This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/fzXSzzRGH69X9HG_DPX1UIdlnMc.roa File: fzXSzzRGH69X9HG_DPX1UIdlnMc.roa (raw, json) Hash identifier: 5e/q/Of0/VbRaI+58tUil5lHG2B8yQNHwFd7IDN7AnA= Subject key identifier: 7F:35:D2:CF:34:46:1F:AF:57:F4:71:BF:0C:F5:F5:50:87:65:9C:C7 Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019B76EB124D90232BA6C41AE2AC9C7DA37E Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/fzXSzzRGH69X9HG_DPX1UIdlnMc.roa Signing time: Thu 01 Jan 2026 00:17:55 +0000 ROA not before: Thu 01 Jan 2026 00:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202169 IP address blocks: 91.215.48.0/22 maxlen: 24 185.19.188.0/23 maxlen: 24 185.19.190.0/24 maxlen: 24 185.240.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:12:4d:90:23:2b:a6:c4:1a:e2:ac:9c:7d:a3:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Jan 1 00:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f35d2cf34461faf57f471bf0cf5f55087659cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e1:16:d4:4f:5e:44:cf:46:a3:9e:1e:ea:ca: 26:ad:7f:c9:ba:b4:5e:21:f1:1d:db:3b:49:66:a5: 8b:61:2d:a3:8c:58:18:79:ef:c6:15:8b:e4:d9:05: 1e:84:54:47:39:7a:4f:86:59:43:2d:d2:c4:a6:78: e0:fc:99:6f:fe:f2:a2:14:74:b7:7f:5d:c0:9a:ab: a9:63:f3:25:6a:00:6c:5f:01:52:f0:9b:49:2c:48: e8:e6:4c:c6:86:b0:50:3b:ff:94:c0:b4:4d:d8:85: d8:51:50:20:21:8a:5d:bf:7c:41:9d:a7:e4:54:b8: 88:9f:2b:0f:7a:cb:c8:e9:e8:ef:f5:0f:dd:a8:71: b2:05:ad:ab:69:52:ee:3d:6c:59:41:f8:f6:ba:8e: fd:09:32:f3:e5:e0:fb:fc:bd:3a:21:e7:50:2a:d4: 64:96:7c:bc:f4:c5:d1:ad:97:ec:32:5d:3c:12:ef: 07:6e:2e:0c:ad:56:4c:32:f3:fa:d5:e0:51:6a:21: 2c:5d:55:39:0b:ba:78:7e:65:00:a8:52:2b:7f:df: 89:34:8a:98:31:4f:c8:1f:35:28:15:f7:7b:5f:1e: dd:90:63:0d:30:5e:db:66:0a:1f:b3:8e:68:72:a2: 06:5a:a6:a9:5c:d2:eb:d9:db:53:04:4a:9c:4c:76: 42:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:35:D2:CF:34:46:1F:AF:57:F4:71:BF:0C:F5:F5:50:87:65:9C:C7 X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/fzXSzzRGH69X9HG_DPX1UIdlnMc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.215.48.0/22 185.19.188.0-185.19.190.255 185.240.80.0/22 Signature Algorithm: sha256WithRSAEncryption 53:91:da:f4:c5:c9:db:1e:ad:08:a5:cd:ad:69:28:ca:21:fb: 3d:c9:80:af:3c:33:46:d1:4d:6d:53:f2:65:32:8d:45:1a:a6: 2f:54:11:91:07:6e:d0:57:17:18:de:01:21:ab:95:23:50:f6: 33:1c:a2:c1:9f:4a:44:af:6b:51:c5:51:94:4e:ed:e0:b5:9f: 4c:21:7f:17:ca:a6:0d:ba:0f:e7:75:c2:f1:d8:a0:df:69:19: 99:37:4f:a8:82:ae:1f:7f:54:0e:29:c7:10:74:a2:ad:17:cd: 18:c5:04:7a:92:b6:ce:d0:b1:38:33:41:b3:3c:2e:82:71:4e: eb:59:1d:27:fd:dc:c4:31:de:26:51:92:99:6f:57:d9:51:5a: fe:8b:9d:15:8b:6b:e1:a9:26:71:67:b9:bf:3b:15:eb:11:6a: e0:33:91:76:4d:85:17:a6:04:86:ca:23:48:94:29:d0:bf:37: 58:08:56:0c:45:7d:4c:07:4c:8c:f5:8d:05:14:16:21:a6:62: c7:da:41:61:19:76:a5:7e:5b:87:10:31:59:52:b6:ac:61:75: 23:bd:66:a4:f3:62:a3:96:eb:b4:5c:e6:9d:09:8c:7a:13:87: 95:2b:97:b0:a8:09:fe:01:8f:a3:01:e9:44:d9:60:0e:ea:f9: 4a:7d:84:42 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt26xJNkCMrpsQa4qycfaN+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwMTAxMDAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjM1ZDJjZjM0NDYxZmFmNTdmNDcxYmYwY2Y1ZjU1MDg3NjU5Y2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOEW1E9eRM9Go54e6somrX/JurRe IfEd2ztJZqWLYS2jjFgYee/GFYvk2QUehFRHOXpPhllDLdLEpnjg/Jlv/vKiFHS3 f13AmqupY/MlagBsXwFS8JtJLEjo5kzGhrBQO/+UwLRN2IXYUVAgIYpdv3xBnafk VLiInysPesvI6ejv9Q/dqHGyBa2raVLuPWxZQfj2uo79CTLz5eD7/L06IedQKtRk lny89MXRrZfsMl08Eu8Hbi4MrVZMMvP61eBRaiEsXVU5C7p4fmUAqFIrf9+JNIqY MU/IHzUoFfd7Xx7dkGMNMF7bZgofs45ocqIGWqapXNLr2dtTBEqcTHZCZwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFH810s80Rh+vV/Rxvwz19VCHZZzHMB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvZnpYU3p6UkdINjlYOUhHX0RQWDFVSWRsbk1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCW9cwMAwD BAK5E7wDBAC5E74DBAK58FAwDQYJKoZIhvcNAQELBQADggEBAFOR2vTFydserQil za1pKMoh+z3JgK88M0bRTW1T8mUyjUUapi9UEZEHbtBXFxjeASGrlSNQ9jMcosGf SkSva1HFUZRO7eC1n0whfxfKpg26D+d1wvHYoN9pGZk3T6iCrh9/VA4pxxB0oq0X zRjFBHqSts7QsTgzQbM8LoJxTutZHSf93MQx3iZRkplvV9lRWv6LnRWLa+GpJnFn ub87FesRauAzkXZNhRemBIbKI0iUKdC/N1gIVgxFfUwHTIz1jQUUFiGmYsfaQWEZ dqV+W4cQMVlStqxhdSO9ZqTzYqOW67Rc5p0JjHoTh5Url7CoCf4Bj6MB6UTZYA7q +Up9hEI= -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:51 2026 by rpki-client