This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/_I5ZyNzs_5Q4toW0cmKShzzyGvc.roa File: _I5ZyNzs_5Q4toW0cmKShzzyGvc.roa (raw, json) Hash identifier: CAZwJiEdqc66XP0aQOYr0r6o81HABrE7ATqPwsQle/M= Subject key identifier: FC:8E:59:C8:DC:EC:FF:94:38:B6:85:B4:72:62:92:87:3C:F2:1A:F7 Certificate issuer: /CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c Certificate serial: 019B7BA36B1EC2CFB5B990977826734ACBB9 Authority key identifier: 74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/_I5ZyNzs_5Q4toW0cmKShzzyGvc.roa Signing time: Thu 01 Jan 2026 22:17:45 +0000 ROA not before: Thu 01 Jan 2026 22:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48854 IP address blocks: 185.149.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:6b:1e:c2:cf:b5:b9:90:97:78:26:73:4a:cb:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c Validity Not Before: Jan 1 22:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc8e59c8dcecff9438b685b4726292873cf21af7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:26:cc:ef:ef:03:b4:0d:c8:4e:52:8b:9b:8b: ac:46:31:96:99:24:5f:c1:87:38:0e:01:a1:52:bc: 9b:1a:5b:ff:63:3b:db:84:9d:27:50:91:28:1f:94: 75:5b:d2:5d:35:f3:9c:72:64:61:c1:97:d7:d4:c8: 04:a7:a7:6c:4a:e8:0f:c9:04:a7:47:a5:b7:3e:35: 3b:6b:c6:63:b4:88:2d:34:25:f0:2b:0e:10:c0:a2: 05:83:cb:14:c3:ef:48:ae:53:0d:2d:b2:92:bd:af: a2:a4:27:cc:a5:8f:b0:0f:e8:28:93:92:34:86:19: 4e:d9:30:8d:eb:fb:6c:4d:77:15:0a:80:cc:44:c9: 9a:97:b2:4b:73:82:37:43:27:44:e1:1b:c4:6e:ac: 3a:25:b8:ad:a9:b4:de:b8:78:45:32:51:2e:33:c7: 2d:69:34:f3:fc:c7:79:c6:e7:a7:4b:67:9b:54:9a: ad:2b:2c:96:ca:e6:a1:55:e9:21:03:31:5b:14:9c: 9d:1d:ee:64:43:ad:5d:fc:7c:42:9d:10:ae:0a:e2: 9f:ef:d1:42:0b:d4:72:06:e2:2a:9f:c1:ad:2c:51: 67:a5:8a:84:f5:23:b2:1c:70:91:06:9a:b0:00:03: 23:01:7b:ee:9d:5f:e1:77:09:2a:97:5b:4f:1b:52: 65:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:8E:59:C8:DC:EC:FF:94:38:B6:85:B4:72:62:92:87:3C:F2:1A:F7 X509v3 Authority Key Identifier: keyid:74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/_I5ZyNzs_5Q4toW0cmKShzzyGvc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.149.228.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:c1:40:ec:ca:75:b3:f5:24:f3:e5:eb:b8:ec:54:0e:1f:cb: 58:3d:91:5d:18:b3:60:7c:39:22:08:88:27:ae:a6:b4:c9:15: df:be:ee:5c:0c:a7:55:b9:8e:6c:ff:cf:1e:e6:4d:59:2b:64: 0e:f5:68:4f:ee:cc:4c:74:41:85:ea:ba:71:3c:02:3e:d2:ee: d3:36:d9:e8:64:51:79:21:5f:70:15:2f:b6:f0:61:a1:0c:14: 99:e0:fd:e3:d1:f8:48:71:e5:7a:b2:8e:3d:53:72:62:d2:ad: 27:1e:e9:09:71:41:22:76:4f:78:d6:f9:d0:93:f3:b2:25:b8: 84:62:4d:92:d3:26:20:61:c5:75:95:a1:e0:93:f3:70:17:d9: 09:b0:18:b8:c3:ce:bd:e6:c5:48:f9:33:5a:1b:cd:1b:81:d7: 68:06:44:ba:20:05:de:94:12:60:c3:18:18:1a:b3:d7:49:ab: e7:ee:12:4a:ce:90:c0:a6:d5:60:10:ed:7e:63:7d:d4:ec:d7: da:9f:7c:0b:30:e9:87:14:19:af:54:f2:f9:c0:a1:84:af:c5: 18:24:8e:0c:98:e8:f7:dc:ab:23:51:70:b1:93:28:5a:cd:81: 93:e9:b0:ec:fb:c0:dc:bb:a2:c2:cf:c2:9c:36:54:72:0d:07: 46:60:60:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o2sews+1uZCXeCZzSsu5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTBjZTZiNmY4Zjc1MGUwMzU4NGViYmQ3YmRhZDBmMTFm YmUzMWMwHhcNMjYwMTAxMjIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzhlNTljOGRjZWNmZjk0MzhiNjg1YjQ3MjYyOTI4NzNjZjIxYWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ybM7+8DtA3ITlKLm4usRjGWmSRf wYc4DgGhUrybGlv/YzvbhJ0nUJEoH5R1W9JdNfOccmRhwZfX1MgEp6dsSugPyQSn R6W3PjU7a8ZjtIgtNCXwKw4QwKIFg8sUw+9IrlMNLbKSva+ipCfMpY+wD+gok5I0 hhlO2TCN6/tsTXcVCoDMRMmal7JLc4I3QydE4RvEbqw6JbitqbTeuHhFMlEuM8ct aTTz/Md5xuenS2ebVJqtKyyWyuahVekhAzFbFJydHe5kQ61d/HxCnRCuCuKf79FC C9RyBuIqn8GtLFFnpYqE9SOyHHCRBpqwAAMjAXvunV/hdwkql1tPG1JlVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPyOWcjc7P+UOLaFtHJikoc88hr3MB8GA1UdIwQY MBaAFHSQzmtvj3UOA1hOu9e9rQ8R++McMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9lZDhlYmEtNmJkNC00NDM4LWIzZTAt YzQ5NmY5Y2FmYTgzLzEvX0k1WnlOenNfNVE0dG9XMGNtS1Noenp5R3ZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9lZDhlYmEtNmJkNC00NDM4LWIzZTAtYzQ5NmY5Y2FmYTgz LzEvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZXkMA0G CSqGSIb3DQEBCwUAA4IBAQCOwUDsynWz9STz5eu47FQOH8tYPZFdGLNgfDkiCIgn rqa0yRXfvu5cDKdVuY5s/88e5k1ZK2QO9WhP7sxMdEGF6rpxPAI+0u7TNtnoZFF5 IV9wFS+28GGhDBSZ4P3j0fhIceV6so49U3Ji0q0nHukJcUEidk941vnQk/OyJbiE Yk2S0yYgYcV1laHgk/NwF9kJsBi4w8695sVI+TNaG80bgddoBkS6IAXelBJgwxgY GrPXSavn7hJKzpDAptVgEO1+Y33U7Nfan3wLMOmHFBmvVPL5wKGEr8UYJI4MmOj3 3KsjUXCxkyhazYGT6bDs+8Dcu6LCz8KcNlRyDQdGYGCd -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:34 2026 by rpki-client