This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/fYeRjU_mc3h2GVmwavyUioK7cxs.roa File: fYeRjU_mc3h2GVmwavyUioK7cxs.roa (raw, json) Hash identifier: 9Bo6zl6wQTTzHhoMoy+vLsVaHVkougsJgOQtEmgZ41Q= Subject key identifier: 7D:87:91:8D:4F:E6:73:78:76:19:59:B0:6A:FC:94:8A:82:BB:73:1B Certificate issuer: /CN=f1f186e97097c8417d9437d70cfdfc527331b5a8 Certificate serial: 019B7E392A1E2D640643ACF2B464E169B3F6 Authority key identifier: F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/fYeRjU_mc3h2GVmwavyUioK7cxs.roa Signing time: Fri 02 Jan 2026 10:20:34 +0000 ROA not before: Fri 02 Jan 2026 10:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35176 IP address blocks: 185.252.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:2a:1e:2d:64:06:43:ac:f2:b4:64:e1:69:b3:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1f186e97097c8417d9437d70cfdfc527331b5a8 Validity Not Before: Jan 2 10:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d87918d4fe67378761959b06afc948a82bb731b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:85:73:a2:08:eb:23:ca:bb:d3:a6:7c:4d:cd: e1:9b:98:6a:86:81:ed:b4:24:95:41:f7:3a:b4:e1: 39:1d:7f:fc:6f:4a:48:d1:2d:76:23:69:2e:33:7f: 32:f3:96:16:67:70:82:cc:e7:58:6f:1b:9c:2a:cf: c1:d6:bf:1a:d3:c5:7b:77:6f:8b:be:33:a0:7f:a3: f4:93:63:46:7e:6f:3f:18:3b:18:5b:77:5e:fe:db: 95:da:d5:04:e7:46:24:cf:df:8b:de:ca:6f:93:f7: 05:80:92:19:34:d3:95:db:d2:56:77:cd:65:52:75: 72:48:ab:88:04:7b:b3:02:59:ee:0c:1b:b0:ba:9f: 5f:e1:48:ac:24:5f:a0:70:17:c1:67:44:07:58:f6: 8a:a1:f0:25:85:5b:8e:d9:73:f9:51:ee:de:4c:e1: 87:5d:ed:ef:ab:c5:29:1b:4e:b9:cb:a6:32:5c:39: 21:f2:0e:54:1b:1c:9e:43:84:66:57:a5:1d:3f:17: 1f:df:1f:26:c1:41:15:6b:cd:65:c1:0d:ba:8b:94: cd:4f:93:70:ae:51:4d:27:75:45:1a:6e:e1:56:18: dc:1f:e7:27:49:53:da:ce:f0:5a:04:5b:9c:2a:cf: cb:2c:89:e8:b5:1b:58:a5:8c:6d:8b:40:43:59:30: fd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:87:91:8D:4F:E6:73:78:76:19:59:B0:6A:FC:94:8A:82:BB:73:1B X509v3 Authority Key Identifier: keyid:F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/fYeRjU_mc3h2GVmwavyUioK7cxs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.252.21.0/24 Signature Algorithm: sha256WithRSAEncryption 30:a5:f7:17:4c:94:db:d3:3c:52:2e:0a:f2:7d:ae:16:12:96: b4:30:a5:b3:7b:fa:f0:71:f2:79:6f:b2:13:8e:47:cd:b0:63: d8:10:2f:bd:b7:d6:7f:2b:e1:11:2f:fe:41:2f:d0:ab:20:84: f3:80:69:9a:f1:44:e7:a7:64:74:84:3f:b4:31:51:ad:f4:5a: 2c:b1:d0:e1:94:8b:a0:02:2f:79:fe:77:06:57:cf:65:8d:7d: d2:40:37:c7:28:aa:ad:61:b6:53:e2:4c:34:7c:d9:f1:ba:c4: 59:00:ad:b8:ad:da:0f:5c:cb:9b:b2:c2:66:72:c0:b9:70:7b: 0b:ee:e8:5f:9f:23:99:28:2a:c8:6a:1c:1c:2d:a5:85:04:b0: 59:bd:c8:c7:d4:e8:13:57:53:e3:bc:a8:0a:73:27:96:68:da: 79:c5:1b:07:db:39:a2:44:4b:1a:e0:e5:8b:e4:3c:fb:fb:f9: b4:a8:ec:85:dc:39:cc:8c:20:ed:b3:17:65:4f:f1:b9:40:58: da:95:5c:a3:a2:2d:45:85:de:66:b0:9b:e5:14:36:be:be:33: 2d:56:fa:0b:59:9c:05:42:c0:68:27:a1:88:63:7f:90:c0:93: f4:a8:ad:58:b1:b2:a3:02:cd:51:3c:b3:18:40:2b:10:28:1b: 05:86:d3:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OSoeLWQGQ6zytGThabP2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZjE4NmU5NzA5N2M4NDE3ZDk0MzdkNzBjZmRmYzUyNzMz MWI1YTgwHhcNMjYwMTAyMTAyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDg3OTE4ZDRmZTY3Mzc4NzYxOTU5YjA2YWZjOTQ4YTgyYmI3MzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYVzogjrI8q706Z8Tc3hm5hqhoHt tCSVQfc6tOE5HX/8b0pI0S12I2kuM38y85YWZ3CCzOdYbxucKs/B1r8a08V7d2+L vjOgf6P0k2NGfm8/GDsYW3de/tuV2tUE50Ykz9+L3spvk/cFgJIZNNOV29JWd81l UnVySKuIBHuzAlnuDBuwup9f4UisJF+gcBfBZ0QHWPaKofAlhVuO2XP5Ue7eTOGH Xe3vq8UpG065y6YyXDkh8g5UGxyeQ4RmV6UdPxcf3x8mwUEVa81lwQ26i5TNT5Nw rlFNJ3VFGm7hVhjcH+cnSVPazvBaBFucKs/LLInotRtYpYxti0BDWTD94QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH2HkY1P5nN4dhlZsGr8lIqCu3MbMB8GA1UdIwQY MBaAFPHxhulwl8hBfZQ31wz9/FJzMbWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGZHRzZYQ1h5RUY5bERmWERQMzhVbk14dGFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81YzNiOTktYjhlZi00ZWQxLTg1N2Mt YjY1Y2QxMzYyNjJlLzEvZlllUmpVX21jM2gyR1Ztd2F2eVVpb0s3Y3hzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi81YzNiOTktYjhlZi00ZWQxLTg1N2MtYjY1Y2QxMzYyNjJl LzEvOGZHRzZYQ1h5RUY5bERmWERQMzhVbk14dGFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufwVMA0G CSqGSIb3DQEBCwUAA4IBAQAwpfcXTJTb0zxSLgryfa4WEpa0MKWze/rwcfJ5b7IT jkfNsGPYEC+9t9Z/K+ERL/5BL9CrIITzgGma8UTnp2R0hD+0MVGt9FossdDhlIug Ai95/ncGV89ljX3SQDfHKKqtYbZT4kw0fNnxusRZAK24rdoPXMubssJmcsC5cHsL 7uhfnyOZKCrIahwcLaWFBLBZvcjH1OgTV1PjvKgKcyeWaNp5xRsH2zmiREsa4OWL 5Dz7+/m0qOyF3DnMjCDtsxdlT/G5QFjalVyjoi1Fhd5msJvlFDa+vjMtVvoLWZwF QsBoJ6GIY3+QwJP0qK1YsbKjAs1RPLMYQCsQKBsFhtMC -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:35 2026 by rpki-client