This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/fqKmITtuuIDpjK-CmwtGTo6Qx2I.roa File: fqKmITtuuIDpjK-CmwtGTo6Qx2I.roa (raw, json) Hash identifier: zOiW8j04KmVedHVbWP3l5qomPlPBpYoJxiOpFyd0f8s= Subject key identifier: 7E:A2:A6:21:3B:6E:B8:80:E9:8C:AF:82:9B:0B:46:4E:8E:90:C7:62 Certificate issuer: /CN=66feef09c450990af34779ce701be6cd54b3d924 Certificate serial: 019B7BA527F0970F2BE08388B9F55A844363 Authority key identifier: 66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/fqKmITtuuIDpjK-CmwtGTo6Qx2I.roa Signing time: Thu 01 Jan 2026 22:19:39 +0000 ROA not before: Thu 01 Jan 2026 22:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35179 IP address blocks: 79.110.192.0/20 maxlen: 24 83.168.64.0/22 maxlen: 22 83.168.71.0/24 maxlen: 24 83.168.72.0/21 maxlen: 24 83.168.80.0/21 maxlen: 21 83.168.88.0/22 maxlen: 22 83.168.100.0/22 maxlen: 24 83.168.104.0/24 maxlen: 24 83.168.108.0/23 maxlen: 23 83.168.111.0/24 maxlen: 24 83.168.114.0/23 maxlen: 23 83.168.116.0/23 maxlen: 23 83.168.120.0/23 maxlen: 23 83.168.126.0/23 maxlen: 23 185.5.216.0/22 maxlen: 24 185.49.29.0/24 maxlen: 24 185.49.30.0/23 maxlen: 23 193.239.56.0/22 maxlen: 24 2a01:96e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:27:f0:97:0f:2b:e0:83:88:b9:f5:5a:84:43:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66feef09c450990af34779ce701be6cd54b3d924 Validity Not Before: Jan 1 22:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ea2a6213b6eb880e98caf829b0b464e8e90c762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:38:52:e6:0f:77:93:ee:e3:fd:a7:8d:df:f5: 53:97:e6:72:5d:dd:a8:10:9f:2f:e3:bd:e8:f8:42: 22:eb:53:98:92:84:0b:39:24:b4:ae:0b:93:cd:39: d6:1f:97:9d:48:f9:9d:e8:aa:6a:53:ef:a0:53:17: f8:e9:07:d6:24:61:d1:cb:4b:40:5e:f6:e4:93:4d: db:80:a8:f2:a9:c3:86:4c:57:c2:15:c5:ff:14:28: 15:3d:01:6d:f0:0d:72:d1:c6:dc:79:84:e1:cd:ac: 30:be:d3:87:17:35:9f:8f:a9:f2:b3:3f:07:2b:15: 86:20:ac:38:a0:35:9c:63:ed:a7:4c:4a:c1:07:48: 1f:82:ae:c0:20:e7:8e:91:d0:dd:56:68:8f:33:5a: 5b:b8:63:7f:06:5a:15:d2:4d:f3:b2:73:d1:8e:dc: 16:31:b7:23:47:68:fd:64:03:c3:70:b8:ec:65:1d: c1:60:21:c1:51:a8:ca:fd:b0:a5:c3:4d:35:d6:ba: b3:fd:fe:22:7f:e0:39:3b:14:62:a0:12:d8:6c:23: 51:d1:57:f6:2e:8f:c5:fc:e1:be:ca:90:1e:34:04: 8c:e9:f2:74:55:03:3a:3d:8d:f4:b3:0c:32:dc:f2: 8d:3c:71:fe:02:92:df:5a:e6:20:86:ec:0c:e3:a9: 1d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A2:A6:21:3B:6E:B8:80:E9:8C:AF:82:9B:0B:46:4E:8E:90:C7:62 X509v3 Authority Key Identifier: keyid:66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/fqKmITtuuIDpjK-CmwtGTo6Qx2I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.110.192.0/20 83.168.64.0/22 83.168.71.0-83.168.91.255 83.168.100.0-83.168.104.255 83.168.108.0/23 83.168.111.0/24 83.168.114.0-83.168.117.255 83.168.120.0/23 83.168.126.0/23 185.5.216.0/22 185.49.29.0-185.49.31.255 193.239.56.0/22 IPv6: 2a01:96e0::/32 Signature Algorithm: sha256WithRSAEncryption 89:89:2f:b7:2d:6a:db:2a:87:4d:1d:7d:d1:71:d9:9b:8b:26: ec:ca:28:0d:af:a3:af:1a:76:82:77:b1:d3:3a:1c:39:ef:a4: 47:f9:c2:76:c8:6c:0c:67:85:5e:ef:10:74:ea:e3:7c:33:a5: 59:5d:4c:ac:38:3e:cf:9c:b1:14:d2:01:f4:70:bc:17:b7:6a: ba:05:90:f5:25:0b:13:50:49:f6:c2:a5:ba:69:e1:28:d8:28: 13:71:4f:ee:9e:71:95:c9:04:bf:0a:b4:a3:5a:c7:46:92:4c: d2:32:86:88:67:ce:2a:f9:eb:0d:35:c0:f8:2b:0b:f8:ef:5c: 8b:e3:71:41:a5:df:91:45:56:10:fe:c2:24:0c:7f:f9:d9:a0: bb:77:2a:2b:42:d9:44:9f:86:31:fa:4e:4a:12:62:5f:7f:31: f2:1f:80:40:c9:00:58:48:76:f6:fb:ce:23:f6:4e:9d:d4:40: 9e:c5:e0:83:2f:29:b3:29:42:5f:d2:d1:cd:f4:26:a1:b6:05: dc:99:b1:d6:d0:33:19:bb:4e:d7:0f:29:3b:3e:af:e6:9d:fe: 97:42:bf:ee:aa:93:db:80:7e:c8:8b:c6:45:d8:95:68:f0:fd: 02:41:d5:e9:bd:55:e3:96:ff:b7:ef:bb:f5:10:dd:53:2c:71: df:06:15:06 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgISAZt7pSfwlw8r4IOIufVahENjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZmVlZjA5YzQ1MDk5MGFmMzQ3NzljZTcwMWJlNmNkNTRi M2Q5MjQwHhcNMjYwMTAxMjIxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWEyYTYyMTNiNmViODgwZTk4Y2FmODI5YjBiNDY0ZThlOTBjNzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjhS5g93k+7j/aeN3/VTl+ZyXd2o EJ8v473o+EIi61OYkoQLOSS0rguTzTnWH5edSPmd6KpqU++gUxf46QfWJGHRy0tA Xvbkk03bgKjyqcOGTFfCFcX/FCgVPQFt8A1y0cbceYThzawwvtOHFzWfj6nysz8H KxWGIKw4oDWcY+2nTErBB0gfgq7AIOeOkdDdVmiPM1pbuGN/BloV0k3zsnPRjtwW MbcjR2j9ZAPDcLjsZR3BYCHBUajK/bClw0011rqz/f4if+A5OxRioBLYbCNR0Vf2 Lo/F/OG+ypAeNASM6fJ0VQM6PY30swwy3PKNPHH+ApLfWuYghuwM46kdhwIDAQAB o4ICfDCCAngwHQYDVR0OBBYEFH6ipiE7briA6YyvgpsLRk6OkMdiMB8GA1UdIwQY MBaAFGb+7wnEUJkK80d5znAb5s1Us9kkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnY3dkNjUlFtUXJ6UjNuT2NCdm16VlN6MlNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9hMTU5N2ItNmVmMi00NDMwLWFhNTYt ODI0NTFmMzNmNGNhLzEvZnFLbUlUdHV1SURwakstQ213dEdUbzZReDJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9hMTU5N2ItNmVmMi00NDMwLWFhNTYtODI0NTFmMzNmNGNh LzEvWnY3dkNjUlFtUXJ6UjNuT2NCdm16VlN6MlNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGRBggrBgEFBQcBBwEB/wSBgTB/MG4EAgABMGgDBARPbsAD BAJTqEAwDAMEAFOoRwMEAlOoWDAMAwQCU6hkAwQAU6hoAwQBU6hsAwQAU6hvMAwD BAFTqHIDBAFTqHQDBAFTqHgDBAFTqH4DBAK5BdgwDAMEALkxHQMEBbkxAAMEAsHv ODANBAIAAjAHAwUAKgGW4DANBgkqhkiG9w0BAQsFAAOCAQEAiYkvty1q2yqHTR19 0XHZm4sm7MooDa+jrxp2gnex0zocOe+kR/nCdshsDGeFXu8QdOrjfDOlWV1MrDg+ z5yxFNIB9HC8F7dqugWQ9SULE1BJ9sKlumnhKNgoE3FP7p5xlckEvwq0o1rHRpJM 0jKGiGfOKvnrDTXA+CsL+O9ci+NxQaXfkUVWEP7CJAx/+dmgu3cqK0LZRJ+GMfpO ShJiX38x8h+AQMkAWEh29vvOI/ZOndRAnsXggy8psylCX9LRzfQmobYF3Jmx1tAz GbtO1w8pOz6v5p3+l0K/7qqT24B+yIvGRdiVaPD9AkHV6b1V45b/t++79RDdUyxx 3wYVBg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:38 2026 by rpki-client