This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/FzjJcc8_JCLieqi-2oTuL9m5j6E.roa File: FzjJcc8_JCLieqi-2oTuL9m5j6E.roa (raw, json) Hash identifier: 1cQA3onX5glxtbbQgLiDRwKJisIaxVmmBI+vQ6zQvr4= Subject key identifier: 17:38:C9:71:CF:3F:24:22:E2:7A:A8:BE:DA:84:EE:2F:D9:B9:8F:A1 Certificate issuer: /CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018 Certificate serial: 019B77C6F5829AEF2E9C43A917EA0C641563 Authority key identifier: 4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/FzjJcc8_JCLieqi-2oTuL9m5j6E.roa Signing time: Thu 01 Jan 2026 04:18:06 +0000 ROA not before: Thu 01 Jan 2026 04:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202806 IP address blocks: 85.234.102.0/23 maxlen: 24 85.234.114.0/23 maxlen: 24 2a0a:6f40:2::/47 maxlen: 48 2a0a:6f40:4::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f5:82:9a:ef:2e:9c:43:a9:17:ea:0c:64:15:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018 Validity Not Before: Jan 1 04:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1738c971cf3f2422e27aa8beda84ee2fd9b98fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4e:d9:0e:6e:59:b0:1b:e0:43:6c:f1:9b:5f: e6:79:eb:c5:9c:d9:b0:b6:ac:5b:da:1a:fc:06:e9: 8a:8f:bd:83:e7:a5:4e:cf:54:fe:72:cc:35:91:eb: b3:d1:18:2b:22:8c:3f:9c:70:bc:2a:bb:1a:d6:34: ed:8b:88:96:a8:78:f5:a2:d9:6a:a4:f4:76:3d:44: 15:81:e8:15:6f:4f:23:40:e6:9f:60:2d:23:35:37: 41:53:ce:49:0b:34:1c:76:42:8f:70:e1:21:4c:db: f3:52:ec:ad:5f:b8:e2:ab:5a:8a:3e:34:d4:da:82: a3:a2:bd:ed:74:0f:3b:9d:6b:30:dd:e2:57:04:75: e5:bf:3b:fe:fc:8c:3c:d8:51:02:d5:f4:1b:0c:20: fc:ce:59:bf:ab:6d:d9:87:cf:55:aa:93:c2:09:f8: e1:04:77:d6:85:a3:86:c5:77:b9:59:d6:df:fd:93: 13:bb:06:f9:2d:2a:d2:09:0e:02:3a:48:5b:e2:6c: 95:35:f2:b1:7a:25:8c:31:e1:c4:a3:ae:81:26:ee: d9:84:61:03:af:ef:d6:eb:3d:0c:a0:c6:3d:bf:d4: b4:e1:7d:ab:9d:0e:eb:5e:d8:80:9d:73:79:be:7b: c3:2d:c8:08:d2:3f:df:05:d2:1c:5c:e8:37:f8:60: c3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:38:C9:71:CF:3F:24:22:E2:7A:A8:BE:DA:84:EE:2F:D9:B9:8F:A1 X509v3 Authority Key Identifier: keyid:4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/FzjJcc8_JCLieqi-2oTuL9m5j6E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.234.102.0/23 85.234.114.0/23 IPv6: 2a0a:6f40:2::-2a0a:6f40:5:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 5a:79:97:3c:b5:8a:ba:be:8c:8c:59:17:68:d3:e7:5f:d0:38: 67:9d:69:74:39:6a:dc:0a:31:75:c4:9f:49:2a:a6:96:c1:25: cf:18:62:5d:dc:91:c4:e6:c7:04:79:17:ae:88:3d:56:16:4d: 36:da:c7:36:59:ed:07:a0:16:b0:ab:2f:04:94:eb:1f:84:46: 97:fd:6a:93:eb:52:dd:f1:80:99:8b:d6:2d:72:a3:ba:20:2a: c2:0b:ac:13:75:3c:af:40:65:86:bf:b8:57:e6:14:9e:e1:16: f5:44:e9:a4:c7:22:a2:ab:45:8f:d4:0b:88:ad:31:b1:6e:ab: fa:9f:09:89:89:7e:eb:dc:76:80:53:a9:d8:5f:3f:19:ec:39: 04:5b:9c:4b:7d:84:cc:ea:eb:aa:0c:3d:da:0f:5b:a1:ca:8c: 81:3a:84:1c:b0:b1:96:57:cf:83:21:17:68:de:db:83:1f:f7: 5e:52:02:90:06:b7:67:ca:2e:6e:a8:30:4f:47:5f:15:85:c0: fd:4a:65:b4:7f:59:99:f7:3a:89:e0:20:11:78:23:0d:5c:55: f2:0a:41:b2:15:1f:e6:e0:17:84:de:f2:41:ab:c1:e3:ba:41: 2e:c0:ad:2c:11:d8:9f:27:78:be:7c:5f:e8:7c:43:62:b8:92: d7:d5:45:0e -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt3xvWCmu8unEOpF+oMZBVjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMmI4OWMzYzU3YTNlMjk2YWE0MDYxZTk2Mjg0MGJlN2Fl OGYwMTgwHhcNMjYwMTAxMDQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzM4Yzk3MWNmM2YyNDIyZTI3YWE4YmVkYTg0ZWUyZmQ5Yjk4ZmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv07ZDm5ZsBvgQ2zxm1/meevFnNmw tqxb2hr8BumKj72D56VOz1T+csw1keuz0RgrIow/nHC8Krsa1jTti4iWqHj1otlq pPR2PUQVgegVb08jQOafYC0jNTdBU85JCzQcdkKPcOEhTNvzUuytX7jiq1qKPjTU 2oKjor3tdA87nWsw3eJXBHXlvzv+/Iw82FEC1fQbDCD8zlm/q23Zh89VqpPCCfjh BHfWhaOGxXe5Wdbf/ZMTuwb5LSrSCQ4COkhb4myVNfKxeiWMMeHEo66BJu7ZhGED r+/W6z0MoMY9v9S04X2rnQ7rXtiAnXN5vnvDLcgI0j/fBdIcXOg3+GDDKwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFBc4yXHPPyQi4nqovtqE7i/ZuY+hMB8GA1UdIwQY MBaAFEwricPFej4paqQGHpYoQL566PAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEN1Snc4VjZQaWxxcEFZZWxpaEF2bnJvOEJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83MjE1NWEtZDEwOS00YzJkLWI5NzQt MTEyOGU1Y2U2YTViLzEvRnpqSmNjOF9KQ0xpZXFpLTJvVHVMOW01ajZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni83MjE1NWEtZDEwOS00YzJkLWI5NzQtMTEyOGU1Y2U2YTVi LzEvVEN1Snc4VjZQaWxxcEFZZWxpaEF2bnJvOEJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDASBAIAATAMAwQBVepmAwQB VepyMBoEAgACMBQwEgMHASoKb0AAAgMHASoKb0AABDANBgkqhkiG9w0BAQsFAAOC AQEAWnmXPLWKur6MjFkXaNPnX9A4Z51pdDlq3AoxdcSfSSqmlsElzxhiXdyRxObH BHkXrog9VhZNNtrHNlntB6AWsKsvBJTrH4RGl/1qk+tS3fGAmYvWLXKjuiAqwgus E3U8r0Blhr+4V+YUnuEW9UTppMcioqtFj9QLiK0xsW6r+p8JiYl+69x2gFOp2F8/ Gew5BFucS32EzOrrqgw92g9bocqMgTqEHLCxllfPgyEXaN7bgx/3XlICkAa3Z8ou bqgwT0dfFYXA/UpltH9Zmfc6ieAgEXgjDVxV8gpBshUf5uAXhN7yQavB47pBLsCt LBHYnyd4vnxf6HxDYriS19VFDg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:56 2026 by rpki-client