This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/Fn9mtyW8p7tf3NEs5ynDVX9fKWQ.roa File: Fn9mtyW8p7tf3NEs5ynDVX9fKWQ.roa (raw, json) Hash identifier: Y3ktqWHPY4jaIf3oBnxCM/z1QkmvklY1/99J5dEJKUQ= Subject key identifier: 16:7F:66:B7:25:BC:A7:BB:5F:DC:D1:2C:E7:29:C3:55:7F:5F:29:64 Certificate issuer: /CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca Certificate serial: 019B783449111CDC97C629110231C079E146 Authority key identifier: 44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/Fn9mtyW8p7tf3NEs5ynDVX9fKWQ.roa Signing time: Thu 01 Jan 2026 06:17:31 +0000 ROA not before: Thu 01 Jan 2026 06:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44222 IP address blocks: 185.83.212.0/24 maxlen: 24 185.83.213.0/24 maxlen: 24 2a05:9f00::/31 maxlen: 48 2a05:9f02::/31 maxlen: 31 2a05:9f04::/31 maxlen: 31 2a05:9f06::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:49:11:1c:dc:97:c6:29:11:02:31:c0:79:e1:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca Validity Not Before: Jan 1 06:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=167f66b725bca7bb5fdcd12ce729c3557f5f2964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:50:2f:23:9b:fc:e4:2e:f3:4a:5c:2d:aa:5e: f2:87:fe:5f:eb:41:86:c6:ba:25:78:54:7c:6a:bb: c6:b4:9c:0e:87:92:70:64:17:89:8b:73:ed:5b:ad: 31:b8:03:fd:92:55:da:16:b5:a3:47:38:d0:43:14: fc:db:09:8e:b7:b4:a4:20:1b:09:1a:9d:ad:cd:d1: 60:70:d5:cb:6d:c8:92:be:16:98:fb:18:68:f7:bc: 86:26:8c:0e:98:63:a4:23:81:21:84:d3:4f:4b:05: 88:0e:1b:17:bf:76:6b:4d:ab:cc:3a:6e:ef:ed:05: 2d:73:79:b2:0d:bf:45:bc:14:59:23:b0:ad:f3:89: 36:8c:75:b2:a3:b6:4d:46:6a:a8:68:ef:60:ab:54: c0:82:4f:c3:87:49:37:6f:d6:98:69:e3:f0:7e:40: 17:27:b0:33:33:82:f7:2c:eb:95:f1:a5:ab:c5:47: 3a:92:e2:dc:cb:e0:a7:8d:dc:37:1f:82:e1:cf:40: 33:e2:2d:94:b2:35:af:70:cb:f5:e1:0b:76:50:3f: 37:68:f4:a8:4f:f7:21:04:e5:ae:13:0e:0b:1b:c6: 70:42:4d:a7:56:2f:cb:cc:8e:87:35:7d:ed:09:16: ad:0e:45:7c:25:c4:ae:c3:f5:67:8a:fb:2c:c6:3b: 69:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:7F:66:B7:25:BC:A7:BB:5F:DC:D1:2C:E7:29:C3:55:7F:5F:29:64 X509v3 Authority Key Identifier: keyid:44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/Fn9mtyW8p7tf3NEs5ynDVX9fKWQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.83.212.0/23 IPv6: 2a05:9f00::/29 Signature Algorithm: sha256WithRSAEncryption 91:dd:ea:11:c1:b4:ad:6a:47:f0:99:67:10:61:8a:d7:27:30: 30:fb:30:f5:9c:99:7a:a8:5a:26:3b:9c:5a:3c:a9:ec:8f:e2: 9f:88:6b:2c:89:a1:6e:d4:38:20:ef:11:10:d3:a2:95:63:97: 62:55:2e:57:49:60:b1:4a:d2:6e:00:8d:4f:62:da:5c:3a:84: 8b:23:de:96:f5:54:48:20:a3:53:80:7c:ea:58:94:66:28:ac: 42:c0:b3:fc:61:f2:76:d3:22:af:14:53:71:b6:a6:72:a7:ef: 02:14:f6:fb:e8:ca:2d:e3:2d:40:9b:71:fe:50:ee:d8:b4:69: 5d:d3:5b:02:22:c8:14:20:cb:55:c1:ba:ee:dd:ea:0f:5f:92: 93:56:07:08:cf:d6:59:6b:d2:7b:8b:a2:04:68:e9:db:c9:13: a5:36:d9:a0:80:42:de:c9:bb:01:49:c3:97:13:79:e4:50:da: 11:1c:44:ee:cc:24:b8:6d:91:86:1d:da:ac:d4:75:12:69:2f: ca:31:3e:c9:1f:54:04:fd:6b:c4:a1:ae:4b:60:e9:4d:6c:19: 45:77:32:30:c6:83:1c:1e:ef:65:51:c0:24:b3:f6:a2:20:b4: 65:ca:36:c4:c9:db:2e:4b:d7:43:fd:f0:9c:af:5d:ad:18:bb: 74:22:ba:b7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NEkRHNyXxikRAjHAeeFGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MDA3MTcyZGY5ZmMyZDRhMmRkYmJhOTM0Y2ViYzlmMDI4 NmQzY2EwHhcNMjYwMTAxMDYxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjdmNjZiNzI1YmNhN2JiNWZkY2QxMmNlNzI5YzM1NTdmNWYyOTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFAvI5v85C7zSlwtql7yh/5f60GG xroleFR8arvGtJwOh5JwZBeJi3PtW60xuAP9klXaFrWjRzjQQxT82wmOt7SkIBsJ Gp2tzdFgcNXLbciSvhaY+xho97yGJowOmGOkI4EhhNNPSwWIDhsXv3ZrTavMOm7v 7QUtc3myDb9FvBRZI7Ct84k2jHWyo7ZNRmqoaO9gq1TAgk/Dh0k3b9aYaePwfkAX J7AzM4L3LOuV8aWrxUc6kuLcy+Cnjdw3H4Lhz0Az4i2UsjWvcMv14Qt2UD83aPSo T/chBOWuEw4LG8ZwQk2nVi/LzI6HNX3tCRatDkV8JcSuw/VnivssxjtprwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBZ/ZrclvKe7X9zRLOcpw1V/XylkMB8GA1UdIwQY MBaAFEQAcXLfn8LUot27qTTOvJ8ChtPKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkFCeGN0LWZ3dFNpM2J1cE5NNjhud0tHMDhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85NDVkYmQtMmZiNy00ZGQxLTk2YTYt MDU4NWRlNGQ0ZWU3LzEvRm45bXR5VzhwN3RmM05FczV5bkRWWDlmS1dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS85NDVkYmQtMmZiNy00ZGQxLTk2YTYtMDU4NWRlNGQ0ZWU3 LzEvUkFCeGN0LWZ3dFNpM2J1cE5NNjhud0tHMDhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuVPUMA0E AgACMAcDBQMqBZ8AMA0GCSqGSIb3DQEBCwUAA4IBAQCR3eoRwbStakfwmWcQYYrX JzAw+zD1nJl6qFomO5xaPKnsj+KfiGssiaFu1Dgg7xEQ06KVY5diVS5XSWCxStJu AI1PYtpcOoSLI96W9VRIIKNTgHzqWJRmKKxCwLP8YfJ20yKvFFNxtqZyp+8CFPb7 6Mot4y1Am3H+UO7YtGld01sCIsgUIMtVwbru3eoPX5KTVgcIz9ZZa9J7i6IEaOnb yROlNtmggELeybsBScOXE3nkUNoRHETuzCS4bZGGHdqs1HUSaS/KMT7JH1QE/WvE oa5LYOlNbBlFdzIwxoMcHu9lUcAks/aiILRlyjbEydsuS9dD/fCcr12tGLt0Irq3 -----END CERTIFICATE-----Generated at Mon Jan 26 05:14:56 2026 by rpki-client