This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_EAdbKIlNCwppTUnYtOH719X6EU.roa File: _EAdbKIlNCwppTUnYtOH719X6EU.roa (raw, json) Hash identifier: Jm0d38jKbNV/SfdJd3VVcUEtQMJ+UWyy4HHgcaknpW0= Subject key identifier: FC:40:1D:6C:A2:25:34:2C:29:A5:35:27:62:D3:87:EF:5F:57:E8:45 Certificate issuer: /CN=ff70868f0c2c218765fa6b53ab9af065ff339f06 Certificate serial: 019B775960CE51A354D37021355C2A3CE58F Authority key identifier: FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_EAdbKIlNCwppTUnYtOH719X6EU.roa Signing time: Thu 01 Jan 2026 02:18:24 +0000 ROA not before: Thu 01 Jan 2026 02:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207872 IP address blocks: 178.236.203.0/24 maxlen: 24 185.213.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:60:ce:51:a3:54:d3:70:21:35:5c:2a:3c:e5:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff70868f0c2c218765fa6b53ab9af065ff339f06 Validity Not Before: Jan 1 02:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc401d6ca225342c29a5352762d387ef5f57e845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:10:7d:fe:e8:2c:29:7c:1e:d5:36:03:bb:91: 2c:ea:8d:de:42:61:b8:78:49:f9:62:7f:48:d5:4e: 3e:f1:e6:22:b0:b0:e3:df:20:0d:6c:fe:58:26:00: 74:ea:0e:56:1e:7c:a4:c1:5c:f0:5f:11:96:4d:62: 9a:0a:72:85:c4:55:d6:26:31:d4:30:e7:2d:61:c3: 25:ed:37:6d:59:4f:b5:8e:40:fa:55:6f:08:02:16: 46:f5:53:dc:28:d1:58:b6:24:8e:4f:51:85:8a:35: 2a:05:60:8b:d2:04:61:94:2d:d0:99:12:63:6b:e5: 3d:04:37:1e:98:4d:b0:56:89:7f:ff:4b:be:2c:ec: 04:2a:0f:a1:50:89:1b:07:09:89:da:ee:71:ad:cf: 53:73:a0:7a:d3:31:42:9e:20:0d:bc:66:ce:65:44: 68:9a:37:42:17:e7:f0:fb:41:82:1d:95:59:b2:3b: 85:48:2d:b9:af:ad:76:04:6f:d4:22:ad:42:36:ca: 52:83:ab:ac:99:43:d7:74:64:fd:cd:a2:5a:c1:06: 10:87:1b:95:44:14:cf:68:85:dc:26:c0:9c:e3:63: d5:64:01:86:69:36:db:d6:3c:18:1b:5c:1c:2c:7b: 5c:25:5d:53:ef:d8:a0:b1:e0:cf:32:3f:d7:68:c5: 7c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:40:1D:6C:A2:25:34:2C:29:A5:35:27:62:D3:87:EF:5F:57:E8:45 X509v3 Authority Key Identifier: keyid:FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_EAdbKIlNCwppTUnYtOH719X6EU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.236.203.0/24 185.213.44.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:0e:be:b2:4a:bb:66:10:52:66:60:78:9f:55:94:08:80:d4: 4b:c6:d5:f4:ce:21:dd:00:dd:98:28:6f:0b:61:0d:9c:81:f1: a8:66:25:03:e0:2b:0a:4a:8d:1b:5f:76:d2:5e:5e:51:5f:78: 14:df:4a:84:98:74:4b:a9:df:cb:13:40:33:e6:80:20:a6:73: 9a:b0:77:c1:38:00:b9:55:d2:cf:fa:af:9b:18:e7:62:5a:06: d1:5d:e2:b1:d9:3b:c4:62:0a:62:30:d8:ea:1f:a4:47:96:74: 5b:45:fd:97:6e:b6:57:99:88:8b:bb:08:0d:bd:c0:7b:92:fe: 62:06:06:08:d6:66:72:4b:4a:de:bd:1d:7f:80:fc:51:6c:81: 6a:57:11:de:5f:d9:4a:b2:16:81:78:40:5b:5f:cf:4b:f5:6f: f9:75:ae:2d:19:a4:8a:01:6e:4b:e8:62:0d:27:02:08:6b:b0: 88:78:da:60:69:bb:de:76:9e:2b:f3:85:1d:26:ab:d2:19:49: 03:5c:d8:89:ee:ed:74:1f:ee:8e:09:77:79:6a:62:ba:ba:19: db:04:61:4a:65:ab:ff:5c:ac:6e:e4:6f:5d:d4:e0:78:21:50: 9b:9e:79:8e:c6:f4:18:a5:74:07:cb:b1:6a:cd:01:45:00:f5: eb:15:ba:77 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WWDOUaNU03AhNVwqPOWPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNzA4NjhmMGMyYzIxODc2NWZhNmI1M2FiOWFmMDY1ZmYz MzlmMDYwHhcNMjYwMTAxMDIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzQwMWQ2Y2EyMjUzNDJjMjlhNTM1Mjc2MmQzODdlZjVmNTdlODQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xB9/ugsKXwe1TYDu5Es6o3eQmG4 eEn5Yn9I1U4+8eYisLDj3yANbP5YJgB06g5WHnykwVzwXxGWTWKaCnKFxFXWJjHU MOctYcMl7TdtWU+1jkD6VW8IAhZG9VPcKNFYtiSOT1GFijUqBWCL0gRhlC3QmRJj a+U9BDcemE2wVol//0u+LOwEKg+hUIkbBwmJ2u5xrc9Tc6B60zFCniANvGbOZURo mjdCF+fw+0GCHZVZsjuFSC25r612BG/UIq1CNspSg6usmUPXdGT9zaJawQYQhxuV RBTPaIXcJsCc42PVZAGGaTbb1jwYG1wcLHtcJV1T79igseDPMj/XaMV8rwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPxAHWyiJTQsKaU1J2LTh+9fV+hFMB8GA1UdIwQY MBaAFP9who8MLCGHZfprU6ua8GX/M58GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzNDR2p3d3NJWWRsLW10VHE1cndaZjh6bndZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8zNTRiM2ItNWQ3Ni00OWQ1LWE1NmMt MDA3YzRlNTg1MjdlLzEvX0VBZGJLSWxOQ3dwcFRVbll0T0g3MTlYNkVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8zNTRiM2ItNWQ3Ni00OWQ1LWE1NmMtMDA3YzRlNTg1Mjdl LzEvXzNDR2p3d3NJWWRsLW10VHE1cndaZjh6bndZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsuzLAwQA udUsMA0GCSqGSIb3DQEBCwUAA4IBAQAvDr6ySrtmEFJmYHifVZQIgNRLxtX0ziHd AN2YKG8LYQ2cgfGoZiUD4CsKSo0bX3bSXl5RX3gU30qEmHRLqd/LE0Az5oAgpnOa sHfBOAC5VdLP+q+bGOdiWgbRXeKx2TvEYgpiMNjqH6RHlnRbRf2XbrZXmYiLuwgN vcB7kv5iBgYI1mZyS0revR1/gPxRbIFqVxHeX9lKshaBeEBbX89L9W/5da4tGaSK AW5L6GINJwIIa7CIeNpgabvedp4r84UdJqvSGUkDXNiJ7u10H+6OCXd5amK6uhnb BGFKZav/XKxu5G9d1OB4IVCbnnmOxvQYpXQHy7FqzQFFAPXrFbp3 -----END CERTIFICATE-----Generated at Tue Feb 10 02:58:24 2026 by rpki-client