This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/F09300GwdMIta1lj7Ul3pmpo6e8.roa File: F09300GwdMIta1lj7Ul3pmpo6e8.roa (raw, json) Hash identifier: ajcgZbaCsRlZup9MjYbC/n7SyiZtpZ4+r47ylzeWUgk= Subject key identifier: 17:4F:77:D3:41:B0:74:C2:2D:6B:59:63:ED:49:77:A6:6A:68:E9:EF Certificate issuer: /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360 Certificate serial: 019B7E386D7BD877B9F80AAACC3A23F196F2 Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/F09300GwdMIta1lj7Ul3pmpo6e8.roa Signing time: Fri 02 Jan 2026 10:19:45 +0000 ROA not before: Fri 02 Jan 2026 10:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15490 IP address blocks: 185.141.252.0/22 maxlen: 24 185.141.252.0/24 maxlen: 24 185.141.254.0/23 maxlen: 23 185.141.254.0/24 maxlen: 24 2a07:2780::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:6d:7b:d8:77:b9:f8:0a:aa:cc:3a:23:f1:96:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360 Validity Not Before: Jan 2 10:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=174f77d341b074c22d6b5963ed4977a66a68e9ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9b:67:db:4c:a2:39:77:bf:63:b3:ca:09:53: c5:a7:36:d8:03:71:3b:32:ad:b7:4e:00:03:70:5c: ef:be:e9:14:39:dc:fd:ca:ff:ab:65:10:76:5c:af: 8a:8c:df:12:cc:e5:f2:63:de:5c:48:b2:76:78:ae: 1f:3f:0d:c9:65:9c:02:3f:c8:1f:4f:03:83:d8:b8: 4a:48:d6:8a:db:95:22:08:54:b2:65:53:1b:db:85: 6c:7f:c7:06:8a:d0:ff:c4:1d:8e:16:9e:f4:52:87: ab:05:cb:35:04:0a:7e:74:6b:d0:de:e5:42:5d:54: 8d:79:74:a4:df:09:b0:4f:6c:f4:36:8b:12:1f:90: 36:95:47:b4:ce:b0:0d:33:27:35:9d:43:d4:c5:0e: 56:53:c8:4e:72:a4:ad:95:33:55:49:73:31:25:73: 9a:b8:32:5f:a3:56:39:17:75:9c:0c:65:4c:a1:8f: c0:eb:23:31:b3:0e:04:1e:5d:79:82:22:6c:7b:f9: 58:ec:b9:30:70:0e:1d:e2:ff:67:59:aa:82:70:6a: 28:12:96:05:c4:14:f6:46:9a:b0:0c:6f:85:e0:a3: fe:e3:d7:9d:78:f3:a0:9a:86:b1:d0:1e:27:9a:44: 2b:88:7e:0b:84:f3:e5:bb:f1:64:03:ed:2b:67:ef: 1b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:4F:77:D3:41:B0:74:C2:2D:6B:59:63:ED:49:77:A6:6A:68:E9:EF X509v3 Authority Key Identifier: keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/F09300GwdMIta1lj7Ul3pmpo6e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.141.252.0/22 IPv6: 2a07:2780::/29 Signature Algorithm: sha256WithRSAEncryption 7f:90:5a:76:32:e0:0e:5d:68:db:f9:38:72:fe:e5:63:2f:74: 29:9f:79:46:e9:54:66:b4:a2:b6:98:48:34:a7:7d:28:d3:e7: 58:38:02:a9:c0:23:98:03:5d:8a:a1:01:a3:6f:a6:c8:32:80: 38:ce:26:f1:e0:d4:eb:70:1d:25:9b:e3:f6:3f:56:17:55:1b: 1d:55:1c:7a:ad:09:44:02:33:89:1c:8b:cd:9a:40:c7:65:f0: 4d:f8:70:16:02:d5:52:ce:d1:bd:f9:c0:90:f3:18:8d:50:7b: a3:cd:b3:32:0a:ba:1f:f2:51:49:7c:87:9b:91:d4:d0:a7:36: 92:75:6c:f1:e3:bd:24:76:1e:c9:09:01:43:89:89:9c:fb:91: 74:ae:3a:08:2f:85:ce:0c:2b:f0:3d:34:46:3b:53:d2:89:a9: 54:67:ba:a7:14:14:a7:e0:fe:5b:01:c3:f6:6b:4f:c3:1c:db: 32:ae:78:28:79:0d:5e:3c:50:3c:e9:b1:a3:32:b3:9a:ba:36: 6c:c7:a0:3b:63:16:0c:37:01:53:08:4e:03:ac:cb:1a:a9:f4: 01:63:09:66:dd:23:0c:a1:3e:45:42:f1:09:b9:79:5c:1e:3a: d6:20:87:35:a5:4a:a5:38:4f:4e:a9:36:9b:ea:46:b5:d6:d9: 76:e2:c3:21 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OG172He5+AqqzDoj8ZbyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxOWYwNzY2OWU1OGVjMzJiOWQ5MTMyZTJjYTZkMTljMmU5 NDkzNjAwHhcNMjYwMTAyMTAxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzRmNzdkMzQxYjA3NGMyMmQ2YjU5NjNlZDQ5NzdhNjZhNjhlOWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5tn20yiOXe/Y7PKCVPFpzbYA3E7 Mq23TgADcFzvvukUOdz9yv+rZRB2XK+KjN8SzOXyY95cSLJ2eK4fPw3JZZwCP8gf TwOD2LhKSNaK25UiCFSyZVMb24Vsf8cGitD/xB2OFp70UoerBcs1BAp+dGvQ3uVC XVSNeXSk3wmwT2z0NosSH5A2lUe0zrANMyc1nUPUxQ5WU8hOcqStlTNVSXMxJXOa uDJfo1Y5F3WcDGVMoY/A6yMxsw4EHl15giJse/lY7LkwcA4d4v9nWaqCcGooEpYF xBT2RpqwDG+F4KP+49edePOgmoax0B4nmkQriH4LhPPlu/FkA+0rZ+8blQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBdPd9NBsHTCLWtZY+1Jd6ZqaOnvMB8GA1UdIwQY MBaAFLGfB2aeWOwyudkTLiym0ZwulJNgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1o4SFpwNVk3REs1MlJNdUxLYlJuQzZVazJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82MjZlZWYtMTJkMC00N2ZhLWI2MzMt NjQxZGQ0Mjg4YzQwLzEvRjA5MzAwR3dkTUl0YTFsajdVbDNwbXBvNmU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy82MjZlZWYtMTJkMC00N2ZhLWI2MzMtNjQxZGQ0Mjg4YzQw LzEvc1o4SFpwNVk3REs1MlJNdUxLYlJuQzZVazJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuY38MA0E AgACMAcDBQMqByeAMA0GCSqGSIb3DQEBCwUAA4IBAQB/kFp2MuAOXWjb+Thy/uVj L3Qpn3lG6VRmtKK2mEg0p30o0+dYOAKpwCOYA12KoQGjb6bIMoA4zibx4NTrcB0l m+P2P1YXVRsdVRx6rQlEAjOJHIvNmkDHZfBN+HAWAtVSztG9+cCQ8xiNUHujzbMy Crof8lFJfIebkdTQpzaSdWzx470kdh7JCQFDiYmc+5F0rjoIL4XODCvwPTRGO1PS ialUZ7qnFBSn4P5bAcP2a0/DHNsyrngoeQ1ePFA86bGjMrOaujZsx6A7YxYMNwFT CE4DrMsaqfQBYwlm3SMMoT5FQvEJuXlcHjrWIIc1pUqlOE9OqTab6ka11tl24sMh -----END CERTIFICATE-----Generated at Mon Jan 26 03:06:01 2026 by rpki-client