This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/Fi9A7ox4EzBVsjYUvBuYzjfrMx4.roa File: Fi9A7ox4EzBVsjYUvBuYzjfrMx4.roa (raw, json) Hash identifier: yPzWCEaVWwitvSN0VQpWfi2iaiWGTDPLLRlVVcJ92AY= Subject key identifier: 16:2F:40:EE:8C:78:13:30:55:B2:36:14:BC:1B:98:CE:37:EB:33:1E Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5 Certificate serial: 019B7F83DD5D66451DB2B6EF071C0398F720 Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/Fi9A7ox4EzBVsjYUvBuYzjfrMx4.roa Signing time: Fri 02 Jan 2026 16:21:46 +0000 ROA not before: Fri 02 Jan 2026 16:21:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25697 IP address blocks: 85.9.192.0/21 maxlen: 21 95.111.212.0/22 maxlen: 22 194.113.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:dd:5d:66:45:1d:b2:b6:ef:07:1c:03:98:f7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5 Validity Not Before: Jan 2 16:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=162f40ee8c78133055b23614bc1b98ce37eb331e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:16:56:47:07:5b:82:94:1a:de:ae:06:4c:b3: 23:bc:5b:ce:04:b7:57:21:98:8b:7c:3d:61:02:fb: da:eb:b9:52:20:4d:b4:ab:b6:1e:62:bb:7b:5e:e7: e6:8d:de:d4:41:0e:e5:a6:b0:82:ba:19:74:ea:7c: 42:30:40:e0:a6:2d:d9:1b:98:9b:b5:da:f2:54:b9: 15:0d:b1:0f:74:b8:77:47:86:ad:a7:0d:53:26:8e: 46:f1:7a:69:ff:62:cc:71:5b:fd:80:5b:74:0d:6c: da:9d:91:3b:83:b1:4b:19:1a:31:3b:af:9e:73:7e: 1c:7f:ad:55:45:2e:99:f5:e6:d0:24:41:d4:2e:d4: eb:6b:b5:d4:d7:4f:79:83:2b:11:98:66:a1:a7:79: 50:1b:ef:32:27:cf:49:db:2a:ae:60:78:55:46:81: 3b:55:ee:fe:bf:15:da:2f:1f:9e:a8:64:f2:ad:87: d8:71:c3:a5:2d:78:8b:e8:14:3e:a2:f3:b9:6b:47: 07:41:cd:73:00:1a:80:98:00:68:5e:83:46:16:21: b3:6f:2e:89:52:bc:43:96:41:1e:93:92:48:f3:d2: bb:b5:be:54:41:a3:74:d8:bc:9d:10:4a:b3:a7:9f: 85:63:8d:5e:1c:c9:65:47:75:46:06:5f:2c:cc:68: 9d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2F:40:EE:8C:78:13:30:55:B2:36:14:BC:1B:98:CE:37:EB:33:1E X509v3 Authority Key Identifier: keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/Fi9A7ox4EzBVsjYUvBuYzjfrMx4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.9.192.0/21 95.111.212.0/22 194.113.72.0/22 Signature Algorithm: sha256WithRSAEncryption 28:41:68:e0:30:a3:9f:46:5a:b6:a8:57:b2:0f:24:33:30:e2: 45:89:73:41:cd:72:30:ec:13:33:79:1f:f0:7a:0a:0d:80:27: e8:e9:f9:c0:7f:92:01:11:c9:25:31:04:a4:a2:e9:89:6d:91: c6:c3:30:74:c2:81:ee:da:7f:ff:c4:b7:13:2f:43:cc:f6:2a: 53:4e:15:ac:fe:a1:1f:86:9d:49:27:2e:a1:cc:8f:9d:c6:ff: 22:35:7d:fb:7a:b9:b5:9e:eb:65:b6:d3:77:bc:9b:19:cb:b3: 64:ab:a4:86:21:4b:13:0c:24:e8:b4:02:5e:68:86:9e:4d:9a: a5:aa:37:7b:33:a2:a5:13:22:24:15:40:5d:66:69:ec:63:f9: 25:8f:3b:22:88:7c:cc:de:d3:78:d7:e0:be:9d:a2:ba:8d:fc: cd:c4:9d:9a:1c:28:65:19:19:6c:de:ca:cc:8c:9b:01:c2:77: f1:8d:d5:21:d7:ea:bb:ca:77:ea:82:48:6e:dc:da:71:9b:0c: a7:1b:9e:67:52:bb:e5:fb:bb:2b:37:9d:df:58:af:c4:60:da: 1f:c7:e6:a8:95:98:26:d1:c6:bc:bd:5f:c2:91:fa:03:49:a1: d6:48:41:1c:f1:b1:76:45:40:be:21:af:8e:04:b1:44:b5:b4: 69:69:ff:97 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/g91dZkUdsrbvBxwDmPcgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OWExZjJkYmY3YjdhODRhZTU3YjhkNjc0MjZiN2U0ZTQy MGZhYjUwHhcNMjYwMTAyMTYyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjJmNDBlZThjNzgxMzMwNTViMjM2MTRiYzFiOThjZTM3ZWIzMzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRZWRwdbgpQa3q4GTLMjvFvOBLdX IZiLfD1hAvva67lSIE20q7YeYrt7Xufmjd7UQQ7lprCCuhl06nxCMEDgpi3ZG5ib tdryVLkVDbEPdLh3R4atpw1TJo5G8Xpp/2LMcVv9gFt0DWzanZE7g7FLGRoxO6+e c34cf61VRS6Z9ebQJEHULtTra7XU1095gysRmGahp3lQG+8yJ89J2yquYHhVRoE7 Ve7+vxXaLx+eqGTyrYfYccOlLXiL6BQ+ovO5a0cHQc1zABqAmABoXoNGFiGzby6J UrxDlkEek5JI89K7tb5UQaN02LydEEqzp5+FY41eHMllR3VGBl8szGidjQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBYvQO6MeBMwVbI2FLwbmM436zMeMB8GA1UdIwQY MBaAFAmaHy2/e3qErle41nQmt+TkIPq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1pvZkxiOTdlb1N1VjdqV2RDYTM1T1FnLXJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kNDJhYmItMzM0Mi00ODg3LWFmNDAt OWNkNjhmMjIxZTIxLzEvRmk5QTdveDRFekJWc2pZVXZCdVl6amZyTXg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kNDJhYmItMzM0Mi00ODg3LWFmNDAtOWNkNjhmMjIxZTIx LzEvQ1pvZkxiOTdlb1N1VjdqV2RDYTM1T1FnLXJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDVQnAAwQC X2/UAwQCwnFIMA0GCSqGSIb3DQEBCwUAA4IBAQAoQWjgMKOfRlq2qFeyDyQzMOJF iXNBzXIw7BMzeR/wegoNgCfo6fnAf5IBEcklMQSkoumJbZHGwzB0woHu2n//xLcT L0PM9ipTThWs/qEfhp1JJy6hzI+dxv8iNX37erm1nutlttN3vJsZy7Nkq6SGIUsT DCTotAJeaIaeTZqlqjd7M6KlEyIkFUBdZmnsY/kljzsiiHzM3tN41+C+naK6jfzN xJ2aHChlGRls3srMjJsBwnfxjdUh1+q7ynfqgkhu3NpxmwynG55nUrvl+7srN53f WK/EYNofx+aolZgm0ca8vV/CkfoDSaHWSEEc8bF2RUC+Ia+OBLFEtbRpaf+X -----END CERTIFICATE-----Generated at Sun Jan 25 16:40:11 2026 by rpki-client