This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/fXpzmIEAnbtmNcx0rqptqG5QnQg.roa File: fXpzmIEAnbtmNcx0rqptqG5QnQg.roa (raw, json) Hash identifier: 5iU3booTwnLztG+lAWV3dZKWKwiQOKD5sGh5Wy5gwWk= Subject key identifier: 7D:7A:73:98:81:00:9D:BB:66:35:CC:74:AE:AA:6D:A8:6E:50:9D:08 Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77 Certificate serial: 019B78A21E816030142BAC75D9742850A4B9 Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/fXpzmIEAnbtmNcx0rqptqG5QnQg.roa Signing time: Thu 01 Jan 2026 08:17:28 +0000 ROA not before: Thu 01 Jan 2026 08:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210012 IP address blocks: 185.249.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:1e:81:60:30:14:2b:ac:75:d9:74:28:50:a4:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77 Validity Not Before: Jan 1 08:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d7a739881009dbb6635cc74aeaa6da86e509d08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fe:cd:ed:67:78:53:93:c5:ae:ca:d8:58:28: a1:87:3b:7a:60:61:ce:39:66:25:2a:5f:0e:43:38: ed:21:d5:93:45:51:4b:cc:20:87:09:14:fa:4e:1c: 51:3f:58:cf:b2:84:55:4c:09:ea:f5:74:52:af:c5: fc:3b:b0:3b:b9:5a:fe:b5:60:e9:bd:ec:9c:b7:14: 36:37:44:7f:70:b6:bc:70:2b:47:f8:58:a0:b4:d3: 37:57:d3:c8:7b:16:ac:d6:51:a1:a7:65:80:92:ce: 2c:a4:0f:4f:d4:0f:8d:dc:c3:39:6f:4e:17:83:1c: 66:7a:d4:3e:5c:dc:a2:ca:c8:b8:3d:73:67:12:54: 0d:e4:ba:2d:08:ea:6e:eb:49:8c:80:53:79:17:a9: 26:88:7d:51:15:32:f7:22:05:aa:73:89:f6:e3:1e: 69:29:e8:f7:a6:c1:5b:74:54:16:44:d3:00:af:40: b7:e8:25:e1:fb:99:7e:3d:a6:7f:16:f1:54:d4:67: a0:88:be:a7:33:58:88:18:26:23:f0:80:04:7d:f4: 8c:27:d0:f0:04:5a:aa:b9:21:1a:17:82:ca:09:23: db:99:26:bd:d2:3f:d4:26:8d:03:0d:2e:bf:c5:48: 40:66:59:89:1a:b5:aa:4c:88:f0:91:d4:fa:4e:2f: 06:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:7A:73:98:81:00:9D:BB:66:35:CC:74:AE:AA:6D:A8:6E:50:9D:08 X509v3 Authority Key Identifier: keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/fXpzmIEAnbtmNcx0rqptqG5QnQg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.249.162.0/24 Signature Algorithm: sha256WithRSAEncryption cd:d8:ee:58:d4:bb:0a:93:21:9e:7b:67:3d:11:8f:21:13:11: 28:a7:a4:3d:54:26:44:bc:bb:22:5d:cc:02:b6:fa:f5:48:25: 50:81:e2:41:d1:89:66:30:eb:a6:fb:cd:9a:b6:7d:3f:aa:87: dd:10:3f:2b:f7:30:5c:c3:47:ea:ba:47:89:c4:fc:1e:b7:ad: 59:19:f8:18:2d:da:4c:0f:fe:09:84:29:04:c8:4c:13:a1:89: 4a:d8:aa:60:f0:3b:1b:33:6f:ae:d9:32:54:00:89:5a:b2:e7: 9a:2e:fd:8e:ba:0c:c6:25:c9:e2:bd:2a:e0:85:fa:f1:d6:23: dc:24:27:e9:e0:47:8f:4d:07:41:f5:58:19:14:c8:70:68:26: 0c:d7:d0:f4:ac:05:8d:c2:bf:9f:f1:c1:65:ed:aa:1d:7e:7a: 4d:1a:a7:22:b6:76:c0:da:6e:8b:a9:c0:63:3c:6a:01:66:58: 47:30:4a:8a:f4:2b:7e:29:4b:c0:3f:22:c4:39:c7:08:b3:a5: 49:b4:3a:14:d4:a8:2f:1c:42:42:c2:b2:0a:48:ae:11:d2:fa: f8:40:29:bd:82:ba:2a:2a:e6:70:21:be:0b:fc:8f:87:d9:f8: 94:43:ad:03:38:29:6a:73:74:95:88:ec:26:15:1f:66:bb:e3: aa:74:b4:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oh6BYDAUK6x12XQoUKS5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NTJiMDNlMWIwMTcwOTYzODk0MGQ5NTkyOTgzY2RlNzdl Y2FiNzcwHhcNMjYwMTAxMDgxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDdhNzM5ODgxMDA5ZGJiNjYzNWNjNzRhZWFhNmRhODZlNTA5ZDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf7N7Wd4U5PFrsrYWCihhzt6YGHO OWYlKl8OQzjtIdWTRVFLzCCHCRT6ThxRP1jPsoRVTAnq9XRSr8X8O7A7uVr+tWDp veyctxQ2N0R/cLa8cCtH+FigtNM3V9PIexas1lGhp2WAks4spA9P1A+N3MM5b04X gxxmetQ+XNyiysi4PXNnElQN5LotCOpu60mMgFN5F6kmiH1RFTL3IgWqc4n24x5p Kej3psFbdFQWRNMAr0C36CXh+5l+PaZ/FvFU1GegiL6nM1iIGCYj8IAEffSMJ9Dw BFqquSEaF4LKCSPbmSa90j/UJo0DDS6/xUhAZlmJGrWqTIjwkdT6Ti8G+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH16c5iBAJ27ZjXMdK6qbahuUJ0IMB8GA1UdIwQY MBaAFIRSsD4bAXCWOJQNlZKYPN537Kt3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQt MjAwZmMyNzRjYjAxLzEvZlhwem1JRUFuYnRtTmN4MHJxcHRxRzVRblFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQtMjAwZmMyNzRjYjAx LzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufmiMA0G CSqGSIb3DQEBCwUAA4IBAQDN2O5Y1LsKkyGee2c9EY8hExEop6Q9VCZEvLsiXcwC tvr1SCVQgeJB0YlmMOum+82atn0/qofdED8r9zBcw0fqukeJxPwet61ZGfgYLdpM D/4JhCkEyEwToYlK2Kpg8DsbM2+u2TJUAIlasueaLv2OugzGJcnivSrghfrx1iPc JCfp4EePTQdB9VgZFMhwaCYM19D0rAWNwr+f8cFl7aodfnpNGqcitnbA2m6LqcBj PGoBZlhHMEqK9Ct+KUvAPyLEOccIs6VJtDoU1KgvHEJCwrIKSK4R0vr4QCm9groq KuZwIb4L/I+H2fiUQ60DOClqc3SViOwmFR9mu+OqdLSU -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:15 2026 by rpki-client