This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/_i3dzwW_EszihKFaFxYgzMY5p6w.roa File: _i3dzwW_EszihKFaFxYgzMY5p6w.roa (raw, json) Hash identifier: C9SSGdcc7YzzmpkvenG+iGlQfE2KKjV6QnZm59ExRA4= Subject key identifier: FE:2D:DD:CF:05:BF:12:CC:E2:84:A1:5A:17:16:20:CC:C6:39:A7:AC Certificate issuer: /CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb Certificate serial: 019B7C133C205850044BF3C0DBDD697A748C Authority key identifier: 61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/_i3dzwW_EszihKFaFxYgzMY5p6w.roa Signing time: Fri 02 Jan 2026 00:19:53 +0000 ROA not before: Fri 02 Jan 2026 00:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207335 IP address blocks: 185.106.133.0/24 maxlen: 24 2a10:1380::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:3c:20:58:50:04:4b:f3:c0:db:dd:69:7a:74:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb Validity Not Before: Jan 2 00:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe2dddcf05bf12cce284a15a171620ccc639a7ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:7c:e0:59:7e:e4:e4:17:f8:3e:9b:b4:a0:5d: 60:06:d1:a0:6e:86:87:c4:bb:aa:6c:56:ec:c4:4b: 45:b5:77:8b:f0:b5:dd:3c:69:9b:f5:0e:b4:bf:17: 7c:b4:8b:f1:08:7c:ac:07:88:73:be:df:90:f0:1e: 96:9e:f8:d5:e6:2f:5c:f4:0c:ac:00:b9:d7:08:6d: ee:94:ad:e1:c3:15:e7:cb:38:29:50:66:4c:9a:6c: d6:aa:07:90:36:2f:96:98:c7:21:b0:98:7e:f5:c1: c1:93:4b:b2:c9:5e:40:29:75:f8:2b:9c:17:bb:fa: 0c:bd:7c:bb:63:b6:a4:08:5b:b9:b5:85:5b:04:95: 22:92:8e:0f:e1:8e:ee:2e:0e:32:8c:76:0a:1c:d6: d8:47:46:f7:19:78:8e:29:3b:d6:cf:dd:b1:ea:2c: f6:0e:b0:d1:fb:80:88:73:58:fa:29:c2:af:b4:37: a9:ec:e0:6b:c6:4b:75:5b:77:03:1e:27:8a:e2:e9: 7e:5c:64:35:3c:24:21:3b:94:7d:d9:5e:ab:14:00: c9:40:3e:ed:da:9e:6e:42:8c:be:61:e0:90:52:9f: 32:ea:26:88:58:9a:ef:b0:5a:7f:2f:9d:cc:a2:5e: 51:ab:e9:b6:be:52:ce:57:88:94:5d:af:31:79:c7: f5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:2D:DD:CF:05:BF:12:CC:E2:84:A1:5A:17:16:20:CC:C6:39:A7:AC X509v3 Authority Key Identifier: keyid:61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/_i3dzwW_EszihKFaFxYgzMY5p6w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.106.133.0/24 IPv6: 2a10:1380::/29 Signature Algorithm: sha256WithRSAEncryption e5:d2:40:76:4d:28:55:08:da:98:06:57:4c:00:7c:3c:ea:24: 22:24:35:3b:8d:1a:cc:08:c4:2b:69:ee:1d:e8:a3:85:19:1c: 62:ae:a2:2e:b6:80:7f:c7:9e:80:34:8f:c6:fd:71:33:d0:cf: c0:11:ac:75:2f:e0:14:cd:bc:a9:3d:59:45:a8:36:82:3f:14: 0d:4f:40:4b:7a:79:8c:e7:5e:9d:51:3a:8f:83:fc:a9:2d:23: d1:87:fe:60:5c:62:29:9a:0b:21:0f:35:5e:26:07:40:3f:d4: 55:f3:b1:9d:3b:38:f5:32:d2:7c:b0:19:d7:38:f5:b8:1e:f4: 06:66:41:f6:be:44:93:73:ff:56:02:f3:a4:35:a2:2a:08:f8: 8d:22:f0:de:55:23:1f:43:1f:63:23:a8:ed:2d:0e:c2:6d:a5: e4:38:13:30:73:bd:e3:fb:90:2d:d4:72:0a:a1:a3:53:fc:1e: 69:fb:a5:59:18:e3:76:d0:68:46:ba:a3:40:3e:7d:f7:b3:f2: 08:ae:c8:14:aa:0e:b4:a4:19:2f:2d:5f:45:18:6c:ed:16:7f: 0d:b2:5a:ff:b0:eb:fe:a6:29:60:70:54:b3:05:39:f7:66:13: af:da:09:8f:4f:e9:0a:ff:4d:f5:d8:82:f7:12:bb:d6:c3:7d: 28:37:e6:e6 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8EzwgWFAES/PA291penSMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxM2Q1ZTEzNzlmZWE5ZDFkMGY3MjU2ZWQwZmM5MTgzYmU3 NGZlZmIwHhcNMjYwMTAyMDAxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTJkZGRjZjA1YmYxMmNjZTI4NGExNWExNzE2MjBjY2M2MzlhN2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+nzgWX7k5Bf4Ppu0oF1gBtGgboaH xLuqbFbsxEtFtXeL8LXdPGmb9Q60vxd8tIvxCHysB4hzvt+Q8B6WnvjV5i9c9Ays ALnXCG3ulK3hwxXnyzgpUGZMmmzWqgeQNi+WmMchsJh+9cHBk0uyyV5AKXX4K5wX u/oMvXy7Y7akCFu5tYVbBJUiko4P4Y7uLg4yjHYKHNbYR0b3GXiOKTvWz92x6iz2 DrDR+4CIc1j6KcKvtDep7OBrxkt1W3cDHieK4ul+XGQ1PCQhO5R92V6rFADJQD7t 2p5uQoy+YeCQUp8y6iaIWJrvsFp/L53Mol5Rq+m2vlLOV4iUXa8xecf1CQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFP4t3c8FvxLM4oShWhcWIMzGOaesMB8GA1UdIwQY MBaAFGE9XhN5/qnR0PclbtD8kYO+dP77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVQxZUUzbi1xZEhROXlWdTBQeVJnNzUwX3ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9mZDYwNzAtOWUwYi00MzNhLThhNzUt N2Y3M2E0NjcxYTFlLzEvX2kzZHp3V19Fc3ppaEtGYUZ4WWd6TVk1cDZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9mZDYwNzAtOWUwYi00MzNhLThhNzUtN2Y3M2E0NjcxYTFl LzEvWVQxZUUzbi1xZEhROXlWdTBQeVJnNzUwX3ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuWqFMA0E AgACMAcDBQMqEBOAMA0GCSqGSIb3DQEBCwUAA4IBAQDl0kB2TShVCNqYBldMAHw8 6iQiJDU7jRrMCMQrae4d6KOFGRxirqIutoB/x56ANI/G/XEz0M/AEax1L+AUzbyp PVlFqDaCPxQNT0BLenmM516dUTqPg/ypLSPRh/5gXGIpmgshDzVeJgdAP9RV87Gd Ozj1MtJ8sBnXOPW4HvQGZkH2vkSTc/9WAvOkNaIqCPiNIvDeVSMfQx9jI6jtLQ7C baXkOBMwc73j+5At1HIKoaNT/B5p+6VZGON20GhGuqNAPn33s/IIrsgUqg60pBkv LV9FGGztFn8Nslr/sOv+pilgcFSzBTn3ZhOv2gmPT+kK/0312IL3ErvWw30oN+bm -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:36 2026 by rpki-client