This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/fePx0kRYwwPcb_zt9-rrwAjmN1w.roa File: fePx0kRYwwPcb_zt9-rrwAjmN1w.roa (raw, json) Hash identifier: 4KZtW3GQm6K/quUvrFVgvmKhOxzcCLWTN+/j8SN4EQI= Subject key identifier: 7D:E3:F1:D2:44:58:C3:03:DC:6F:FC:ED:F7:EA:EB:C0:08:E6:37:5C Certificate issuer: /CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec Certificate serial: 019B7C805F8C8DEB6CC24A093158851A5E0F Authority key identifier: C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/fePx0kRYwwPcb_zt9-rrwAjmN1w.roa Signing time: Fri 02 Jan 2026 02:19:06 +0000 ROA not before: Fri 02 Jan 2026 02:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29119 IP address blocks: 45.13.11.0/24 maxlen: 24 185.50.206.0/24 maxlen: 24 185.50.207.0/24 maxlen: 24 188.119.104.0/24 maxlen: 24 193.43.75.0/24 maxlen: 24 193.43.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:5f:8c:8d:eb:6c:c2:4a:09:31:58:85:1a:5e:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec Validity Not Before: Jan 2 02:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7de3f1d24458c303dc6ffcedf7eaebc008e6375c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:19:e4:ec:6b:8e:df:57:b3:37:84:2f:f2:b7: 35:a6:e0:85:30:23:cc:b4:e6:99:63:33:fd:e5:d7: 15:a9:39:c7:99:6e:43:db:c9:e4:1e:cc:bf:01:71: 87:d9:d7:2f:09:32:db:91:54:9a:0d:70:88:65:21: 1d:55:8c:41:8e:b6:f3:1f:a9:ba:e3:0d:5f:5e:06: 72:8d:ad:e3:a4:4e:62:3b:8d:dc:16:0f:31:5d:4d: 72:f7:33:83:da:09:53:ae:3c:86:db:2b:cf:5a:a3: 26:2b:dc:e7:bb:35:25:02:4c:76:69:bd:e7:79:c9: 06:79:4a:1c:48:25:7f:2f:90:f3:84:07:81:79:05: 85:4a:84:3d:ec:5b:7f:4e:ca:67:05:90:9d:54:e8: 94:f1:33:fe:26:36:08:eb:71:b7:79:ee:c9:bf:64: 04:2d:ff:76:c6:63:d7:9e:84:5d:ed:b8:06:79:1c: ef:c4:c1:5f:24:85:6a:77:e7:df:82:11:b9:c9:fe: cd:77:2e:e8:10:be:c5:57:a7:5e:87:50:ee:dd:76: aa:01:2c:4a:de:6a:99:cb:0c:5c:4d:9f:ed:c2:32: dd:b0:06:01:a2:5c:74:42:e3:e3:58:81:f2:f8:50: 5f:c9:98:49:55:05:fd:04:2c:7c:70:de:57:7c:c3: cc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E3:F1:D2:44:58:C3:03:DC:6F:FC:ED:F7:EA:EB:C0:08:E6:37:5C X509v3 Authority Key Identifier: keyid:C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/fePx0kRYwwPcb_zt9-rrwAjmN1w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.11.0/24 185.50.206.0/23 188.119.104.0/24 193.43.75.0/24 193.43.98.0/24 Signature Algorithm: sha256WithRSAEncryption 55:01:76:0e:63:74:d3:97:09:d7:a4:cd:d7:3d:4d:74:bb:9c: cc:fb:83:cf:8c:58:a1:7a:ff:a7:97:9f:1a:ee:f1:cc:20:06: 6d:2b:74:6d:78:1c:78:21:06:82:1a:9e:d1:97:a0:ff:cf:93: 7e:b8:58:44:31:ca:1a:35:50:92:e4:9e:1c:b9:e8:8c:8a:7f: 10:29:4c:e8:67:b4:23:54:1f:b5:1d:7c:67:55:ee:d3:e5:f1: 81:22:93:c8:9f:b5:b4:88:39:89:b2:6f:a4:3c:8f:29:b7:f1: d5:71:44:a7:7c:71:e0:07:20:de:e0:76:38:9e:61:93:30:43: f5:f4:dd:8f:f6:3c:8b:e8:c4:94:98:d5:11:50:0f:a5:dc:4c: 33:53:e3:a2:36:d6:51:d7:93:0e:4a:ef:dc:df:4c:0a:92:38: c9:47:e0:52:fa:06:5e:91:7a:7f:c9:6c:26:57:ba:e6:67:64: ff:51:a1:c8:be:6b:58:b8:70:42:0e:5b:0a:d8:f2:bf:a4:d7: fc:19:f1:66:69:3f:43:0d:c8:ee:84:df:f5:70:56:80:fd:30: 21:1d:1a:59:e7:e4:7f:e6:11:97:56:8c:54:0f:87:dd:27:1c: 72:d2:9f:fa:bc:ae:17:1a:15:98:8c:d2:b1:aa:d2:dc:c5:83: e9:2f:c3:11 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt8gF+MjetswkoJMViFGl4PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYjBkNTM1ZWViY2YyOGU2MGFjOThhZTQ5NWIzNDk4MWI1 YTkzZWMwHhcNMjYwMTAyMDIxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGUzZjFkMjQ0NThjMzAzZGM2ZmZjZWRmN2VhZWJjMDA4ZTYzNzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxnk7GuO31ezN4Qv8rc1puCFMCPM tOaZYzP95dcVqTnHmW5D28nkHsy/AXGH2dcvCTLbkVSaDXCIZSEdVYxBjrbzH6m6 4w1fXgZyja3jpE5iO43cFg8xXU1y9zOD2glTrjyG2yvPWqMmK9znuzUlAkx2ab3n eckGeUocSCV/L5DzhAeBeQWFSoQ97Ft/TspnBZCdVOiU8TP+JjYI63G3ee7Jv2QE Lf92xmPXnoRd7bgGeRzvxMFfJIVqd+ffghG5yf7Ndy7oEL7FV6deh1Du3XaqASxK 3mqZywxcTZ/twjLdsAYBolx0QuPjWIHy+FBfyZhJVQX9BCx8cN5XfMPMywIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFH3j8dJEWMMD3G/87ffq68AI5jdcMB8GA1UdIwQY MBaAFMOw1TXuvPKOYKyYrklbNJgbWpPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzdEVk5lNjg4bzVnckppdVNWczBtQnRhay13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81NTFlOTItOTkyZC00MWRhLTk4NmIt OTUxOTY5M2VhYTdiLzEvZmVQeDBrUll3d1BjYl96dDktcnJ3QWptTjF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS81NTFlOTItOTkyZC00MWRhLTk4NmItOTUxOTY5M2VhYTdi LzEvdzdEVk5lNjg4bzVnckppdVNWczBtQnRhay13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALQ0LAwQB uTLOAwQAvHdoAwQAwStLAwQAwStiMA0GCSqGSIb3DQEBCwUAA4IBAQBVAXYOY3TT lwnXpM3XPU10u5zM+4PPjFihev+nl58a7vHMIAZtK3RteBx4IQaCGp7Rl6D/z5N+ uFhEMcoaNVCS5J4cueiMin8QKUzoZ7QjVB+1HXxnVe7T5fGBIpPIn7W0iDmJsm+k PI8pt/HVcUSnfHHgByDe4HY4nmGTMEP19N2P9jyL6MSUmNURUA+l3EwzU+OiNtZR 15MOSu/c30wKkjjJR+BS+gZekXp/yWwmV7rmZ2T/UaHIvmtYuHBCDlsK2PK/pNf8 GfFmaT9DDcjuhN/1cFaA/TAhHRpZ5+R/5hGXVoxUD4fdJxxy0p/6vK4XGhWYjNKx qtLcxYPpL8MR -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:29 2026 by rpki-client