This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/fUcJvuI5M0eo5b7UJPq8sGJaGH8.roa File: fUcJvuI5M0eo5b7UJPq8sGJaGH8.roa (raw, json) Hash identifier: pvDkmaTgQN4sNGe38GsqD+fJLQuvpfb1vbqdHC2CF7o= Subject key identifier: 7D:47:09:BE:E2:39:33:47:A8:E5:BE:D4:24:FA:BC:B0:62:5A:18:7F Certificate issuer: /CN=11efdbd727fb5bd53cec6957a29b47c2c34a834c Certificate serial: 019B79EC31B09FCE7B8751DCF21DE9829B3C Authority key identifier: 11:EF:DB:D7:27:FB:5B:D5:3C:EC:69:57:A2:9B:47:C2:C3:4A:83:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/fUcJvuI5M0eo5b7UJPq8sGJaGH8.roa Signing time: Thu 01 Jan 2026 14:18:00 +0000 ROA not before: Thu 01 Jan 2026 14:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202859 IP address blocks: 185.152.20.0/24 maxlen: 24 185.152.21.0/24 maxlen: 24 185.152.22.0/24 maxlen: 24 185.152.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.mft rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:31:b0:9f:ce:7b:87:51:dc:f2:1d:e9:82:9b:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11efdbd727fb5bd53cec6957a29b47c2c34a834c Validity Not Before: Jan 1 14:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d4709bee2393347a8e5bed424fabcb0625a187f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0d:c5:cb:f0:88:51:e6:43:38:73:3f:54:c3: f4:7d:54:8e:44:b5:1e:06:5e:58:ed:a5:a9:88:56: b3:4e:aa:91:74:29:3c:19:b5:c7:29:c8:49:d6:b0: 88:ee:92:65:08:95:42:11:d0:0b:12:1b:60:d4:dc: 1a:8c:e1:e3:71:50:72:2b:97:04:76:a5:fa:9f:3f: 08:2e:38:7d:76:8f:82:c7:4b:8d:21:82:56:01:f8: 06:71:54:cf:5f:c2:4d:fb:d1:95:57:2d:3c:d2:12: 87:c8:1f:9d:03:7e:31:f7:83:3d:68:22:36:31:d4: 8e:03:32:93:89:4e:fb:c5:d9:68:d1:a2:31:99:35: 4f:5c:9e:bd:c8:f8:a5:46:89:fd:87:19:03:f3:c4: 5c:8b:72:76:dd:80:70:d0:61:f3:03:81:41:e4:51: b5:0c:39:26:57:88:cd:f0:cb:da:c7:70:56:c9:13: 5a:1b:c5:45:8c:f7:72:d7:c3:1e:ce:d4:f0:8c:4a: c5:cf:99:f2:fa:96:c4:f8:b6:e4:31:cf:bc:f8:0b: f2:21:a7:09:5f:04:85:ae:e1:b8:0e:cb:28:3e:e5: d5:fb:ea:e9:49:f4:93:38:83:6e:28:f7:56:ec:08: b1:2d:13:fc:59:6c:03:dd:3b:d1:da:00:86:ad:57: 61:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:47:09:BE:E2:39:33:47:A8:E5:BE:D4:24:FA:BC:B0:62:5A:18:7F X509v3 Authority Key Identifier: keyid:11:EF:DB:D7:27:FB:5B:D5:3C:EC:69:57:A2:9B:47:C2:C3:4A:83:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ee_b1yf7W9U87GlXoptHwsNKg0w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/fUcJvuI5M0eo5b7UJPq8sGJaGH8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/047ce4-44ae-4273-94fa-dc634e8aa2a3/1/Ee_b1yf7W9U87GlXoptHwsNKg0w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.152.20.0/22 Signature Algorithm: sha256WithRSAEncryption 3d:da:cc:65:3f:3b:48:96:64:79:58:a3:d4:08:70:71:cc:87: 47:91:ab:33:a9:c8:e6:e9:9f:a0:f0:f0:10:8d:ac:56:6a:3c: 04:aa:25:44:dd:d7:d8:b9:2e:20:f5:d6:cf:60:e0:4a:d9:a3: 75:a4:f9:22:8e:5b:3a:95:ed:b5:93:80:f1:d2:ae:7f:dc:b2: b6:d7:00:1c:a6:a2:09:d5:e4:f1:8f:ae:19:b3:0d:ea:3f:18: d6:2e:d1:1d:70:4f:a3:e5:dd:bf:d6:88:ff:59:e4:56:b2:7d: 2a:7a:58:92:ca:57:e4:0a:7e:d8:85:16:13:bb:67:e4:1b:4f: e0:7e:ee:38:5e:fe:bc:5c:47:52:52:61:69:df:98:b8:30:37: 86:be:da:6a:60:0a:63:18:ab:7e:1a:fc:2f:80:fe:e4:93:d6: 5b:64:eb:00:ab:d8:d4:84:52:31:71:4a:92:12:ad:e5:6d:43: ba:02:d4:a4:76:6b:95:1b:03:14:e8:fc:15:f3:82:49:bd:cd: ee:f1:ec:74:c2:67:d5:ab:04:cb:02:39:b4:20:cb:29:12:6e: b0:a1:23:7f:c3:2a:ab:05:e5:89:da:68:69:d6:48:25:fd:b8: 39:40:20:3b:0d:bb:31:c3:01:44:cf:11:23:56:c6:20:35:8d: 3a:05:01:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57DGwn857h1Hc8h3pgps8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZWZkYmQ3MjdmYjViZDUzY2VjNjk1N2EyOWI0N2MyYzM0 YTgzNGMwHhcNMjYwMTAxMTQxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDQ3MDliZWUyMzkzMzQ3YThlNWJlZDQyNGZhYmNiMDYyNWExODdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ3Fy/CIUeZDOHM/VMP0fVSORLUe Bl5Y7aWpiFazTqqRdCk8GbXHKchJ1rCI7pJlCJVCEdALEhtg1NwajOHjcVByK5cE dqX6nz8ILjh9do+Cx0uNIYJWAfgGcVTPX8JN+9GVVy080hKHyB+dA34x94M9aCI2 MdSOAzKTiU77xdlo0aIxmTVPXJ69yPilRon9hxkD88Rci3J23YBw0GHzA4FB5FG1 DDkmV4jN8Mvax3BWyRNaG8VFjPdy18MeztTwjErFz5ny+pbE+LbkMc+8+AvyIacJ XwSFruG4DssoPuXV++rpSfSTOINuKPdW7AixLRP8WWwD3TvR2gCGrVdhlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH1HCb7iOTNHqOW+1CT6vLBiWhh/MB8GA1UdIwQY MBaAFBHv29cn+1vVPOxpV6KbR8LDSoNMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWVfYjF5ZjdXOVU4N0dsWG9wdEh3c05LZzB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wNDdjZTQtNDRhZS00MjczLTk0ZmEt ZGM2MzRlOGFhMmEzLzEvZlVjSnZ1STVNMGVvNWI3VUpQcThzR0phR0g4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8wNDdjZTQtNDRhZS00MjczLTk0ZmEtZGM2MzRlOGFhMmEz LzEvRWVfYjF5ZjdXOVU4N0dsWG9wdEh3c05LZzB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZgUMA0G CSqGSIb3DQEBCwUAA4IBAQA92sxlPztIlmR5WKPUCHBxzIdHkaszqcjm6Z+g8PAQ jaxWajwEqiVE3dfYuS4g9dbPYOBK2aN1pPkijls6le21k4Dx0q5/3LK21wAcpqIJ 1eTxj64Zsw3qPxjWLtEdcE+j5d2/1oj/WeRWsn0qeliSylfkCn7YhRYTu2fkG0/g fu44Xv68XEdSUmFp35i4MDeGvtpqYApjGKt+GvwvgP7kk9ZbZOsAq9jUhFIxcUqS Eq3lbUO6AtSkdmuVGwMU6PwV84JJvc3u8ex0wmfVqwTLAjm0IMspEm6woSN/wyqr BeWJ2mhp1kgl/bg5QCA7DbsxwwFEzxEjVsYgNY06BQHs -----END CERTIFICATE-----Generated at Mon Jan 26 05:04:45 2026 by rpki-client