This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fXZclwjMmJuKFUf7Q9P-NHbNEpQ.roa File: fXZclwjMmJuKFUf7Q9P-NHbNEpQ.roa (raw, json) Hash identifier: anvE7nbyIQqcqcLLGmm77d4AcDLATJhTxcyjOxhWcfo= Subject key identifier: 7D:76:5C:97:08:CC:98:9B:8A:15:47:FB:43:D3:FE:34:76:CD:12:94 Certificate issuer: /CN=7d4d1c8790a913e832c733dff778dee79129700a Certificate serial: 019B77592265E157BA51B64759D1CAC2A3AE Authority key identifier: 7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fXZclwjMmJuKFUf7Q9P-NHbNEpQ.roa Signing time: Thu 01 Jan 2026 02:18:08 +0000 ROA not before: Thu 01 Jan 2026 02:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12337 IP address blocks: 62.128.0.0/19 maxlen: 24 89.250.128.0/20 maxlen: 24 185.227.12.0/22 maxlen: 24 188.92.112.0/21 maxlen: 24 192.109.102.0/24 maxlen: 24 194.31.2.0/24 maxlen: 24 194.59.179.0/24 maxlen: 24 213.95.0.0/16 maxlen: 24 213.155.64.0/19 maxlen: 24 213.183.0.0/19 maxlen: 24 2001:780::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 21:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:22:65:e1:57:ba:51:b6:47:59:d1:ca:c2:a3:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d4d1c8790a913e832c733dff778dee79129700a Validity Not Before: Jan 1 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d765c9708cc989b8a1547fb43d3fe3476cd1294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9b:3a:b6:1f:ec:a7:1f:01:f5:18:09:b4:29: 14:88:56:0f:bc:c0:fe:3b:68:70:3a:28:59:5f:94: 8c:1d:26:cf:db:33:cd:0c:8d:0e:1e:0b:22:22:6f: 17:00:de:45:5d:49:24:dc:18:b1:be:82:53:ac:1b: 6a:ac:eb:23:6c:71:18:1f:ab:91:64:f8:5c:26:7f: 75:5a:42:8e:94:d8:0a:84:7a:0f:57:77:81:da:33: 73:b5:57:96:a5:8d:a4:d1:7e:c4:6a:52:df:b9:50: de:50:4c:fc:ef:05:12:9e:e7:08:fc:b0:ee:f6:4e: 3c:78:eb:72:c4:96:c9:52:e8:0f:98:73:af:77:1f: 6c:0c:1e:80:18:bf:19:21:be:17:1b:c2:90:40:87: b9:0a:82:68:27:33:d7:b3:8a:36:99:ab:6e:36:17: 94:3e:bd:25:3d:21:9e:70:46:7e:54:92:03:d6:a2: 56:00:46:1d:37:52:98:b8:f3:cd:ad:6c:54:85:87: 3d:2b:07:f4:8a:48:6f:59:a7:d2:ca:11:28:ad:ef: 4b:59:8f:5b:60:c3:98:1f:89:43:db:46:75:8d:e0: 0c:1c:ae:07:6b:d5:70:66:27:9c:69:66:cd:80:f4: 1f:27:b8:80:b1:55:93:bc:99:2e:c4:ec:a8:69:da: 9b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:76:5C:97:08:CC:98:9B:8A:15:47:FB:43:D3:FE:34:76:CD:12:94 X509v3 Authority Key Identifier: keyid:7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fXZclwjMmJuKFUf7Q9P-NHbNEpQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.128.0.0/19 89.250.128.0/20 185.227.12.0/22 188.92.112.0/21 192.109.102.0/24 194.31.2.0/24 194.59.179.0/24 213.95.0.0/16 213.155.64.0/19 213.183.0.0/19 IPv6: 2001:780::/32 Signature Algorithm: sha256WithRSAEncryption 0e:f8:17:4b:52:c0:f3:9c:4a:5a:41:a3:1f:86:c7:bb:9c:0b: 06:12:93:6d:52:47:5b:c6:58:da:82:64:7f:5d:90:38:b2:38: d4:76:41:d5:a7:91:5f:95:fd:d5:ec:bb:a3:6a:fd:93:33:06: 15:7f:c6:fd:3d:5b:65:3c:a5:76:00:85:23:31:cb:5b:a9:5e: 94:08:cb:ec:a8:d9:72:2b:ce:b7:4e:49:32:9a:73:bf:06:24: 0f:4e:f3:a4:7b:4d:f5:81:04:9b:6a:dd:30:ac:ff:91:47:45: 24:a9:94:77:f3:e0:a6:db:1f:a7:45:7e:0d:b7:4e:f7:32:b4: d1:15:c1:3c:49:2e:ba:70:7a:6e:c1:ab:5e:3e:fb:23:cb:3b: 04:7b:d9:4c:67:ee:2d:53:01:e1:4e:a7:52:f1:86:51:6c:50: bf:97:eb:7c:a3:58:9f:c8:72:71:05:f0:08:f1:eb:de:f2:c8: d7:90:2f:ea:b8:d3:3b:e3:95:ec:10:13:59:27:ac:d9:77:38: bb:65:2a:bb:05:c2:78:b5:f3:f8:44:c1:8b:52:ee:54:d0:a4: 66:b2:d8:c0:c3:44:9c:5d:58:5c:24:30:fa:ba:e5:7d:31:49: d1:c9:42:69:36:52:b2:1d:16:ca:31:b9:c6:0b:4c:b9:cd:fe: 98:c3:f2:7e -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgISAZt3WSJl4Ve6UbZHWdHKwqOuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNGQxYzg3OTBhOTEzZTgzMmM3MzNkZmY3NzhkZWU3OTEy OTcwMGEwHhcNMjYwMTAxMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDc2NWM5NzA4Y2M5ODliOGExNTQ3ZmI0M2QzZmUzNDc2Y2QxMjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqps6th/spx8B9RgJtCkUiFYPvMD+ O2hwOihZX5SMHSbP2zPNDI0OHgsiIm8XAN5FXUkk3BixvoJTrBtqrOsjbHEYH6uR ZPhcJn91WkKOlNgKhHoPV3eB2jNztVeWpY2k0X7EalLfuVDeUEz87wUSnucI/LDu 9k48eOtyxJbJUugPmHOvdx9sDB6AGL8ZIb4XG8KQQIe5CoJoJzPXs4o2matuNheU Pr0lPSGecEZ+VJID1qJWAEYdN1KYuPPNrWxUhYc9Kwf0ikhvWafSyhEore9LWY9b YMOYH4lD20Z1jeAMHK4Ha9VwZiecaWbNgPQfJ7iAsVWTvJkuxOyoadqbzQIDAQAB o4ICTTCCAkkwHQYDVR0OBBYEFH12XJcIzJibihVH+0PT/jR2zRKUMB8GA1UdIwQY MBaAFH1NHIeQqRPoMscz3/d43ueRKXAKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlUwY2g1Q3BFLWd5eHpQZjkzamU1NUVwY0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8xYzYxODAtOTk1MC00Y2U4LTgxMWUt ZjhkNjYyYjk2ZGFiLzEvZlhaY2x3ak1tSnVLRlVmN1E5UC1OSGJORXBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8xYzYxODAtOTk1MC00Y2U4LTgxMWUtZjhkNjYyYjk2ZGFi LzEvZlUwY2g1Q3BFLWd5eHpQZjkzamU1NUVwY0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBBBAIAATA7AwQFPoAAAwQE WfqAAwQCueMMAwQDvFxwAwQAwG1mAwQAwh8CAwQAwjuzAwMA1V8DBAXVm0ADBAXV twAwDQQCAAIwBwMFACABB4AwDQYJKoZIhvcNAQELBQADggEBAA74F0tSwPOcSlpB ox+Gx7ucCwYSk21SR1vGWNqCZH9dkDiyONR2QdWnkV+V/dXsu6Nq/ZMzBhV/xv09 W2U8pXYAhSMxy1upXpQIy+yo2XIrzrdOSTKac78GJA9O86R7TfWBBJtq3TCs/5FH RSSplHfz4KbbH6dFfg23TvcytNEVwTxJLrpwem7Bq14++yPLOwR72Uxn7i1TAeFO p1LxhlFsUL+X63yjWJ/IcnEF8Ajx697yyNeQL+q40zvjlewQE1knrNl3OLtlKrsF wni18/hEwYtS7lTQpGay2MDDRJxdWFwkMPq65X0xSdHJQmk2UrIdFsoxucYLTLnN /pjD8n4= -----END CERTIFICATE-----Generated at Tue Feb 3 06:35:19 2026 by rpki-client