This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/FXk_8rHDZW44wqBAzw47VRvUwgY.roa File: FXk_8rHDZW44wqBAzw47VRvUwgY.roa (raw, json) Hash identifier: ppp2g2xygFhlcOiu9iawm3EuDNyOEJ3cb42rhtyx3aI= Subject key identifier: 15:79:3F:F2:B1:C3:65:6E:38:C2:A0:40:CF:0E:3B:55:1B:D4:C2:06 Certificate issuer: /CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8 Certificate serial: 019B7C80BB37B0FFFAC0A1C60667B5081C3A Authority key identifier: 77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/FXk_8rHDZW44wqBAzw47VRvUwgY.roa Signing time: Fri 02 Jan 2026 02:19:29 +0000 ROA not before: Fri 02 Jan 2026 02:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62371 IP address blocks: 79.135.106.0/24 maxlen: 24 79.135.107.0/24 maxlen: 24 185.70.40.0/22 maxlen: 22 185.70.40.0/24 maxlen: 24 185.70.41.0/24 maxlen: 24 185.70.42.0/24 maxlen: 24 185.70.43.0/24 maxlen: 24 2a05:2700::/29 maxlen: 29 2a05:2700::/32 maxlen: 32 2a05:2701::/32 maxlen: 32 2a05:2701:f00::/40 maxlen: 40 2a05:2701:f00::/44 maxlen: 44 2a05:2701:f10::/44 maxlen: 44 2a05:2701:f40::/44 maxlen: 44 2a05:2701:f50::/44 maxlen: 44 2a05:2701:fe00::/48 maxlen: 48 2a05:2701:fe01::/48 maxlen: 48 2a05:2701:fe02::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:bb:37:b0:ff:fa:c0:a1:c6:06:67:b5:08:1c:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8 Validity Not Before: Jan 2 02:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15793ff2b1c3656e38c2a040cf0e3b551bd4c206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d2:b4:e0:af:e4:ae:84:d1:51:36:06:d3:d9: ad:9d:84:aa:8f:cd:b5:d1:51:d0:73:75:dd:fc:3f: f0:f4:5b:73:77:61:09:86:91:24:05:f5:b3:82:45: 86:d1:0f:a8:5b:4e:54:f0:07:ee:86:35:d5:9e:b5: 44:15:a5:fd:b2:5a:9a:1f:03:ac:87:73:7f:42:70: 01:53:41:ee:41:e0:5a:5b:d1:7a:3d:a3:3b:61:68: c7:c8:d0:4e:c8:fe:3b:49:0b:92:5f:81:8f:91:d6: e9:73:17:87:97:46:14:09:70:f9:45:bc:fa:a8:c7: 15:42:89:98:83:3f:80:e5:c0:d0:1e:57:f2:25:ab: 1a:4b:cd:4b:c0:81:6d:e3:3b:46:37:a4:de:ad:22: 07:2d:7a:41:ce:57:25:ee:8f:ca:9e:c6:0a:65:dd: 12:4a:41:07:88:96:e1:40:b5:a7:a6:7e:1e:d0:12: d3:25:70:16:a7:bf:01:07:16:05:e5:ba:a9:27:80: 95:1b:c0:b0:4e:cf:93:fe:df:1e:c4:f2:d1:59:90: 0f:b1:06:d8:2e:89:2c:22:0a:6c:27:b4:2a:41:f8: a9:0b:c3:90:82:56:3b:74:f5:12:ce:17:8c:c1:24: b9:1b:32:1f:55:57:1d:8a:18:9d:23:0c:44:7e:6b: cd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:79:3F:F2:B1:C3:65:6E:38:C2:A0:40:CF:0E:3B:55:1B:D4:C2:06 X509v3 Authority Key Identifier: keyid:77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/FXk_8rHDZW44wqBAzw47VRvUwgY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.135.106.0/23 185.70.40.0/22 IPv6: 2a05:2700::/29 Signature Algorithm: sha256WithRSAEncryption 13:27:2c:08:48:0c:3c:57:f2:32:6d:6f:05:f8:b7:17:2c:dd: 68:d2:13:a3:00:b7:97:ec:07:99:63:a2:cd:32:e6:ff:f0:5a: eb:1a:e2:f9:be:ef:da:32:29:9f:7b:64:08:f4:6d:f9:45:21: 5d:d2:7e:af:ee:6a:1e:d9:c6:96:6a:1d:b3:a5:7b:7d:72:75: 50:a1:42:5f:0d:0d:56:89:c5:73:a8:81:15:f8:0a:79:6e:12: 7f:f6:c5:26:eb:42:43:41:80:78:4b:06:3b:e7:5d:ed:81:55: b0:ea:b8:09:9b:6b:8d:50:91:c2:58:dd:54:80:5c:71:0c:08: 01:0b:ce:f6:4e:98:da:7b:63:7c:e7:aa:bb:c9:95:2e:c7:95: af:47:fd:bf:06:26:ec:66:45:2b:3b:6b:a5:c6:b8:3d:d3:cd: 7b:aa:ce:0c:ba:73:48:5b:96:85:0f:80:4d:90:f8:04:ee:a6: 97:2a:ec:44:0e:00:91:6f:f7:b8:17:d2:df:d6:2a:e2:f1:da: c5:5f:b1:c8:be:15:1d:1f:43:24:3d:da:f2:f2:45:08:13:33: 0b:ea:0a:6b:84:92:ec:79:72:00:bb:49:03:9c:9e:4b:a8:f0: eb:0d:8a:b8:b2:7b:55:c5:ca:de:82:7c:70:f1:6b:b7:f1:db: 3b:5b:fa:5d -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8gLs3sP/6wKHGBme1CBw6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MzZhNWM4NWEwOGQ4MDc0OTA0MWNiOWNmYTUxN2ZiN2Q1 ODliYTgwHhcNMjYwMTAyMDIxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTc5M2ZmMmIxYzM2NTZlMzhjMmEwNDBjZjBlM2I1NTFiZDRjMjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNK04K/kroTRUTYG09mtnYSqj821 0VHQc3Xd/D/w9Ftzd2EJhpEkBfWzgkWG0Q+oW05U8AfuhjXVnrVEFaX9slqaHwOs h3N/QnABU0HuQeBaW9F6PaM7YWjHyNBOyP47SQuSX4GPkdbpcxeHl0YUCXD5Rbz6 qMcVQomYgz+A5cDQHlfyJasaS81LwIFt4ztGN6TerSIHLXpBzlcl7o/KnsYKZd0S SkEHiJbhQLWnpn4e0BLTJXAWp78BBxYF5bqpJ4CVG8CwTs+T/t8exPLRWZAPsQbY LoksIgpsJ7QqQfipC8OQglY7dPUSzheMwSS5GzIfVVcdihidIwxEfmvNGQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBV5P/Kxw2VuOMKgQM8OO1Ub1MIGMB8GA1UdIwQY MBaAFHc2pchaCNgHSQQcuc+lF/t9WJuoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHphbHlGb0kyQWRKQkJ5NXo2VVgtMzFZbTZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82ZGEyODktYWJlYy00OWY1LWE3NTkt Y2YxZjRjN2M5MjIyLzEvRlhrXzhySERaVzQ0d3FCQXp3NDdWUnZVd2dZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC82ZGEyODktYWJlYy00OWY1LWE3NTktY2YxZjRjN2M5MjIy LzEvZHphbHlGb0kyQWRKQkJ5NXo2VVgtMzFZbTZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBT4dqAwQC uUYoMA0EAgACMAcDBQMqBScAMA0GCSqGSIb3DQEBCwUAA4IBAQATJywISAw8V/Iy bW8F+LcXLN1o0hOjALeX7AeZY6LNMub/8FrrGuL5vu/aMimfe2QI9G35RSFd0n6v 7moe2caWah2zpXt9cnVQoUJfDQ1WicVzqIEV+Ap5bhJ/9sUm60JDQYB4SwY7513t gVWw6rgJm2uNUJHCWN1UgFxxDAgBC872Tpjae2N856q7yZUux5WvR/2/BibsZkUr O2ulxrg90817qs4MunNIW5aFD4BNkPgE7qaXKuxEDgCRb/e4F9Lf1iri8drFX7HI vhUdH0MkPdry8kUIEzML6gprhJLseXIAu0kDnJ5LqPDrDYq4sntVxcregnxw8Wu3 8ds7W/pd -----END CERTIFICATE-----Generated at Sun Jan 25 19:39:30 2026 by rpki-client