This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/fcB7v88dNhWSMeT9xkM_6tDlgB4.roa File: fcB7v88dNhWSMeT9xkM_6tDlgB4.roa (raw, json) Hash identifier: YUROPGa3vWTnRdc4QLIk9Iod/RP5OfyerhymP88IP4Q= Subject key identifier: 7D:C0:7B:BF:CF:1D:36:15:92:31:E4:FD:C6:43:3F:EA:D0:E5:80:1E Certificate issuer: /CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7 Certificate serial: 019B79114B8B6D851A0D4763BF277D73979E Authority key identifier: E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/fcB7v88dNhWSMeT9xkM_6tDlgB4.roa Signing time: Thu 01 Jan 2026 10:18:55 +0000 ROA not before: Thu 01 Jan 2026 10:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24582 IP address blocks: 185.64.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 22:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:4b:8b:6d:85:1a:0d:47:63:bf:27:7d:73:97:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7 Validity Not Before: Jan 1 10:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7dc07bbfcf1d36159231e4fdc6433fead0e5801e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:07:13:82:fb:d4:de:2f:3a:72:ff:bc:0f:71: 07:1d:5a:77:5e:e0:1b:2e:2b:92:a1:54:77:99:08: e0:23:44:b3:3f:79:79:66:15:c9:37:a8:de:36:64: 9d:c0:92:02:5a:81:25:6e:4b:97:77:d0:52:de:30: 0e:53:90:88:9e:a6:43:32:05:9e:e9:05:a5:25:49: 98:97:08:6f:81:9e:9a:e2:80:a6:dc:7d:96:40:f1: 54:bb:0c:07:9c:9c:8d:d0:2d:10:ca:01:4b:a3:70: 59:55:6e:b0:db:f5:f7:66:9e:a6:c8:8d:f5:f5:90: e9:be:2d:07:d7:a3:0e:c7:12:97:45:5d:09:bd:c6: e0:bd:17:e9:97:d2:67:b5:b5:97:e6:01:71:9f:5d: d0:f7:af:e1:e7:73:7f:40:2e:eb:ac:0b:dd:a4:0e: d7:b2:d5:2b:b4:76:69:7b:a1:c7:3d:e6:3c:6d:a8: 6f:b2:74:99:7a:94:6e:b4:ff:40:b5:8b:ea:1b:1e: 8a:f9:d7:23:40:8f:7f:cb:60:da:be:af:89:3f:e9: ee:e0:64:f3:0b:09:52:ad:29:1e:da:12:ba:34:b8: c4:57:07:88:a7:87:b7:9a:48:88:9c:b7:7b:aa:05: dc:c2:dd:ba:f5:f1:29:ff:cc:41:fc:75:a1:ad:f4: bf:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C0:7B:BF:CF:1D:36:15:92:31:E4:FD:C6:43:3F:EA:D0:E5:80:1E X509v3 Authority Key Identifier: keyid:E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/fcB7v88dNhWSMeT9xkM_6tDlgB4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.64.96.0/22 Signature Algorithm: sha256WithRSAEncryption 45:9e:49:44:47:ab:d5:9a:09:4e:f7:b7:c0:39:62:ef:d5:33: 7f:46:30:9d:0f:ad:0d:49:17:7a:91:aa:27:29:72:9c:7b:4c: c7:59:94:48:f7:2f:31:4a:6a:fb:c4:53:1c:d9:d1:a1:c1:77: 8d:57:a6:3b:4e:fd:8a:15:32:28:63:41:c8:13:9f:7c:2c:46: 9a:94:fd:f0:8c:d6:6c:04:88:d8:58:a7:36:18:2b:71:06:e4: b2:46:7d:ad:26:f6:e0:3f:28:e4:75:5e:89:a4:2e:01:eb:7a: e6:65:9a:3b:81:45:3e:bc:07:a0:b8:3a:11:00:b0:21:cc:d2: 3d:15:d9:c4:4b:fe:be:9c:f7:87:fa:f7:ba:8f:ed:d4:70:4b: 3b:50:21:4a:85:2e:2d:cd:b5:b6:fd:f1:f1:0f:0a:ec:8a:73: 18:5f:d4:86:12:74:61:03:86:91:ee:a3:02:49:92:61:93:54: 20:1f:08:03:c5:6c:8f:09:c2:2f:3f:dc:ec:76:f0:27:20:14: b4:a1:45:ac:54:f8:3e:11:ab:eb:09:ef:0b:cf:0a:6d:e9:c6: 93:8e:cb:da:3a:72:e3:50:12:4f:65:35:d0:80:d3:7b:cd:b8: 35:17:ad:0d:86:df:53:c4:94:4a:59:df:11:82:c5:20:5a:99: 86:63:b9:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EUuLbYUaDUdjvyd9c5eeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZDljZmIwNzhlZGE1ODE2ZmM4MDllOThjMjVjYjcxOTYz ZTc1YjcwHhcNMjYwMTAxMTAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGMwN2JiZmNmMWQzNjE1OTIzMWU0ZmRjNjQzM2ZlYWQwZTU4MDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwcTgvvU3i86cv+8D3EHHVp3XuAb LiuSoVR3mQjgI0SzP3l5ZhXJN6jeNmSdwJICWoElbkuXd9BS3jAOU5CInqZDMgWe 6QWlJUmYlwhvgZ6a4oCm3H2WQPFUuwwHnJyN0C0QygFLo3BZVW6w2/X3Zp6myI31 9ZDpvi0H16MOxxKXRV0JvcbgvRfpl9JntbWX5gFxn13Q96/h53N/QC7rrAvdpA7X stUrtHZpe6HHPeY8bahvsnSZepRutP9AtYvqGx6K+dcjQI9/y2Davq+JP+nu4GTz CwlSrSke2hK6NLjEVweIp4e3mkiInLd7qgXcwt269fEp/8xB/HWhrfS/EQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH3Ae7/PHTYVkjHk/cZDP+rQ5YAeMB8GA1UdIwQY MBaAFOfZz7B47aWBb8gJ6Ywly3GWPnW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTluUHNIanRwWUZ2eUFucGpDWExjWlktZGJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8wMDBlYTctYzlmNC00ZWJiLWI5YjEt ZmVlZTdjMjlkNGRlLzEvZmNCN3Y4OGROaFdTTWVUOXhrTV82dERsZ0I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8wMDBlYTctYzlmNC00ZWJiLWI5YjEtZmVlZTdjMjlkNGRl LzEvNTluUHNIanRwWUZ2eUFucGpDWExjWlktZGJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUBgMA0G CSqGSIb3DQEBCwUAA4IBAQBFnklER6vVmglO97fAOWLv1TN/RjCdD60NSRd6kaon KXKce0zHWZRI9y8xSmr7xFMc2dGhwXeNV6Y7Tv2KFTIoY0HIE598LEaalP3wjNZs BIjYWKc2GCtxBuSyRn2tJvbgPyjkdV6JpC4B63rmZZo7gUU+vAeguDoRALAhzNI9 FdnES/6+nPeH+ve6j+3UcEs7UCFKhS4tzbW2/fHxDwrsinMYX9SGEnRhA4aR7qMC SZJhk1QgHwgDxWyPCcIvP9zsdvAnIBS0oUWsVPg+EavrCe8Lzwpt6caTjsvaOnLj UBJPZTXQgNN7zbg1F60Nht9TxJRKWd8RgsUgWpmGY7mj -----END CERTIFICATE-----Generated at Tue Jan 27 07:43:38 2026 by rpki-client