This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FftuvVwHax9rBycvM4DRr28X-6o.roa File: FftuvVwHax9rBycvM4DRr28X-6o.roa (raw, json) Hash identifier: bwaRbSjhdz4y7KT7CJ7m6+1M8w/NqaRjSm1en4rz3ZU= Subject key identifier: 15:FB:6E:BD:5C:07:6B:1F:6B:07:27:2F:33:80:D1:AF:6F:17:FB:AA Certificate issuer: /CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56 Certificate serial: 019B79ED3736B7513A6DDA47911B10759DF7 Authority key identifier: 14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FftuvVwHax9rBycvM4DRr28X-6o.roa Signing time: Thu 01 Jan 2026 14:19:07 +0000 ROA not before: Thu 01 Jan 2026 14:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43905 IP address blocks: 185.127.180.0/24 maxlen: 24 185.127.181.0/24 maxlen: 24 185.127.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:37:36:b7:51:3a:6d:da:47:91:1b:10:75:9d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56 Validity Not Before: Jan 1 14:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15fb6ebd5c076b1f6b07272f3380d1af6f17fbaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ee:6a:9c:51:6d:ff:6c:42:e8:c3:6e:20:41: 07:1a:c9:ad:e1:ce:61:69:9d:91:b8:9d:97:d0:75: 63:36:ce:d8:04:23:68:87:12:70:87:84:f4:17:22: 4c:0d:73:91:37:b8:a9:d8:ce:80:10:38:1f:6b:67: fe:05:0b:a0:17:f0:33:bf:5d:ba:dd:09:14:7f:1a: 7a:86:2c:4d:d8:2f:48:b1:a0:ce:68:1b:b3:09:3e: d9:b1:06:6f:2d:15:2c:c9:02:32:b0:ac:d5:5d:c9: 26:a7:6c:88:a5:60:54:62:99:5f:53:f5:73:74:59: 39:12:49:11:4b:8d:7c:a4:64:8f:5b:7e:ff:00:1d: d0:bd:d7:ba:ac:09:ee:9c:9f:56:ff:c1:d0:1a:af: 48:82:0d:ee:05:e5:7a:b9:c8:57:8c:8a:25:79:fc: ee:1b:36:89:65:98:8a:3d:56:80:c0:d9:20:7b:cf: da:cb:5c:58:0a:0c:68:89:35:7a:16:2e:4b:a6:41: 32:5b:15:f2:f4:43:2d:37:85:3d:3c:8e:cf:5e:ff: 29:e2:a2:2e:5a:12:34:f6:31:02:23:5d:2d:b4:d3: 79:0f:db:5b:73:55:3f:1c:5a:a9:15:e1:6e:b6:fb: 9b:a1:52:4e:73:24:2d:46:2f:55:f3:04:57:a3:02: 3e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:FB:6E:BD:5C:07:6B:1F:6B:07:27:2F:33:80:D1:AF:6F:17:FB:AA X509v3 Authority Key Identifier: keyid:14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FftuvVwHax9rBycvM4DRr28X-6o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.127.180.0/23 185.127.183.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:73:6b:e3:b1:be:11:69:52:6a:59:9b:bc:bf:28:bd:b5:76: 77:f9:66:0a:16:9f:9f:10:54:a2:e8:8e:eb:c5:73:cc:77:db: 3a:3f:5e:d5:7a:dd:92:4d:fe:85:7f:f1:e0:63:43:5a:40:7d: 65:6c:60:85:66:24:18:46:28:9f:37:45:b9:76:23:8f:4e:fc: 93:79:c2:c7:bd:ba:48:8c:39:e6:21:4e:b5:40:dc:a9:11:59: 0a:b7:f6:7c:1a:7a:25:57:88:29:16:5d:d1:96:ef:ef:9a:65: 6c:fa:a5:22:2d:49:b7:f3:83:94:3a:67:86:ba:18:c4:c7:d3: 0c:b1:e9:af:b7:80:e5:f1:a9:57:85:df:0d:47:43:64:29:d0: d0:02:07:32:e8:9e:8b:9a:99:9e:37:f0:b5:55:ba:18:2d:83: 76:27:95:20:42:40:41:50:41:17:b4:17:31:12:51:84:5d:32: f4:06:38:b0:33:d9:9d:95:ec:74:db:f6:60:20:eb:d3:25:91: 2f:77:68:e7:62:18:76:ec:01:ef:6c:10:a1:75:c5:ec:44:bd: 73:42:f0:d9:ba:17:16:9b:a9:6a:1d:0a:e8:bb:2e:06:20:29: d0:49:8b:5b:17:00:7a:e2:ef:ff:18:89:83:91:83:78:8d:3d: a0:bb:0c:58 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57Tc2t1E6bdpHkRsQdZ33MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NzRiNmZjNjdiNmI5MGRiMzExYzYxZmMwZTNhOWM3NTI4 MzNjNTYwHhcNMjYwMTAxMTQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWZiNmViZDVjMDc2YjFmNmIwNzI3MmYzMzgwZDFhZjZmMTdmYmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+5qnFFt/2xC6MNuIEEHGsmt4c5h aZ2RuJ2X0HVjNs7YBCNohxJwh4T0FyJMDXORN7ip2M6AEDgfa2f+BQugF/Azv126 3QkUfxp6hixN2C9IsaDOaBuzCT7ZsQZvLRUsyQIysKzVXckmp2yIpWBUYplfU/Vz dFk5EkkRS418pGSPW37/AB3Qvde6rAnunJ9W/8HQGq9Igg3uBeV6uchXjIolefzu GzaJZZiKPVaAwNkge8/ay1xYCgxoiTV6Fi5LpkEyWxXy9EMtN4U9PI7PXv8p4qIu WhI09jECI10ttNN5D9tbc1U/HFqpFeFutvuboVJOcyQtRi9V8wRXowI+LQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBX7br1cB2sfawcnLzOA0a9vF/uqMB8GA1UdIwQY MBaAFBR0tvxntrkNsxHGH8DjqcdSgzxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkhTMl9HZTJ1UTJ6RWNZZndPT3B4MUtEUEZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9iMWI0MWQtZDg4Ni00NDJhLTk1MjQt OGM1NmQ4ZmUxN2I1LzEvRmZ0dXZWd0hheDlyQnljdk00RFJyMjhYLTZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9iMWI0MWQtZDg4Ni00NDJhLTk1MjQtOGM1NmQ4ZmUxN2I1 LzEvRkhTMl9HZTJ1UTJ6RWNZZndPT3B4MUtEUEZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuX+0AwQA uX+3MA0GCSqGSIb3DQEBCwUAA4IBAQBac2vjsb4RaVJqWZu8vyi9tXZ3+WYKFp+f EFSi6I7rxXPMd9s6P17Vet2STf6Ff/HgY0NaQH1lbGCFZiQYRiifN0W5diOPTvyT ecLHvbpIjDnmIU61QNypEVkKt/Z8GnolV4gpFl3Rlu/vmmVs+qUiLUm384OUOmeG uhjEx9MMsemvt4Dl8alXhd8NR0NkKdDQAgcy6J6LmpmeN/C1VboYLYN2J5UgQkBB UEEXtBcxElGEXTL0BjiwM9mdlex02/ZgIOvTJZEvd2jnYhh27AHvbBChdcXsRL1z QvDZuhcWm6lqHQrouy4GICnQSYtbFwB64u//GImDkYN4jT2guwxY -----END CERTIFICATE-----Generated at Mon Jan 26 09:24:31 2026 by rpki-client