This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/fxKKOFmvR7tWz8KnpWFVu5Gljsc.roa File: fxKKOFmvR7tWz8KnpWFVu5Gljsc.roa (raw, json) Hash identifier: n8tLo/IEZsMPbxqYthr4yxthEmDMzlRhSAVZKwtGCLw= Subject key identifier: 7F:12:8A:38:59:AF:47:BB:56:CF:C2:A7:A5:61:55:BB:91:A5:8E:C7 Certificate issuer: /CN=3f0289affaaf080e252718e3f4489da29d9fa55a Certificate serial: 019B77C754D8CF7F6FDB0A68672D6D3233A2 Authority key identifier: 3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/fxKKOFmvR7tWz8KnpWFVu5Gljsc.roa Signing time: Thu 01 Jan 2026 04:18:30 +0000 ROA not before: Thu 01 Jan 2026 04:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137488 IP address blocks: 185.119.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:54:d8:cf:7f:6f:db:0a:68:67:2d:6d:32:33:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f0289affaaf080e252718e3f4489da29d9fa55a Validity Not Before: Jan 1 04:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f128a3859af47bb56cfc2a7a56155bb91a58ec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8e:c5:c2:cd:de:f2:01:78:e5:dc:68:07:a3: c1:e9:6e:e5:e1:44:48:2f:a2:a0:40:ea:9f:d5:0f: da:b3:3f:03:21:b8:98:cb:2d:db:72:88:b3:bd:50: 75:42:f6:76:08:a9:a4:8a:56:68:9c:58:fc:7d:e1: 84:35:6b:c2:18:54:55:73:0a:b0:a6:28:3c:32:2b: 98:77:3a:db:4e:9f:2d:d0:5a:e2:ea:19:df:98:05: 6e:fe:1e:e5:3d:ff:2e:ae:4b:6e:ff:f3:f4:3e:9a: 01:64:e0:7d:7b:c9:43:46:c7:13:45:a2:3a:51:fd: 45:a8:ab:91:da:05:4c:78:d2:13:81:84:e9:7c:d6: 74:19:1b:31:82:95:d1:09:a9:2f:c0:af:e5:75:92: 7b:7b:e3:f2:3a:49:32:ac:8f:9f:02:6a:33:4d:ba: 38:46:20:63:9d:4e:3a:18:a1:6f:2c:ac:f5:66:cd: 56:57:74:fa:87:72:3b:19:83:f5:ca:3d:61:6d:6f: b9:f0:0f:73:29:99:51:c3:f6:f6:a1:b9:30:a8:1e: d5:4a:c3:e3:e9:93:c9:e1:50:d8:ee:6f:8e:e5:71: 24:c4:8f:18:f3:c7:1b:86:62:83:57:f1:20:41:2b: 4f:b1:af:a7:56:94:df:8a:4a:fc:01:69:4b:f3:34: 5b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:12:8A:38:59:AF:47:BB:56:CF:C2:A7:A5:61:55:BB:91:A5:8E:C7 X509v3 Authority Key Identifier: keyid:3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/fxKKOFmvR7tWz8KnpWFVu5Gljsc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.119.219.0/24 Signature Algorithm: sha256WithRSAEncryption 02:2b:db:d3:3c:db:9b:37:e9:5e:66:6f:98:43:e9:28:25:f2: 67:a3:49:83:52:db:77:44:76:f2:c6:2a:76:39:16:39:73:de: b7:9b:0f:6c:7b:82:55:2f:91:2a:2a:38:3f:1e:9d:51:d5:2c: 06:52:ad:54:1d:13:9e:9e:1b:1b:1e:91:3a:f5:67:15:a7:f0: 89:f6:b2:1e:9f:de:63:90:03:24:3c:b4:7d:fb:24:81:24:8e: de:03:53:8e:67:ab:fb:f3:67:2f:bd:75:ac:18:b4:a4:79:96: f4:7f:cb:af:78:de:b1:7f:a3:c8:f6:5d:f7:4b:04:62:03:1c: 1d:53:e4:7f:05:62:95:7d:e8:c1:93:2f:dc:5c:75:bd:8c:4d: 99:f3:d5:7f:55:78:32:00:17:6d:88:a6:2a:9c:ca:c0:b1:ab: e9:5c:ed:04:7d:69:2f:7f:1b:a7:62:91:6b:d0:bf:77:b0:4f: 12:dd:13:24:5d:f3:58:f5:07:4d:c5:91:3d:67:b9:68:38:10: 41:3f:3a:69:46:25:44:b5:7d:49:6c:d1:25:a2:93:47:fb:2e: 2e:dd:c6:85:d4:c1:d8:27:8a:80:8b:10:a1:89:1e:1f:ac:a3: ab:6b:2e:47:d3:a1:c6:3c:0a:df:47:ee:d9:10:60:3c:57:f4: 20:9e:da:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x1TYz39v2wpoZy1tMjOiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMDI4OWFmZmFhZjA4MGUyNTI3MThlM2Y0NDg5ZGEyOWQ5 ZmE1NWEwHhcNMjYwMTAxMDQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjEyOGEzODU5YWY0N2JiNTZjZmMyYTdhNTYxNTViYjkxYTU4ZWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmo7Fws3e8gF45dxoB6PB6W7l4URI L6KgQOqf1Q/asz8DIbiYyy3bcoizvVB1QvZ2CKmkilZonFj8feGENWvCGFRVcwqw pig8MiuYdzrbTp8t0Fri6hnfmAVu/h7lPf8urktu//P0PpoBZOB9e8lDRscTRaI6 Uf1FqKuR2gVMeNITgYTpfNZ0GRsxgpXRCakvwK/ldZJ7e+PyOkkyrI+fAmozTbo4 RiBjnU46GKFvLKz1Zs1WV3T6h3I7GYP1yj1hbW+58A9zKZlRw/b2obkwqB7VSsPj 6ZPJ4VDY7m+O5XEkxI8Y88cbhmKDV/EgQStPsa+nVpTfikr8AWlL8zRbgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH8SijhZr0e7Vs/Cp6VhVbuRpY7HMB8GA1UdIwQY MBaAFD8Cia/6rwgOJScY4/RInaKdn6VaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHdLSnJfcXZDQTRsSnhqajlFaWRvcDJmcFZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85ZmNjY2YtZTdhYS00YzQ0LTk1OTAt MWNmMGZlYWFhM2VhLzEvZnhLS09GbXZSN3RXejhLbnBXRlZ1NUdsanNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85ZmNjY2YtZTdhYS00YzQ0LTk1OTAtMWNmMGZlYWFhM2Vh LzEvUHdLSnJfcXZDQTRsSnhqajlFaWRvcDJmcFZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXfbMA0G CSqGSIb3DQEBCwUAA4IBAQACK9vTPNubN+leZm+YQ+koJfJno0mDUtt3RHbyxip2 ORY5c963mw9se4JVL5EqKjg/Hp1R1SwGUq1UHROenhsbHpE69WcVp/CJ9rIen95j kAMkPLR9+ySBJI7eA1OOZ6v782cvvXWsGLSkeZb0f8uveN6xf6PI9l33SwRiAxwd U+R/BWKVfejBky/cXHW9jE2Z89V/VXgyABdtiKYqnMrAsavpXO0EfWkvfxunYpFr 0L93sE8S3RMkXfNY9QdNxZE9Z7loOBBBPzppRiVEtX1JbNElopNH+y4u3caF1MHY J4qAixChiR4frKOray5H06HGPArfR+7ZEGA8V/Qgntpt -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:17 2026 by rpki-client