This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/_FcCRW97Oyy-701A8ky-qnc9PuQ.roa File: _FcCRW97Oyy-701A8ky-qnc9PuQ.roa (raw, json) Hash identifier: TPZyrFAeXnN7pauwjeZRrcEQ8uCeSHffzbaYPf3BfAQ= Subject key identifier: FC:57:02:45:6F:7B:3B:2C:BE:EF:4D:40:F2:4C:BE:AA:77:3D:3E:E4 Certificate issuer: /CN=0f65bd21c683207da0c39fb3798535af49e0bff5 Certificate serial: 019B79110518BF006445446D437579BB10AE Authority key identifier: 0F:65:BD:21:C6:83:20:7D:A0:C3:9F:B3:79:85:35:AF:49:E0:BF:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/_FcCRW97Oyy-701A8ky-qnc9PuQ.roa Signing time: Thu 01 Jan 2026 10:18:37 +0000 ROA not before: Thu 01 Jan 2026 10:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61144 IP address blocks: 91.208.227.0/24 maxlen: 24 185.172.196.0/24 maxlen: 24 185.172.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Feb 2026 01:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:05:18:bf:00:64:45:44:6d:43:75:79:bb:10:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f65bd21c683207da0c39fb3798535af49e0bff5 Validity Not Before: Jan 1 10:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc5702456f7b3b2cbeef4d40f24cbeaa773d3ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:11:e7:0d:a5:bf:ff:9b:34:94:74:7f:f2:cb: 82:58:a6:6d:71:cd:36:98:d2:26:07:27:58:ba:8f: 99:b9:5d:99:1b:9f:d6:35:ac:d8:15:f0:73:ef:cb: 5d:6d:56:c4:ba:b3:56:25:eb:3e:eb:b5:f8:c9:71: 12:f8:23:61:4f:45:df:20:45:90:96:cf:be:82:5a: 0a:69:b6:a2:d4:ac:59:66:12:c7:52:80:71:fc:ea: 97:d6:4f:bc:3c:f8:99:58:b7:3c:2e:02:73:a6:e0: 16:42:6b:9d:c8:0d:b2:d6:a7:fe:04:8b:35:a6:73: cc:33:fc:9b:59:f5:bb:b1:e2:f1:2e:27:30:a1:af: d2:a8:41:80:d8:ba:cd:bd:b9:5c:bd:1b:72:80:f1: ad:f5:0a:fc:50:d9:74:36:57:47:76:3e:1d:e8:46: 59:de:d5:8d:5c:65:4e:39:be:6e:fa:c0:cf:0e:aa: 75:27:b3:a8:1a:9e:8d:26:a4:dc:1d:5e:2c:de:ce: dd:79:03:69:ac:95:71:99:04:73:2d:77:10:6b:0b: d0:fe:4b:05:a7:84:68:32:84:44:c2:cf:e5:5b:e0: 8c:15:25:c3:f7:5f:40:f6:ca:bf:73:0d:92:c5:fd: f5:d3:2d:63:3e:bb:5d:cd:8b:24:a6:53:a6:c4:20: ae:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:57:02:45:6F:7B:3B:2C:BE:EF:4D:40:F2:4C:BE:AA:77:3D:3E:E4 X509v3 Authority Key Identifier: keyid:0F:65:BD:21:C6:83:20:7D:A0:C3:9F:B3:79:85:35:AF:49:E0:BF:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/_FcCRW97Oyy-701A8ky-qnc9PuQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.227.0/24 185.172.196.0/23 Signature Algorithm: sha256WithRSAEncryption 66:39:48:f0:89:69:19:7e:b3:64:11:6f:57:cf:9d:e3:df:58: a1:f8:68:f2:c6:01:26:34:34:af:01:71:83:dc:75:ca:31:0a: 7f:4c:78:cc:ff:dd:11:d6:49:16:af:3d:68:f6:de:b9:10:b7: de:71:66:d0:37:b7:58:db:f0:2c:10:9e:c8:29:d7:8e:43:5e: 68:97:d7:e7:06:ac:1d:78:34:51:63:42:03:3c:7f:e8:94:11: 67:f6:02:c7:1c:1e:be:ea:86:72:85:36:e6:8a:b2:06:0b:26: 16:b3:b2:9b:98:22:6a:7c:bc:4e:29:83:10:4d:1a:fd:84:76: 58:0f:2b:65:56:c5:23:06:40:6e:09:d7:5d:71:f7:02:25:60: 7c:a7:87:d5:b7:79:53:af:f1:b1:fd:b9:6f:13:e9:16:68:ad: bb:b6:6f:e3:82:17:25:dc:f5:f3:ce:08:e9:cf:e8:57:ea:93: 6e:68:aa:75:31:e4:09:f1:30:2d:d1:9e:37:9d:88:d1:56:bf: fe:da:e4:dd:9d:93:5b:05:95:d0:22:43:f8:36:04:1b:3a:34: ed:4d:30:13:43:5c:5a:3c:39:8e:2d:fc:2c:5e:2b:ea:53:0a: 89:51:cd:ea:0e:14:ff:77:ad:2d:9a:63:f0:7a:ed:45:12:ef: 9d:d0:dc:f1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EQUYvwBkRURtQ3V5uxCuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNjViZDIxYzY4MzIwN2RhMGMzOWZiMzc5ODUzNWFmNDll MGJmZjUwHhcNMjYwMTAxMTAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzU3MDI0NTZmN2IzYjJjYmVlZjRkNDBmMjRjYmVhYTc3M2QzZWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRHnDaW//5s0lHR/8suCWKZtcc02 mNImBydYuo+ZuV2ZG5/WNazYFfBz78tdbVbEurNWJes+67X4yXES+CNhT0XfIEWQ ls++gloKabai1KxZZhLHUoBx/OqX1k+8PPiZWLc8LgJzpuAWQmudyA2y1qf+BIs1 pnPMM/ybWfW7seLxLicwoa/SqEGA2LrNvblcvRtygPGt9Qr8UNl0NldHdj4d6EZZ 3tWNXGVOOb5u+sDPDqp1J7OoGp6NJqTcHV4s3s7deQNprJVxmQRzLXcQawvQ/ksF p4RoMoREws/lW+CMFSXD919A9sq/cw2Sxf310y1jPrtdzYskplOmxCCuPQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPxXAkVvezssvu9NQPJMvqp3PT7kMB8GA1UdIwQY MBaAFA9lvSHGgyB9oMOfs3mFNa9J4L/1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDJXOUljYURJSDJndzUtemVZVTFyMG5ndl9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80YTk5OWYtZDFmYS00ODg3LWJhZTgt ZTIzZjEwZTRiOTFjLzEvX0ZjQ1JXOTdPeXktNzAxQThreS1xbmM5UHVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80YTk5OWYtZDFmYS00ODg3LWJhZTgtZTIzZjEwZTRiOTFj LzEvRDJXOUljYURJSDJndzUtemVZVTFyMG5ndl9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9DjAwQB uazEMA0GCSqGSIb3DQEBCwUAA4IBAQBmOUjwiWkZfrNkEW9Xz53j31ih+GjyxgEm NDSvAXGD3HXKMQp/THjM/90R1kkWrz1o9t65ELfecWbQN7dY2/AsEJ7IKdeOQ15o l9fnBqwdeDRRY0IDPH/olBFn9gLHHB6+6oZyhTbmirIGCyYWs7KbmCJqfLxOKYMQ TRr9hHZYDytlVsUjBkBuCdddcfcCJWB8p4fVt3lTr/Gx/blvE+kWaK27tm/jghcl 3PXzzgjpz+hX6pNuaKp1MeQJ8TAt0Z43nYjRVr/+2uTdnZNbBZXQIkP4NgQbOjTt TTATQ1xaPDmOLfwsXivqUwqJUc3qDhT/d60tmmPweu1FEu+d0Nzx -----END CERTIFICATE-----Generated at Fri Feb 6 11:13:24 2026 by rpki-client