This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/_Y3F_vMopcXa3E02cfDEZMCP0Dk.roa File: _Y3F_vMopcXa3E02cfDEZMCP0Dk.roa (raw, json) Hash identifier: igREdiG7Xu7S8r8bPH/7sOXp/7jJ8oNkSJSuSFIVgwc= Subject key identifier: FD:8D:C5:FE:F3:28:A5:C5:DA:DC:4D:36:71:F0:C4:64:C0:8F:D0:39 Certificate issuer: /CN=7ddf809131ee56531939d05f607271bdf01d19b5 Certificate serial: 019B79EC1B38530CA456FF60232A1867E028 Authority key identifier: 7D:DF:80:91:31:EE:56:53:19:39:D0:5F:60:72:71:BD:F0:1D:19:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/_Y3F_vMopcXa3E02cfDEZMCP0Dk.roa Signing time: Thu 01 Jan 2026 14:17:55 +0000 ROA not before: Thu 01 Jan 2026 14:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35360 IP address blocks: 45.66.4.0/22 maxlen: 24 2a09:5fc0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:1b:38:53:0c:a4:56:ff:60:23:2a:18:67:e0:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ddf809131ee56531939d05f607271bdf01d19b5 Validity Not Before: Jan 1 14:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd8dc5fef328a5c5dadc4d3671f0c464c08fd039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:38:69:66:c5:9b:a3:8e:ba:d8:7e:b1:f2:15: 7e:76:fe:81:d3:83:33:e4:60:e2:2f:c2:1f:d0:08: 97:d9:53:9a:d7:4d:c9:82:58:a1:ab:e6:45:9d:7e: b9:6b:6d:0c:f2:2a:d0:5b:0d:fc:1e:c6:86:64:a5: f6:c6:df:a0:f5:a1:b1:1d:c4:f5:75:64:74:24:af: d8:d1:77:1b:cb:d8:d4:e5:ad:bb:83:1b:2d:ad:dc: 54:ef:12:34:ed:05:e6:5d:af:53:54:8d:b8:4c:6a: e3:18:5c:68:33:41:8d:52:06:cb:bb:6a:f2:b2:6f: de:d2:6e:1a:db:53:c2:45:0c:23:52:76:a8:7d:3f: 8f:42:a1:78:0e:97:c4:9a:6c:ca:3f:4b:80:63:4c: ac:cd:82:09:93:94:2c:4f:93:a1:e9:17:90:ae:c8: 8c:d6:8e:c4:54:97:ea:1c:00:72:e8:22:60:24:8a: 09:2e:08:ef:92:53:9f:c7:19:7a:01:61:69:b0:e9: 82:8d:09:45:44:46:cc:67:71:fe:d1:05:e4:fe:c9: 7a:a1:05:19:c4:c8:2c:05:a1:40:4c:ae:86:8a:3e: 7c:f2:7b:ad:48:2e:75:89:21:c7:97:4f:ea:08:fd: 48:b2:d7:f1:56:c2:60:b3:78:37:48:76:fc:14:c3: 9d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:8D:C5:FE:F3:28:A5:C5:DA:DC:4D:36:71:F0:C4:64:C0:8F:D0:39 X509v3 Authority Key Identifier: keyid:7D:DF:80:91:31:EE:56:53:19:39:D0:5F:60:72:71:BD:F0:1D:19:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/_Y3F_vMopcXa3E02cfDEZMCP0Dk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.4.0/22 IPv6: 2a09:5fc0::/29 Signature Algorithm: sha256WithRSAEncryption ba:50:34:de:59:d0:b2:6e:f1:9f:de:c2:1a:8b:27:f6:10:ae: 4f:9e:e5:56:f2:a2:5a:9e:df:3f:b8:41:d0:a8:d2:3b:c5:f5: eb:bc:4e:79:19:a3:a2:8c:64:7d:a5:10:19:9e:90:c2:e8:0a: c9:41:0d:15:9e:ce:f9:cf:d4:7d:b5:0a:2e:07:05:56:9f:6f: 87:a0:0b:c7:0b:e3:48:24:83:d7:82:aa:d4:ed:4d:4a:39:73: ca:e6:a1:35:73:25:2a:9a:a4:e0:5d:57:9d:34:81:21:43:b4: 7e:cc:93:bb:cd:44:4a:0b:c1:51:0d:85:ed:6f:c1:cf:1a:20: fe:87:b0:21:59:7e:41:64:d9:69:ea:9e:f6:a0:f6:59:6e:56: 43:c9:3b:12:4d:1c:f8:8f:b4:54:8e:bd:62:15:c4:bc:d9:44: 19:7b:fd:a6:c2:ed:34:d0:31:03:be:22:72:8a:32:2e:ee:5b: a8:96:de:d2:06:22:9a:8e:42:d5:0b:c1:47:c1:2f:34:df:3b: 65:c8:b4:51:7f:1e:e9:0b:af:6a:46:02:08:0b:83:79:c2:44: 74:21:8a:d6:e4:81:92:61:38:4d:22:de:3c:f2:61:e5:0e:c0: b5:aa:dc:32:00:23:4b:c8:4d:ed:4b:b4:6f:5b:a6:1a:28:d8: 94:44:9d:64 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57Bs4UwykVv9gIyoYZ+AoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZGY4MDkxMzFlZTU2NTMxOTM5ZDA1ZjYwNzI3MWJkZjAx ZDE5YjUwHhcNMjYwMTAxMTQxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDhkYzVmZWYzMjhhNWM1ZGFkYzRkMzY3MWYwYzQ2NGMwOGZkMDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9jhpZsWbo4662H6x8hV+dv6B04Mz 5GDiL8If0AiX2VOa103Jglihq+ZFnX65a20M8irQWw38HsaGZKX2xt+g9aGxHcT1 dWR0JK/Y0Xcby9jU5a27gxstrdxU7xI07QXmXa9TVI24TGrjGFxoM0GNUgbLu2ry sm/e0m4a21PCRQwjUnaofT+PQqF4DpfEmmzKP0uAY0yszYIJk5QsT5Oh6ReQrsiM 1o7EVJfqHABy6CJgJIoJLgjvklOfxxl6AWFpsOmCjQlFREbMZ3H+0QXk/sl6oQUZ xMgsBaFATK6Gij588nutSC51iSHHl0/qCP1IstfxVsJgs3g3SHb8FMOdvwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFP2Nxf7zKKXF2txNNnHwxGTAj9A5MB8GA1UdIwQY MBaAFH3fgJEx7lZTGTnQX2Bycb3wHRm1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmQtQWtUSHVWbE1aT2RCZllISnh2ZkFkR2JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lN2U2MzUtZjI1Ni00MDAxLWIwNzEt Yjk0ZWI5ZTZiOWViLzEvX1kzRl92TW9wY1hhM0UwMmNmREVaTUNQMERrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9lN2U2MzUtZjI1Ni00MDAxLWIwNzEtYjk0ZWI5ZTZiOWVi LzEvZmQtQWtUSHVWbE1aT2RCZllISnh2ZkFkR2JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLUIEMA0E AgACMAcDBQMqCV/AMA0GCSqGSIb3DQEBCwUAA4IBAQC6UDTeWdCybvGf3sIaiyf2 EK5PnuVW8qJant8/uEHQqNI7xfXrvE55GaOijGR9pRAZnpDC6ArJQQ0Vns75z9R9 tQouBwVWn2+HoAvHC+NIJIPXgqrU7U1KOXPK5qE1cyUqmqTgXVedNIEhQ7R+zJO7 zURKC8FRDYXtb8HPGiD+h7AhWX5BZNlp6p72oPZZblZDyTsSTRz4j7RUjr1iFcS8 2UQZe/2mwu000DEDviJyijIu7luolt7SBiKajkLVC8FHwS803ztlyLRRfx7pC69q RgIIC4N5wkR0IYrW5IGSYThNIt488mHlDsC1qtwyACNLyE3tS7RvW6YaKNiURJ1k -----END CERTIFICATE-----Generated at Tue Feb 10 01:14:01 2026 by rpki-client