This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/_FggjIBA5t8sjfRqZsrKE_Ymbdo.roa File: _FggjIBA5t8sjfRqZsrKE_Ymbdo.roa (raw, json) Hash identifier: 9HysWDZxGXfzPsUoHmbEgdNxnq26KBNjoD5DlM7apJc= Subject key identifier: FC:58:20:8C:80:40:E6:DF:2C:8D:F4:6A:66:CA:CA:13:F6:26:6D:DA Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B7F84E200FFEF8E8DFFFAB69D8E7D81F7 Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/_FggjIBA5t8sjfRqZsrKE_Ymbdo.roa Signing time: Fri 02 Jan 2026 16:22:53 +0000 ROA not before: Fri 02 Jan 2026 16:22:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43043 IP address blocks: 83.137.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:e2:00:ff:ef:8e:8d:ff:fa:b6:9d:8e:7d:81:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jan 2 16:22:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc58208c8040e6df2c8df46a66caca13f6266dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:35:b1:51:a7:1d:93:3b:d4:09:df:94:50:82: 9c:a3:d3:53:64:bc:ae:65:f3:64:d1:2e:ad:1e:87: a9:c2:12:1a:cd:a2:85:2e:6f:4d:45:45:ab:b5:f1: 96:8f:c7:3b:46:46:73:58:ed:65:d3:ac:c4:07:fe: 66:85:60:5e:55:b8:f6:99:d4:0e:37:69:86:60:83: 36:01:83:ba:7a:ef:b8:2c:4c:77:9b:d9:4e:d3:49: b7:22:e2:2a:da:a2:9f:b9:02:89:33:a2:f4:6d:83: ab:be:6c:92:32:17:02:4f:84:b2:d3:57:43:81:01: a7:71:ca:68:18:3d:0c:62:52:ea:45:38:3e:5f:16: 0b:72:c6:2f:7d:88:28:57:94:17:f8:72:32:17:f7: 94:60:82:cd:02:15:69:8c:f2:99:32:31:f3:19:38: 12:d6:83:6e:24:53:f7:b8:5d:01:f1:85:1f:fe:ab: 73:5f:aa:a6:02:c3:94:ad:ea:bc:f6:21:5b:ce:f0: 09:cf:0b:36:87:56:1d:07:9d:b9:90:87:86:a4:e5: 50:2b:6f:fe:85:9d:8c:b2:09:95:a2:78:62:b6:89: 63:20:1f:cc:c0:28:5e:6c:75:4d:c4:dd:d7:a5:29: 53:2a:a2:61:1a:26:c1:c3:50:ec:b8:e4:b9:ae:b7: 5a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:58:20:8C:80:40:E6:DF:2C:8D:F4:6A:66:CA:CA:13:F6:26:6D:DA X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/_FggjIBA5t8sjfRqZsrKE_Ymbdo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.137.154.0/23 Signature Algorithm: sha256WithRSAEncryption 09:51:ab:8d:43:05:88:dc:e9:b2:31:2f:2b:e7:c8:26:bd:46: 8c:1f:6b:76:da:de:a4:c0:20:ea:31:a4:64:8f:62:67:f6:3f: c9:b6:d9:fa:ef:78:51:6f:b9:0e:eb:7d:b2:1e:94:d4:12:8b: aa:fc:13:d0:29:3f:b6:73:78:dd:02:d2:eb:d7:7e:a7:c1:b1: 69:25:16:33:80:7e:ad:92:59:25:70:19:78:6a:c6:8f:22:90: 60:31:6d:9d:7b:8d:9d:de:95:34:e6:1b:a9:58:48:73:da:18: 77:eb:47:b3:a8:f4:76:ce:9f:67:55:d0:68:87:47:c9:eb:fa: c7:69:4b:d2:a9:5c:ef:d5:d1:6f:b2:1c:ee:6f:9e:a4:56:f5: e2:ad:ec:4f:8c:96:e9:b8:97:7d:11:ea:a0:72:38:ea:e1:7a: 14:51:6b:93:70:56:04:bc:14:43:b7:c5:00:68:d8:c7:a9:df: 1c:1e:28:c9:a8:10:84:be:91:cd:77:60:d0:72:73:9a:2c:28: 1a:18:c4:f3:eb:04:4a:c4:23:e5:13:40:5e:d7:c0:50:46:31: 4f:94:cf:23:86:c9:ee:b7:d2:ab:68:b6:f0:9d:fa:1e:86:6e: 1b:f4:ad:ee:13:26:8f:d3:35:ac:ca:70:f7:44:bf:94:fb:b0: 4f:ae:4c:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hOIA/++Ojf/6tp2OfYH3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMTAyMTYyMjUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzU4MjA4YzgwNDBlNmRmMmM4ZGY0NmE2NmNhY2ExM2Y2MjY2ZGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTWxUacdkzvUCd+UUIKco9NTZLyu ZfNk0S6tHoepwhIazaKFLm9NRUWrtfGWj8c7RkZzWO1l06zEB/5mhWBeVbj2mdQO N2mGYIM2AYO6eu+4LEx3m9lO00m3IuIq2qKfuQKJM6L0bYOrvmySMhcCT4Sy01dD gQGnccpoGD0MYlLqRTg+XxYLcsYvfYgoV5QX+HIyF/eUYILNAhVpjPKZMjHzGTgS 1oNuJFP3uF0B8YUf/qtzX6qmAsOUreq89iFbzvAJzws2h1YdB525kIeGpOVQK2/+ hZ2MsgmVonhitoljIB/MwChebHVNxN3XpSlTKqJhGibBw1DsuOS5rrdaIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPxYIIyAQObfLI30ambKyhP2Jm3aMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvX0ZnZ2pJQkE1dDhzamZScVpzcktFX1ltYmRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBU4maMA0G CSqGSIb3DQEBCwUAA4IBAQAJUauNQwWI3OmyMS8r58gmvUaMH2t22t6kwCDqMaRk j2Jn9j/Jttn673hRb7kO632yHpTUEouq/BPQKT+2c3jdAtLr136nwbFpJRYzgH6t klklcBl4asaPIpBgMW2de42d3pU05hupWEhz2hh360ezqPR2zp9nVdBoh0fJ6/rH aUvSqVzv1dFvshzub56kVvXirexPjJbpuJd9Eeqgcjjq4XoUUWuTcFYEvBRDt8UA aNjHqd8cHijJqBCEvpHNd2DQcnOaLCgaGMTz6wRKxCPlE0Be18BQRjFPlM8jhsnu t9KraLbwnfoehm4b9K3uEyaP0zWsynD3RL+U+7BPrkyg -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:06 2026 by rpki-client