This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/_yMstHwq62YtmKZbMo5Nl7N0BSY.roa File: _yMstHwq62YtmKZbMo5Nl7N0BSY.roa (raw, json) Hash identifier: fA5EOJqyYeCeRJjBOFQnKbcHaakgxJGZzArfMKvJW7M= Subject key identifier: FF:23:2C:B4:7C:2A:EB:66:2D:98:A6:5B:32:8E:4D:97:B3:74:05:26 Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Certificate serial: 019B77C720289ECB06917BD3F13E16CA540A Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/_yMstHwq62YtmKZbMo5Nl7N0BSY.roa Signing time: Thu 01 Jan 2026 04:18:17 +0000 ROA not before: Thu 01 Jan 2026 04:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12599 IP address blocks: 212.64.192.0/24 maxlen: 24 212.64.194.0/24 maxlen: 24 212.64.197.0/24 maxlen: 24 212.64.198.0/24 maxlen: 24 212.64.200.0/24 maxlen: 24 212.64.203.0/24 maxlen: 24 212.64.204.0/24 maxlen: 24 212.64.205.0/24 maxlen: 24 212.64.206.0/24 maxlen: 24 212.64.207.0/24 maxlen: 24 212.64.208.0/24 maxlen: 24 212.64.209.0/24 maxlen: 24 212.64.212.0/24 maxlen: 24 212.64.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 10:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:20:28:9e:cb:06:91:7b:d3:f1:3e:16:ca:54:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Validity Not Before: Jan 1 04:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff232cb47c2aeb662d98a65b328e4d97b3740526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d7:ea:28:79:1b:0c:f1:ea:47:32:eb:cb:bd: a6:fd:98:62:b0:75:73:04:37:fa:46:ef:8f:aa:e6: 1d:7d:79:8a:38:64:ff:c1:9e:cb:1b:b4:3a:e6:98: c0:15:2a:f4:e0:dc:d1:4c:03:4a:9e:3d:16:db:b4: 56:2c:fe:0b:69:30:9b:e6:bd:4c:7b:fe:f4:f4:15: b7:26:83:5b:5a:1e:bd:d4:61:cd:9b:c7:74:40:ad: fb:6c:ef:85:84:df:a5:d3:a8:d9:5f:b5:6b:df:64: f3:97:14:8c:bb:ec:a9:c0:00:32:5d:68:5a:1d:55: 56:6a:77:84:e4:96:13:1b:48:83:fd:6b:9a:51:7a: 7a:e2:11:6f:fd:27:38:61:0a:75:e5:45:dc:53:e6: 2d:49:0f:23:54:b5:ea:c4:46:19:55:4d:c6:45:7a: 16:65:45:b8:d0:e2:db:cd:58:87:d5:ec:83:a0:4a: 58:4a:42:f5:47:4d:e7:a1:31:6a:73:3e:67:2f:1c: 10:12:fd:c5:6f:95:d4:33:6f:4c:4a:69:c2:1c:80: 7b:3d:67:f5:9f:3f:e2:f6:51:96:1d:14:90:96:eb: 69:0a:2a:75:17:d7:4d:6a:4b:f6:cd:8a:8e:c8:bd: 85:f6:4b:a0:00:57:17:a5:ea:fc:b6:65:ef:a3:19: d5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:23:2C:B4:7C:2A:EB:66:2D:98:A6:5B:32:8E:4D:97:B3:74:05:26 X509v3 Authority Key Identifier: keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/_yMstHwq62YtmKZbMo5Nl7N0BSY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.64.192.0/24 212.64.194.0/24 212.64.197.0-212.64.198.255 212.64.200.0/24 212.64.203.0-212.64.209.255 212.64.212.0/24 212.64.220.0/24 Signature Algorithm: sha256WithRSAEncryption 10:a6:81:93:95:76:aa:f4:4e:62:91:e4:66:72:68:46:cf:76: 71:3b:8a:e0:a8:4b:f3:21:79:75:7a:ee:1e:6f:53:c6:4d:55: 6d:10:eb:9c:7b:50:17:74:f3:81:67:e9:02:af:9f:a2:1a:38: 26:17:65:a6:dd:33:e7:2e:f3:a2:ad:31:46:5e:00:38:91:76: 09:ac:be:f4:97:48:6c:fc:7d:ff:be:48:06:1b:af:9d:da:4b: 7b:e0:c7:cf:4f:c9:e8:c3:19:8f:e8:4e:5c:b0:7e:ab:2c:c8: 73:68:67:7b:75:96:d3:5f:3f:13:78:0a:c7:27:9c:75:58:c8: 84:e4:49:4d:86:10:8f:6f:31:e0:9f:cb:29:5b:a7:c7:3e:36: dc:9b:72:36:29:34:e3:e0:d7:86:9c:e5:31:57:1f:21:33:b9: d9:93:85:20:49:c0:87:75:83:62:7f:f2:d7:d0:0f:6d:c6:3c: 08:e9:de:eb:ea:b4:b2:a1:45:9a:29:ba:03:18:59:6f:30:56: 73:8c:b6:63:b5:b3:d7:b2:e0:97:07:5d:20:17:bc:87:58:e4: 3c:ad:b5:1c:3f:a6:67:dd:97:9b:5a:ea:4e:22:fd:6b:a0:5d: 94:af:3e:15:9b:93:be:f5:d9:2c:87:eb:77:17:26:77:d4:24: 07:1a:47:39 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgISAZt3xyAonssGkXvT8T4WylQKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl NWY0YjkwHhcNMjYwMTAxMDQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjIzMmNiNDdjMmFlYjY2MmQ5OGE2NWIzMjhlNGQ5N2IzNzQwNTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9fqKHkbDPHqRzLry72m/ZhisHVz BDf6Ru+PquYdfXmKOGT/wZ7LG7Q65pjAFSr04NzRTANKnj0W27RWLP4LaTCb5r1M e/709BW3JoNbWh691GHNm8d0QK37bO+FhN+l06jZX7Vr32TzlxSMu+ypwAAyXWha HVVWaneE5JYTG0iD/WuaUXp64hFv/Sc4YQp15UXcU+YtSQ8jVLXqxEYZVU3GRXoW ZUW40OLbzViH1eyDoEpYSkL1R03noTFqcz5nLxwQEv3Fb5XUM29MSmnCHIB7PWf1 nz/i9lGWHRSQlutpCip1F9dNakv2zYqOyL2F9kugAFcXper8tmXvoxnVrQIDAQAB o4ICPTCCAjkwHQYDVR0OBBYEFP8jLLR8KutmLZimWzKOTZezdAUmMB8GA1UdIwQY MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt NDRhYjdhOWQ3ZGVhLzEvX3lNc3RId3E2Mll0bUtaYk1vNU5sN04wQlNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQA1EDAAwQA 1EDCMAwDBADUQMUDBADUQMYDBADUQMgwDAMEANRAywMEAdRA0AMEANRA1AMEANRA 3DANBgkqhkiG9w0BAQsFAAOCAQEAEKaBk5V2qvROYpHkZnJoRs92cTuK4KhL8yF5 dXruHm9Txk1VbRDrnHtQF3TzgWfpAq+foho4Jhdlpt0z5y7zoq0xRl4AOJF2Cay+ 9JdIbPx9/75IBhuvndpLe+DHz0/J6MMZj+hOXLB+qyzIc2hne3WW018/E3gKxyec dVjIhORJTYYQj28x4J/LKVunxz423JtyNik04+DXhpzlMVcfITO52ZOFIEnAh3WD Yn/y19APbcY8COne6+q0sqFFmim6AxhZbzBWc4y2Y7Wz17LglwddIBe8h1jkPK21 HD+mZ92Xm1rqTiL9a6BdlK8+FZuTvvXZLIfrdxcmd9QkBxpHOQ== -----END CERTIFICATE-----Generated at Wed Jan 21 19:07:16 2026 by rpki-client