This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/fJL_3yJ-c6mNDdaD5lADLkXjGvQ.roa File: fJL_3yJ-c6mNDdaD5lADLkXjGvQ.roa (raw, json) Hash identifier: MpRA99Kyyzl1J5oPIvWn+XfiQkdUHbddqAT22yvxz8w= Subject key identifier: 7C:92:FF:DF:22:7E:73:A9:8D:0D:D6:83:E6:50:03:2E:45:E3:1A:F4 Certificate issuer: /CN=075fdb0de4051347a21e9628ac41736734cb4f2b Certificate serial: 019B7F13A41184373331C5758313936E3739 Authority key identifier: 07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/fJL_3yJ-c6mNDdaD5lADLkXjGvQ.roa Signing time: Fri 02 Jan 2026 14:19:12 +0000 ROA not before: Fri 02 Jan 2026 14:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25400 IP address blocks: 79.174.16.0/24 maxlen: 24 79.174.18.0/24 maxlen: 24 194.146.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:a4:11:84:37:33:31:c5:75:83:13:93:6e:37:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=075fdb0de4051347a21e9628ac41736734cb4f2b Validity Not Before: Jan 2 14:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c92ffdf227e73a98d0dd683e650032e45e31af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7d:0a:c6:03:9d:f4:3a:af:9c:0a:bc:73:72: 19:3c:ec:d5:29:0c:98:62:52:8d:6d:5e:32:f0:37: 1b:81:d6:43:78:f2:35:a4:ab:db:84:ca:08:b7:4e: 28:79:be:6f:d6:f5:6a:4f:44:96:40:16:f5:cc:ca: 8c:32:ff:1f:6a:4f:62:3d:82:bb:9d:16:d1:94:01: 40:c3:2d:26:72:ca:e2:7d:08:12:7f:2c:f9:af:08: 15:cb:70:0b:a5:4a:24:f6:2a:13:80:39:d0:cf:d6: 60:12:6a:b0:b4:42:24:51:20:0f:01:5e:f8:80:12: 6b:a2:c8:c0:fe:e9:08:d2:26:f1:39:e9:6e:94:74: 3b:a2:2a:fa:b9:a6:13:9c:1e:df:38:9c:de:3a:e0: dd:40:31:26:b7:bf:50:8a:45:34:b0:86:72:a3:59: b1:d1:0b:12:46:41:60:60:7d:38:2f:4c:3a:03:d4: c3:6a:39:95:0a:11:bc:6f:c1:7a:9b:c6:31:bd:f5: d2:5b:1a:41:5b:47:a4:26:a0:cc:e1:5e:be:dd:f4: 26:e8:f4:bb:d3:96:64:58:1d:7b:6c:e5:c0:ed:12: 41:3c:69:66:9d:91:2c:b3:90:aa:0e:d7:f9:d7:7e: 5e:0f:62:58:75:55:35:7a:c2:88:8c:78:d7:8a:4e: 10:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:92:FF:DF:22:7E:73:A9:8D:0D:D6:83:E6:50:03:2E:45:E3:1A:F4 X509v3 Authority Key Identifier: keyid:07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/fJL_3yJ-c6mNDdaD5lADLkXjGvQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.174.16.0/24 79.174.18.0/24 194.146.8.0/22 Signature Algorithm: sha256WithRSAEncryption 30:a3:a5:16:d0:cd:71:bd:5f:6e:37:4b:6e:eb:21:06:cd:2a: 6d:95:a5:0d:d6:15:5b:c4:39:3d:b5:d2:0c:c5:f1:ea:3c:ac: fa:58:73:70:85:80:39:8c:b5:e4:19:21:bc:12:4d:2e:2e:87: cb:e3:35:b1:8b:44:15:95:63:e6:e1:e7:01:02:05:27:98:cd: a3:8e:08:ce:29:55:5d:51:73:5b:d2:ee:4a:04:6b:ac:00:ba: 78:07:30:d0:ed:65:68:58:b3:f6:87:46:08:9a:cb:33:8d:37: 40:cf:f5:ab:4a:c8:e7:49:fd:bb:5b:d2:24:60:28:56:3b:92: c6:0b:ff:f6:17:6e:3e:8d:a3:bb:a5:75:94:31:2c:46:0c:c2: 61:58:b5:84:77:a2:d8:28:93:8e:0d:f2:ef:8b:54:81:11:9b: 74:57:08:18:a0:84:31:f8:af:bf:46:d5:3a:fc:92:63:9c:7c: d8:c6:1b:ba:75:b1:51:7b:a0:23:95:f4:b3:5f:5c:67:6c:e1: d8:93:f7:7a:dc:56:e9:84:19:e0:95:72:5d:08:2d:43:02:f7: 18:75:2b:3b:12:44:7f:b9:9d:d0:30:e0:37:6f:11:89:21:2b: 93:46:c0:45:21:f0:64:82:ef:76:c6:e7:4a:30:14:8e:3a:42: 40:ad:6a:b4 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/E6QRhDczMcV1gxOTbjc5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NWZkYjBkZTQwNTEzNDdhMjFlOTYyOGFjNDE3MzY3MzRj YjRmMmIwHhcNMjYwMTAyMTQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzkyZmZkZjIyN2U3M2E5OGQwZGQ2ODNlNjUwMDMyZTQ1ZTMxYWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX0KxgOd9DqvnAq8c3IZPOzVKQyY YlKNbV4y8DcbgdZDePI1pKvbhMoIt04oeb5v1vVqT0SWQBb1zMqMMv8fak9iPYK7 nRbRlAFAwy0mcsrifQgSfyz5rwgVy3ALpUok9ioTgDnQz9ZgEmqwtEIkUSAPAV74 gBJrosjA/ukI0ibxOelulHQ7oir6uaYTnB7fOJzeOuDdQDEmt79QikU0sIZyo1mx 0QsSRkFgYH04L0w6A9TDajmVChG8b8F6m8YxvfXSWxpBW0ekJqDM4V6+3fQm6PS7 05ZkWB17bOXA7RJBPGlmnZEss5CqDtf5135eD2JYdVU1esKIjHjXik4QVQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHyS/98ifnOpjQ3Wg+ZQAy5F4xr0MB8GA1UdIwQY MBaAFAdf2w3kBRNHoh6WKKxBc2c0y08rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjFfYkRlUUZFMGVpSHBZb3JFRnpaelRMVHlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yZWYwZjEtNTA4Mi00OGRmLTk0ZmUt Zjc1MzFhMmI2MjQ3LzEvZkpMXzN5Si1jNm1ORGRhRDVsQURMa1hqR3ZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8yZWYwZjEtNTA4Mi00OGRmLTk0ZmUtZjc1MzFhMmI2MjQ3 LzEvQjFfYkRlUUZFMGVpSHBZb3JFRnpaelRMVHlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAT64QAwQA T64SAwQCwpIIMA0GCSqGSIb3DQEBCwUAA4IBAQAwo6UW0M1xvV9uN0tu6yEGzSpt laUN1hVbxDk9tdIMxfHqPKz6WHNwhYA5jLXkGSG8Ek0uLofL4zWxi0QVlWPm4ecB AgUnmM2jjgjOKVVdUXNb0u5KBGusALp4BzDQ7WVoWLP2h0YImsszjTdAz/WrSsjn Sf27W9IkYChWO5LGC//2F24+jaO7pXWUMSxGDMJhWLWEd6LYKJOODfLvi1SBEZt0 VwgYoIQx+K+/RtU6/JJjnHzYxhu6dbFRe6AjlfSzX1xnbOHYk/d63FbphBnglXJd CC1DAvcYdSs7EkR/uZ3QMOA3bxGJISuTRsBFIfBkgu92xudKMBSOOkJArWq0 -----END CERTIFICATE-----Generated at Mon Jan 26 06:03:23 2026 by rpki-client