This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/F4WIL5lRn1e8KEX9ZaKzwbn8OK0.roa File: F4WIL5lRn1e8KEX9ZaKzwbn8OK0.roa (raw, json) Hash identifier: fsVPNfzwVtcxP1d7ng53S1s+p3QUE/oW7iQYmnK5p84= Subject key identifier: 17:85:88:2F:99:51:9F:57:BC:28:45:FD:65:A2:B3:C1:B9:FC:38:AD Certificate issuer: /CN=a7b487be4f27c91ae32a17ba2ded67c3d5153d3c Certificate serial: 019C32C53CFA06DB8BE971F6AC30D1D7B665 Authority key identifier: A7:B4:87:BE:4F:27:C9:1A:E3:2A:17:BA:2D:ED:67:C3:D5:15:3D:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7SHvk8nyRrjKhe6Le1nw9UVPTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/F4WIL5lRn1e8KEX9ZaKzwbn8OK0.roa Signing time: Fri 06 Feb 2026 11:45:12 +0000 ROA not before: Fri 06 Feb 2026 11:45:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215872 IP address blocks: 85.209.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p7SHvk8nyRrjKhe6Le1nw9UVPTw.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p7SHvk8nyRrjKhe6Le1nw9UVPTw.mft rsync://rpki.ripe.net/repository/DEFAULT/p7SHvk8nyRrjKhe6Le1nw9UVPTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:32:c5:3c:fa:06:db:8b:e9:71:f6:ac:30:d1:d7:b6:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7b487be4f27c91ae32a17ba2ded67c3d5153d3c Validity Not Before: Feb 6 11:45:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1785882f99519f57bc2845fd65a2b3c1b9fc38ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6d:45:f7:7c:d1:d9:65:30:e3:3a:31:4c:94: 61:c8:3f:bc:53:67:43:9a:86:8d:e2:a2:f2:5a:f6: 00:05:56:76:24:3f:72:e2:3c:7b:2d:fd:7a:0d:28: f5:a4:22:e4:a8:5a:c4:8f:ef:da:a4:63:89:0d:0a: b8:74:69:6f:e1:aa:7c:c1:1e:52:01:cf:c1:fd:27: ba:84:f0:95:99:e8:25:dd:26:6d:1c:32:ca:e9:44: bc:6c:95:03:c5:9e:3a:58:5f:b1:54:2d:98:3e:a9: 1a:ea:16:8f:8b:8a:86:c4:0c:34:0b:db:a6:78:3a: 61:54:ef:17:fd:c4:e9:46:b4:ca:fc:83:8d:0d:d9: 80:c7:b2:12:21:f9:25:f6:19:6e:31:61:da:51:eb: ad:ed:a9:78:a3:70:98:9f:28:79:10:58:f3:58:3a: e8:21:7b:69:75:d8:ba:55:7b:86:57:d3:d1:0b:d5: 7d:75:fb:40:66:7f:cf:c3:12:b0:bb:0c:bb:3f:54: d7:fe:a5:a8:2a:14:36:71:99:b4:d3:3f:37:d0:2f: cb:07:23:cd:e8:8d:40:49:62:2c:26:f8:0f:0f:bf: d1:8e:42:28:f7:a9:7b:35:7a:11:00:35:a3:10:02: 2b:51:1b:d5:e2:cc:f8:ae:1d:cf:2e:69:dd:51:86: 57:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:85:88:2F:99:51:9F:57:BC:28:45:FD:65:A2:B3:C1:B9:FC:38:AD X509v3 Authority Key Identifier: keyid:A7:B4:87:BE:4F:27:C9:1A:E3:2A:17:BA:2D:ED:67:C3:D5:15:3D:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7SHvk8nyRrjKhe6Le1nw9UVPTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/F4WIL5lRn1e8KEX9ZaKzwbn8OK0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p7SHvk8nyRrjKhe6Le1nw9UVPTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.209.43.0/24 Signature Algorithm: sha256WithRSAEncryption 87:78:93:8c:83:c2:cc:bb:9d:3c:66:1f:dc:36:72:2d:12:25: d3:38:2b:83:3a:d0:25:81:21:30:8c:d7:0f:a4:56:4a:3c:55: 9d:3f:74:02:3e:20:7a:5f:cf:91:49:4b:54:2b:47:dd:f7:57: 77:b4:cf:bf:b9:bd:31:b9:b6:53:a2:2e:d6:f8:4d:bb:28:bc: 81:27:08:2c:a3:6d:0a:27:de:c6:76:10:ce:f1:6f:fb:90:05: 25:b3:59:57:07:41:78:53:8a:01:ef:cf:fa:6f:64:f7:c2:15: 53:82:3f:6f:94:8c:96:46:fb:c5:44:9a:44:b1:48:37:ec:7e: 89:d7:cc:ac:38:9f:59:31:4e:16:6f:58:fc:62:1e:66:2e:7f: ab:9d:e1:65:74:b5:e3:a6:91:61:a6:cd:0b:70:5f:0d:82:8a: d4:55:72:17:4e:1f:10:56:1f:9e:f2:bb:df:1d:ef:1a:30:ee: 17:eb:d6:49:fb:24:58:1d:53:fb:b7:9f:93:54:33:a2:56:46: 4c:14:4d:2a:5b:0a:84:f6:d0:00:0e:90:83:0e:a0:34:fe:ac: cb:0e:56:1b:25:c2:0e:b8:9f:fa:34:95:97:05:6c:a2:c1:8b: aa:f3:68:af:15:e5:c9:81:10:da:b2:5c:0a:55:bb:df:3b:1d: 49:23:e5:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwyxTz6BtuL6XH2rDDR17ZlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YjQ4N2JlNGYyN2M5MWFlMzJhMTdiYTJkZWQ2N2MzZDUx NTNkM2MwHhcNMjYwMjA2MTE0NTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzg1ODgyZjk5NTE5ZjU3YmMyODQ1ZmQ2NWEyYjNjMWI5ZmMzOGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW1F93zR2WUw4zoxTJRhyD+8U2dD moaN4qLyWvYABVZ2JD9y4jx7Lf16DSj1pCLkqFrEj+/apGOJDQq4dGlv4ap8wR5S Ac/B/Se6hPCVmegl3SZtHDLK6US8bJUDxZ46WF+xVC2YPqka6haPi4qGxAw0C9um eDphVO8X/cTpRrTK/IONDdmAx7ISIfkl9hluMWHaUeut7al4o3CYnyh5EFjzWDro IXtpddi6VXuGV9PRC9V9dftAZn/PwxKwuwy7P1TX/qWoKhQ2cZm00z830C/LByPN 6I1ASWIsJvgPD7/RjkIo96l7NXoRADWjEAIrURvV4sz4rh3PLmndUYZXqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBeFiC+ZUZ9XvChF/WWis8G5/DitMB8GA1UdIwQY MBaAFKe0h75PJ8ka4yoXui3tZ8PVFT08MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDdTSHZrOG55UnJqS2hlNkxlMW53OVVWUFR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8zYTRhZTctM2U4My00Y2U5LWE5ZjMt ODZiZGJmNzkwMTIxLzEvRjRXSUw1bFJuMWU4S0VYOVphS3p3Ym44T0swLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8zYTRhZTctM2U4My00Y2U5LWE5ZjMtODZiZGJmNzkwMTIx LzEvcDdTSHZrOG55UnJqS2hlNkxlMW53OVVWUFR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdErMA0G CSqGSIb3DQEBCwUAA4IBAQCHeJOMg8LMu508Zh/cNnItEiXTOCuDOtAlgSEwjNcP pFZKPFWdP3QCPiB6X8+RSUtUK0fd91d3tM+/ub0xubZToi7W+E27KLyBJwgso20K J97GdhDO8W/7kAUls1lXB0F4U4oB78/6b2T3whVTgj9vlIyWRvvFRJpEsUg37H6J 18ysOJ9ZMU4Wb1j8Yh5mLn+rneFldLXjppFhps0LcF8NgorUVXIXTh8QVh+e8rvf He8aMO4X69ZJ+yRYHVP7t5+TVDOiVkZMFE0qWwqE9tAADpCDDqA0/qzLDlYbJcIO uJ/6NJWXBWyiwYuq82ivFeXJgRDaslwKVbvfOx1JI+Vu -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:34 2026 by rpki-client