This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/fnFy9nKdma5c-t6GlHQ6pEgFoIU.roa File: fnFy9nKdma5c-t6GlHQ6pEgFoIU.roa (raw, json) Hash identifier: jQJeB4rBAjB3TbqVxO19VAbtwjWuefRkoeop6TPyb5A= Subject key identifier: 7E:71:72:F6:72:9D:99:AE:5C:FA:DE:86:94:74:3A:A4:48:05:A0:85 Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa Certificate serial: 019B7758D3B62AC1171C7F9177F5B1C1C0BE Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/fnFy9nKdma5c-t6GlHQ6pEgFoIU.roa Signing time: Thu 01 Jan 2026 02:17:48 +0000 ROA not before: Thu 01 Jan 2026 02:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43994 IP address blocks: 77.245.96.0/20 maxlen: 20 93.185.64.0/20 maxlen: 20 95.141.128.0/20 maxlen: 20 217.196.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d3:b6:2a:c1:17:1c:7f:91:77:f5:b1:c1:c0:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa Validity Not Before: Jan 1 02:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e7172f6729d99ae5cfade8694743aa44805a085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:23:80:f1:db:e0:f9:92:f6:b5:57:1f:7e:63: 4a:9a:be:71:2c:85:88:49:f5:ea:12:c9:a0:67:27: 17:9b:19:77:5d:59:93:96:2d:a3:01:31:fa:d5:5b: 55:5b:63:d3:46:7e:34:99:82:85:b0:ba:a6:96:0b: a4:59:a1:42:0a:99:e4:b6:e3:4c:4f:d9:c0:95:fb: f4:d1:46:07:1b:b9:e8:99:7b:11:85:e9:4f:3d:36: 58:59:af:c2:3d:b2:65:82:e7:85:ee:66:bf:8c:37: 12:ba:45:f7:c3:37:46:17:9d:c8:4a:3f:8d:35:8d: 66:9a:70:67:fc:c4:e8:4e:ec:25:41:92:08:d0:75: 13:70:ce:72:70:c1:ee:a7:9e:0a:28:cd:96:59:ca: 27:31:3b:46:aa:82:a6:40:ef:e1:5e:ab:ec:8b:b5: b8:ad:c0:55:b7:4f:8c:41:81:c7:09:5c:d6:86:3f: 99:4b:88:f1:a4:a3:3a:f0:e8:5e:41:b2:c3:95:67: 40:74:f0:ad:c9:b4:91:85:34:d2:f9:ff:c5:b6:3e: 30:84:c4:8b:c0:17:32:5a:13:d2:30:bc:95:e2:51: b7:10:77:cb:f9:c6:ec:d0:17:b8:3c:00:b8:ad:90: d9:d3:7e:fd:89:3b:3a:0b:27:cd:de:f0:18:e7:94: e7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:71:72:F6:72:9D:99:AE:5C:FA:DE:86:94:74:3A:A4:48:05:A0:85 X509v3 Authority Key Identifier: keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/fnFy9nKdma5c-t6GlHQ6pEgFoIU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.245.96.0/20 93.185.64.0/20 95.141.128.0/20 217.196.16.0/20 Signature Algorithm: sha256WithRSAEncryption 12:6a:3c:7c:a4:f7:ce:af:65:c9:c6:27:a9:1b:52:4e:c9:86: f1:f4:10:14:7a:9a:6b:32:a0:04:63:50:d6:ed:08:95:57:f7: 34:8e:da:f2:d0:eb:3c:29:52:7e:68:f0:f6:da:81:6e:25:e6: 1e:65:21:12:11:55:bc:93:6c:67:09:db:9f:2c:98:a7:2d:d9: aa:a1:88:3b:dc:5a:78:d7:b5:c0:bd:95:4b:9a:60:94:05:9d: 9d:08:e2:9f:59:6a:f2:0e:13:11:ee:67:9d:e6:5a:8c:fb:03: 60:5b:6a:60:56:e3:87:9b:f4:80:33:ef:61:22:19:2a:4a:1c: 0e:0b:d9:c7:d7:43:fd:da:e9:54:8e:7a:cb:c6:65:ed:8e:54: 70:ef:38:8c:21:c8:ac:a9:79:28:84:da:9d:3f:dd:66:b5:9d: 69:59:3d:7b:48:d3:ba:1b:31:a4:22:f1:5f:8d:5e:31:fa:fb: e2:ef:9f:b2:1f:f9:05:af:c4:e8:2a:be:71:d2:ef:c1:43:82: 1e:64:05:34:b7:b7:c8:0b:00:82:75:ba:b5:47:a1:26:c0:23: e0:18:99:5f:6c:ff:18:5a:91:26:e8:fa:e0:50:82:af:91:f7: 4c:ab:c5:e2:fd:63:c5:c1:f5:12:43:ff:4d:d6:e2:4c:9c:1b: 54:5b:13:7b -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3WNO2KsEXHH+Rd/WxwcC+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMjEwZjIyNTkwOTNhYWY0NTI4NTkyMmE1ODhlOWE2NjFh YmE5ZmEwHhcNMjYwMTAxMDIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTcxNzJmNjcyOWQ5OWFlNWNmYWRlODY5NDc0M2FhNDQ4MDVhMDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniOA8dvg+ZL2tVcffmNKmr5xLIWI SfXqEsmgZycXmxl3XVmTli2jATH61VtVW2PTRn40mYKFsLqmlgukWaFCCpnktuNM T9nAlfv00UYHG7nomXsRhelPPTZYWa/CPbJlgueF7ma/jDcSukX3wzdGF53ISj+N NY1mmnBn/MToTuwlQZII0HUTcM5ycMHup54KKM2WWconMTtGqoKmQO/hXqvsi7W4 rcBVt0+MQYHHCVzWhj+ZS4jxpKM68OheQbLDlWdAdPCtybSRhTTS+f/Ftj4whMSL wBcyWhPSMLyV4lG3EHfL+cbs0Be4PAC4rZDZ0379iTs6CyfN3vAY55TnnQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFH5xcvZynZmuXPrehpR0OqRIBaCFMB8GA1UdIwQY MBaAFJ0hDyJZCTqvRShZIqWI6aZhq6n6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQt NDM4NDNjMmU5NDNiLzEvZm5GeTluS2RtYTVjLXQ2R2xIUTZwRWdGb0lVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQtNDM4NDNjMmU5NDNi LzEvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQETfVgAwQE XblAAwQEX42AAwQE2cQQMA0GCSqGSIb3DQEBCwUAA4IBAQASajx8pPfOr2XJxiep G1JOyYbx9BAUepprMqAEY1DW7QiVV/c0jtry0Os8KVJ+aPD22oFuJeYeZSESEVW8 k2xnCdufLJinLdmqoYg73Fp417XAvZVLmmCUBZ2dCOKfWWryDhMR7med5lqM+wNg W2pgVuOHm/SAM+9hIhkqShwOC9nH10P92ulUjnrLxmXtjlRw7ziMIcisqXkohNqd P91mtZ1pWT17SNO6GzGkIvFfjV4x+vvi75+yH/kFr8ToKr5x0u/BQ4IeZAU0t7fI CwCCdbq1R6EmwCPgGJlfbP8YWpEm6PrgUIKvkfdMq8Xi/WPFwfUSQ/9N1uJMnBtU WxN7 -----END CERTIFICATE-----Generated at Mon Jan 26 06:18:08 2026 by rpki-client