This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/F7Rl3gkShjk9K5KCESdLS7DMA7I.roa File: F7Rl3gkShjk9K5KCESdLS7DMA7I.roa (raw, json) Hash identifier: c2n9H0jyH5wMRpTPvaViBcpdlnGbUmhYtVd+x1NbnoM= Subject key identifier: 17:B4:65:DE:09:12:86:39:3D:2B:92:82:11:27:4B:4B:B0:CC:03:B2 Certificate issuer: /CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0 Certificate serial: 019B7CED62F73792153497C816D89171DF05 Authority key identifier: 8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/F7Rl3gkShjk9K5KCESdLS7DMA7I.roa Signing time: Fri 02 Jan 2026 04:18:10 +0000 ROA not before: Fri 02 Jan 2026 04:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207282 IP address blocks: 193.135.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:62:f7:37:92:15:34:97:c8:16:d8:91:71:df:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0 Validity Not Before: Jan 2 04:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17b465de091286393d2b928211274b4bb0cc03b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:dd:d5:6e:21:10:f2:ef:ea:3f:3a:65:2e:53: 87:a9:c2:28:a4:b8:c9:f4:6f:dc:18:97:17:03:4f: 51:b3:7a:27:96:98:8f:25:81:37:b7:7c:3d:f5:af: 4e:58:31:3b:2b:7d:30:94:03:d6:98:e1:94:98:b8: 9d:0d:55:04:75:69:ef:13:7c:57:17:77:ad:92:ed: 69:6f:e6:6a:cf:af:99:08:82:44:93:e8:d5:e3:02: cb:ca:d0:4e:ea:a8:a8:6b:ac:88:df:cd:89:27:23: e5:96:16:27:22:f5:96:98:2b:f0:ad:3f:b2:ac:35: 01:ae:75:ce:cd:3b:7d:8d:27:7d:25:a2:65:53:56: 62:24:dc:1f:d4:f1:97:85:ff:45:93:8f:8a:c1:23: 0e:b3:2b:5b:60:11:20:02:4d:bc:94:0f:46:26:89: 0c:83:6e:50:60:83:e8:40:c2:0b:05:ec:95:72:17: 02:c9:7d:d6:54:6c:9b:e4:77:68:e4:f4:44:bd:f7: d0:1b:2e:2f:55:6e:0f:bb:1c:fd:78:29:b0:a1:89: b8:4a:60:54:73:58:f7:10:48:41:b6:c0:d5:ed:16: c1:a8:7f:32:f4:43:40:5e:cd:36:27:26:6a:34:7a: 6a:2b:66:76:50:45:2e:48:0c:c9:3e:8e:7b:96:7c: da:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B4:65:DE:09:12:86:39:3D:2B:92:82:11:27:4B:4B:B0:CC:03:B2 X509v3 Authority Key Identifier: keyid:8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/F7Rl3gkShjk9K5KCESdLS7DMA7I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.135.20.0/24 Signature Algorithm: sha256WithRSAEncryption 07:88:99:4f:1d:5a:fe:bb:c9:2a:23:45:64:50:47:f4:7c:7f: 81:3a:c6:32:a0:93:20:32:84:28:72:c5:30:0f:18:f8:e8:c8: 57:02:87:61:b9:56:2a:62:48:78:af:18:09:8f:ab:33:5e:b0: 90:22:5f:f6:4f:e7:22:23:34:5c:49:d3:e5:c4:df:1a:56:52: f9:aa:06:15:30:e6:54:44:92:56:10:23:f6:58:be:ca:38:3f: 7a:8b:f3:f9:a3:a5:20:1e:4e:a6:dd:0b:ba:cf:58:86:ac:ce: d5:fa:06:80:a2:f0:d6:5a:2b:a6:4d:9b:18:13:4d:73:e5:6a: 1b:02:78:a1:4b:6d:d0:99:4e:29:ee:e2:ef:00:14:32:47:93: c8:9e:77:56:ca:0c:9f:61:be:db:9e:fc:ae:e2:f0:e0:a6:e3: 2a:0c:d6:cc:ad:1d:e0:8f:5d:9b:06:2c:27:75:cb:63:9b:15: 1d:78:5d:23:6e:d3:5d:3b:e1:55:20:4e:41:44:4c:86:5e:10: bc:e9:60:aa:cd:4c:9f:8e:a4:d5:3e:c7:e2:43:00:4e:32:a5: 1d:d4:f4:b7:4e:02:51:13:ba:f5:41:3e:ac:11:a7:49:02:5b: 3f:6e:c0:ed:a9:2c:ab:d6:64:99:4e:e9:d9:51:13:66:aa:0e: 0b:5f:65:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87WL3N5IVNJfIFtiRcd8FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOGFmNmFmNTdkZGZjNWM3YWE4MjhjZjIyNWY5OGRjZTk1 OTA0YTAwHhcNMjYwMTAyMDQxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2I0NjVkZTA5MTI4NjM5M2QyYjkyODIxMTI3NGI0YmIwY2MwM2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6N3VbiEQ8u/qPzplLlOHqcIopLjJ 9G/cGJcXA09Rs3onlpiPJYE3t3w99a9OWDE7K30wlAPWmOGUmLidDVUEdWnvE3xX F3etku1pb+Zqz6+ZCIJEk+jV4wLLytBO6qioa6yI382JJyPllhYnIvWWmCvwrT+y rDUBrnXOzTt9jSd9JaJlU1ZiJNwf1PGXhf9Fk4+KwSMOsytbYBEgAk28lA9GJokM g25QYIPoQMILBeyVchcCyX3WVGyb5Hdo5PREvffQGy4vVW4Puxz9eCmwoYm4SmBU c1j3EEhBtsDV7RbBqH8y9ENAXs02JyZqNHpqK2Z2UEUuSAzJPo57lnza4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBe0Zd4JEoY5PSuSghEnS0uwzAOyMB8GA1UdIwQY MBaAFIuK9q9X3fxceqgozyJfmNzpWQSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTRyMnIxZmRfRng2cUNqUElsLVkzT2xaQktBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8xZjJjOGYtOGVkOS00YjdlLWFhMWUt ZDNjNGY1ZGNiZTRjLzEvRjdSbDNna1Noams5SzVLQ0VTZExTN0RNQTdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8xZjJjOGYtOGVkOS00YjdlLWFhMWUtZDNjNGY1ZGNiZTRj LzEvaTRyMnIxZmRfRng2cUNqUElsLVkzT2xaQktBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwYcUMA0G CSqGSIb3DQEBCwUAA4IBAQAHiJlPHVr+u8kqI0VkUEf0fH+BOsYyoJMgMoQocsUw Dxj46MhXAodhuVYqYkh4rxgJj6szXrCQIl/2T+ciIzRcSdPlxN8aVlL5qgYVMOZU RJJWECP2WL7KOD96i/P5o6UgHk6m3Qu6z1iGrM7V+gaAovDWWiumTZsYE01z5Wob AnihS23QmU4p7uLvABQyR5PInndWygyfYb7bnvyu4vDgpuMqDNbMrR3gj12bBiwn dctjmxUdeF0jbtNdO+FVIE5BREyGXhC86WCqzUyfjqTVPsfiQwBOMqUd1PS3TgJR E7r1QT6sEadJAls/bsDtqSyr1mSZTunZURNmqg4LX2Xx -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:53 2026 by rpki-client