This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/FYrxidhhtPiG6AB9OzYcqk5p8Aw.roa File: FYrxidhhtPiG6AB9OzYcqk5p8Aw.roa (raw, json) Hash identifier: mzI1U2535anRJzFg3sJ4dHBKcfZC4WY6B6B0DzwBsDM= Subject key identifier: 15:8A:F1:89:D8:61:B4:F8:86:E8:00:7D:3B:36:1C:AA:4E:69:F0:0C Certificate issuer: /CN=57711f20883a62bc06391ba7b2582ce72b3fe91c Certificate serial: 019B78354C1D2CBC6F8987437A24CA681FCB Authority key identifier: 57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/FYrxidhhtPiG6AB9OzYcqk5p8Aw.roa Signing time: Thu 01 Jan 2026 06:18:37 +0000 ROA not before: Thu 01 Jan 2026 06:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205718 IP address blocks: 185.210.20.0/22 maxlen: 22 2a09:dd40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:4c:1d:2c:bc:6f:89:87:43:7a:24:ca:68:1f:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57711f20883a62bc06391ba7b2582ce72b3fe91c Validity Not Before: Jan 1 06:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=158af189d861b4f886e8007d3b361caa4e69f00c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:05:78:ab:b6:3d:f7:99:de:c3:91:a2:68:fc: 49:24:f2:c2:45:90:48:9c:24:45:de:3d:02:f8:55: 61:be:55:f5:36:f5:1a:5e:2c:fa:fd:bc:b0:8f:92: f9:96:8c:43:41:d6:ea:88:a8:e8:6a:b7:d2:a5:2a: 46:7b:75:5d:33:95:0f:73:3a:89:16:0f:b5:d9:e0: 0f:23:fa:0a:a0:60:be:a6:e8:b3:04:e5:57:4d:0c: 8a:fd:70:98:2f:b4:c0:28:db:0a:ed:c6:d1:c2:63: 95:56:a1:0f:5a:c7:5b:ef:98:a2:d6:59:b2:7f:fc: cf:ed:c3:84:15:26:30:19:cc:a3:31:89:c5:8c:5a: 71:74:a1:0f:10:3e:81:b0:de:ca:c3:2d:be:79:d6: 55:08:8d:32:5a:92:af:d2:85:b0:a9:6c:62:7c:10: 1d:18:b9:f3:9d:84:30:e2:b8:8f:27:d9:b9:ed:d9: 2b:e2:0f:9e:19:80:8d:30:61:b7:39:02:84:da:4b: 1f:8e:04:0f:ac:80:01:ed:96:6e:8a:8a:51:f5:66: 88:da:a5:96:92:6c:4c:75:86:38:a9:aa:a7:f6:22: b1:0c:ab:5f:7f:d8:3b:8e:15:c6:fe:46:d9:25:63: 37:c6:b0:20:5b:f9:80:f4:8e:0a:c6:fc:a8:03:b0: da:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:8A:F1:89:D8:61:B4:F8:86:E8:00:7D:3B:36:1C:AA:4E:69:F0:0C X509v3 Authority Key Identifier: keyid:57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/FYrxidhhtPiG6AB9OzYcqk5p8Aw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.210.20.0/22 IPv6: 2a09:dd40::/32 Signature Algorithm: sha256WithRSAEncryption 3f:88:37:fd:49:6c:c6:60:50:cb:89:e0:28:96:ca:6c:98:92: 46:a8:a4:63:2f:b1:21:a7:48:9a:6e:6d:32:b0:ba:c2:46:89: 86:31:91:e0:6f:b6:59:2a:14:53:1f:d5:d7:8f:17:d4:64:2d: 46:3d:21:c9:e1:d4:3b:f4:ff:19:06:c0:e5:ce:54:05:c6:a7: bb:06:b0:5e:03:dc:a5:d0:0d:e8:8c:a9:d7:bc:d4:c2:f6:69: 13:d9:5f:6c:f0:a6:fd:53:69:5c:18:38:cd:c7:49:3a:ec:3a: 75:3c:be:32:9e:56:00:fc:33:dd:38:a6:0b:9e:df:44:98:67: 5a:1f:7f:36:e2:ee:f2:b3:c1:ce:33:9e:92:65:ac:cb:c3:47: 36:76:24:e0:84:d6:3b:6b:e9:db:a6:54:e0:4e:97:2f:42:74: ec:f9:7d:05:d8:77:4a:69:eb:00:e1:12:6b:58:1a:51:9b:52: 15:e9:46:ea:ff:65:fd:2d:5e:12:44:d0:25:f4:46:a8:96:40: 49:2d:07:4a:09:c6:11:19:3c:16:3a:16:3d:7b:f2:0d:6e:cc: 48:25:ed:d0:8f:58:58:97:ec:4a:04:a0:23:41:15:f8:02:2b: 13:d8:69:48:cb:5a:fd:59:10:b0:93:c5:e1:6e:68:db:72:b8: 32:6a:14:3f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NUwdLLxviYdDeiTKaB/LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NzExZjIwODgzYTYyYmMwNjM5MWJhN2IyNTgyY2U3MmIz ZmU5MWMwHhcNMjYwMTAxMDYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNThhZjE4OWQ4NjFiNGY4ODZlODAwN2QzYjM2MWNhYTRlNjlmMDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wV4q7Y995new5GiaPxJJPLCRZBI nCRF3j0C+FVhvlX1NvUaXiz6/bywj5L5loxDQdbqiKjoarfSpSpGe3VdM5UPczqJ Fg+12eAPI/oKoGC+puizBOVXTQyK/XCYL7TAKNsK7cbRwmOVVqEPWsdb75ii1lmy f/zP7cOEFSYwGcyjMYnFjFpxdKEPED6BsN7Kwy2+edZVCI0yWpKv0oWwqWxifBAd GLnznYQw4riPJ9m57dkr4g+eGYCNMGG3OQKE2ksfjgQPrIAB7ZZuiopR9WaI2qWW kmxMdYY4qaqn9iKxDKtff9g7jhXG/kbZJWM3xrAgW/mA9I4KxvyoA7DaOwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBWK8YnYYbT4hugAfTs2HKpOafAMMB8GA1UdIwQY MBaAFFdxHyCIOmK8Bjkbp7JYLOcrP+kcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjNFZklJZzZZcndHT1J1bnNsZ3M1eXNfNlJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kMmIwYWEtMjYzNi00ZWVjLWExZTMt NzE0ZDE5NThiNzdiLzEvRllyeGlkaGh0UGlHNkFCOU96WWNxazVwOEF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kMmIwYWEtMjYzNi00ZWVjLWExZTMtNzE0ZDE5NThiNzdi LzEvVjNFZklJZzZZcndHT1J1bnNsZ3M1eXNfNlJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudIUMA0E AgACMAcDBQAqCd1AMA0GCSqGSIb3DQEBCwUAA4IBAQA/iDf9SWzGYFDLieAolsps mJJGqKRjL7Ehp0iabm0ysLrCRomGMZHgb7ZZKhRTH9XXjxfUZC1GPSHJ4dQ79P8Z BsDlzlQFxqe7BrBeA9yl0A3ojKnXvNTC9mkT2V9s8Kb9U2lcGDjNx0k67Dp1PL4y nlYA/DPdOKYLnt9EmGdaH3824u7ys8HOM56SZazLw0c2diTghNY7a+nbplTgTpcv QnTs+X0F2HdKaesA4RJrWBpRm1IV6Ubq/2X9LV4SRNAl9EaolkBJLQdKCcYRGTwW OhY9e/INbsxIJe3Qj1hYl+xKBKAjQRX4AisT2GlIy1r9WRCwk8XhbmjbcrgyahQ/ -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:36 2026 by rpki-client