This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/fRwRFbsz8jdrCym83gJV2Qs4n6c.roa File: fRwRFbsz8jdrCym83gJV2Qs4n6c.roa (raw, json) Hash identifier: Hp06jgl/FV/piIaRMSjuWDt0icoAhYZoHwEJZ6AZqUQ= Subject key identifier: 7D:1C:11:15:BB:33:F2:37:6B:0B:29:BC:DE:02:55:D9:0B:38:9F:A7 Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Certificate serial: 019B77590962990E9484CE599F17F362D84A Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/fRwRFbsz8jdrCym83gJV2Qs4n6c.roa Signing time: Thu 01 Jan 2026 02:18:02 +0000 ROA not before: Thu 01 Jan 2026 02:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204885 IP address blocks: 85.31.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:09:62:99:0e:94:84:ce:59:9f:17:f3:62:d8:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Validity Not Before: Jan 1 02:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d1c1115bb33f2376b0b29bcde0255d90b389fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:77:51:03:9e:25:35:77:ec:bf:6d:a6:50:a5: 81:ca:36:e3:f3:02:18:4d:d8:56:fb:cd:11:94:31: 6e:45:ff:ab:d6:fe:c3:82:51:41:ba:c2:42:8a:07: 92:14:5e:ce:13:e9:21:9e:08:10:9b:c0:8e:fd:70: 68:fe:ba:b9:e7:de:0e:da:77:d1:d7:af:9b:3d:48: cf:31:25:2a:44:ad:36:d0:e5:84:d9:52:d3:e6:4b: a1:4e:e7:c6:60:8b:19:fe:9d:58:24:bb:b2:4f:c0: 92:33:8d:ea:d4:81:73:ad:ac:e6:3c:a6:f5:96:8b: de:9c:a3:35:33:56:5f:86:01:15:24:dc:d9:b3:74: 5b:ac:53:23:4d:52:38:34:77:01:8c:67:3d:03:8c: 01:8c:51:ac:d0:aa:95:b3:98:a2:8d:b5:99:d0:29: 85:ec:4f:24:c8:6a:41:25:d0:f4:38:47:cb:02:49: 2c:ba:37:d4:88:96:c1:6e:97:9c:0e:b8:6e:55:0d: 96:ae:a5:7f:5a:df:08:df:62:3e:0a:32:4b:f9:5a: f2:a1:1b:42:32:c4:6e:54:bc:fb:a0:e5:94:af:ed: f0:5d:9d:50:e2:73:98:da:39:24:24:fd:46:fc:44: 4f:26:15:cd:8c:6a:76:71:dc:6d:23:41:7f:d8:f7: ab:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:1C:11:15:BB:33:F2:37:6B:0B:29:BC:DE:02:55:D9:0B:38:9F:A7 X509v3 Authority Key Identifier: keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/fRwRFbsz8jdrCym83gJV2Qs4n6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.31.241.0/24 Signature Algorithm: sha256WithRSAEncryption 20:d3:3b:83:e0:67:c1:08:c7:33:21:67:40:34:73:1a:4d:27: 7f:0e:fe:60:b1:d2:a7:a0:48:ca:d0:46:a6:18:50:c4:4d:8f: 12:90:22:a3:c0:c5:bb:c8:d6:f6:46:40:dd:f1:e4:e2:9a:3c: fe:6b:4c:ca:dc:21:76:d3:5b:37:3b:17:33:7b:0e:53:bb:32: e3:c1:79:cb:a8:4b:6e:30:00:c7:40:b2:8c:7f:53:ed:d4:25: 71:0e:51:6f:de:95:20:76:d9:88:52:07:62:59:ef:b5:80:90: 2b:5e:6c:ee:b8:f6:9b:00:da:c5:76:2a:72:55:ba:08:77:06: 05:4a:0b:02:fd:4a:22:63:01:c6:11:c4:78:16:7e:81:27:4d: 71:d9:c0:f2:1a:e1:d5:e5:e2:ec:72:91:5b:f6:44:fa:5c:45: af:fd:59:2a:54:e9:3f:4e:00:06:43:8e:0f:88:87:aa:df:29: ad:06:0e:e2:ad:8b:77:2e:0a:46:14:e4:e1:91:40:04:27:4d: 9e:fe:8e:7b:13:07:9e:a1:36:53:e8:1f:06:a4:72:ab:3f:e8: 6c:8b:dd:93:79:42:86:67:de:d7:10:a1:78:b8:4e:14:02:9c: 56:05:47:b8:5e:fb:41:51:45:0c:2c:5f:a0:55:b6:49:c6:ae: db:bf:8f:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WQlimQ6UhM5ZnxfzYthKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx YjM2ZTgwHhcNMjYwMTAxMDIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDFjMTExNWJiMzNmMjM3NmIwYjI5YmNkZTAyNTVkOTBiMzg5ZmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3dRA54lNXfsv22mUKWByjbj8wIY TdhW+80RlDFuRf+r1v7DglFBusJCigeSFF7OE+khnggQm8CO/XBo/rq5594O2nfR 16+bPUjPMSUqRK020OWE2VLT5kuhTufGYIsZ/p1YJLuyT8CSM43q1IFzrazmPKb1 lovenKM1M1ZfhgEVJNzZs3RbrFMjTVI4NHcBjGc9A4wBjFGs0KqVs5iijbWZ0CmF 7E8kyGpBJdD0OEfLAkksujfUiJbBbpecDrhuVQ2WrqV/Wt8I32I+CjJL+VryoRtC MsRuVLz7oOWUr+3wXZ1Q4nOY2jkkJP1G/ERPJhXNjGp2cdxtI0F/2Per9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH0cERW7M/I3awspvN4CVdkLOJ+nMB8GA1UdIwQY MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt MDI0YjE2NTVjMjQ3LzEvZlJ3UkZic3o4amRyQ3ltODNnSlYyUXM0bjZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3 LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVR/xMA0G CSqGSIb3DQEBCwUAA4IBAQAg0zuD4GfBCMczIWdANHMaTSd/Dv5gsdKnoEjK0Eam GFDETY8SkCKjwMW7yNb2RkDd8eTimjz+a0zK3CF201s3Oxczew5TuzLjwXnLqEtu MADHQLKMf1Pt1CVxDlFv3pUgdtmIUgdiWe+1gJArXmzuuPabANrFdipyVboIdwYF SgsC/UoiYwHGEcR4Fn6BJ01x2cDyGuHV5eLscpFb9kT6XEWv/VkqVOk/TgAGQ44P iIeq3ymtBg7irYt3LgpGFOThkUAEJ02e/o57EweeoTZT6B8GpHKrP+hsi92TeUKG Z97XEKF4uE4UApxWBUe4XvtBUUUMLF+gVbZJxq7bv48r -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:12 2026 by rpki-client