This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/fNYW0E0mrdFedNKBb3zR-gEkNFA.roa File: fNYW0E0mrdFedNKBb3zR-gEkNFA.roa (raw, json) Hash identifier: nh3ZGXFkTGVxlA9H+fmw3V84hDZ1pU+3aDOZwNEcWRI= Subject key identifier: 7C:D6:16:D0:4D:26:AD:D1:5E:74:D2:81:6F:7C:D1:FA:01:24:34:50 Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Certificate serial: 019B7DC9CEFC39D5A1B4DE9EF6AA98E286C6 Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/fNYW0E0mrdFedNKBb3zR-gEkNFA.roa Signing time: Fri 02 Jan 2026 08:18:56 +0000 ROA not before: Fri 02 Jan 2026 08:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43298 IP address blocks: 185.113.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:ce:fc:39:d5:a1:b4:de:9e:f6:aa:98:e2:86:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971 Validity Not Before: Jan 2 08:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cd616d04d26add15e74d2816f7cd1fa01243450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8f:f5:ad:f4:67:26:f6:d5:67:06:5e:b4:e1: a2:8c:3c:c6:d7:6b:4f:e9:2c:d7:2e:35:04:8d:46: 0b:11:d5:4b:d3:39:6b:90:41:f1:67:33:98:67:e4: c4:4e:dd:6c:9c:3e:73:c5:d0:46:4e:aa:76:55:34: 49:3d:c9:08:73:5c:3f:32:80:2d:91:ab:b6:89:6b: c3:0b:74:7a:4a:d1:38:e2:fc:ef:ac:ca:6d:d2:53: be:76:22:7d:bc:ee:a9:bb:a5:0d:21:d9:8e:94:d2: d7:9f:aa:00:1a:a2:3b:8a:ac:c4:2c:25:de:91:1d: 3d:ed:1d:59:00:ba:2f:2d:e3:47:ba:17:f5:b5:d1: bb:5f:4e:e0:38:95:1c:2b:93:3a:65:23:b7:67:1d: 26:d6:88:17:c9:00:73:d3:d5:e3:83:02:4e:d7:78: b1:1c:cf:de:92:97:fe:c8:bc:6e:fd:4d:b3:2f:ed: ac:57:8c:48:0b:7d:3e:cc:4f:be:ea:a5:19:d5:3f: 4f:45:46:3d:69:39:64:5f:a7:ee:74:cf:7d:5c:e5: 06:70:c4:04:d1:2e:2c:8f:14:1a:18:1f:79:1a:c5: 2c:53:87:80:3d:73:d9:16:63:cd:bc:60:00:bc:1d: fb:26:63:91:65:76:6b:c9:96:bd:87:b4:74:12:2a: 15:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D6:16:D0:4D:26:AD:D1:5E:74:D2:81:6F:7C:D1:FA:01:24:34:50 X509v3 Authority Key Identifier: keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/fNYW0E0mrdFedNKBb3zR-gEkNFA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.113.135.0/24 Signature Algorithm: sha256WithRSAEncryption 62:0c:d6:36:f7:ca:2a:58:c7:2c:44:2a:6e:01:02:3c:98:93: c0:ac:05:4f:80:4a:88:65:7e:a2:b5:81:a0:0b:22:b5:53:08: 54:75:90:e5:51:42:cf:4f:88:37:94:ee:53:bc:b7:24:6d:4a: 44:e8:31:45:73:df:80:10:7b:34:b3:71:11:20:e8:e3:b6:ed: ef:06:61:7b:09:0d:8f:d1:68:03:c4:f1:e5:9e:13:2e:bf:bd: 89:89:d5:c0:12:06:e1:66:dd:5d:0d:26:aa:8e:66:6c:34:dd: f9:e4:7a:54:5d:d0:24:bd:8f:48:e2:a0:db:3d:7f:6d:aa:68: 96:ed:2e:5c:20:6d:50:7a:b9:ac:6d:d5:5e:c9:4e:d9:66:98: f4:22:18:e0:b6:91:84:a7:15:f2:f0:e8:8c:36:8d:f2:8d:18: 87:77:75:73:13:97:14:e9:e4:d0:08:b8:a2:71:6f:74:be:2d: 7d:f7:4a:69:53:82:20:17:7a:82:07:0e:f5:10:aa:fc:f9:be: ae:06:13:4a:24:bf:7d:71:9c:73:d4:4c:0c:ae:8c:b5:14:84: 6a:fb:d9:e5:18:29:ab:16:d3:db:5c:29:35:60:cc:05:fa:1b: 28:a7:9d:9d:db:19:bb:55:fc:53:c3:ba:fd:c2:9f:1f:7b:be: c1:01:bd:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yc78OdWhtN6e9qqY4obGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy ZjM5NzEwHhcNMjYwMTAyMDgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2Q2MTZkMDRkMjZhZGQxNWU3NGQyODE2ZjdjZDFmYTAxMjQzNDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY/1rfRnJvbVZwZetOGijDzG12tP 6SzXLjUEjUYLEdVL0zlrkEHxZzOYZ+TETt1snD5zxdBGTqp2VTRJPckIc1w/MoAt kau2iWvDC3R6StE44vzvrMpt0lO+diJ9vO6pu6UNIdmOlNLXn6oAGqI7iqzELCXe kR097R1ZALovLeNHuhf1tdG7X07gOJUcK5M6ZSO3Zx0m1ogXyQBz09XjgwJO13ix HM/ekpf+yLxu/U2zL+2sV4xIC30+zE++6qUZ1T9PRUY9aTlkX6fudM99XOUGcMQE 0S4sjxQaGB95GsUsU4eAPXPZFmPNvGAAvB37JmORZXZryZa9h7R0EioVAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHzWFtBNJq3RXnTSgW980foBJDRQMB8GA1UdIwQY MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt NzA0NDYzZWJhZDM2LzEvZk5ZVzBFMG1yZEZlZE5LQmIzelItZ0VrTkZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2 LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXGHMA0G CSqGSIb3DQEBCwUAA4IBAQBiDNY298oqWMcsRCpuAQI8mJPArAVPgEqIZX6itYGg CyK1UwhUdZDlUULPT4g3lO5TvLckbUpE6DFFc9+AEHs0s3ERIOjjtu3vBmF7CQ2P 0WgDxPHlnhMuv72JidXAEgbhZt1dDSaqjmZsNN355HpUXdAkvY9I4qDbPX9tqmiW 7S5cIG1QermsbdVeyU7ZZpj0IhjgtpGEpxXy8OiMNo3yjRiHd3VzE5cU6eTQCLii cW90vi1990ppU4IgF3qCBw71EKr8+b6uBhNKJL99cZxz1EwMroy1FIRq+9nlGCmr FtPbXCk1YMwF+hsop52d2xm7VfxTw7r9wp8fe77BAb1M -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:05 2026 by rpki-client