This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/fk9U3XR8wWwd2opanzwEAz6eKk4.roa File: fk9U3XR8wWwd2opanzwEAz6eKk4.roa (raw, json) Hash identifier: 5EeRjXWRWUv9RoV34Pw35rxYHtcF/8u2AEnciChzLxo= Subject key identifier: 7E:4F:54:DD:74:7C:C1:6C:1D:DA:8A:5A:9F:3C:04:03:3E:9E:2A:4E Certificate issuer: /CN=356e4744731da44f08fa5e92c5eb2a474d49a892 Certificate serial: 019B7F816AD57B7585A9DAD04DA9DDECE785 Authority key identifier: 35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/fk9U3XR8wWwd2opanzwEAz6eKk4.roa Signing time: Fri 02 Jan 2026 16:19:06 +0000 ROA not before: Fri 02 Jan 2026 16:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210007 IP address blocks: 195.69.252.0/22 maxlen: 22 195.69.252.0/23 maxlen: 23 195.69.254.0/23 maxlen: 23 195.69.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:6a:d5:7b:75:85:a9:da:d0:4d:a9:dd:ec:e7:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=356e4744731da44f08fa5e92c5eb2a474d49a892 Validity Not Before: Jan 2 16:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e4f54dd747cc16c1dda8a5a9f3c04033e9e2a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d7:8b:89:be:a4:d1:be:2b:8a:51:b1:16:cd: 96:96:dd:00:75:17:c9:45:b8:f8:93:f8:e7:b8:57: 5c:a5:7a:df:1c:3a:15:22:dc:df:50:87:44:15:be: ad:c2:8a:27:fd:0f:a8:a0:ed:50:b8:e9:85:be:9c: b6:c7:fc:61:b1:98:45:02:a2:55:e0:6a:4e:1a:ff: bc:33:ac:86:e4:8b:74:d1:19:32:ce:e2:38:9c:63: bb:ab:3d:8c:15:62:fa:e8:05:b5:bd:4d:05:28:9d: 5b:82:18:dd:e6:83:2d:e3:d4:4e:65:dd:ef:7a:d0: f9:07:7e:c2:4c:4e:fe:6d:09:29:f0:46:4d:a2:58: 42:b4:4a:89:c1:12:56:e7:67:fc:8e:e5:9b:8f:81: 50:28:e5:c5:ef:69:1d:87:50:9e:12:c0:d1:7d:cb: 2b:f8:54:43:0f:fc:ec:3b:04:31:99:ca:06:d8:ac: ad:51:53:55:f4:d3:f7:ec:29:d4:50:ff:d2:f9:5c: a6:68:1a:fa:fd:8b:44:a8:25:be:da:79:6c:03:53: 57:8b:d3:42:99:71:88:e2:ef:65:cd:29:9a:71:8f: 3f:80:13:d8:a3:a1:8a:76:e1:c7:bc:3b:ca:25:50: 4e:76:c0:21:fa:53:3f:81:77:49:dc:db:15:e2:cb: 06:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4F:54:DD:74:7C:C1:6C:1D:DA:8A:5A:9F:3C:04:03:3E:9E:2A:4E X509v3 Authority Key Identifier: keyid:35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/fk9U3XR8wWwd2opanzwEAz6eKk4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.69.252.0/22 Signature Algorithm: sha256WithRSAEncryption 84:ad:eb:00:72:d3:df:df:bc:cb:0b:c8:3e:fb:9d:bf:84:23: 05:95:f2:51:02:1c:e8:32:20:5a:16:4d:43:ff:86:bc:62:35: 3d:69:ad:b2:a4:07:81:c1:59:8a:80:36:0c:c8:03:7d:48:44: 33:80:98:00:39:70:52:6d:4c:62:66:f4:1f:01:60:b4:a3:a9: 20:fe:70:a7:20:2b:f0:9d:13:63:de:4b:85:cc:1e:92:98:80: c2:64:47:33:1a:23:2b:da:d0:34:20:49:54:8c:a2:3b:c2:7c: a1:25:96:a4:e7:17:d7:28:64:dc:01:06:f4:20:cc:8b:26:59: b2:1d:17:dd:63:c6:25:e7:4f:da:c6:e6:9a:62:0a:e0:5f:42: d6:69:53:ad:d1:1f:fe:fd:41:27:03:b4:57:c6:b0:69:ea:b1: ce:53:96:63:03:68:d7:d8:8e:10:16:7a:15:02:37:cc:22:c9: 4d:81:51:2a:27:69:cf:c6:27:63:a7:38:64:bf:b5:44:34:96: 7d:13:42:0e:e4:25:e0:33:d0:e3:93:92:7e:03:f3:e0:5d:43: 99:6e:be:ef:e7:3d:e5:60:ce:4a:ab:92:5c:18:ff:0a:51:ac: 91:d0:15:75:32:95:c2:ea:a2:eb:39:33:78:24:8e:d8:0d:e8: 5b:bb:e6:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gWrVe3WFqdrQTand7OeFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NmU0NzQ0NzMxZGE0NGYwOGZhNWU5MmM1ZWIyYTQ3NGQ0 OWE4OTIwHhcNMjYwMTAyMTYxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTRmNTRkZDc0N2NjMTZjMWRkYThhNWE5ZjNjMDQwMzNlOWUyYTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNeLib6k0b4rilGxFs2Wlt0AdRfJ Rbj4k/jnuFdcpXrfHDoVItzfUIdEFb6twoon/Q+ooO1QuOmFvpy2x/xhsZhFAqJV 4GpOGv+8M6yG5It00RkyzuI4nGO7qz2MFWL66AW1vU0FKJ1bghjd5oMt49ROZd3v etD5B37CTE7+bQkp8EZNolhCtEqJwRJW52f8juWbj4FQKOXF72kdh1CeEsDRfcsr +FRDD/zsOwQxmcoG2KytUVNV9NP37CnUUP/S+VymaBr6/YtEqCW+2nlsA1NXi9NC mXGI4u9lzSmacY8/gBPYo6GKduHHvDvKJVBOdsAh+lM/gXdJ3NsV4ssGoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH5PVN10fMFsHdqKWp88BAM+nipOMB8GA1UdIwQY MBaAFDVuR0RzHaRPCPpeksXrKkdNSaiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlc1SFJITWRwRThJLWw2U3hlc3FSMDFKcUpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84ZjQ3ODktOTYzYS00YzY5LWIxNjUt MGM1MDFkNjg5NzVhLzEvZms5VTNYUjh3V3dkMm9wYW56d0VBejZlS2s0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi84ZjQ3ODktOTYzYS00YzY5LWIxNjUtMGM1MDFkNjg5NzVh LzEvTlc1SFJITWRwRThJLWw2U3hlc3FSMDFKcUpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw0X8MA0G CSqGSIb3DQEBCwUAA4IBAQCEresActPf37zLC8g++52/hCMFlfJRAhzoMiBaFk1D /4a8YjU9aa2ypAeBwVmKgDYMyAN9SEQzgJgAOXBSbUxiZvQfAWC0o6kg/nCnICvw nRNj3kuFzB6SmIDCZEczGiMr2tA0IElUjKI7wnyhJZak5xfXKGTcAQb0IMyLJlmy HRfdY8Yl50/axuaaYgrgX0LWaVOt0R/+/UEnA7RXxrBp6rHOU5ZjA2jX2I4QFnoV AjfMIslNgVEqJ2nPxidjpzhkv7VENJZ9E0IO5CXgM9Djk5J+A/PgXUOZbr7v5z3l YM5Kq5JcGP8KUayR0BV1MpXC6qLrOTN4JI7YDehbu+aL -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:29 2026 by rpki-client