This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/fCPsVmQYESXsIrFzghBdJCH1miI.roa File: fCPsVmQYESXsIrFzghBdJCH1miI.roa (raw, json) Hash identifier: w0YUnPbD+SIAOv8xIs4vR52GvWAb785T1PJzGOLTe/A= Subject key identifier: 7C:23:EC:56:64:18:11:25:EC:22:B1:73:82:10:5D:24:21:F5:9A:22 Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019B7E388EC0C87B0C1E3C98765A030B3618 Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/fCPsVmQYESXsIrFzghBdJCH1miI.roa Signing time: Fri 02 Jan 2026 10:19:54 +0000 ROA not before: Fri 02 Jan 2026 10:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14969 IP address blocks: 83.126.61.0/24 maxlen: 24 84.207.206.0/24 maxlen: 24 84.207.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:8e:c0:c8:7b:0c:1e:3c:98:76:5a:03:0b:36:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Jan 2 10:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c23ec5664181125ec22b17382105d2421f59a22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:73:d3:01:43:d4:e6:5a:7c:51:2c:70:cc:9b: 56:61:0f:1a:6e:f0:1f:85:3a:9b:df:cd:d6:d9:21: 1e:51:98:ce:11:cf:0e:ba:36:3d:9e:99:06:1d:56: 74:0e:16:b0:fb:3d:e2:4a:a2:25:0a:bd:8d:6f:fb: 06:f9:e4:f5:4d:40:c3:60:c6:e8:06:84:a5:19:d0: 19:fc:66:8f:b2:8e:54:4a:8f:c1:15:8a:cb:3a:10: e0:c2:82:be:27:10:1f:f5:77:47:09:ad:c1:2f:18: 28:91:34:e2:74:31:c9:49:8c:00:fb:55:7b:a7:60: 7f:18:35:21:99:14:35:5a:98:f2:57:9f:06:0f:83: 0b:53:85:48:d9:be:2b:8f:10:fc:6c:f9:e8:b9:c1: ec:d4:47:4a:c3:46:ad:50:a4:7f:11:5e:a6:0c:39: e1:07:ac:c5:cd:a1:47:92:90:d7:9b:7f:19:ca:07: 67:55:4b:c2:3a:3e:69:10:f5:0c:48:fc:03:c7:e9: a1:dc:71:cb:3d:67:24:a7:1a:e1:6e:2a:54:3b:48: 00:0d:53:0f:5e:58:bd:28:53:e1:37:37:0a:55:12: 10:8c:ac:78:df:f8:52:d8:10:e0:c1:23:11:2f:b6: c0:a8:2f:d3:d1:b4:dc:d4:dc:26:b8:a1:d9:55:c3: ed:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:23:EC:56:64:18:11:25:EC:22:B1:73:82:10:5D:24:21:F5:9A:22 X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/fCPsVmQYESXsIrFzghBdJCH1miI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.126.61.0/24 84.207.206.0/24 84.207.234.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:44:a8:28:17:f7:8c:92:9c:4d:6e:cd:af:81:73:48:bb:07: 34:3a:f6:cd:68:8f:7c:b1:66:5c:72:6f:d7:54:a4:3b:5d:fd: e6:49:df:d8:ad:c2:b5:b3:8f:ab:74:7e:3a:eb:d5:b6:bd:52: 1c:c5:3e:54:cd:c4:56:b6:3b:7b:7c:9b:3c:33:a6:50:c3:cb: 21:77:8f:88:62:08:bd:88:0c:5f:4f:07:f0:a5:93:96:80:e7: 1e:ac:20:10:c6:ad:3d:fa:68:f2:dc:b8:41:35:ef:35:27:f1: d2:46:c7:50:43:b7:38:53:73:7b:4f:19:be:9d:3b:34:8a:17: 2a:13:ba:ca:78:74:47:5d:d9:d4:d2:97:45:1f:57:59:0c:30: 62:f9:dc:78:b7:3b:f7:65:ac:09:98:d5:45:ec:4e:f6:0c:e3: 07:cd:bc:64:95:a4:20:19:e9:f3:00:df:d6:84:a8:09:f7:78: 99:06:ba:38:a0:50:f7:08:ed:19:e9:6c:e6:31:db:55:6b:d2: cc:79:cc:9d:d6:2c:12:c1:ff:2e:b0:42:b5:6f:08:b1:8d:f9: 7d:26:dd:e5:e9:50:1f:41:57:e4:f0:91:8f:25:08:ec:98:6c: 6d:e2:c3:f7:d3:a3:c5:f7:c4:56:d8:a5:c9:1d:94:a0:cb:13: ea:69:cb:45 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OI7AyHsMHjyYdloDCzYYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwMTAyMTAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzIzZWM1NjY0MTgxMTI1ZWMyMmIxNzM4MjEwNWQyNDIxZjU5YTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3PTAUPU5lp8USxwzJtWYQ8abvAf hTqb383W2SEeUZjOEc8OujY9npkGHVZ0Dhaw+z3iSqIlCr2Nb/sG+eT1TUDDYMbo BoSlGdAZ/GaPso5USo/BFYrLOhDgwoK+JxAf9XdHCa3BLxgokTTidDHJSYwA+1V7 p2B/GDUhmRQ1WpjyV58GD4MLU4VI2b4rjxD8bPnoucHs1EdKw0atUKR/EV6mDDnh B6zFzaFHkpDXm38ZygdnVUvCOj5pEPUMSPwDx+mh3HHLPWckpxrhbipUO0gADVMP Xli9KFPhNzcKVRIQjKx43/hS2BDgwSMRL7bAqC/T0bTc1NwmuKHZVcPtwQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHwj7FZkGBEl7CKxc4IQXSQh9ZoiMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvZkNQc1ZtUVlFU1hzSXJGemdoQmRKQ0gxbWlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAU349AwQA VM/OAwQAVM/qMA0GCSqGSIb3DQEBCwUAA4IBAQBLRKgoF/eMkpxNbs2vgXNIuwc0 OvbNaI98sWZccm/XVKQ7Xf3mSd/YrcK1s4+rdH4669W2vVIcxT5UzcRWtjt7fJs8 M6ZQw8shd4+IYgi9iAxfTwfwpZOWgOcerCAQxq09+mjy3LhBNe81J/HSRsdQQ7c4 U3N7Txm+nTs0ihcqE7rKeHRHXdnU0pdFH1dZDDBi+dx4tzv3ZawJmNVF7E72DOMH zbxklaQgGenzAN/WhKgJ93iZBro4oFD3CO0Z6WzmMdtVa9LMecyd1iwSwf8usEK1 bwixjfl9Jt3l6VAfQVfk8JGPJQjsmGxt4sP306PF98RW2KXJHZSgyxPqactF -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:20 2026 by rpki-client