This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/8zr6ZkJCYy6jN_X8ibf5xK-wHQM.roa File: 8zr6ZkJCYy6jN_X8ibf5xK-wHQM.roa (raw, json) Hash identifier: LXa7xf6sn0jJSyN9AUABZxSEceLF2Wn4DcQ/vzXpQ+E= Subject key identifier: F3:3A:FA:66:42:42:63:2E:A3:37:F5:FC:89:B7:F9:C4:AF:B0:1D:03 Certificate issuer: /CN=b307c87e7b6e294f2700790eef19e82939d85cd6 Certificate serial: 019B7B366B2CB961BDC21C882D56550EA6FE Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/8zr6ZkJCYy6jN_X8ibf5xK-wHQM.roa Signing time: Thu 01 Jan 2026 20:18:42 +0000 ROA not before: Thu 01 Jan 2026 20:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211100 IP address blocks: 185.53.34.0/24 maxlen: 24 2a10:fa40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:6b:2c:b9:61:bd:c2:1c:88:2d:56:55:0e:a6:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6 Validity Not Before: Jan 1 20:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f33afa664242632ea337f5fc89b7f9c4afb01d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1d:73:4b:68:69:23:2b:0a:bf:96:65:0f:85: 78:c7:14:01:5e:61:db:03:7d:30:f7:db:1e:ad:d6: e1:91:15:8b:32:11:42:a4:6d:f1:79:4b:fd:29:14: 12:75:c8:d0:39:83:c9:cd:fa:02:40:30:ea:5b:60: 5b:d3:98:aa:9b:d7:81:ac:1b:46:2a:c3:f5:59:08: b5:62:75:b6:5e:37:36:18:fd:86:74:d5:22:7c:b3: a7:88:bb:e7:df:11:30:bb:4d:90:47:d8:57:17:b2: 2b:01:f1:92:45:95:56:5e:98:5f:0d:5c:64:2e:73: ee:81:a2:1c:d6:6b:61:ca:5c:f8:af:c6:69:b0:a0: 70:9b:52:cf:f9:5b:a6:f0:28:24:d3:78:b7:ee:88: 30:d5:a2:e0:9f:f0:56:87:d0:fb:4f:7e:58:e7:b0: a7:04:09:79:db:77:bc:14:6b:ae:be:1d:4e:7d:da: 08:ed:ab:61:c3:a0:5d:dc:84:7f:03:67:5e:cd:cd: ad:b5:5b:2c:f3:73:8d:55:64:68:61:b1:0d:61:7e: d3:3b:b9:3b:7f:08:5d:6f:27:cc:96:f1:aa:d2:a6: bc:78:90:31:c4:a3:21:d7:56:37:81:9f:2d:a3:c2: 5e:de:84:ae:92:6b:af:d8:fe:2c:2b:27:35:a7:04: ae:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3A:FA:66:42:42:63:2E:A3:37:F5:FC:89:B7:F9:C4:AF:B0:1D:03 X509v3 Authority Key Identifier: keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/8zr6ZkJCYy6jN_X8ibf5xK-wHQM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.53.34.0/24 IPv6: 2a10:fa40::/32 Signature Algorithm: sha256WithRSAEncryption 7c:17:a3:52:1b:46:16:e9:c2:f1:db:39:04:9a:0d:6d:ec:f7: 84:e0:6f:dd:ac:ea:fe:e5:61:d5:26:48:0a:60:94:e6:70:cd: a3:24:98:18:65:80:c6:a1:60:25:25:44:bc:10:0f:d6:79:e5: f7:12:a8:08:84:7b:d4:5a:99:45:a6:cd:4b:56:f0:9d:1b:fc: 92:aa:18:24:6f:4f:89:7e:d1:3c:d9:c1:87:24:a8:47:44:19: c9:c1:4c:12:17:77:59:7b:79:6f:05:3a:5c:cd:de:7f:08:3d: 4b:aa:66:bf:14:fe:97:fe:35:33:de:38:c2:b6:8e:f7:5d:c6: 29:f9:2a:bc:50:34:7d:a1:42:9d:01:a8:44:38:ff:40:2c:75: aa:32:3f:7f:34:db:ec:5d:78:d4:a1:a9:6c:74:51:24:7f:59: a6:13:0c:c5:3a:5c:58:57:bf:43:26:bb:f3:04:34:58:29:98: 80:da:49:28:c4:9f:a8:25:57:50:56:02:5f:a3:07:cc:ad:ee: 44:01:97:04:89:ce:66:b4:6a:d2:3d:a8:74:15:3c:ac:ff:01: 89:31:a7:24:67:fa:41:e5:bb:2b:ea:d0:81:94:d3:1f:b7:3d: e8:22:f0:3b:ff:c1:25:94:81:13:d1:6e:22:8a:74:56:08:0f: b6:e9:d1:ae -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NmssuWG9whyILVZVDqb+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMDdjODdlN2I2ZTI5NGYyNzAwNzkwZWVmMTllODI5Mzlk ODVjZDYwHhcNMjYwMTAxMjAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzNhZmE2NjQyNDI2MzJlYTMzN2Y1ZmM4OWI3ZjljNGFmYjAxZDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB1zS2hpIysKv5ZlD4V4xxQBXmHb A30w99serdbhkRWLMhFCpG3xeUv9KRQSdcjQOYPJzfoCQDDqW2Bb05iqm9eBrBtG KsP1WQi1YnW2Xjc2GP2GdNUifLOniLvn3xEwu02QR9hXF7IrAfGSRZVWXphfDVxk LnPugaIc1mthylz4r8ZpsKBwm1LP+Vum8Cgk03i37ogw1aLgn/BWh9D7T35Y57Cn BAl523e8FGuuvh1OfdoI7athw6Bd3IR/A2dezc2ttVss83ONVWRoYbENYX7TO7k7 fwhdbyfMlvGq0qa8eJAxxKMh11Y3gZ8to8Je3oSukmuv2P4sKyc1pwSuywIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPM6+mZCQmMuozf1/Im3+cSvsB0DMB8GA1UdIwQY MBaAFLMHyH57bilPJwB5Du8Z6Ck52FzWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3dmSWZudHVLVThuQUhrTzd4bm9LVG5ZWE5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9kYTY0MmEtYTZhYi00NzA1LTk1ODct NjQ5NDVhNGY4ZTEyLzEvOHpyNlprSkNZeTZqTl9YOGliZjV4Sy13SFFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9kYTY0MmEtYTZhYi00NzA1LTk1ODctNjQ5NDVhNGY4ZTEy LzEvc3dmSWZudHVLVThuQUhrTzd4bm9LVG5ZWE5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuTUiMA0E AgACMAcDBQAqEPpAMA0GCSqGSIb3DQEBCwUAA4IBAQB8F6NSG0YW6cLx2zkEmg1t 7PeE4G/drOr+5WHVJkgKYJTmcM2jJJgYZYDGoWAlJUS8EA/WeeX3EqgIhHvUWplF ps1LVvCdG/ySqhgkb0+JftE82cGHJKhHRBnJwUwSF3dZe3lvBTpczd5/CD1Lqma/ FP6X/jUz3jjCto73XcYp+Sq8UDR9oUKdAahEOP9ALHWqMj9/NNvsXXjUoalsdFEk f1mmEwzFOlxYV79DJrvzBDRYKZiA2kkoxJ+oJVdQVgJfowfMre5EAZcEic5mtGrS Pah0FTys/wGJMackZ/pB5bsr6tCBlNMftz3oIvA7/8EllIET0W4iinRWCA+26dGu -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:24 2026 by rpki-client