This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/fFA6Tc1793n-r3BnGi87lZEg-eE.roa File: fFA6Tc1793n-r3BnGi87lZEg-eE.roa (raw, json) Hash identifier: yKcGEOfvNP+8jvQZLXGNhmpwiIIwq6NoShkHAH7kres= Subject key identifier: 7C:50:3A:4D:CD:7B:F7:79:FE:AF:70:67:1A:2F:3B:95:91:20:F9:E1 Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Certificate serial: 019B7BA51E4C5B6134C2B60F553F32D3CEC4 Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/fFA6Tc1793n-r3BnGi87lZEg-eE.roa Signing time: Thu 01 Jan 2026 22:19:37 +0000 ROA not before: Thu 01 Jan 2026 22:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212333 IP address blocks: 92.255.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:1e:4c:5b:61:34:c2:b6:0f:55:3f:32:d3:ce:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Validity Not Before: Jan 1 22:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c503a4dcd7bf779feaf70671a2f3b959120f9e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:68:f6:a6:3b:32:25:89:6c:56:1d:3d:36:8e: 45:62:a3:68:c8:1d:5a:9b:4c:37:bd:70:a9:cf:8d: 81:0a:b7:32:72:53:70:e6:0d:43:5c:e9:2e:c4:4c: f6:71:d2:b2:5a:0f:54:f4:52:d8:af:b6:93:18:77: 20:07:59:17:a2:7c:3a:a7:b8:af:0f:2f:df:a5:c5: 9a:51:20:3a:2c:2c:94:ff:5d:e2:b3:84:35:72:8a: b2:4f:80:40:67:c0:9e:a0:46:ea:38:f3:2c:e6:7f: 45:66:78:b4:4e:71:2b:fd:85:49:cd:5a:0b:8f:d3: 57:e7:f5:5e:65:67:e3:47:61:14:75:54:d4:0b:d2: 7c:c1:82:7a:c7:17:76:1f:60:fc:7a:d5:54:a3:ea: cf:5b:d6:93:01:2f:8f:18:77:98:43:1a:94:2e:50: f1:6b:b6:f2:d2:44:18:bb:06:3c:2e:69:53:2b:1b: ac:9c:73:45:6c:37:82:a9:03:b9:8f:ae:55:64:2f: 39:76:64:a3:a1:9d:04:d6:9d:e6:39:be:19:bf:13: 76:7b:8f:50:60:79:ae:50:3d:87:4b:68:d6:e1:9f: 95:c0:1f:9d:2c:96:30:4a:32:55:92:03:8d:92:e2: 9c:19:4a:f2:1e:23:08:38:13:c9:7a:35:e1:24:7c: 15:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:50:3A:4D:CD:7B:F7:79:FE:AF:70:67:1A:2F:3B:95:91:20:F9:E1 X509v3 Authority Key Identifier: keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/fFA6Tc1793n-r3BnGi87lZEg-eE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.255.43.0/24 Signature Algorithm: sha256WithRSAEncryption 95:8e:1e:9a:27:76:bd:79:f9:32:ad:d5:96:0f:78:03:93:09: b9:bb:ab:d4:12:5f:97:d3:47:20:93:da:51:b2:0f:52:d2:69: 79:fc:4d:30:47:1b:06:a9:70:87:bb:50:c2:89:6d:26:3a:49: cc:06:aa:ef:dc:cc:b3:6d:dc:cb:eb:91:f5:25:1e:63:ab:45: 92:c6:d3:be:e3:2c:b0:b3:6d:9c:c7:c6:16:8a:45:f6:2f:50: e3:eb:da:ae:64:7c:94:11:a2:7a:d9:a0:b9:9c:d2:df:7f:32: 2b:89:b7:6d:d0:6c:87:f5:7b:a8:12:e3:b0:35:38:12:fd:59: 6d:7f:bb:46:0e:8c:2e:b8:47:bb:6b:2b:1c:03:6f:05:4d:93: 4a:12:2b:f4:c8:fe:7e:6e:89:33:d1:6a:2e:bc:72:04:21:6c: 3b:42:62:0f:07:cd:a9:fb:31:a6:97:ee:18:61:e2:7d:68:53: de:d7:c8:d0:36:31:a8:4a:c2:18:64:e1:aa:f5:a5:23:15:d6: 29:f1:16:e6:10:50:5e:cb:30:cc:eb:67:6d:95:26:22:a3:8d: 01:e1:a6:d4:c5:de:df:82:63:e7:86:98:9e:21:81:21:90:89: 6f:81:af:f1:1b:b5:0b:83:fa:14:f0:ea:ba:44:9a:73:89:82: 64:9b:26:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pR5MW2E0wrYPVT8y087EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz NmM0ZmYwHhcNMjYwMTAxMjIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzUwM2E0ZGNkN2JmNzc5ZmVhZjcwNjcxYTJmM2I5NTkxMjBmOWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmj2pjsyJYlsVh09No5FYqNoyB1a m0w3vXCpz42BCrcyclNw5g1DXOkuxEz2cdKyWg9U9FLYr7aTGHcgB1kXonw6p7iv Dy/fpcWaUSA6LCyU/13is4Q1coqyT4BAZ8CeoEbqOPMs5n9FZni0TnEr/YVJzVoL j9NX5/VeZWfjR2EUdVTUC9J8wYJ6xxd2H2D8etVUo+rPW9aTAS+PGHeYQxqULlDx a7by0kQYuwY8LmlTKxusnHNFbDeCqQO5j65VZC85dmSjoZ0E1p3mOb4ZvxN2e49Q YHmuUD2HS2jW4Z+VwB+dLJYwSjJVkgONkuKcGUryHiMIOBPJejXhJHwVVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHxQOk3Ne/d5/q9wZxovO5WRIPnhMB8GA1UdIwQY MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt ODg2MmI1MTczMTdjLzEvZkZBNlRjMTc5M24tcjNCbkdpODdsWkVnLWVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXP8rMA0G CSqGSIb3DQEBCwUAA4IBAQCVjh6aJ3a9efkyrdWWD3gDkwm5u6vUEl+X00cgk9pR sg9S0ml5/E0wRxsGqXCHu1DCiW0mOknMBqrv3MyzbdzL65H1JR5jq0WSxtO+4yyw s22cx8YWikX2L1Dj69quZHyUEaJ62aC5nNLffzIribdt0GyH9XuoEuOwNTgS/Vlt f7tGDowuuEe7ayscA28FTZNKEiv0yP5+bokz0WouvHIEIWw7QmIPB82p+zGml+4Y YeJ9aFPe18jQNjGoSsIYZOGq9aUjFdYp8RbmEFBeyzDM62dtlSYio40B4abUxd7f gmPnhpieIYEhkIlvga/xG7ULg/oU8Oq6RJpziYJkmyZF -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:13 2026 by rpki-client