This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/0FVqGtFahGdxcAjyrCXqm-_D_2Y.roa File: 0FVqGtFahGdxcAjyrCXqm-_D_2Y.roa (raw, json) Hash identifier: wbB5r687Xo9TiBjn1MYz/iIirW8EwXDXFQpb0dYotVo= Subject key identifier: D0:55:6A:1A:D1:5A:84:67:71:70:08:F2:AC:25:EA:9B:EF:C3:FF:66 Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Certificate serial: 019B7B36DC99A6F444F44A46B8EF7B6AB5F8 Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/0FVqGtFahGdxcAjyrCXqm-_D_2Y.roa Signing time: Thu 01 Jan 2026 20:19:11 +0000 ROA not before: Thu 01 Jan 2026 20:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 154049 IP address blocks: 85.115.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 14:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:dc:99:a6:f4:44:f4:4a:46:b8:ef:7b:6a:b5:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Validity Not Before: Jan 1 20:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0556a1ad15a8467717008f2ac25ea9befc3ff66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6a:52:97:f7:43:69:3b:71:a0:a9:68:ec:b6: b4:86:21:e7:7a:94:f5:22:32:6e:d8:59:99:84:c1: 01:6e:87:ab:aa:6d:48:d9:02:2d:c5:88:3d:7b:9d: 68:fe:1b:76:8a:33:18:30:e6:30:36:d8:5b:a4:c3: f9:f8:f7:f2:4e:f6:b7:d7:0b:f7:1b:80:b7:4e:4f: 22:de:c9:54:00:84:a6:f5:b6:a5:14:fc:5d:60:3e: 57:1d:bc:e2:9c:7d:15:0d:a1:98:8a:01:ea:02:84: d9:76:c5:40:65:04:7e:6f:24:40:76:01:a1:08:b5: ba:01:35:23:b5:07:43:60:8b:6f:02:25:73:91:29: eb:d5:63:79:ec:5e:be:14:ae:02:29:c2:66:c2:db: 57:a5:e3:2c:23:79:c4:a2:ff:a3:da:7b:b1:3d:ae: c1:08:24:1f:75:3b:e7:bd:7a:3d:93:79:dc:2a:97: f7:8a:31:ba:e0:51:d7:d3:b9:f7:69:a6:d5:bc:40: e2:cf:5a:2a:46:c0:ce:d6:91:e4:41:10:83:1a:c9: a2:fe:55:9d:79:36:60:cb:ef:28:91:e1:06:05:bb: f9:69:69:39:c0:d0:9b:11:9b:e3:14:6f:c6:b6:78: 0c:90:1d:a5:d9:ef:50:39:3e:9c:ca:5d:46:92:7b: 1b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:55:6A:1A:D1:5A:84:67:71:70:08:F2:AC:25:EA:9B:EF:C3:FF:66 X509v3 Authority Key Identifier: keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/0FVqGtFahGdxcAjyrCXqm-_D_2Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.115.211.0/24 Signature Algorithm: sha256WithRSAEncryption ac:7c:26:17:f7:a8:57:1a:86:af:43:5f:06:1b:3b:77:42:7c: 93:05:4b:bb:d6:26:a7:06:6c:c7:c2:17:06:41:4d:c7:4a:93: 7c:83:30:b5:3a:30:52:e5:24:45:c7:aa:3d:3f:bf:dc:2c:1e: 8b:84:0d:66:52:06:78:14:36:74:f4:cb:77:cc:c9:55:56:93: e8:14:92:90:95:01:7f:60:f2:cb:d6:7a:45:a0:05:ec:83:13: 78:02:63:b9:ee:fa:47:01:37:96:65:56:23:23:5e:3e:4c:27: 95:99:bf:12:8f:30:c1:9e:5c:f6:d0:fc:8a:d6:2e:de:fb:d1: 48:a7:93:f1:0b:17:a9:ab:ac:75:dd:a1:84:56:44:b6:96:e3: 5c:e3:6b:95:da:a5:be:77:c9:8e:25:a1:f7:95:61:4b:df:d8: ae:af:5e:97:70:3e:dd:d1:d0:eb:33:6e:82:9a:11:d6:6f:a0: 2e:48:f5:71:03:9f:f6:97:d3:3c:27:cf:38:d5:7a:14:6c:7f: bb:4f:94:79:23:6b:1a:15:26:d0:68:71:31:24:4e:17:2f:08: 2d:f1:00:d2:45:eb:7f:5e:07:14:94:5b:59:25:56:9d:c4:59: e3:8a:70:0e:14:68:db:a5:32:9d:a2:37:83:ae:12:dd:b7:17: 1b:66:6c:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NtyZpvRE9EpGuO97arX4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx ZDA3MjIwHhcNMjYwMTAxMjAxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDU1NmExYWQxNWE4NDY3NzE3MDA4ZjJhYzI1ZWE5YmVmYzNmZjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmpSl/dDaTtxoKlo7La0hiHnepT1 IjJu2FmZhMEBboerqm1I2QItxYg9e51o/ht2ijMYMOYwNthbpMP5+PfyTva31wv3 G4C3Tk8i3slUAISm9balFPxdYD5XHbzinH0VDaGYigHqAoTZdsVAZQR+byRAdgGh CLW6ATUjtQdDYItvAiVzkSnr1WN57F6+FK4CKcJmwttXpeMsI3nEov+j2nuxPa7B CCQfdTvnvXo9k3ncKpf3ijG64FHX07n3aabVvEDiz1oqRsDO1pHkQRCDGsmi/lWd eTZgy+8okeEGBbv5aWk5wNCbEZvjFG/GtngMkB2l2e9QOT6cyl1GknsbywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNBVahrRWoRncXAI8qwl6pvvw/9mMB8GA1UdIwQY MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt ZDI0MmI2ZjNhOGExLzEvMEZWcUd0RmFoR2R4Y0FqeXJDWHFtLV9EXzJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXPTMA0G CSqGSIb3DQEBCwUAA4IBAQCsfCYX96hXGoavQ18GGzt3QnyTBUu71ianBmzHwhcG QU3HSpN8gzC1OjBS5SRFx6o9P7/cLB6LhA1mUgZ4FDZ09Mt3zMlVVpPoFJKQlQF/ YPLL1npFoAXsgxN4AmO57vpHATeWZVYjI14+TCeVmb8SjzDBnlz20PyK1i7e+9FI p5PxCxepq6x13aGEVkS2luNc42uV2qW+d8mOJaH3lWFL39iur16XcD7d0dDrM26C mhHWb6AuSPVxA5/2l9M8J8841XoUbH+7T5R5I2saFSbQaHExJE4XLwgt8QDSRet/ XgcUlFtZJVadxFnjinAOFGjbpTKdojeDrhLdtxcbZmwM -----END CERTIFICATE-----Generated at Fri Jan 9 23:45:10 2026 by rpki-client