This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/fHpD3phpmM9OPHLUzwT3ZU_QOuQ.roa File: fHpD3phpmM9OPHLUzwT3ZU_QOuQ.roa (raw, json) Hash identifier: J0wWX6BA1Q1CBgRQ+yoAf2qxwucSG2RWCFw2KHZnWAQ= Subject key identifier: 7C:7A:43:DE:98:69:98:CF:4E:3C:72:D4:CF:04:F7:65:4F:D0:3A:E4 Certificate issuer: /CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff Certificate serial: 019B7E37567FD3B1C9094FB9EBCFC0E8A721 Authority key identifier: BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/fHpD3phpmM9OPHLUzwT3ZU_QOuQ.roa Signing time: Fri 02 Jan 2026 10:18:34 +0000 ROA not before: Fri 02 Jan 2026 10:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.135.128.0/24 maxlen: 24 195.191.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:56:7f:d3:b1:c9:09:4f:b9:eb:cf:c0:e8:a7:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff Validity Not Before: Jan 2 10:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c7a43de986998cf4e3c72d4cf04f7654fd03ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9b:21:1a:29:b6:95:9b:22:3b:34:54:14:75: 77:d4:1a:39:e1:5a:fd:17:ba:fc:81:ad:05:9e:b7: 50:97:33:b6:ae:4a:cd:4d:2a:3f:d3:f3:22:29:dc: 25:04:32:6e:47:0f:9e:8e:a4:4d:e3:29:22:6e:b6: 8a:76:d5:22:96:7e:fa:e1:46:b3:e9:41:ff:b6:f2: 49:09:0f:10:eb:51:0d:1b:ff:4b:70:6a:01:3f:ef: 62:fa:85:32:5a:01:5e:56:56:f1:fb:e7:c1:fa:ed: 56:1d:59:18:95:ef:5f:8e:68:ba:95:2e:4c:ba:3f: b2:15:44:ee:0e:64:f3:33:99:5d:3a:c9:c9:e1:1a: 78:51:af:78:8e:96:72:4f:d4:a7:e8:df:a2:dd:ad: 2e:05:8c:19:35:d3:32:3f:59:8b:69:b6:f6:fd:6b: 2d:5a:e2:d9:88:56:eb:6e:34:5c:70:99:f7:6c:c4: d2:b8:94:9b:28:17:1a:53:89:89:a9:f9:9a:60:61: 2a:f4:3e:f5:20:eb:37:78:41:20:95:41:2d:10:50: 33:ae:ce:50:f3:d2:f3:02:10:c4:5a:1a:1f:50:d8: 08:93:8e:3c:3e:27:89:50:bf:9b:fe:d4:f1:5d:45: 7f:46:14:ac:3d:77:4e:87:8b:0d:5e:5e:83:eb:67: 7f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:7A:43:DE:98:69:98:CF:4E:3C:72:D4:CF:04:F7:65:4F:D0:3A:E4 X509v3 Authority Key Identifier: keyid:BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/fHpD3phpmM9OPHLUzwT3ZU_QOuQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.135.128.0/24 195.191.165.0/24 Signature Algorithm: sha256WithRSAEncryption 76:0c:c1:fb:ec:83:e6:fc:a1:72:31:90:1c:4f:c2:8a:50:69: d2:c1:6a:df:01:d5:4d:6f:2b:1c:bb:12:ec:8f:79:f2:ee:6b: 11:e9:d1:28:6b:26:0b:8b:cb:ee:ff:b3:af:7a:dc:d4:c1:f7: 3f:84:03:ee:23:27:ad:01:0e:09:6c:9d:8f:14:67:45:02:1a: 66:1a:ee:dd:39:30:8b:5b:72:4e:f5:5d:74:a0:e3:31:19:ea: e6:c4:7f:70:75:1e:cc:fa:ce:79:dd:dc:e3:77:b4:99:68:1a: 5f:89:83:4b:31:8f:f7:91:04:63:c3:f7:8b:5d:50:f0:ad:b4: 05:71:14:e5:67:7f:a0:c4:54:d9:bd:dd:4d:0f:41:11:63:70: 81:fe:46:b4:37:a7:be:fa:21:b9:c7:bc:c9:50:64:45:71:79: 7d:84:60:b7:13:37:98:36:f7:9e:5f:bb:08:67:ee:f8:24:15: cf:9e:48:2f:a5:47:4e:40:80:03:9b:81:89:8f:49:e8:09:62: 10:92:d2:9c:00:e1:ef:44:88:e9:16:fe:a3:81:5a:ca:12:7c: 40:f9:01:5d:5e:0d:fb:18:8a:ac:f4:b3:27:eb:60:22:7f:c7: 83:ba:8a:26:bd:51:dd:3a:7e:ce:17:9a:f0:9b:fb:01:5a:c1: 45:39:bc:3d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N1Z/07HJCU+568/A6KchMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYjE0Mzk5NmRmZWZmNWY0OWNkMmIwOWI5NDFkMGQ1ZTU3 OGIzZmYwHhcNMjYwMTAyMTAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzdhNDNkZTk4Njk5OGNmNGUzYzcyZDRjZjA0Zjc2NTRmZDAzYWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZshGim2lZsiOzRUFHV31Bo54Vr9 F7r8ga0FnrdQlzO2rkrNTSo/0/MiKdwlBDJuRw+ejqRN4ykibraKdtUiln764Uaz 6UH/tvJJCQ8Q61ENG/9LcGoBP+9i+oUyWgFeVlbx++fB+u1WHVkYle9fjmi6lS5M uj+yFUTuDmTzM5ldOsnJ4Rp4Ua94jpZyT9Sn6N+i3a0uBYwZNdMyP1mLabb2/Wst WuLZiFbrbjRccJn3bMTSuJSbKBcaU4mJqfmaYGEq9D71IOs3eEEglUEtEFAzrs5Q 89LzAhDEWhofUNgIk448PieJUL+b/tTxXUV/RhSsPXdOh4sNXl6D62d/JQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHx6Q96YaZjPTjxy1M8E92VP0DrkMB8GA1UdIwQY MBaAFL2xQ5lt/v9fSc0rCblB0NXleLP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmJGRG1XMy1fMTlKelNzSnVVSFExZVY0c184LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mYmQ5MTEtOGQzNy00ZTNlLTk1OTkt ZmMyOWNhYTVkYjdhLzEvZkhwRDNwaHBtTTlPUEhMVXp3VDNaVV9RT3VRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9mYmQ5MTEtOGQzNy00ZTNlLTk1OTktZmMyOWNhYTVkYjdh LzEvdmJGRG1XMy1fMTlKelNzSnVVSFExZVY0c184LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuYeAAwQA w7+lMA0GCSqGSIb3DQEBCwUAA4IBAQB2DMH77IPm/KFyMZAcT8KKUGnSwWrfAdVN byscuxLsj3ny7msR6dEoayYLi8vu/7OvetzUwfc/hAPuIyetAQ4JbJ2PFGdFAhpm Gu7dOTCLW3JO9V10oOMxGermxH9wdR7M+s553dzjd7SZaBpfiYNLMY/3kQRjw/eL XVDwrbQFcRTlZ3+gxFTZvd1ND0ERY3CB/ka0N6e++iG5x7zJUGRFcXl9hGC3EzeY NveeX7sIZ+74JBXPnkgvpUdOQIADm4GJj0noCWIQktKcAOHvRIjpFv6jgVrKEnxA +QFdXg37GIqs9LMn62Aif8eDuoomvVHdOn7OF5rwm/sBWsFFObw9 -----END CERTIFICATE-----Generated at Sat Jan 10 20:49:52 2026 by rpki-client