This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/fNddSduH-zBHCeZuXlSQAQ6yS0Y.roa File: fNddSduH-zBHCeZuXlSQAQ6yS0Y.roa (raw, json) Hash identifier: HtwbY/FPzHHNV/4s4iZglcvSNHEEMqFZcHSp5PQBTNs= Subject key identifier: 7C:D7:5D:49:DB:87:FB:30:47:09:E6:6E:5E:54:90:01:0E:B2:4B:46 Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba Certificate serial: 019B7EA668FB8B39203F30DC82E704618382 Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/fNddSduH-zBHCeZuXlSQAQ6yS0Y.roa Signing time: Fri 02 Jan 2026 12:19:53 +0000 ROA not before: Fri 02 Jan 2026 12:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64488 IP address blocks: 85.248.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:68:fb:8b:39:20:3f:30:dc:82:e7:04:61:83:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba Validity Not Before: Jan 2 12:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cd75d49db87fb304709e66e5e5490010eb24b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:08:73:54:f3:d9:a8:a2:01:51:32:8c:84:5e: b6:d2:84:d0:17:4f:3b:da:35:49:59:25:9b:51:8b: 01:f2:c9:91:58:dc:cd:37:6b:7c:9c:3d:48:87:2f: af:96:bf:f6:e8:4a:f3:84:02:c8:0b:05:8b:a8:d3: 0f:d3:aa:54:ff:1e:3a:5a:f7:e1:08:ee:86:3b:d7: ea:7e:4c:bb:a2:8f:2b:e4:b2:d3:e0:cf:fa:60:e9: 7a:9f:7d:62:7c:1e:78:f8:27:c3:d6:6a:a7:0d:76: 68:b6:03:31:4a:49:81:a3:3a:a5:4b:5e:d9:ab:e7: f2:bb:9c:cc:e1:f6:09:39:b2:72:6d:64:62:19:89: 8a:86:c3:1e:85:ea:8a:ce:80:fa:44:4f:b4:e8:6a: 83:fe:4b:0e:b3:f7:b3:4e:87:9f:53:5c:2f:55:50: 35:22:7f:48:de:01:76:df:34:6e:eb:33:66:c2:90: 4c:cd:c9:73:61:8a:09:e1:8c:5b:8e:54:13:8c:99: 9b:8d:e4:6b:4e:17:c8:25:25:e2:a3:c9:8d:e9:d8: 4b:61:dd:06:3d:30:e5:c8:2b:9c:3d:e8:b6:0e:61: 2c:ae:58:c7:13:7d:d2:8d:2c:e1:d2:81:7f:7d:4c: 1e:e6:e2:4f:51:9e:ed:a2:e9:13:e1:e8:59:41:78: 15:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D7:5D:49:DB:87:FB:30:47:09:E6:6E:5E:54:90:01:0E:B2:4B:46 X509v3 Authority Key Identifier: keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/fNddSduH-zBHCeZuXlSQAQ6yS0Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.248.78.0/24 Signature Algorithm: sha256WithRSAEncryption 33:cf:2d:71:3e:81:7b:5c:53:93:aa:58:6a:dc:3b:0c:38:9e: 41:0e:53:5c:8d:9e:be:b1:b1:64:61:4b:37:a3:6a:5f:06:b8: 78:46:f6:35:99:f1:00:2a:66:0b:27:88:40:81:73:e3:ba:d0: 15:bf:5d:4d:2c:e0:fb:02:3f:90:b4:ad:84:ca:ce:18:f5:dc: f9:10:ed:b1:b8:e0:47:e5:17:8e:09:75:c6:6d:2c:f0:a0:4b: 52:c2:ac:7f:94:39:1d:c9:93:77:64:22:15:1b:89:e1:20:cc: 7d:5b:e6:59:2f:dc:e1:a9:47:0e:61:2d:45:2f:9e:e4:a9:4b: b4:7b:e4:69:21:30:e8:d2:d2:1b:f3:66:4b:fb:49:55:be:73: b0:a0:34:a4:87:62:92:c9:5a:47:45:93:ef:b4:5c:95:12:6e: 0d:be:34:da:b8:35:d6:8e:51:2c:39:4f:7c:3e:91:ba:c6:dd: 9e:1e:7c:bc:44:64:84:d5:1f:b1:29:3f:5c:b5:83:86:2f:78: 6c:9b:08:99:a8:24:ad:c6:c2:84:c2:83:f8:1d:3f:db:64:49: 10:e2:40:61:ab:d9:25:ec:1c:84:61:90:64:d9:73:db:c8:39: 0a:2e:13:e3:45:65:2b:63:61:71:da:50:15:bb:f0:02:d7:95: ed:d2:ba:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pmj7izkgPzDcgucEYYOCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Zjg4MTQwMWFiYWNjODhjOTQxZmRmNzQwZjFhYjE1MzZm MDVkYmEwHhcNMjYwMTAyMTIxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2Q3NWQ0OWRiODdmYjMwNDcwOWU2NmU1ZTU0OTAwMTBlYjI0YjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAhzVPPZqKIBUTKMhF620oTQF087 2jVJWSWbUYsB8smRWNzNN2t8nD1Ihy+vlr/26ErzhALICwWLqNMP06pU/x46Wvfh CO6GO9fqfky7oo8r5LLT4M/6YOl6n31ifB54+CfD1mqnDXZotgMxSkmBozqlS17Z q+fyu5zM4fYJObJybWRiGYmKhsMeheqKzoD6RE+06GqD/ksOs/ezToefU1wvVVA1 In9I3gF23zRu6zNmwpBMzclzYYoJ4YxbjlQTjJmbjeRrThfIJSXio8mN6dhLYd0G PTDlyCucPei2DmEsrljHE33SjSzh0oF/fUwe5uJPUZ7toukT4ehZQXgVLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHzXXUnbh/swRwnmbl5UkAEOsktGMB8GA1UdIwQY MBaAFOf4gUAausyIyUH990DxqxU28F26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmIt ZTJmYmMzYTY4ODAwLzEvZk5kZFNkdUgtekJIQ2VadVhsU1FBUTZ5UzBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmItZTJmYmMzYTY4ODAw LzEvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVfhOMA0G CSqGSIb3DQEBCwUAA4IBAQAzzy1xPoF7XFOTqlhq3DsMOJ5BDlNcjZ6+sbFkYUs3 o2pfBrh4RvY1mfEAKmYLJ4hAgXPjutAVv11NLOD7Aj+QtK2Eys4Y9dz5EO2xuOBH 5ReOCXXGbSzwoEtSwqx/lDkdyZN3ZCIVG4nhIMx9W+ZZL9zhqUcOYS1FL57kqUu0 e+RpITDo0tIb82ZL+0lVvnOwoDSkh2KSyVpHRZPvtFyVEm4NvjTauDXWjlEsOU98 PpG6xt2eHny8RGSE1R+xKT9ctYOGL3hsmwiZqCStxsKEwoP4HT/bZEkQ4kBhq9kl 7ByEYZBk2XPbyDkKLhPjRWUrY2Fx2lAVu/AC15Xt0rqj -----END CERTIFICATE-----Generated at Mon Jan 26 12:17:36 2026 by rpki-client