This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/fJkHv2XKmgf3wdAAPhmkHMSymi8.roa File: fJkHv2XKmgf3wdAAPhmkHMSymi8.roa (raw, json) Hash identifier: moVcLbH6Jw6NJ/DI/9GEobHmBwmywaAnRhkWYEC9LnI= Subject key identifier: 7C:99:07:BF:65:CA:9A:07:F7:C1:D0:00:3E:19:A4:1C:C4:B2:9A:2F Certificate issuer: /CN=408562e2b8961b22e29c762d6c990331ba36666f Certificate serial: 019B7DCAC3ADA4BC73319477E5F16B1CDD2A Authority key identifier: 40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/fJkHv2XKmgf3wdAAPhmkHMSymi8.roa Signing time: Fri 02 Jan 2026 08:19:58 +0000 ROA not before: Fri 02 Jan 2026 08:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50795 IP address blocks: 185.83.80.0/22 maxlen: 22 185.83.80.0/23 maxlen: 23 185.83.80.0/24 maxlen: 24 185.83.81.0/24 maxlen: 24 185.83.82.0/23 maxlen: 23 185.83.82.0/24 maxlen: 24 185.83.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:c3:ad:a4:bc:73:31:94:77:e5:f1:6b:1c:dd:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408562e2b8961b22e29c762d6c990331ba36666f Validity Not Before: Jan 2 08:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c9907bf65ca9a07f7c1d0003e19a41cc4b29a2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5a:ff:6e:1b:e3:83:52:d9:07:f0:80:03:7a: f0:fa:fb:1c:2d:1f:89:b2:b9:48:b7:76:a7:69:46: be:87:9b:30:fe:1f:0f:d5:e3:4c:33:cb:28:1d:67: 3e:9a:00:55:30:f6:84:62:57:18:6f:0e:f0:b9:f4: 61:cd:c8:17:ea:af:2d:99:b9:ed:ae:28:1d:ae:17: 3f:5d:7f:68:f9:fb:89:0f:bf:89:a4:e4:6c:36:73: 65:4a:0f:11:8e:73:ce:38:d6:75:52:58:75:45:b5: 8a:92:07:8c:0c:4b:c0:6a:c1:ca:66:8b:32:dc:df: 44:c2:2f:15:82:12:f1:84:e3:c7:43:fc:32:62:6d: b8:88:e3:90:9f:62:93:9c:b4:7f:31:e1:68:b5:7f: 6a:a7:5b:28:a9:a8:9d:fe:67:1d:f2:2a:64:d3:f3: c7:cf:45:ea:bc:c6:27:9a:18:2e:94:48:38:d0:2e: 4c:d9:9a:7d:84:6c:25:63:72:da:c4:36:4b:e9:1e: 87:16:c3:ba:92:1a:f1:e2:83:06:06:4e:6d:a8:39: 4e:53:d7:58:0d:0c:9c:17:51:5d:29:c3:0a:f2:9f: c1:7e:60:37:8b:37:2d:4b:0b:a7:a4:83:e8:5c:fb: 6f:5b:6f:ad:b8:28:0b:b4:01:5f:1a:1d:87:b5:8e: 45:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:99:07:BF:65:CA:9A:07:F7:C1:D0:00:3E:19:A4:1C:C4:B2:9A:2F X509v3 Authority Key Identifier: keyid:40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/fJkHv2XKmgf3wdAAPhmkHMSymi8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.83.80.0/22 Signature Algorithm: sha256WithRSAEncryption 05:02:b9:d6:7b:d5:fc:34:0d:c0:2a:96:81:46:a0:4e:73:c6: f0:3d:da:f3:ca:58:8d:fe:dc:8b:63:54:9c:4e:2e:8d:e2:71: 7c:f2:34:26:ea:0f:9a:0e:10:d9:4e:a7:0a:e4:69:19:1e:63: 55:16:f4:9a:4c:b1:cf:13:a3:76:74:8b:76:4f:5b:71:a5:54: 9f:9a:46:5f:8f:d4:4b:15:75:ef:4b:45:d0:0f:0e:4f:c4:5b: 71:6a:aa:c7:56:33:61:cc:b6:34:69:1c:a1:a2:5d:08:89:b4: 6d:46:30:7b:9f:ac:59:62:b8:9c:df:07:b0:f3:23:ea:c5:8b: 8a:dc:90:9c:27:42:00:2b:94:e2:08:d6:32:0c:09:c0:51:69: ac:00:e9:66:f6:68:79:9e:f4:c8:d8:11:e5:08:fe:52:87:31: ea:47:45:40:f1:79:66:09:7d:6c:f0:5f:64:43:95:64:06:f3: 05:e3:8a:b3:60:67:23:26:10:73:c2:19:39:6e:f9:95:da:ed: fe:b2:9b:5c:29:78:8d:cc:14:41:0a:94:82:4d:f4:3c:05:43: 74:d7:2d:5e:2d:86:b9:fa:10:42:d7:96:d6:46:88:98:28:46: fa:6c:cb:cb:72:f4:fe:2c:0d:8f:ed:a1:be:24:72:88:2f:b1: 32:66:7a:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ysOtpLxzMZR35fFrHN0qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwODU2MmUyYjg5NjFiMjJlMjljNzYyZDZjOTkwMzMxYmEz NjY2NmYwHhcNMjYwMTAyMDgxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Yzk5MDdiZjY1Y2E5YTA3ZjdjMWQwMDAzZTE5YTQxY2M0YjI5YTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVr/bhvjg1LZB/CAA3rw+vscLR+J srlIt3anaUa+h5sw/h8P1eNMM8soHWc+mgBVMPaEYlcYbw7wufRhzcgX6q8tmbnt rigdrhc/XX9o+fuJD7+JpORsNnNlSg8RjnPOONZ1Ulh1RbWKkgeMDEvAasHKZosy 3N9Ewi8VghLxhOPHQ/wyYm24iOOQn2KTnLR/MeFotX9qp1soqaid/mcd8ipk0/PH z0XqvMYnmhgulEg40C5M2Zp9hGwlY3LaxDZL6R6HFsO6khrx4oMGBk5tqDlOU9dY DQycF1FdKcMK8p/BfmA3izctSwunpIPoXPtvW2+tuCgLtAFfGh2HtY5FgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHyZB79lypoH98HQAD4ZpBzEspovMB8GA1UdIwQY MBaAFECFYuK4lhsi4px2LWyZAzG6NmZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUlWaTRyaVdHeUxpbkhZdGJKa0RNYm8yWm04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81MmE2ZGUtNzIzMi00OWIxLTkxYzct Y2ZkZmNkNGVlMGYyLzEvZkprSHYyWEttZ2Yzd2RBQVBobWtITVN5bWk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny81MmE2ZGUtNzIzMi00OWIxLTkxYzctY2ZkZmNkNGVlMGYy LzEvUUlWaTRyaVdHeUxpbkhZdGJKa0RNYm8yWm04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVNQMA0G CSqGSIb3DQEBCwUAA4IBAQAFArnWe9X8NA3AKpaBRqBOc8bwPdrzyliN/tyLY1Sc Ti6N4nF88jQm6g+aDhDZTqcK5GkZHmNVFvSaTLHPE6N2dIt2T1txpVSfmkZfj9RL FXXvS0XQDw5PxFtxaqrHVjNhzLY0aRyhol0IibRtRjB7n6xZYric3wew8yPqxYuK 3JCcJ0IAK5TiCNYyDAnAUWmsAOlm9mh5nvTI2BHlCP5ShzHqR0VA8XlmCX1s8F9k Q5VkBvMF44qzYGcjJhBzwhk5bvmV2u3+sptcKXiNzBRBCpSCTfQ8BUN01y1eLYa5 +hBC15bWRoiYKEb6bMvLcvT+LA2P7aG+JHKIL7EyZnrC -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:48 2026 by rpki-client