This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/faxz85ncSANyoCyoA0iZzbQT2pA.roa File: faxz85ncSANyoCyoA0iZzbQT2pA.roa (raw, json) Hash identifier: c9pfeG45GPdyOjVw3Hfm0xwfiU1wCm+0zXavVbdZ1pg= Subject key identifier: 7D:AC:73:F3:99:DC:48:03:72:A0:2C:A8:03:48:99:CD:B4:13:DA:90 Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2 Certificate serial: 019B79112B3A1D03371CA686826D71A36002 Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/faxz85ncSANyoCyoA0iZzbQT2pA.roa Signing time: Thu 01 Jan 2026 10:18:46 +0000 ROA not before: Thu 01 Jan 2026 10:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215120 IP address blocks: 91.227.33.0/24 maxlen: 24 91.244.70.0/24 maxlen: 24 91.244.71.0/24 maxlen: 24 93.157.138.0/24 maxlen: 24 93.157.139.0/24 maxlen: 24 193.178.186.0/24 maxlen: 24 2a07:cec0:4300::/48 maxlen: 48 2a07:cec4::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:2b:3a:1d:03:37:1c:a6:86:82:6d:71:a3:60:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2 Validity Not Before: Jan 1 10:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7dac73f399dc480372a02ca8034899cdb413da90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ab:9c:e7:84:65:a8:7c:67:62:ed:1a:1f:9a: 61:81:16:0e:95:da:e3:e3:18:a0:68:8f:06:80:0d: 58:81:80:88:cf:8e:13:33:1b:d1:03:aa:79:ce:92: 71:34:c6:3f:e3:14:a9:76:f3:76:9e:1a:18:41:6c: a7:0a:16:9e:d3:43:69:7d:f7:c0:d2:b3:44:f9:b9: cb:42:1b:88:9d:9f:b8:30:b8:bd:7f:99:4f:b8:d5: f8:fb:58:19:67:94:72:23:c5:61:ad:d9:06:22:2d: 38:dc:c9:21:f0:d7:22:c5:0e:71:ec:c7:ac:c8:05: 8b:5b:7c:bb:ff:16:5e:78:c9:3c:12:80:32:bc:d6: ec:82:1a:bc:f0:fb:d2:81:1d:75:c4:4d:56:9a:1a: 0d:24:6b:54:f8:d6:87:b6:d2:db:ff:87:7a:fd:f1: cc:a9:26:ce:7b:2a:c4:1c:6c:17:af:ae:9e:c9:78: 9c:bd:58:1d:80:f8:32:26:6e:57:59:02:99:1d:80: f1:14:7e:12:ab:a9:6e:b9:fe:4e:20:10:cf:2b:7b: 10:39:6d:4f:dd:0d:b4:5b:a7:10:9b:7d:2c:0c:72: e2:bb:ef:61:7a:3f:74:c8:2b:61:96:77:f8:0b:06: 23:7c:4c:3b:a7:93:d9:af:76:44:45:e2:55:62:4e: 3a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AC:73:F3:99:DC:48:03:72:A0:2C:A8:03:48:99:CD:B4:13:DA:90 X509v3 Authority Key Identifier: keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/faxz85ncSANyoCyoA0iZzbQT2pA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.227.33.0/24 91.244.70.0/23 93.157.138.0/23 193.178.186.0/24 IPv6: 2a07:cec0:4300::/48 2a07:cec4::/30 Signature Algorithm: sha256WithRSAEncryption 0e:39:f3:68:a4:e8:ee:6d:61:ce:37:7c:8e:fc:f9:fe:bd:06: 3e:bd:d9:82:41:2d:1e:67:df:82:c9:9e:6f:67:df:37:0a:46: 83:5c:1a:36:f7:37:a4:ac:e6:13:8f:db:2b:0c:7a:aa:07:e1: b1:a2:e5:d0:63:54:30:91:82:fb:f0:27:76:9d:24:40:9a:c5: 13:b2:29:f3:96:3c:42:be:07:e9:19:81:b4:a7:62:08:65:66: 1a:05:81:2f:b0:ed:59:70:08:d5:0b:2f:ff:a8:43:64:ea:54: 0f:f2:ac:0c:33:f9:28:32:1b:3d:99:a4:76:1b:5f:81:8e:23: 01:a2:80:6b:93:1c:9d:0e:e7:f8:22:9e:75:e4:f1:cb:38:de: 93:e1:58:de:bb:bb:43:eb:95:2c:a1:38:4b:7c:59:05:ac:2f: ff:48:0f:df:25:a3:0f:9a:8c:e8:9c:5d:b4:5a:57:b2:d6:ec: d3:90:88:c5:2d:2c:f2:78:fa:64:a1:c7:8c:02:04:df:ef:30: 03:29:8b:02:e5:79:b6:e9:29:d2:ac:e9:1c:43:2a:8d:79:bd: 1b:f6:f5:e2:6b:08:67:e8:da:92:ad:ea:3d:8b:76:eb:57:09: 78:01:e9:de:2a:ec:a2:6d:f9:23:51:54:5a:56:34:fc:71:96: 19:ac:7c:9e -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt5ESs6HQM3HKaGgm1xo2ACMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYTViNjIzNDdhMWI2NGNlYTQ5YTJhYjNhYjQ5ODNjMzQ4 NjFmYjIwHhcNMjYwMTAxMTAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGFjNzNmMzk5ZGM0ODAzNzJhMDJjYTgwMzQ4OTljZGI0MTNkYTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsquc54RlqHxnYu0aH5phgRYOldrj 4xigaI8GgA1YgYCIz44TMxvRA6p5zpJxNMY/4xSpdvN2nhoYQWynChae00NpfffA 0rNE+bnLQhuInZ+4MLi9f5lPuNX4+1gZZ5RyI8VhrdkGIi043Mkh8NcixQ5x7Mes yAWLW3y7/xZeeMk8EoAyvNbsghq88PvSgR11xE1WmhoNJGtU+NaHttLb/4d6/fHM qSbOeyrEHGwXr66eyXicvVgdgPgyJm5XWQKZHYDxFH4Sq6luuf5OIBDPK3sQOW1P 3Q20W6cQm30sDHLiu+9hej90yCthlnf4CwYjfEw7p5PZr3ZEReJVYk46LwIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFH2sc/OZ3EgDcqAsqANImc20E9qQMB8GA1UdIwQY MBaAFO+ltiNHobZM6kmiqzq0mDw0hh+yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQt MDEzZDJhMTFjMGE1LzEvZmF4ejg1bmNTQU55b0N5b0EwaVp6YlFUMnBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQtMDEzZDJhMTFjMGE1 LzEvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODAeBAIAATAYAwQAW+MhAwQB W/RGAwQBXZ2KAwQAwbK6MBYEAgACMBADBwAqB87AQwADBQIqB87EMA0GCSqGSIb3 DQEBCwUAA4IBAQAOOfNopOjubWHON3yO/Pn+vQY+vdmCQS0eZ9+CyZ5vZ983CkaD XBo29zekrOYTj9srDHqqB+GxouXQY1QwkYL78Cd2nSRAmsUTsinzljxCvgfpGYG0 p2IIZWYaBYEvsO1ZcAjVCy//qENk6lQP8qwMM/koMhs9maR2G1+BjiMBooBrkxyd Duf4Ip515PHLON6T4Vjeu7tD65UsoThLfFkFrC//SA/fJaMPmozonF20Wley1uzT kIjFLSzyePpkoceMAgTf7zADKYsC5Xm26SnSrOkcQyqNeb0b9vXiawhn6NqSreo9 i3brVwl4AeneKuyibfkjUVRaVjT8cZYZrHye -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:36 2026 by rpki-client