This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/nFf_xFZifK1O6AxBYllnzUi_i3U.roa File: nFf_xFZifK1O6AxBYllnzUi_i3U.roa (raw, json) Hash identifier: wCPglifyZSCCde6+ZRBNVX/1pM0oJBcsybUWgeFRMfQ= Subject key identifier: 9C:57:FF:C4:56:62:7C:AD:4E:E8:0C:41:62:59:67:CD:48:BF:8B:75 Certificate issuer: /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825 Certificate serial: 019BA84D90F8BAC48546C041E05A64EC1B62 Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/nFf_xFZifK1O6AxBYllnzUi_i3U.roa Signing time: Sat 10 Jan 2026 14:26:54 +0000 ROA not before: Sat 10 Jan 2026 14:26:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15731 IP address blocks: 185.183.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a8:4d:90:f8:ba:c4:85:46:c0:41:e0:5a:64:ec:1b:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825 Validity Not Before: Jan 10 14:26:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c57ffc456627cad4ee80c41625967cd48bf8b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7b:94:03:af:83:2d:49:1c:82:78:fd:9b:98: 98:22:2c:40:56:54:6a:9a:9b:0a:0c:03:8f:b0:1b: 21:da:a6:e9:1b:f5:04:c2:81:d1:f0:9b:e5:3b:67: 63:11:91:74:29:10:18:94:e5:85:13:19:5f:f2:cc: c2:74:58:eb:bd:c0:d2:b1:6e:22:aa:09:9b:cf:3e: ae:3a:59:a1:f8:c5:a0:7e:4e:bb:75:5b:82:04:7b: 26:07:bf:18:8a:eb:10:59:19:5e:55:a9:61:ed:52: 48:35:d4:f0:23:56:d7:e0:dc:0a:92:ce:cd:09:d4: 4a:0e:05:06:bf:d0:1a:8a:c5:45:09:2b:90:00:5e: 96:15:e0:48:a2:00:dd:64:2c:0f:e9:05:81:c6:b6: a1:27:e3:18:93:b5:80:f0:af:8e:55:d0:16:09:c8: ab:51:42:bf:f6:f9:c4:42:d5:eb:9f:93:b0:66:4d: 12:a4:f4:cd:9c:97:21:ef:db:22:c8:43:4d:1b:f1: ec:92:f1:9e:20:88:5f:ea:6e:db:b6:10:7d:b0:c6: 87:7f:92:bc:2a:93:d0:dc:fa:d2:13:a1:3a:9c:bb: e5:54:31:29:97:a5:c0:ac:86:09:29:60:8d:9e:67: 85:b7:d3:02:02:20:24:a0:c1:b7:ca:03:19:54:99: 51:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:57:FF:C4:56:62:7C:AD:4E:E8:0C:41:62:59:67:CD:48:BF:8B:75 X509v3 Authority Key Identifier: keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/nFf_xFZifK1O6AxBYllnzUi_i3U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.183.244.0/22 Signature Algorithm: sha256WithRSAEncryption bd:f8:5d:2b:69:96:90:12:a1:ec:b4:e0:40:5e:67:7f:a3:cd: 22:22:1a:e3:80:aa:b0:85:67:45:0d:cc:70:8c:a2:c9:33:bf: 5d:9c:30:82:52:2a:24:ef:06:b0:d0:bb:1d:16:8f:e2:b7:be: 3d:c0:57:07:76:14:13:40:42:46:7a:53:58:1d:4f:8b:e1:a7: fc:dd:2e:b8:7d:f3:b2:ba:69:da:41:82:4f:2c:ad:9f:25:77: 30:98:64:5f:0e:32:48:77:8a:ef:48:7c:bc:22:c8:6e:d3:71: bd:df:f0:20:e5:3e:58:7a:1b:79:fe:9a:2b:22:aa:27:4f:10: 60:e1:e9:69:99:30:e9:e0:84:c2:d1:a1:fe:f7:bc:85:9e:92: 44:76:6a:6a:1e:4f:fe:bc:2c:db:5d:99:c9:5d:d1:17:91:e4: 00:0a:9e:5f:4b:7c:b8:a8:22:e2:3a:eb:7b:e4:33:af:66:9a: 11:e3:26:17:e1:5e:b3:fa:6e:a3:ae:e7:51:a6:22:92:02:99: 78:06:f0:d9:e7:0b:c6:ce:cd:c3:79:c1:31:fd:99:13:21:1d: 43:93:23:26:41:65:7a:45:ea:bf:f6:d9:74:65:e6:5f:39:52: c5:58:22:ba:ad:22:20:aa:9f:a2:78:6f:39:94:65:50:b7:96: 07:50:09:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuoTZD4usSFRsBB4Fpk7BtiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiM2E3MzVkMDlhYWE3OTcwZGVmMTJjNGFjNjBlODI3ZmRi M2Y4MjUwHhcNMjYwMTEwMTQyNjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzU3ZmZjNDU2NjI3Y2FkNGVlODBjNDE2MjU5NjdjZDQ4YmY4Yjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nuUA6+DLUkcgnj9m5iYIixAVlRq mpsKDAOPsBsh2qbpG/UEwoHR8JvlO2djEZF0KRAYlOWFExlf8szCdFjrvcDSsW4i qgmbzz6uOlmh+MWgfk67dVuCBHsmB78YiusQWRleValh7VJINdTwI1bX4NwKks7N CdRKDgUGv9AaisVFCSuQAF6WFeBIogDdZCwP6QWBxrahJ+MYk7WA8K+OVdAWCcir UUK/9vnEQtXrn5OwZk0SpPTNnJch79siyENNG/HskvGeIIhf6m7bthB9sMaHf5K8 KpPQ3PrSE6E6nLvlVDEpl6XArIYJKWCNnmeFt9MCAiAkoMG3ygMZVJlR/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJxX/8RWYnytTugMQWJZZ81Iv4t1MB8GA1UdIwQY MBaAFGs6c10JqqeXDe8SxKxg6Cf9s/glMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXpwelhRbXFwNWNON3hMRXJHRG9KXzJ6LUNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jYzcyNDctNmYwYy00Yjc0LTg2OTAt MDUxMDc2NzQ0YTY1LzEvbkZmX3hGWmlmSzFPNkF4QllsbG56VWlfaTNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jYzcyNDctNmYwYy00Yjc0LTg2OTAtMDUxMDc2NzQ0YTY1 LzEvYXpwelhRbXFwNWNON3hMRXJHRG9KXzJ6LUNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubf0MA0G CSqGSIb3DQEBCwUAA4IBAQC9+F0raZaQEqHstOBAXmd/o80iIhrjgKqwhWdFDcxw jKLJM79dnDCCUiok7waw0LsdFo/it749wFcHdhQTQEJGelNYHU+L4af83S64ffOy umnaQYJPLK2fJXcwmGRfDjJId4rvSHy8Ishu03G93/Ag5T5Yeht5/porIqonTxBg 4elpmTDp4ITC0aH+97yFnpJEdmpqHk/+vCzbXZnJXdEXkeQACp5fS3y4qCLiOut7 5DOvZpoR4yYX4V6z+m6jrudRpiKSApl4BvDZ5wvGzs3DecEx/ZkTIR1DkyMmQWV6 Req/9tl0ZeZfOVLFWCK6rSIgqp+ieG85lGVQt5YHUAmT -----END CERTIFICATE-----Generated at Mon Jan 26 05:32:20 2026 by rpki-client