1:fb:73:04:7f:4e:8d:4f:ba:87:31:f4: a5:fd:ad:97:1c:ac:9e:e2:2b:c2:56:7c:ed:e9:58:d7:ae:39: 5c:e8:14:a1:fd:b7:a9:07:65:04:45:ee:e0:c6:28:e1:8c:cc: 6f:a5:32:15:4c:b0:86:a0:d2:64:e6:23:56:12:72:44:ae:72: d0:06:31:56:0b:82:ba:b2:8f:02:6b:5c:14:74:9f:ae:25:c4: ad:2a:2d:20 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt26ryNXiPragJ2y2H55CnNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZmZmMWU3OGMzNzQ5OWQ3MmQxMDhiYTcyOGVmMDI5Yjdm MGU3ZjMwHhcNMjYwMTAxMDAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODVlZWZkZWEwMDM2MTY2M2NlMjIwZDU5YzE1ZTM1MjgzNmNkYWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVzizeDHzFYdqXYuEMnqCYST2u49 /Eg+ve630gHh/w85gbXJDQE4jq02a5gu8lYKp5fSgnyV5PC47GesopsbB6cgJfju nDI5aNClWAo6V+1KM8cBvY9/1zG3UBQBgNw8CSFDR9V/OR7PNT7T+ui2exyIZ4hl d0BfZxsXj2IrIQhmEijniGSVXH/Bzu9xYSiQeZbEhbe8KuqMIzrs2uk7P/q2i+Oj PlpArVIPPpOqasxKa6H5g1Fjn7n9DWBsyEYLQ8yVtsgRzx8t9Vuq5FxKGEVII7Hy fhUf0r8AEyyyDJwOBaE68CcmPy0MKEPzBjPBh70lhIp+76vK+eawG72GWQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFGhe796gA2FmPOIg1ZwV41KDbNqtMB8GA1UdIwQY MBaAFBf/8eeMN0mdctEIunKO8Cm38OfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRl9feDU0dzNTWjF5MFFpNmNvN3dLYmZ3NV9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84MWYzYjYtNmQ0MC00OTAyLWJlZTEt M2YzOWQ3NjQyNGZiLzEvYUY3djNxQURZV1k4NGlEVm5CWGpVb05zMnEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi84MWYzYjYtNmQ0MC00OTAyLWJlZTEtM2YzOWQ3NjQyNGZi LzEvRl9feDU0dzNTWjF5MFFpNmNvN3dLYmZ3NV9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDVXdgAwQD svuoAwQCuRUUMA0EAgACMAcDBQAqAOpAMA0GCSqGSIb3DQEBCwUAA4IBAQCMgWJp 5I9xcYDf7/hy4Qr/B52TGWu9rkg1IeZBmaeNk+pHBfwbe5ps1/7tKRZm7HvJPjQg LUhKba5HAHdoV0tJ/gW7fmQZAIwm+qK+K45mRwilOT+DKaZb/kCLdy8stnOnwH4E VdOcIH9OVSe8ZgyecU8zwYrIoW0lF/wKtJvqflNW6PdZr7E2HhkUxZGVQRLTv8mq r98t9Dw4cYns/kZctQnCsNB0n+3x+3MEf06NT7qHMfSl/a2XHKye4ivCVnzt6VjX rjlc6BSh/bepB2UERe7gxijhjMxvpTIVTLCGoNJk5iNWEnJErnLQBjFWC4K6so8C a1wUdJ+uJcStKi0g -----END CERTIFICATE-----Generated at Tue Feb 10 08:38:20 2026 by rpki-client