This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fkKkQqSxJp_plv8zmlMuWpt7SKA.roa File: fkKkQqSxJp_plv8zmlMuWpt7SKA.roa (raw, json) Hash identifier: Sf+HsASX9t6YQf31Gs6tChY0U3y7nkWEG9+UmtOAYlc= Subject key identifier: 7E:42:A4:42:A4:B1:26:9F:E9:96:FF:33:9A:53:2E:5A:9B:7B:48:A0 Certificate issuer: /CN=7c3c39d1899e699bf5177418ee381489edff4380 Certificate serial: 019B7759376358CE77EF1678224E7C520407 Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fkKkQqSxJp_plv8zmlMuWpt7SKA.roa Signing time: Thu 01 Jan 2026 02:18:14 +0000 ROA not before: Thu 01 Jan 2026 02:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 185.18.123.0/24 maxlen: 24 185.27.178.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:37:63:58:ce:77:ef:16:78:22:4e:7c:52:04:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380 Validity Not Before: Jan 1 02:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e42a442a4b1269fe996ff339a532e5a9b7b48a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bf:3a:98:a7:be:31:d1:61:78:4b:a3:e8:5c: 1a:cd:89:f0:71:00:c6:ad:3d:39:62:89:9c:70:14: bb:59:ee:02:d8:85:ec:55:92:d7:88:ca:eb:49:01: 3e:d2:93:fe:71:33:4b:6c:11:af:cb:3e:36:56:f8: 9f:8c:5c:b8:00:dd:61:e7:74:31:a8:3a:3d:b8:7e: 4d:20:47:5f:9b:a0:66:3f:34:ab:08:73:a5:ac:ac: 64:87:65:e9:79:ee:a1:19:8a:75:26:d4:20:be:4b: ca:6e:d2:76:ea:23:73:00:ce:59:02:a4:0a:ca:9e: e3:3d:df:d8:af:69:72:df:b4:f8:74:a9:a8:d2:06: 23:80:65:35:7b:1d:b8:92:1b:2f:af:61:1a:7a:41: cf:28:e7:46:34:4b:51:99:dd:1d:7b:e2:20:d4:dd: 46:9d:13:7c:98:e4:64:ed:d7:6e:56:23:ff:a3:ef: ec:6e:f2:f9:b3:f6:d0:bc:92:bb:4d:7f:a2:30:5b: 67:60:2d:7b:70:bd:8d:bd:46:33:22:25:30:b4:13: 91:fc:bc:1a:d6:38:26:c5:29:de:6c:75:6b:fb:b2: 46:b3:77:e6:45:fc:74:5b:63:1a:ea:a5:74:47:b8: ca:a5:79:a4:10:25:b7:df:f3:9c:5a:bf:75:36:e9: 3e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:42:A4:42:A4:B1:26:9F:E9:96:FF:33:9A:53:2E:5A:9B:7B:48:A0 X509v3 Authority Key Identifier: keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fkKkQqSxJp_plv8zmlMuWpt7SKA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.18.123.0/24 185.27.178.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:41:82:6f:96:3e:00:01:c1:44:37:5e:1f:c8:1a:d0:96:8d: 01:69:d7:03:06:fa:89:e5:e3:cd:a3:24:18:bf:f2:2e:a2:30: 2d:f6:c8:84:f1:c6:2d:2d:4e:f9:10:ec:69:ef:64:04:81:6a: c9:59:7d:0e:4e:16:ef:47:af:c7:63:b9:d4:2b:f2:2c:fc:6a: 63:c7:a8:eb:04:de:ef:d7:ef:17:0e:31:2e:97:9d:90:04:34: 3c:c7:38:0e:e0:b2:bd:54:80:03:67:3f:f8:66:ec:a9:b3:88: 5a:1d:e4:7a:4b:3a:49:9d:c4:86:02:51:60:0c:71:f9:fa:31: 7d:b3:90:a0:ae:a2:99:3b:ee:37:67:dc:d9:be:b8:5b:36:f4: e5:8c:10:05:33:36:3d:11:23:6d:32:3a:85:e1:e4:a3:96:50: 18:74:ba:fd:74:b2:dd:71:dd:f4:42:47:60:1b:a4:dd:8d:97: b3:ff:ad:5d:57:5e:83:b7:9b:86:6a:2c:92:c0:db:bd:0d:e9: 05:04:8b:79:36:e3:a6:35:e8:d1:5c:90:49:04:80:57:6d:29: ca:07:27:ed:b3:fc:12:32:43:01:69:0e:b1:00:e7:5d:9e:df: 7c:79:3a:f1:9e:47:68:1e:f4:b6:82:07:5b:a5:ec:d4:7a:0a: 20:66:09:ad -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WTdjWM537xZ4Ik58UgQHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2MzOWQxODk5ZTY5OWJmNTE3NzQxOGVlMzgxNDg5ZWRm ZjQzODAwHhcNMjYwMTAxMDIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTQyYTQ0MmE0YjEyNjlmZTk5NmZmMzM5YTUzMmU1YTliN2I0OGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj786mKe+MdFheEuj6FwazYnwcQDG rT05YomccBS7We4C2IXsVZLXiMrrSQE+0pP+cTNLbBGvyz42VvifjFy4AN1h53Qx qDo9uH5NIEdfm6BmPzSrCHOlrKxkh2Xpee6hGYp1JtQgvkvKbtJ26iNzAM5ZAqQK yp7jPd/Yr2ly37T4dKmo0gYjgGU1ex24khsvr2EaekHPKOdGNEtRmd0de+Ig1N1G nRN8mORk7dduViP/o+/sbvL5s/bQvJK7TX+iMFtnYC17cL2NvUYzIiUwtBOR/Lwa 1jgmxSnebHVr+7JGs3fmRfx0W2Ma6qV0R7jKpXmkECW33/OcWr91Nuk+ZwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFH5CpEKksSaf6Zb/M5pTLlqbe0igMB8GA1UdIwQY MBaAFHw8OdGJnmmb9Rd0GO44FInt/0OAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkR3NTBZbWVhWnYxRjNRWTdqZ1VpZTNfUTRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jODAwYzktNTFiNS00NTg5LTkyNjAt MDYzZmNkZDNhMDU3LzEvZmtLa1FxU3hKcF9wbHY4em1sTXVXcHQ3U0tBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9jODAwYzktNTFiNS00NTg5LTkyNjAtMDYzZmNkZDNhMDU3 LzEvZkR3NTBZbWVhWnYxRjNRWTdqZ1VpZTNfUTRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuRJ7AwQB uRuyMA0GCSqGSIb3DQEBCwUAA4IBAQBNQYJvlj4AAcFEN14fyBrQlo0BadcDBvqJ 5ePNoyQYv/IuojAt9siE8cYtLU75EOxp72QEgWrJWX0OThbvR6/HY7nUK/Is/Gpj x6jrBN7v1+8XDjEul52QBDQ8xzgO4LK9VIADZz/4Zuyps4haHeR6SzpJncSGAlFg DHH5+jF9s5CgrqKZO+43Z9zZvrhbNvTljBAFMzY9ESNtMjqF4eSjllAYdLr9dLLd cd30QkdgG6TdjZez/61dV16Dt5uGaiySwNu9DekFBIt5NuOmNejRXJBJBIBXbSnK Byfts/wSMkMBaQ6xAOddnt98eTrxnkdoHvS2ggdbpezUegogZgmt -----END CERTIFICATE-----Generated at Sun Jan 25 14:21:17 2026 by rpki-client