This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/ffZakNnkJ9qo1A3shFhtl9qXd_Q.roa File: ffZakNnkJ9qo1A3shFhtl9qXd_Q.roa (raw, json) Hash identifier: zf21A+pRvsATbzNE1edRMBnzKSA0PFpPQRbeA3NRvG4= Subject key identifier: 7D:F6:5A:90:D9:E4:27:DA:A8:D4:0D:EC:84:58:6D:97:DA:97:77:F4 Certificate issuer: /CN=edb926f8c603aab79cb46a883bf632564a3faabf Certificate serial: 019B7834AA212E793B1D9C2DE8381ED831E6 Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/ffZakNnkJ9qo1A3shFhtl9qXd_Q.roa Signing time: Thu 01 Jan 2026 06:17:55 +0000 ROA not before: Thu 01 Jan 2026 06:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210365 IP address blocks: 185.62.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:aa:21:2e:79:3b:1d:9c:2d:e8:38:1e:d8:31:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf Validity Not Before: Jan 1 06:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7df65a90d9e427daa8d40dec84586d97da9777f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5b:1e:ac:ba:01:6e:2b:ac:a7:9a:7f:20:b4: d0:32:49:c5:65:71:3f:70:a5:8d:2e:f6:3c:de:77: 44:49:37:03:cd:11:bc:a2:f8:e9:d0:f4:0b:5e:1e: c3:48:8d:16:86:a0:d3:54:55:bc:5c:21:bd:2c:ab: 7c:f0:93:e2:39:db:01:1e:d9:c9:26:d3:14:57:ac: 73:db:8d:59:5f:6e:01:63:80:b9:bd:a5:56:3f:66: 12:a7:0d:0c:70:60:5c:1a:11:73:69:cc:6e:74:0b: b2:d5:a5:ac:f2:b5:ca:62:e3:94:90:89:7e:93:e1: 41:84:13:30:90:ca:55:ff:25:45:96:b9:2c:98:e9: ff:e3:26:63:54:e1:e5:e8:f4:8f:28:b2:d3:78:99: ab:f2:f0:45:a1:e4:71:ac:47:30:c9:69:05:26:68: 5d:6e:43:5e:42:21:ae:a0:7c:2a:83:1e:08:99:01: 1a:b0:90:4d:06:48:60:a2:f2:ac:26:b4:56:a8:47: 38:86:b7:75:f5:79:3b:8c:00:0c:1c:cf:f4:de:fb: 23:00:24:bd:90:27:d3:90:e4:95:df:eb:a2:23:5c: 7d:01:39:50:2c:58:ae:8a:3e:29:cc:37:34:d5:6b: 9f:06:36:bc:7b:15:e0:5b:cf:d5:67:71:9d:4e:93: d7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F6:5A:90:D9:E4:27:DA:A8:D4:0D:EC:84:58:6D:97:DA:97:77:F4 X509v3 Authority Key Identifier: keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/ffZakNnkJ9qo1A3shFhtl9qXd_Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.62.206.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:e1:ae:99:f2:15:de:85:48:11:9c:46:cc:51:5e:ab:56:c6: 83:34:86:d4:07:96:99:59:82:03:9d:03:80:8b:ee:29:c5:64: fc:9b:1e:17:2d:fd:9f:de:85:80:f8:76:54:71:40:d7:d6:ee: a3:42:62:4b:bc:5f:69:14:0c:d8:f0:3f:72:11:56:75:e5:13: c2:5d:7b:80:b4:41:7f:72:c4:50:de:9d:fc:80:16:f1:3a:81: a8:0c:dc:00:89:90:38:7b:4b:f5:b2:14:ce:33:9f:ec:37:0a: 5f:be:f2:45:19:ad:47:78:74:ea:bb:b8:eb:e6:1c:fd:e6:cd: 2b:bd:24:96:00:a9:c0:08:1c:e6:0a:13:20:f3:d0:fc:a2:aa: 98:c1:7d:cb:0a:e4:bf:17:20:53:53:25:40:f4:8d:b2:de:55: 09:dd:c5:a3:d8:68:7e:e6:2d:9b:02:05:94:16:f3:8f:f8:6f: d8:81:b7:53:85:e4:2a:c9:4b:05:63:0e:99:f0:22:56:af:69: b4:de:bd:08:81:3d:b5:be:34:44:66:1f:1c:23:df:42:89:2f: b1:6e:cf:f2:62:b3:11:02:5f:b7:aa:de:8d:72:06:cf:ec:41: 32:86:b8:5b:26:91:d4:8b:14:1a:e2:3e:8e:34:98:ee:8e:cd: 1f:70:92:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NKohLnk7HZwt6Dge2DHmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYjkyNmY4YzYwM2FhYjc5Y2I0NmE4ODNiZjYzMjU2NGEz ZmFhYmYwHhcNMjYwMTAxMDYxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGY2NWE5MGQ5ZTQyN2RhYThkNDBkZWM4NDU4NmQ5N2RhOTc3N2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1serLoBbiusp5p/ILTQMknFZXE/ cKWNLvY83ndESTcDzRG8ovjp0PQLXh7DSI0WhqDTVFW8XCG9LKt88JPiOdsBHtnJ JtMUV6xz241ZX24BY4C5vaVWP2YSpw0McGBcGhFzacxudAuy1aWs8rXKYuOUkIl+ k+FBhBMwkMpV/yVFlrksmOn/4yZjVOHl6PSPKLLTeJmr8vBFoeRxrEcwyWkFJmhd bkNeQiGuoHwqgx4ImQEasJBNBkhgovKsJrRWqEc4hrd19Xk7jAAMHM/03vsjACS9 kCfTkOSV3+uiI1x9ATlQLFiuij4pzDc01WufBja8exXgW8/VZ3GdTpPX8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH32WpDZ5CfaqNQN7IRYbZfal3f0MB8GA1UdIwQY MBaAFO25JvjGA6q3nLRqiDv2MlZKP6q/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2JrbS1NWURxcmVjdEdxSU9fWXlWa29fcXI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NmM5MzQtY2YxNC00YTRmLWFlN2Mt M2JkMTk3OGJmMmY2LzEvZmZaYWtObmtKOXFvMUEzc2hGaHRsOXFYZF9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy81NmM5MzQtY2YxNC00YTRmLWFlN2MtM2JkMTk3OGJmMmY2 LzEvN2JrbS1NWURxcmVjdEdxSU9fWXlWa29fcXI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuT7OMA0G CSqGSIb3DQEBCwUAA4IBAQCb4a6Z8hXehUgRnEbMUV6rVsaDNIbUB5aZWYIDnQOA i+4pxWT8mx4XLf2f3oWA+HZUcUDX1u6jQmJLvF9pFAzY8D9yEVZ15RPCXXuAtEF/ csRQ3p38gBbxOoGoDNwAiZA4e0v1shTOM5/sNwpfvvJFGa1HeHTqu7jr5hz95s0r vSSWAKnACBzmChMg89D8oqqYwX3LCuS/FyBTUyVA9I2y3lUJ3cWj2Gh+5i2bAgWU FvOP+G/YgbdTheQqyUsFYw6Z8CJWr2m03r0IgT21vjREZh8cI99CiS+xbs/yYrMR Al+3qt6NcgbP7EEyhrhbJpHUixQa4j6ONJjujs0fcJLs -----END CERTIFICATE-----Generated at Mon Jan 26 02:44:01 2026 by rpki-client