This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/f6D9aJ7BAJHcZz_OdJPNz7AwmHg.roa File: f6D9aJ7BAJHcZz_OdJPNz7AwmHg.roa (raw, json) Hash identifier: EgTfusTv2nkLjwq0TfPSW/EGFdZmepXuwghsp1RK2Ig= Subject key identifier: 7F:A0:FD:68:9E:C1:00:91:DC:67:3F:CE:74:93:CD:CF:B0:30:98:78 Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Certificate serial: 019B7E38910818222E3A1A09ED93F7CBEDBF Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/f6D9aJ7BAJHcZz_OdJPNz7AwmHg.roa Signing time: Fri 02 Jan 2026 10:19:54 +0000 ROA not before: Fri 02 Jan 2026 10:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213035 IP address blocks: 85.202.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:91:08:18:22:2e:3a:1a:09:ed:93:f7:cb:ed:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Validity Not Before: Jan 2 10:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fa0fd689ec10091dc673fce7493cdcfb0309878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bc:86:d0:c8:70:f6:33:cc:c6:ad:7c:fa:8f: f5:e6:ef:63:02:5d:2f:66:92:63:79:ff:46:65:f1: 47:9d:58:e5:a0:fe:88:7f:43:be:e6:26:10:d1:7b: 9f:de:8e:5a:34:a0:0c:9e:35:31:ac:c4:26:ed:6e: 39:4e:fc:0d:f7:7d:c5:60:b0:b4:dd:99:9c:83:d6: 44:bf:cb:05:62:07:c6:2a:d3:d0:03:bb:04:2e:c4: da:4c:a0:2a:0f:bc:b4:93:bd:9e:9c:f0:1c:1b:2b: 56:98:16:f0:93:4b:2c:f3:fe:f4:13:5e:67:df:6c: 6e:a6:bf:e9:5d:f6:36:75:67:1c:3d:49:65:19:37: bf:97:eb:ac:6b:ee:c6:47:58:36:28:73:e2:16:22: a9:6a:ae:34:40:5e:4c:5f:ff:fa:d0:65:ac:8a:d1: 28:5f:85:fd:d5:4c:c2:55:bb:f4:61:16:40:04:4d: 3f:34:11:ec:28:11:ef:0e:b8:2c:43:86:44:ef:09: 07:f2:eb:b1:d8:a9:d4:98:7d:e9:52:0f:d0:57:cf: 6d:ed:58:ed:46:93:98:71:7f:47:2f:a1:46:46:76: 36:c6:3c:5d:50:53:3b:84:b6:f4:98:fe:bb:a7:c3: e1:e5:06:e5:f4:a2:1b:bd:93:0d:eb:57:79:ae:4b: 53:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A0:FD:68:9E:C1:00:91:DC:67:3F:CE:74:93:CD:CF:B0:30:98:78 X509v3 Authority Key Identifier: keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/f6D9aJ7BAJHcZz_OdJPNz7AwmHg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.202.170.0/23 Signature Algorithm: sha256WithRSAEncryption a0:fd:84:ff:8e:39:24:4c:15:d7:bc:81:af:e4:99:07:c8:37: 9f:69:64:eb:e7:cc:74:eb:42:1e:9a:0b:56:5c:ec:19:21:77: fb:b4:ac:e0:0e:4e:e6:1a:fb:f0:52:8f:af:75:75:c4:5b:18: 79:8b:7b:61:2b:29:23:60:d4:c8:63:98:b8:78:d3:9b:69:63: 31:65:1f:25:61:c1:b6:14:07:6a:32:28:cd:a0:91:3b:14:27: 96:a3:6b:fc:74:a5:8b:70:7a:54:a1:f7:b9:6b:a0:e2:b0:18: 67:cb:4b:03:82:6a:93:30:e2:12:95:8d:23:56:44:13:04:9c: 8f:8b:61:b2:ca:35:38:53:6a:fc:9f:da:60:44:64:98:6c:81: f4:12:b5:55:95:f2:fc:df:d0:cf:34:4d:c5:97:c2:a3:2d:5f: 70:ea:5c:47:9d:22:21:e2:eb:88:73:38:40:46:92:3f:c9:7a: 59:db:1c:8e:40:33:df:eb:0f:60:41:2d:c4:a1:60:ec:7c:d9: 96:e4:07:76:a4:30:e2:1a:86:c1:36:54:61:16:51:1e:4e:8a: 7a:38:95:39:1a:42:3d:a1:2f:8b:d9:03:6f:00:79:1b:5d:d8: cc:65:73:1c:fc:40:1e:33:14:ce:cd:dd:5e:0d:57:c0:3a:46: f9:b7:b8:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJEIGCIuOhoJ7ZP3y+2/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk MTRjYzYwHhcNMjYwMTAyMTAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmEwZmQ2ODllYzEwMDkxZGM2NzNmY2U3NDkzY2RjZmIwMzA5ODc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLyG0Mhw9jPMxq18+o/15u9jAl0v ZpJjef9GZfFHnVjloP6If0O+5iYQ0Xuf3o5aNKAMnjUxrMQm7W45TvwN933FYLC0 3Zmcg9ZEv8sFYgfGKtPQA7sELsTaTKAqD7y0k72enPAcGytWmBbwk0ss8/70E15n 32xupr/pXfY2dWccPUllGTe/l+usa+7GR1g2KHPiFiKpaq40QF5MX//60GWsitEo X4X91UzCVbv0YRZABE0/NBHsKBHvDrgsQ4ZE7wkH8uux2KnUmH3pUg/QV89t7Vjt RpOYcX9HL6FGRnY2xjxdUFM7hLb0mP67p8Ph5Qbl9KIbvZMN61d5rktTzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH+g/WiewQCR3Gc/znSTzc+wMJh4MB8GA1UdIwQY MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt ZDFiYjZiNGRkNzAxLzEvZjZEOWFKN0JBSkhjWnpfT2RKUE56N0F3bUhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVcqqMA0G CSqGSIb3DQEBCwUAA4IBAQCg/YT/jjkkTBXXvIGv5JkHyDefaWTr58x060IemgtW XOwZIXf7tKzgDk7mGvvwUo+vdXXEWxh5i3thKykjYNTIY5i4eNObaWMxZR8lYcG2 FAdqMijNoJE7FCeWo2v8dKWLcHpUofe5a6DisBhny0sDgmqTMOISlY0jVkQTBJyP i2GyyjU4U2r8n9pgRGSYbIH0ErVVlfL839DPNE3Fl8KjLV9w6lxHnSIh4uuIczhA RpI/yXpZ2xyOQDPf6w9gQS3EoWDsfNmW5Ad2pDDiGobBNlRhFlEeTop6OJU5GkI9 oS+L2QNvAHkbXdjMZXMc/EAeMxTOzd1eDVfAOkb5t7jU -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:25 2026 by rpki-client