This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/F0RJs2qrkHig4vSBXnnLpdZV7_A.roa File: F0RJs2qrkHig4vSBXnnLpdZV7_A.roa (raw, json) Hash identifier: iuIcpICfTbYt0oWv8QT6x5wQLyLoiVBJHtUgUq0q4hU= Subject key identifier: 17:44:49:B3:6A:AB:90:78:A0:E2:F4:81:5E:79:CB:A5:D6:55:EF:F0 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E3A3EF1BED0FDDDFFCCAA74CFAFA6 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/F0RJs2qrkHig4vSBXnnLpdZV7_A.roa Signing time: Thu 01 Jan 2026 12:17:54 +0000 ROA not before: Thu 01 Jan 2026 12:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208069 IP address blocks: 185.119.254.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:3a:3e:f1:be:d0:fd:dd:ff:cc:aa:74:cf:af:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=174449b36aab9078a0e2f4815e79cba5d655eff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e9:9f:80:94:14:bd:6d:a2:03:21:fa:6b:04: 7d:8f:64:c0:06:4f:37:67:27:46:41:1e:57:6b:e7: 40:81:54:e4:b3:3f:1b:68:bf:88:00:0d:37:c9:79: fd:af:9c:af:9d:7c:b2:63:a4:fe:b1:1a:3b:be:df: f8:b5:15:a8:3d:9a:94:63:d7:f2:a4:43:19:69:ca: 56:2a:9f:19:47:8b:c5:5a:0b:84:63:28:56:b4:ef: 29:00:2e:70:54:92:57:6f:c0:c6:bc:74:f4:02:60: 62:5c:6b:c9:2e:50:5f:5a:07:1b:58:b7:63:26:52: 80:66:0e:15:61:64:69:2f:3c:64:aa:5c:d3:93:9d: 4d:d3:5a:24:83:2c:38:9d:9e:50:81:8f:f5:d2:03: 9d:e4:f0:aa:d1:91:06:d0:f3:8d:af:29:84:eb:59: 12:03:95:22:d1:8b:9d:58:9e:dd:16:fe:d8:0a:9d: 7f:4e:94:30:5d:dc:a4:70:80:d6:9d:0e:c1:d6:1b: 04:cc:1b:bb:65:88:18:7c:97:be:9e:a1:8d:5d:36: ca:83:a3:0f:17:a2:d9:b9:7c:e1:68:01:a2:6f:44: 20:d3:84:a1:a7:b9:b9:7d:0f:7c:ed:64:d2:62:c2: 38:45:3e:68:98:33:7a:81:4c:a4:8d:da:f7:14:32: 07:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:44:49:B3:6A:AB:90:78:A0:E2:F4:81:5E:79:CB:A5:D6:55:EF:F0 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/F0RJs2qrkHig4vSBXnnLpdZV7_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.119.254.0/24 Signature Algorithm: sha256WithRSAEncryption ab:15:85:16:f5:31:42:55:5a:6c:23:86:2e:37:d1:c3:67:72: ef:a4:32:e5:f5:f9:eb:e8:4e:51:f7:22:8a:6e:bf:ba:45:ac: 41:53:e5:aa:af:af:be:9f:dd:0a:64:70:02:9f:e6:ae:9c:24: 7f:1a:c6:61:eb:b0:b9:47:45:3d:bd:6a:e2:b6:61:70:df:4d: 72:97:e2:9c:ba:d5:05:16:8a:39:0f:58:ed:0e:7b:da:09:12: de:34:9a:fe:24:1d:65:25:e7:48:de:ff:f0:d3:c7:68:59:9e: 40:1d:a4:b8:3c:d4:0a:8b:f1:b4:da:e7:71:f0:1c:ba:05:3a: 14:da:db:2e:2e:27:af:ee:68:0f:3c:e7:8f:e2:49:8f:69:38: 7a:f8:de:bf:a1:be:4e:ab:3e:ca:79:6c:07:e6:ea:1a:47:ef: ef:dc:53:14:fa:f2:f5:97:35:92:50:d8:25:84:2d:c4:90:34: 46:c5:26:f4:3a:88:d5:2f:ef:5c:5c:2b:6f:77:15:be:be:e8: f4:d1:06:ff:dc:ef:4b:70:46:7d:e4:33:e0:bd:09:8b:a4:69: 64:0c:6b:f5:c0:6a:93:a7:ff:8a:8f:f0:f7:63:c4:c7:d7:94: 28:76:6e:a6:c7:16:94:09:c4:d4:c3:a7:2d:b9:44:22:ac:36: 16:b2:bd:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fjo+8b7Q/d3/zKp0z6+mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzQ0NDliMzZhYWI5MDc4YTBlMmY0ODE1ZTc5Y2JhNWQ2NTVlZmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwemfgJQUvW2iAyH6awR9j2TABk83 ZydGQR5Xa+dAgVTksz8baL+IAA03yXn9r5yvnXyyY6T+sRo7vt/4tRWoPZqUY9fy pEMZacpWKp8ZR4vFWguEYyhWtO8pAC5wVJJXb8DGvHT0AmBiXGvJLlBfWgcbWLdj JlKAZg4VYWRpLzxkqlzTk51N01okgyw4nZ5QgY/10gOd5PCq0ZEG0PONrymE61kS A5Ui0YudWJ7dFv7YCp1/TpQwXdykcIDWnQ7B1hsEzBu7ZYgYfJe+nqGNXTbKg6MP F6LZuXzhaAGib0Qg04Shp7m5fQ987WTSYsI4RT5omDN6gUykjdr3FDIH4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBdESbNqq5B4oOL0gV55y6XWVe/wMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvRjBSSnMycXJrSGlnNHZTQlhubkxwZFpWN19BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXf+MA0G CSqGSIb3DQEBCwUAA4IBAQCrFYUW9TFCVVpsI4YuN9HDZ3LvpDLl9fnr6E5R9yKK br+6RaxBU+Wqr6++n90KZHACn+aunCR/GsZh67C5R0U9vWritmFw301yl+KcutUF Foo5D1jtDnvaCRLeNJr+JB1lJedI3v/w08doWZ5AHaS4PNQKi/G02udx8By6BToU 2tsuLiev7mgPPOeP4kmPaTh6+N6/ob5Oqz7KeWwH5uoaR+/v3FMU+vL1lzWSUNgl hC3EkDRGxSb0OojVL+9cXCtvdxW+vuj00Qb/3O9LcEZ95DPgvQmLpGlkDGv1wGqT p/+Kj/D3Y8TH15Qodm6mxxaUCcTUw6ctuUQirDYWsr08 -----END CERTIFICATE-----Generated at Mon Jan 19 20:22:04 2026 by rpki-client