This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/A_-FW985zbY15HsoQHY3jzaLsqE.roa File: A_-FW985zbY15HsoQHY3jzaLsqE.roa (raw, json) Hash identifier: eSJY0BewKa72GIdMnrs7+2x+KiKuirCjSmv68OLB6u4= Subject key identifier: 03:FF:85:5B:DF:39:CD:B6:35:E4:7B:28:40:76:37:8F:36:8B:B2:A1 Certificate issuer: /CN=863841506d026131965057409a1604a5671f0541 Certificate serial: 019B77C70281B607FE7B5B3250B19EC0DDDA Authority key identifier: 86:38:41:50:6D:02:61:31:96:50:57:40:9A:16:04:A5:67:1F:05:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjhBUG0CYTGWUFdAmhYEpWcfBUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/A_-FW985zbY15HsoQHY3jzaLsqE.roa Signing time: Thu 01 Jan 2026 04:18:09 +0000 ROA not before: Thu 01 Jan 2026 04:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57795 IP address blocks: 185.121.112.0/22 maxlen: 24 2a06:9e00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft rsync://rpki.ripe.net/repository/DEFAULT/hjhBUG0CYTGWUFdAmhYEpWcfBUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:02:81:b6:07:fe:7b:5b:32:50:b1:9e:c0:dd:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=863841506d026131965057409a1604a5671f0541 Validity Not Before: Jan 1 04:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03ff855bdf39cdb635e47b284076378f368bb2a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f3:13:a6:10:3e:76:c9:a5:b0:07:ea:ba:9a: fb:c2:f4:8e:1b:52:2b:ad:87:cc:c9:12:19:6e:d8: d0:00:91:f8:d6:26:be:14:67:4d:40:55:b6:d5:91: cd:c5:20:5c:68:39:85:88:97:d2:4f:65:e3:ad:ee: 7b:89:ba:a1:82:65:ae:fa:86:7f:44:b6:60:86:37: df:e8:61:34:10:b3:03:a3:f0:01:74:fa:e2:df:78: 90:ce:e5:05:7a:0c:aa:1d:9b:ae:a7:75:30:50:99: 79:71:cc:3c:50:fc:e0:d5:de:d0:b2:da:c7:02:af: ec:00:70:a0:71:27:5d:c2:a8:fb:1c:95:e9:54:ac: 3f:86:14:a1:43:95:55:bd:97:73:9e:c0:e5:1d:5c: 30:f7:86:6d:94:93:71:e7:8b:4e:28:0a:13:7d:74: fa:9b:8c:bb:d7:9d:60:3e:78:07:82:44:3a:4f:32: 64:42:a4:e8:f5:d3:5a:2e:e6:75:95:bf:64:f5:4f: 7a:d2:47:84:00:37:4c:90:9e:15:ad:ab:91:8e:75: 53:0a:52:b3:65:24:8f:65:86:4f:84:ff:bc:bc:4f: 45:a9:66:f3:4d:f6:ad:58:97:ce:0a:91:a0:58:b8: 00:05:7f:4c:cd:fa:47:37:b2:fb:29:00:e6:83:3f: 11:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FF:85:5B:DF:39:CD:B6:35:E4:7B:28:40:76:37:8F:36:8B:B2:A1 X509v3 Authority Key Identifier: keyid:86:38:41:50:6D:02:61:31:96:50:57:40:9A:16:04:A5:67:1F:05:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjhBUG0CYTGWUFdAmhYEpWcfBUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/A_-FW985zbY15HsoQHY3jzaLsqE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.112.0/22 IPv6: 2a06:9e00::/29 Signature Algorithm: sha256WithRSAEncryption 86:5d:cd:9c:17:de:9b:86:1a:af:e8:b9:c5:3b:89:a6:dc:de: 4b:af:1b:5e:fa:69:9d:82:52:24:f1:68:86:82:f1:c3:6d:42: ac:c9:03:19:e4:36:3e:18:99:8e:1a:49:5a:83:d8:10:29:3e: b8:cf:b6:4b:ca:18:14:38:b7:a7:ee:50:3b:4b:f2:78:c2:c7: 5e:80:a9:67:45:68:a5:04:03:a6:51:0e:17:04:4a:40:55:91: a8:d2:a3:d2:81:df:27:c2:98:43:fc:21:2f:b2:a7:f9:76:b3: 65:1d:01:d0:ec:93:25:d4:61:10:b5:51:b1:3c:3d:35:3f:62: 7d:0f:6f:60:c5:a5:56:d2:f0:29:4f:a3:37:97:76:52:d3:c3: 68:58:29:b6:71:b0:7f:8f:7d:0f:2b:4b:5b:f1:30:b0:01:65: 4e:73:0c:00:84:f7:20:6c:6c:22:be:10:a5:90:cf:21:4c:4c: c6:c2:42:14:c0:51:4e:14:cf:e5:44:c4:6f:78:19:ce:a2:4e: e6:18:81:cd:90:54:ad:a6:c5:ec:59:85:72:fc:c7:c5:0f:23: 57:6e:1f:72:59:c3:71:cc:3f:dc:96:69:21:93:e5:a9:0c:80: 1b:82:eb:8e:76:04:7a:24:d0:a1:97:97:77:c3:39:31:7c:0e: 3f:96:f2:b6 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xwKBtgf+e1syULGewN3aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Mzg0MTUwNmQwMjYxMzE5NjUwNTc0MDlhMTYwNGE1Njcx ZjA1NDEwHhcNMjYwMTAxMDQxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2ZmODU1YmRmMzljZGI2MzVlNDdiMjg0MDc2Mzc4ZjM2OGJiMmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvMTphA+dsmlsAfqupr7wvSOG1Ir rYfMyRIZbtjQAJH41ia+FGdNQFW21ZHNxSBcaDmFiJfST2Xjre57ibqhgmWu+oZ/ RLZghjff6GE0ELMDo/ABdPri33iQzuUFegyqHZuup3UwUJl5ccw8UPzg1d7QstrH Aq/sAHCgcSddwqj7HJXpVKw/hhShQ5VVvZdznsDlHVww94ZtlJNx54tOKAoTfXT6 m4y7151gPngHgkQ6TzJkQqTo9dNaLuZ1lb9k9U960keEADdMkJ4VrauRjnVTClKz ZSSPZYZPhP+8vE9FqWbzTfatWJfOCpGgWLgABX9MzfpHN7L7KQDmgz8RFQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAP/hVvfOc22NeR7KEB2N482i7KhMB8GA1UdIwQY MBaAFIY4QVBtAmExllBXQJoWBKVnHwVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGpoQlVHMENZVEdXVUZkQW1oWUVwV2NmQlVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xZjE1NjMtYjMzMS00M2E5LWI5Y2Mt M2JmYTA1MDkyMDFmLzEvQV8tRlc5ODV6YlkxNUhzb1FIWTNqemFMc3FFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8xZjE1NjMtYjMzMS00M2E5LWI5Y2MtM2JmYTA1MDkyMDFm LzEvaGpoQlVHMENZVEdXVUZkQW1oWUVwV2NmQlVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuXlwMA0E AgACMAcDBQMqBp4AMA0GCSqGSIb3DQEBCwUAA4IBAQCGXc2cF96bhhqv6LnFO4mm 3N5Lrxte+mmdglIk8WiGgvHDbUKsyQMZ5DY+GJmOGklag9gQKT64z7ZLyhgUOLen 7lA7S/J4wsdegKlnRWilBAOmUQ4XBEpAVZGo0qPSgd8nwphD/CEvsqf5drNlHQHQ 7JMl1GEQtVGxPD01P2J9D29gxaVW0vApT6M3l3ZS08NoWCm2cbB/j30PK0tb8TCw AWVOcwwAhPcgbGwivhClkM8hTEzGwkIUwFFOFM/lRMRveBnOok7mGIHNkFStpsXs WYVy/MfFDyNXbh9yWcNxzD/clmkhk+WpDIAbguuOdgR6JNChl5d3wzkxfA4/lvK2 -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:25 2026 by rpki-client