This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/r_FLcT2tc4F6vUmQkNvpWkE0C4g.roa File: r_FLcT2tc4F6vUmQkNvpWkE0C4g.roa (raw, json) Hash identifier: /09Y96qJxubCRG9li9cUUz3NScNzI4efXUDMFZocGUo= Subject key identifier: AF:F1:4B:71:3D:AD:73:81:7A:BD:49:90:90:DB:E9:5A:41:34:0B:88 Certificate issuer: /CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64 Certificate serial: 019B7910FE1CE5A064C092359C30B547D040 Authority key identifier: AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/r_FLcT2tc4F6vUmQkNvpWkE0C4g.roa Signing time: Thu 01 Jan 2026 10:18:35 +0000 ROA not before: Thu 01 Jan 2026 10:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211727 IP address blocks: 185.243.130.0/24 maxlen: 24 2a10:9d40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:fe:1c:e5:a0:64:c0:92:35:9c:30:b5:47:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64 Validity Not Before: Jan 1 10:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aff14b713dad73817abd499090dbe95a41340b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b3:aa:83:52:9f:04:c9:44:d8:44:39:ca:00: c9:cb:75:85:ed:55:29:34:a5:5f:20:2a:93:ce:bb: 9f:0c:2d:c3:47:92:6d:a8:e5:4f:a9:15:4a:a8:9c: 52:5c:d8:96:49:d3:b4:b2:18:07:1b:2a:cf:71:ea: a8:38:79:e9:fe:db:23:f3:18:19:ce:9f:18:ab:ce: a4:b3:a2:7b:30:36:2c:66:1c:c5:d5:9e:24:09:78: c8:30:8f:43:20:54:d6:be:a8:1d:70:90:c5:85:fa: 6b:dd:9c:56:2a:71:c3:68:1c:de:6f:e3:7b:2e:f0: 02:3e:fd:c6:67:54:c7:bd:c1:50:1b:5a:1a:46:65: 9a:b4:ad:be:93:05:33:c6:50:32:c6:6e:44:ca:6a: 0b:81:26:67:0e:f2:4a:3b:ed:c2:b9:5f:06:79:98: 75:da:b8:af:8c:b6:ea:ce:ce:77:b9:53:75:61:94: 5d:67:cc:71:c4:9a:54:23:02:0a:2f:0a:d2:a8:3a: 92:f3:ce:1b:34:29:88:ff:d8:a0:e6:14:85:eb:fc: fd:67:f6:97:12:72:1e:36:ae:e0:2e:26:7d:de:03: 3a:4f:c6:64:0c:d7:ac:91:54:1c:02:ca:48:2e:cf: c9:ad:c1:80:a1:d7:ec:0f:49:52:62:63:20:1c:d2: 1a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F1:4B:71:3D:AD:73:81:7A:BD:49:90:90:DB:E9:5A:41:34:0B:88 X509v3 Authority Key Identifier: keyid:AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/r_FLcT2tc4F6vUmQkNvpWkE0C4g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.243.130.0/24 IPv6: 2a10:9d40::/29 Signature Algorithm: sha256WithRSAEncryption 13:91:80:d8:77:ec:51:06:aa:c3:eb:1e:9b:52:0c:b5:97:21: b6:c9:7d:9e:71:0e:59:fd:40:ca:f4:e0:1f:7c:16:ab:d1:97: 15:eb:e3:8a:4e:b2:06:b4:9d:0d:9f:2f:e2:a6:8b:1b:26:f5: 72:93:d6:7a:db:12:40:60:a3:76:9e:b2:de:58:8d:3b:15:6c: 08:74:27:97:df:79:9c:0b:9c:05:df:7d:92:df:a3:9d:56:0a: 11:59:10:fd:c2:81:d7:5e:10:2b:e8:d6:47:d2:24:5f:a4:fb: 57:6f:f9:4f:10:3e:a3:b6:7e:43:b3:56:61:7d:c5:61:3f:11: 35:e3:41:a0:0b:1c:e1:49:7e:d0:9a:1a:1a:19:08:72:63:4a: 69:b4:e6:8d:7a:c6:57:27:4d:f8:3e:de:ea:2b:a8:8f:33:8d: 7c:68:35:9e:99:11:45:6e:e8:de:4e:54:b3:6d:e8:83:2d:4c: 9e:69:f3:fa:eb:dc:1f:4e:d5:8c:aa:bb:28:83:45:79:ae:7f: 05:6e:30:eb:1a:8b:96:b9:6e:e1:09:cb:b4:11:15:f5:fa:f7: 04:f3:92:00:91:02:7e:af:41:fc:2b:90:69:9b:9c:4f:2a:90: 69:26:64:8d:38:0c:6c:82:4a:65:d2:c4:eb:c9:a5:ac:df:0e: 9e:14:cf:ea -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EP4c5aBkwJI1nDC1R9BAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkM2RkOGQzMmNmYzcxN2E2ZTY5MGViZTNlMWRiNDM4NmQ4 ZjZjNjQwHhcNMjYwMTAxMTAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmYxNGI3MTNkYWQ3MzgxN2FiZDQ5OTA5MGRiZTk1YTQxMzQwYjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LOqg1KfBMlE2EQ5ygDJy3WF7VUp NKVfICqTzrufDC3DR5JtqOVPqRVKqJxSXNiWSdO0shgHGyrPceqoOHnp/tsj8xgZ zp8Yq86ks6J7MDYsZhzF1Z4kCXjIMI9DIFTWvqgdcJDFhfpr3ZxWKnHDaBzeb+N7 LvACPv3GZ1THvcFQG1oaRmWatK2+kwUzxlAyxm5EymoLgSZnDvJKO+3CuV8GeZh1 2rivjLbqzs53uVN1YZRdZ8xxxJpUIwIKLwrSqDqS884bNCmI/9ig5hSF6/z9Z/aX EnIeNq7gLiZ93gM6T8ZkDNeskVQcAspILs/JrcGAodfsD0lSYmMgHNIavwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFK/xS3E9rXOBer1JkJDb6VpBNAuIMB8GA1UdIwQY MBaAFK092NMs/HF6bmkOvj4dtDhtj2xkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclQzWTB5ejhjWHB1YVE2LVBoMjBPRzJQYkdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84MTI4MDAtOWU3MC00Y2QyLTkwZmQt M2JjZDIzOTllZTY0LzEvcl9GTGNUMnRjNEY2dlVtUWtOdnBXa0UwQzRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84MTI4MDAtOWU3MC00Y2QyLTkwZmQtM2JjZDIzOTllZTY0 LzEvclQzWTB5ejhjWHB1YVE2LVBoMjBPRzJQYkdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAufOCMA0E AgACMAcDBQMqEJ1AMA0GCSqGSIb3DQEBCwUAA4IBAQATkYDYd+xRBqrD6x6bUgy1 lyG2yX2ecQ5Z/UDK9OAffBar0ZcV6+OKTrIGtJ0Nny/iposbJvVyk9Z62xJAYKN2 nrLeWI07FWwIdCeX33mcC5wF332S36OdVgoRWRD9woHXXhAr6NZH0iRfpPtXb/lP ED6jtn5Ds1ZhfcVhPxE140GgCxzhSX7QmhoaGQhyY0pptOaNesZXJ034Pt7qK6iP M418aDWemRFFbujeTlSzbeiDLUyeafP669wfTtWMqrsog0V5rn8FbjDrGouWuW7h Ccu0ERX1+vcE85IAkQJ+r0H8K5Bpm5xPKpBpJmSNOAxsgkpl0sTryaWs3w6eFM/q -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:41 2026 by rpki-client