This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/87sPgGS78gNXnDIuF37apaMYRbQ.roa File: 87sPgGS78gNXnDIuF37apaMYRbQ.roa (raw, json) Hash identifier: gwbpEBETTamHMzi2lyqeLf+vpyBZoN6/hFjwP/nt39I= Subject key identifier: F3:BB:0F:80:64:BB:F2:03:57:9C:32:2E:17:7E:DA:A5:A3:18:45:B4 Certificate issuer: /CN=9c907aa046a881fb8050519520163060260d7f31 Certificate serial: 019B7A5B28CC60F614F1B469A806891453F3 Authority key identifier: 9C:90:7A:A0:46:A8:81:FB:80:50:51:95:20:16:30:60:26:0D:7F:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/87sPgGS78gNXnDIuF37apaMYRbQ.roa Signing time: Thu 01 Jan 2026 16:19:13 +0000 ROA not before: Thu 01 Jan 2026 16:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6739 IP address blocks: 185.128.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:28:cc:60:f6:14:f1:b4:69:a8:06:89:14:53:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c907aa046a881fb8050519520163060260d7f31 Validity Not Before: Jan 1 16:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3bb0f8064bbf203579c322e177edaa5a31845b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c0:c2:8e:e5:ed:b9:8e:24:52:49:57:10:2c: bf:26:9b:cc:a0:51:89:0d:63:35:0b:21:15:2b:d2: 31:1a:50:fd:1b:fd:93:27:ac:ed:4b:ce:99:c2:68: a5:e7:87:37:7f:3e:33:f4:02:1f:13:bc:1b:4c:4f: 70:e1:e0:f5:e4:ff:03:71:5a:0c:e2:b8:55:f8:d4: 56:d7:f3:4a:da:72:91:d0:a7:da:3e:36:08:20:01: 71:93:13:0c:4d:61:72:af:06:f4:f8:5c:50:36:71: 18:6d:be:2e:d6:88:cc:4e:fa:36:57:4b:30:c7:20: 5a:31:1b:20:51:9a:cc:97:5d:7a:2c:33:f6:60:42: 84:bb:fb:4f:54:c2:c9:b0:17:db:c8:96:85:da:44: 0f:f0:b4:4d:85:50:ed:ba:81:e1:c8:a2:5a:39:77: 9d:c8:04:d9:d4:4a:9d:33:b7:80:d8:79:5e:a5:9b: 93:5a:0c:af:d8:e9:2a:5b:43:e5:71:1d:47:2d:7b: 79:b9:e3:b7:e6:93:2e:22:22:95:a9:e7:12:e4:58: 23:e7:b4:cc:2b:ff:8d:72:5c:e6:25:ee:ee:d1:1c: bc:0b:60:d1:bd:bf:46:a9:4c:17:13:92:4f:37:4c: 7e:ec:5f:6a:53:72:da:03:1a:bb:07:8e:65:22:62: 99:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:BB:0F:80:64:BB:F2:03:57:9C:32:2E:17:7E:DA:A5:A3:18:45:B4 X509v3 Authority Key Identifier: keyid:9C:90:7A:A0:46:A8:81:FB:80:50:51:95:20:16:30:60:26:0D:7F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/87sPgGS78gNXnDIuF37apaMYRbQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.128.168.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:f2:47:7c:9a:d0:60:8e:e6:bc:3e:c9:cf:91:f7:d0:04:d2: df:61:b9:1f:a5:5e:3c:6e:66:94:8b:c5:c3:82:a2:1d:74:41: 57:9e:9b:64:40:42:a8:b2:72:f7:8f:2d:92:e9:6d:b5:6b:98: 6f:99:f9:e1:b5:b9:3e:85:1e:dc:b1:5e:33:97:47:58:34:79: 34:70:94:49:32:e2:9a:13:6e:01:9a:38:cc:5c:ac:7f:9b:86: 00:d3:c0:8b:28:5c:07:ea:e8:89:9b:dc:c8:82:9a:84:96:88: 33:14:0e:b4:9f:57:db:f4:e1:61:1f:27:8e:57:c8:f7:ae:66: 06:65:af:87:a8:10:d9:4b:9a:a6:ad:a8:0b:bc:93:5b:c1:e9: 20:59:95:59:aa:a9:eb:62:33:bc:ce:b1:a2:80:a9:3a:fa:29: 3d:32:3f:b8:10:75:ff:d3:89:63:fb:21:5f:e4:6c:34:ef:03: 75:7a:ab:32:f1:7f:aa:5b:d4:b6:70:06:b1:24:14:0b:45:8f: b7:03:1d:2b:3a:4a:5b:fb:8e:0d:17:33:ed:f7:1a:fd:33:d6: 52:bd:bf:1f:49:6f:29:0c:a6:47:9d:18:7b:3c:ef:93:a0:20: 26:5c:45:05:11:ec:68:a1:d6:95:9e:b9:e9:0e:4f:c7:2f:3c: ab:43:fa:de -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WyjMYPYU8bRpqAaJFFPzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljOTA3YWEwNDZhODgxZmI4MDUwNTE5NTIwMTYzMDYwMjYw ZDdmMzEwHhcNMjYwMTAxMTYxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2JiMGY4MDY0YmJmMjAzNTc5YzMyMmUxNzdlZGFhNWEzMTg0NWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksDCjuXtuY4kUklXECy/JpvMoFGJ DWM1CyEVK9IxGlD9G/2TJ6ztS86Zwmil54c3fz4z9AIfE7wbTE9w4eD15P8DcVoM 4rhV+NRW1/NK2nKR0KfaPjYIIAFxkxMMTWFyrwb0+FxQNnEYbb4u1ojMTvo2V0sw xyBaMRsgUZrMl116LDP2YEKEu/tPVMLJsBfbyJaF2kQP8LRNhVDtuoHhyKJaOXed yATZ1EqdM7eA2HlepZuTWgyv2OkqW0PlcR1HLXt5ueO35pMuIiKVqecS5Fgj57TM K/+NclzmJe7u0Ry8C2DRvb9GqUwXE5JPN0x+7F9qU3LaAxq7B45lImKZ/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPO7D4Bku/IDV5wyLhd+2qWjGEW0MB8GA1UdIwQY MBaAFJyQeqBGqIH7gFBRlSAWMGAmDX8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkpCNm9FYW9nZnVBVUZHVklCWXdZQ1lOZnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kY2I2MTMtOTNlYi00ZTg2LTg5NWIt YjFlNjk4NzA4ZjU5LzEvODdzUGdHUzc4Z05YbkRJdUYzN2FwYU1ZUmJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9kY2I2MTMtOTNlYi00ZTg2LTg5NWItYjFlNjk4NzA4ZjU5 LzEvbkpCNm9FYW9nZnVBVUZHVklCWXdZQ1lOZnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYCoMA0G CSqGSIb3DQEBCwUAA4IBAQBe8kd8mtBgjua8PsnPkffQBNLfYbkfpV48bmaUi8XD gqIddEFXnptkQEKosnL3jy2S6W21a5hvmfnhtbk+hR7csV4zl0dYNHk0cJRJMuKa E24BmjjMXKx/m4YA08CLKFwH6uiJm9zIgpqElogzFA60n1fb9OFhHyeOV8j3rmYG Za+HqBDZS5qmragLvJNbwekgWZVZqqnrYjO8zrGigKk6+ik9Mj+4EHX/04lj+yFf 5Gw07wN1eqsy8X+qW9S2cAaxJBQLRY+3Ax0rOkpb+44NFzPt9xr9M9ZSvb8fSW8p DKZHnRh7PO+ToCAmXEUFEexoodaVnrnpDk/HLzyrQ/re -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:23 2026 by rpki-client