This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/fgaY4FIN1hCIDpbwE1usUJ6JsHQ.roa File: fgaY4FIN1hCIDpbwE1usUJ6JsHQ.roa (raw, json) Hash identifier: 95rL/TZp4mhAU219CU7GrG+t54vw/JTr3mqGbsN1OTo= Subject key identifier: 7E:06:98:E0:52:0D:D6:10:88:0E:96:F0:13:5B:AC:50:9E:89:B0:74 Certificate issuer: /CN=66f8206e3311df394f48389b8122b94aa1f0b05c Certificate serial: 019B76EABE9690D4AAE6A2A5C2173B492B27 Authority key identifier: 66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/fgaY4FIN1hCIDpbwE1usUJ6JsHQ.roa Signing time: Thu 01 Jan 2026 00:17:34 +0000 ROA not before: Thu 01 Jan 2026 00:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211052 IP address blocks: 185.229.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 17:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:be:96:90:d4:aa:e6:a2:a5:c2:17:3b:49:2b:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66f8206e3311df394f48389b8122b94aa1f0b05c Validity Not Before: Jan 1 00:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e0698e0520dd610880e96f0135bac509e89b074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9f:85:2a:b8:73:ed:7f:44:9d:7a:22:10:9c: 56:0f:b2:cb:fd:79:23:99:b6:2a:f4:ad:fc:fb:56: 79:80:38:bb:c5:f9:e1:fb:cb:6a:07:a0:40:82:f6: d5:14:a7:1a:12:50:1a:35:2b:a5:eb:7c:43:cb:0d: 1b:4e:16:d8:8f:64:a9:4c:86:6a:e5:9a:84:e1:45: ff:ab:83:50:94:2f:f9:a6:78:ff:9e:08:51:08:54: 59:8b:02:c8:19:3f:31:f6:6e:ca:e2:a5:2a:26:e5: 9a:a8:d6:e9:83:ed:a9:33:ae:d8:bb:4a:c3:7e:64: 7c:8b:c2:33:33:36:a9:7b:ef:b8:b9:1f:d5:76:4f: 17:05:fc:9e:d2:73:a0:a9:e3:9e:98:20:1c:1a:86: 77:64:e5:c6:45:2e:74:aa:b3:c1:70:e2:b6:59:bd: 8e:c1:67:c8:7c:14:18:72:79:77:65:13:fa:57:7f: 90:bf:05:bc:76:56:14:10:d2:06:94:1f:7c:35:24: 93:b8:8e:82:1b:ca:0e:0c:2c:27:3e:39:c0:50:ce: e5:31:82:9a:22:31:38:48:12:a8:49:8a:11:2f:6f: 22:3e:93:a7:7c:ba:c6:1f:b5:cd:db:24:99:3d:10: 12:6f:41:3c:1f:96:47:a4:23:f7:20:81:fa:99:ce: f1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:06:98:E0:52:0D:D6:10:88:0E:96:F0:13:5B:AC:50:9E:89:B0:74 X509v3 Authority Key Identifier: keyid:66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/fgaY4FIN1hCIDpbwE1usUJ6JsHQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.229.34.0/24 Signature Algorithm: sha256WithRSAEncryption 88:bd:01:25:9a:cf:66:97:ea:5d:02:5c:d5:bb:4a:48:88:03: 5e:96:8e:82:4f:20:e1:b8:23:23:14:a4:19:94:88:e0:95:27: 0e:cc:22:57:db:da:8e:56:63:88:c2:30:72:98:84:61:85:53: 33:98:22:cc:8b:9c:6b:d2:50:ac:2d:93:5d:26:7f:47:b9:4c: 32:93:05:23:26:39:bc:41:bd:1a:8b:1c:87:ff:b7:da:58:49: b4:e3:13:0b:34:57:93:0e:74:ab:b8:2f:36:15:40:f9:d9:87: fb:de:50:5a:ae:72:ca:20:51:d8:b6:a4:1e:c2:49:6f:73:48: a8:48:b2:e2:e6:8d:01:2f:8c:61:11:43:5d:a2:06:92:fc:11: 36:95:9c:09:02:08:66:4c:e5:53:45:42:61:c6:29:ab:38:56: 3b:e1:73:f9:87:ad:3c:a2:41:c8:e6:94:57:d7:4d:87:18:76: b0:20:b4:d9:52:2b:b0:50:f4:3a:c3:10:0b:be:42:a2:98:4c: 7e:43:4f:6e:31:9b:0b:bf:b8:27:f6:6e:88:1a:b7:2c:7b:89: 4f:cf:4e:c4:b7:97:81:c9:a9:24:14:9d:d3:67:82:b5:53:fd: 0e:1e:2e:d9:26:17:48:7b:f9:30:89:34:a6:10:f3:29:4d:9c: b4:92:c8:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26r6WkNSq5qKlwhc7SSsnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZjgyMDZlMzMxMWRmMzk0ZjQ4Mzg5YjgxMjJiOTRhYTFm MGIwNWMwHhcNMjYwMTAxMDAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTA2OThlMDUyMGRkNjEwODgwZTk2ZjAxMzViYWM1MDllODliMDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ+FKrhz7X9EnXoiEJxWD7LL/Xkj mbYq9K38+1Z5gDi7xfnh+8tqB6BAgvbVFKcaElAaNSul63xDyw0bThbYj2SpTIZq 5ZqE4UX/q4NQlC/5pnj/nghRCFRZiwLIGT8x9m7K4qUqJuWaqNbpg+2pM67Yu0rD fmR8i8IzMzape++4uR/Vdk8XBfye0nOgqeOemCAcGoZ3ZOXGRS50qrPBcOK2Wb2O wWfIfBQYcnl3ZRP6V3+QvwW8dlYUENIGlB98NSSTuI6CG8oODCwnPjnAUM7lMYKa IjE4SBKoSYoRL28iPpOnfLrGH7XN2ySZPRASb0E8H5ZHpCP3IIH6mc7xMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH4GmOBSDdYQiA6W8BNbrFCeibB0MB8GA1UdIwQY MBaAFGb4IG4zEd85T0g4m4EiuUqh8LBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgt YmJmZDQ1Yzg0YmVhLzEvZmdhWTRGSU4xaENJRHBid0UxdXNVSjZKc0hRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgtYmJmZDQ1Yzg0YmVh LzEvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueUiMA0G CSqGSIb3DQEBCwUAA4IBAQCIvQElms9ml+pdAlzVu0pIiANelo6CTyDhuCMjFKQZ lIjglScOzCJX29qOVmOIwjBymIRhhVMzmCLMi5xr0lCsLZNdJn9HuUwykwUjJjm8 Qb0aixyH/7faWEm04xMLNFeTDnSruC82FUD52Yf73lBarnLKIFHYtqQewklvc0io SLLi5o0BL4xhEUNdogaS/BE2lZwJAghmTOVTRUJhximrOFY74XP5h608okHI5pRX 102HGHawILTZUiuwUPQ6wxALvkKimEx+Q09uMZsLv7gn9m6IGrcse4lPz07Et5eB yakkFJ3TZ4K1U/0OHi7ZJhdIe/kwiTSmEPMpTZy0ksgI -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:56 2026 by rpki-client