This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/fzAeGKhcQK73_8kUi9aPu-hO7GM.roa File: fzAeGKhcQK73_8kUi9aPu-hO7GM.roa (raw, json) Hash identifier: nriJ4MQ+9xZdYNUaYHTilz4XR7McFd/ntd369VK1PM0= Subject key identifier: 7F:30:1E:18:A8:5C:40:AE:F7:FF:C9:14:8B:D6:8F:BB:E8:4E:EC:63 Certificate issuer: /CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde Certificate serial: 019B775915C3FEB179DAC6F16C6500865B71 Authority key identifier: F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/fzAeGKhcQK73_8kUi9aPu-hO7GM.roa Signing time: Thu 01 Jan 2026 02:18:05 +0000 ROA not before: Thu 01 Jan 2026 02:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42810 IP address blocks: 87.237.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:15:c3:fe:b1:79:da:c6:f1:6c:65:00:86:5b:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde Validity Not Before: Jan 1 02:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f301e18a85c40aef7ffc9148bd68fbbe84eec63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f3:ea:42:61:3d:ed:ad:da:5f:c9:d7:d5:a9: 7a:b3:af:ee:a5:2b:7a:64:24:0f:c6:3e:bb:59:b3: c6:7b:74:e5:e9:ea:d8:b9:d3:35:25:37:41:18:75: d8:53:9c:30:90:b2:32:28:a5:c5:a5:93:01:9d:0e: 77:9d:28:d7:be:42:59:d2:32:94:e4:ff:b8:75:be: 2c:eb:2f:95:a6:f4:a2:52:aa:ef:b0:e5:a0:60:6b: 31:bd:7e:8f:09:d5:7c:39:8d:f4:02:f4:26:55:5d: 11:5b:31:09:48:0a:3b:01:a1:7d:32:48:a2:84:09: 40:56:50:6e:a2:24:15:b3:ab:54:06:27:c8:39:62: 32:b0:db:1e:71:de:ad:6c:96:18:9a:20:16:5b:d9: 2d:34:e2:1e:18:f4:ee:2e:d4:e6:29:c5:1c:44:66: 35:55:8f:de:2a:46:90:78:77:bf:a2:ff:7c:80:60: c4:cc:7e:4b:af:7a:8c:c8:d0:6e:1f:a8:89:db:e4: 0c:bf:8d:98:cb:25:8f:cb:58:b3:1d:db:bf:10:c7: 13:23:a4:7b:18:0f:43:f6:24:b6:1b:0f:dd:c4:bf: bc:11:55:ec:51:f2:6e:e9:b5:38:da:ff:0a:53:cc: c0:e1:f6:06:8b:2a:f7:1f:d1:84:d3:1a:55:06:34: df:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:30:1E:18:A8:5C:40:AE:F7:FF:C9:14:8B:D6:8F:BB:E8:4E:EC:63 X509v3 Authority Key Identifier: keyid:F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/fzAeGKhcQK73_8kUi9aPu-hO7GM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.237.168.0/22 Signature Algorithm: sha256WithRSAEncryption 36:1a:27:08:8c:c2:2d:c8:61:b3:35:a3:98:d6:86:85:0a:65: 39:d3:cd:f0:27:e0:6b:d7:79:36:25:17:b7:f4:6d:10:ce:cd: 2d:ea:88:1d:02:fd:22:67:c0:d4:6c:b9:58:97:8d:ce:de:fa: 84:c6:c6:21:4a:ca:e7:d0:68:ee:e9:ba:4d:53:07:a6:15:a8: 47:1b:a1:bb:24:13:99:4f:34:ab:86:2c:ac:8e:5b:05:e9:90: 53:a3:0f:70:5f:e6:9c:6d:76:40:9d:8b:90:86:df:2a:53:54: 48:90:3b:5b:89:86:c3:a7:c2:aa:60:9a:2c:fa:bd:70:d9:47: 11:e5:c6:5f:59:88:ca:45:ce:ad:0a:9c:8c:a8:95:b3:80:42: 09:2e:ac:29:90:8d:b3:a1:27:e1:98:d8:5c:b4:dc:4b:be:a4: 69:cd:b4:72:9b:ee:89:5f:03:a5:55:e1:8a:56:37:8b:4f:05: cd:1f:de:61:00:dc:70:14:01:97:94:e7:7f:91:86:0a:53:f4: cb:84:a4:45:f9:b7:79:2c:fd:65:b0:1b:10:76:ae:00:a2:31: 35:f2:66:cb:23:b5:a5:53:b0:d6:b6:3f:20:4c:f2:5c:40:d0: 3f:65:f4:47:15:a5:bb:49:8e:56:22:a2:20:cd:3e:48:a7:da: 13:91:e1:4b -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WRXD/rF52sbxbGUAhltxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MzU2YTk2ZTc0ZWEyZDcyYjY1NDVjODdjNzlkMjEyZDcy YTdiZGUwHhcNMjYwMTAxMDIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjMwMWUxOGE4NWM0MGFlZjdmZmM5MTQ4YmQ2OGZiYmU4NGVlYzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7fPqQmE97a3aX8nX1al6s6/upSt6 ZCQPxj67WbPGe3Tl6erYudM1JTdBGHXYU5wwkLIyKKXFpZMBnQ53nSjXvkJZ0jKU 5P+4db4s6y+VpvSiUqrvsOWgYGsxvX6PCdV8OY30AvQmVV0RWzEJSAo7AaF9Mkii hAlAVlBuoiQVs6tUBifIOWIysNsecd6tbJYYmiAWW9ktNOIeGPTuLtTmKcUcRGY1 VY/eKkaQeHe/ov98gGDEzH5Lr3qMyNBuH6iJ2+QMv42YyyWPy1izHdu/EMcTI6R7 GA9D9iS2Gw/dxL+8EVXsUfJu6bU42v8KU8zA4fYGiyr3H9GE0xpVBjTfmwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFH8wHhioXECu9//JFIvWj7voTuxjMB8GA1UdIwQY MBaAFPk1apbnTqLXK2VFyHx50hLXKnveMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1UVnFsdWRPb3RjclpVWElmSG5TRXRjcWU5NC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvOWY0NTlmLTI2NGQtNDZjZS04N2Iw LWNiYjdkMmJmNmZhMS8xL2Z6QWVHS2hjUUs3M184a1VpOWFQdS1oTzdHTS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZTIvOWY0NTlmLTI2NGQtNDZjZS04N2IwLWNiYjdkMmJmNmZh MS8xLzEtVFZxbHVkT290Y3JaVVhJZkhuU0V0Y3FlOTQuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJX7agw DQYJKoZIhvcNAQELBQADggEBADYaJwiMwi3IYbM1o5jWhoUKZTnTzfAn4GvXeTYl F7f0bRDOzS3qiB0C/SJnwNRsuViXjc7e+oTGxiFKyufQaO7puk1TB6YVqEcbobsk E5lPNKuGLKyOWwXpkFOjD3Bf5pxtdkCdi5CG3ypTVEiQO1uJhsOnwqpgmiz6vXDZ RxHlxl9ZiMpFzq0KnIyolbOAQgkurCmQjbOhJ+GY2Fy03Eu+pGnNtHKb7olfA6VV 4YpWN4tPBc0f3mEA3HAUAZeU53+RhgpT9MuEpEX5t3ks/WWwGxB2rgCiMTXyZssj taVTsNa2PyBM8lxA0D9l9EcVpbtJjlYioiDNPkin2hOR4Us= -----END CERTIFICATE-----Generated at Mon Jan 26 22:24:47 2026 by rpki-client