This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/FFK9gE8hyXTY7YFIiYm0wiz9v_E.roa File: FFK9gE8hyXTY7YFIiYm0wiz9v_E.roa (raw, json) Hash identifier: MdKubwj7D7j9Z7ZptXlKJ4OD1vPGntQ/LGawu6hO7EE= Subject key identifier: 14:52:BD:80:4F:21:C9:74:D8:ED:81:48:89:89:B4:C2:2C:FD:BF:F1 Certificate issuer: /CN=a0dae7678a396969e6340c9dcb65cde9e329554a Certificate serial: 019B7B36D773B0C56BDB4D7A56CD8A3F0616 Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/FFK9gE8hyXTY7YFIiYm0wiz9v_E.roa Signing time: Thu 01 Jan 2026 20:19:10 +0000 ROA not before: Thu 01 Jan 2026 20:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50629 IP address blocks: 185.226.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:d7:73:b0:c5:6b:db:4d:7a:56:cd:8a:3f:06:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a Validity Not Before: Jan 1 20:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1452bd804f21c974d8ed81488989b4c22cfdbff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ae:f5:f8:67:c4:4f:fb:ad:9d:51:af:84:07: ee:eb:7f:e0:de:0b:2e:87:9a:00:bf:cf:59:f8:89: b0:90:8e:4e:d2:a3:ea:de:a4:10:7c:4a:4b:39:17: 56:86:0c:80:34:b1:62:48:fb:41:fc:da:04:9d:f7: f4:e0:61:9e:10:8a:b8:55:41:a2:06:37:16:fb:0b: d7:52:32:27:b0:8a:06:97:66:29:64:85:76:9f:ce: cf:e9:86:ce:c1:fe:5f:76:28:64:b1:35:e5:1d:1d: f7:4c:8f:e1:57:33:41:71:7f:8d:60:f3:84:42:3e: a6:12:25:22:b8:eb:fd:1f:22:3e:9f:25:b9:52:ab: 2f:20:b0:f3:37:38:2a:99:e5:d3:76:42:81:c5:c8: 97:5d:35:3e:3e:2b:40:21:27:38:b8:61:0c:79:42: 48:60:35:bc:e3:1f:94:86:6a:8e:01:d2:ef:53:b4: af:f4:88:48:a4:61:4f:3d:e8:b6:46:98:f8:fe:d4: 0a:30:f1:73:14:1b:5b:4f:4b:62:44:11:9c:73:e2: 2f:3d:43:38:c5:7b:b9:b5:80:0f:55:a5:82:51:ec: 56:58:7d:11:81:e1:60:14:3c:eb:02:7f:5b:c8:06: 4d:69:c1:d5:7c:ea:7f:ea:a2:9d:46:b1:94:e8:71: 8c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:52:BD:80:4F:21:C9:74:D8:ED:81:48:89:89:B4:C2:2C:FD:BF:F1 X509v3 Authority Key Identifier: keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/FFK9gE8hyXTY7YFIiYm0wiz9v_E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.226.243.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:06:d3:12:b5:c7:b0:27:02:de:de:76:54:4a:6c:92:46:10: 3e:ec:6e:ff:65:af:5b:c1:ea:f8:2e:19:ed:e5:44:52:e1:3a: 16:10:64:84:6e:1d:64:60:96:1c:92:f9:53:51:f2:c5:5d:f3: 4e:72:d2:56:ad:3b:40:85:dd:9f:02:06:56:e2:9d:80:db:8c: 30:14:d8:47:4d:70:f4:13:6f:17:18:71:57:bc:a8:43:e9:9e: 59:8a:48:c0:db:84:7f:06:ce:aa:0d:a6:59:d4:f8:46:6f:14: b1:42:b3:dd:9c:7b:11:3c:83:3c:f1:42:b4:59:42:ab:d4:02: 64:5b:0c:83:19:c9:a0:91:0f:4a:2f:02:2e:50:d7:9a:a5:00: 5e:3b:c8:cc:52:db:65:2c:27:92:39:11:5a:a6:22:05:28:85: 93:4b:8e:7c:87:f5:7c:f9:09:61:c9:86:f8:25:4c:2f:10:7c: 0e:18:e3:3f:c4:a7:e1:d3:8a:c4:63:36:2a:1f:b9:fb:e3:38: a3:90:2e:fa:fd:39:ed:2e:32:6e:3a:c2:ef:f9:36:a3:a6:4a: ce:da:8c:ae:e1:2e:bd:85:61:4f:a9:f6:f2:92:da:e6:75:91: 91:08:e2:8b:a2:39:ce:3b:0f:d8:b4:7c:bd:60:1a:76:e6:f6: ec:f0:2a:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NtdzsMVr2016Vs2KPwYWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZGFlNzY3OGEzOTY5NjllNjM0MGM5ZGNiNjVjZGU5ZTMy OTU1NGEwHhcNMjYwMTAxMjAxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDUyYmQ4MDRmMjFjOTc0ZDhlZDgxNDg4OTg5YjRjMjJjZmRiZmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta71+GfET/utnVGvhAfu63/g3gsu h5oAv89Z+ImwkI5O0qPq3qQQfEpLORdWhgyANLFiSPtB/NoEnff04GGeEIq4VUGi BjcW+wvXUjInsIoGl2YpZIV2n87P6YbOwf5fdihksTXlHR33TI/hVzNBcX+NYPOE Qj6mEiUiuOv9HyI+nyW5UqsvILDzNzgqmeXTdkKBxciXXTU+PitAISc4uGEMeUJI YDW84x+UhmqOAdLvU7Sv9IhIpGFPPei2Rpj4/tQKMPFzFBtbT0tiRBGcc+IvPUM4 xXu5tYAPVaWCUexWWH0RgeFgFDzrAn9byAZNacHVfOp/6qKdRrGU6HGMcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBRSvYBPIcl02O2BSImJtMIs/b/xMB8GA1UdIwQY MBaAFKDa52eKOWlp5jQMnctlzenjKVVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb05yblo0bzVhV25tTkF5ZHkyWE42ZU1wVlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80NjM1OGUtNTRmNy00ZjRiLWE3NDct ZjczNWUzZGFmZDUzLzEvRkZLOWdFOGh5WFRZN1lGSWlZbTB3aXo5dl9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy80NjM1OGUtNTRmNy00ZjRiLWE3NDctZjczNWUzZGFmZDUz LzEvb05yblo0bzVhV25tTkF5ZHkyWE42ZU1wVlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueLzMA0G CSqGSIb3DQEBCwUAA4IBAQBLBtMStcewJwLe3nZUSmySRhA+7G7/Za9bwer4Lhnt 5URS4ToWEGSEbh1kYJYckvlTUfLFXfNOctJWrTtAhd2fAgZW4p2A24wwFNhHTXD0 E28XGHFXvKhD6Z5ZikjA24R/Bs6qDaZZ1PhGbxSxQrPdnHsRPIM88UK0WUKr1AJk WwyDGcmgkQ9KLwIuUNeapQBeO8jMUttlLCeSORFapiIFKIWTS458h/V8+QlhyYb4 JUwvEHwOGOM/xKfh04rEYzYqH7n74zijkC76/TntLjJuOsLv+TajpkrO2oyu4S69 hWFPqfbyktrmdZGRCOKLojnOOw/YtHy9YBp25vbs8CoO -----END CERTIFICATE-----Generated at Sun Jan 25 21:24:31 2026 by rpki-client