This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/fkMt2FqBmJx4v3Ia68drKWkga1Y.roa File: fkMt2FqBmJx4v3Ia68drKWkga1Y.roa (raw, json) Hash identifier: 4MPeCUziUrABTZ/KQpwL+y+89ApyFfPPbC0hzzwsCc4= Subject key identifier: 7E:43:2D:D8:5A:81:98:9C:78:BF:72:1A:EB:C7:6B:29:69:20:6B:56 Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb Certificate serial: 019B78A359EEAC567A921813C8F0CEC7EFF5 Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/fkMt2FqBmJx4v3Ia68drKWkga1Y.roa Signing time: Thu 01 Jan 2026 08:18:49 +0000 ROA not before: Thu 01 Jan 2026 08:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44901 IP address blocks: 46.253.4.0/24 maxlen: 24 91.132.60.0/24 maxlen: 24 91.132.61.0/24 maxlen: 24 91.132.62.0/24 maxlen: 24 91.132.63.0/24 maxlen: 24 93.94.140.0/24 maxlen: 24 93.94.142.0/24 maxlen: 24 95.169.196.0/24 maxlen: 24 95.169.202.0/24 maxlen: 24 185.1.156.0/24 maxlen: 24 185.7.219.0/24 maxlen: 24 185.243.212.0/24 maxlen: 24 185.243.213.0/24 maxlen: 24 2a09:be80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:59:ee:ac:56:7a:92:18:13:c8:f0:ce:c7:ef:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb Validity Not Before: Jan 1 08:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e432dd85a81989c78bf721aebc76b2969206b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b3:cc:91:46:d2:5d:65:37:3c:ed:5b:e1:f6: 96:97:04:9f:bb:4a:5b:51:4d:e3:dd:84:76:98:2d: 09:20:47:67:51:18:e3:3b:8d:4e:2c:8b:93:71:62: 7b:40:d0:f9:60:89:2f:17:29:81:93:8f:7f:9d:43: 99:cc:f6:f2:ee:59:89:20:82:94:90:4a:48:45:74: bd:07:b4:5b:ab:e0:8e:06:69:c2:ad:5b:17:a8:19: 11:01:38:ef:f1:88:50:c6:36:08:ae:be:59:85:f5: 00:45:9a:37:2a:81:f8:c8:f5:58:66:92:ea:bc:e8: e8:6b:35:b7:96:cb:52:ee:2b:0f:69:ee:a2:d1:14: a9:ea:5d:db:75:0f:97:a3:c1:b0:bb:0b:a7:d0:76: 30:7c:af:e4:78:c0:c8:7c:6a:8a:0c:13:5c:61:fc: ee:d9:f7:6f:0c:2f:66:55:e9:c8:7d:e2:8d:f0:e6: 54:64:01:70:5d:bd:fe:5c:44:b5:dd:a7:67:0f:0a: 17:15:4e:7b:85:8b:7c:39:72:b0:da:ea:2d:9e:f5: fe:96:a5:27:0b:9a:47:16:e2:e3:d0:3b:aa:f1:24: cb:12:f0:bb:61:e9:9d:c1:7a:83:b7:ad:8e:d6:bd: a0:91:d6:a1:c8:2f:29:ae:88:86:3d:a3:ed:b9:94: 71:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:43:2D:D8:5A:81:98:9C:78:BF:72:1A:EB:C7:6B:29:69:20:6B:56 X509v3 Authority Key Identifier: keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/fkMt2FqBmJx4v3Ia68drKWkga1Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.253.4.0/24 91.132.60.0/22 93.94.140.0/24 93.94.142.0/24 95.169.196.0/24 95.169.202.0/24 185.1.156.0/24 185.7.219.0/24 185.243.212.0/23 IPv6: 2a09:be80::/32 Signature Algorithm: sha256WithRSAEncryption 1f:7b:90:2f:87:ab:a1:70:d3:e1:07:81:57:35:55:2b:3c:16: 06:5d:10:7f:5b:d7:49:06:2c:e2:6e:ad:8d:b0:bd:86:a0:fe: 46:09:25:63:9b:87:e2:40:ed:83:fd:41:91:8e:4b:d1:10:e8: 76:58:f4:8e:7f:a9:07:88:38:04:00:3f:3e:84:27:87:80:b5: a1:b3:df:07:f6:38:24:b4:d6:2d:88:cc:b3:f0:73:1f:ee:df: 9f:ad:cd:dd:92:2c:db:24:17:bf:09:d2:e1:a3:9d:af:dc:2d: 94:70:a6:06:63:db:36:31:86:8c:6a:77:1d:4f:74:16:7e:eb: f6:20:6e:1b:2a:37:9e:ec:91:f2:6c:20:fa:c1:d2:7c:da:aa: 78:c5:5d:7a:50:e2:e5:80:8a:12:6a:ad:4e:81:59:02:57:03: 37:bd:63:a9:21:8a:45:a8:ff:15:e1:fe:5c:e1:de:60:3a:2a: 79:09:d6:aa:b6:3a:19:4c:1d:3f:5a:f8:33:f8:7c:cd:00:07: 84:6b:d9:fd:41:e6:c1:06:da:fd:8a:cd:1b:bf:88:bc:21:73: 76:59:60:af:c2:1e:8a:0a:9f:96:2e:1f:d0:46:e3:aa:5b:c2: a0:86:78:74:85:13:0c:bf:2a:20:a2:5f:a1:06:e0:ce:75:f6: 01:8b:73:b5 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgISAZt4o1nurFZ6khgTyPDOx+/1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MmQ0Y2VjNzgzMzA1OTIzZTM0OTdlZDg4NGYxYzQ0NWI0 ZTc4ZmIwHhcNMjYwMTAxMDgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTQzMmRkODVhODE5ODljNzhiZjcyMWFlYmM3NmIyOTY5MjA2YjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLPMkUbSXWU3PO1b4faWlwSfu0pb UU3j3YR2mC0JIEdnURjjO41OLIuTcWJ7QND5YIkvFymBk49/nUOZzPby7lmJIIKU kEpIRXS9B7Rbq+COBmnCrVsXqBkRATjv8YhQxjYIrr5ZhfUARZo3KoH4yPVYZpLq vOjoazW3lstS7isPae6i0RSp6l3bdQ+Xo8Gwuwun0HYwfK/keMDIfGqKDBNcYfzu 2fdvDC9mVenIfeKN8OZUZAFwXb3+XES13adnDwoXFU57hYt8OXKw2uotnvX+lqUn C5pHFuLj0Duq8STLEvC7YemdwXqDt62O1r2gkdahyC8proiGPaPtuZRxnwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFH5DLdhagZiceL9yGuvHaylpIGtWMB8GA1UdIwQY MBaAFLYtTOx4MwWSPjSX7YhPHERbTnj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGkxTTdIZ3pCWkktTkpmdGlFOGNSRnRPZVBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mMWIzZGEtYmViZi00NGIwLWFiMTIt ZDMyZTI3ZmI3ZTU5LzEvZmtNdDJGcUJtSng0djNJYTY4ZHJLV2tnYTFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9mMWIzZGEtYmViZi00NGIwLWFiMTItZDMyZTI3ZmI3ZTU5 LzEvdGkxTTdIZ3pCWkktTkpmdGlFOGNSRnRPZVBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQALv0EAwQC W4Q8AwQAXV6MAwQAXV6OAwQAX6nEAwQAX6nKAwQAuQGcAwQAuQfbAwQBufPUMA0E AgACMAcDBQAqCb6AMA0GCSqGSIb3DQEBCwUAA4IBAQAfe5Avh6uhcNPhB4FXNVUr PBYGXRB/W9dJBizibq2NsL2GoP5GCSVjm4fiQO2D/UGRjkvREOh2WPSOf6kHiDgE AD8+hCeHgLWhs98H9jgktNYtiMyz8HMf7t+frc3dkizbJBe/CdLho52v3C2UcKYG Y9s2MYaMancdT3QWfuv2IG4bKjee7JHybCD6wdJ82qp4xV16UOLlgIoSaq1OgVkC VwM3vWOpIYpFqP8V4f5c4d5gOip5CdaqtjoZTB0/Wvgz+HzNAAeEa9n9QebBBtr9 is0bv4i8IXN2WWCvwh6KCp+WLh/QRuOqW8Kghnh0hRMMvyogol+hBuDOdfYBi3O1 -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:12 2026 by rpki-client