This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/fA_uTKLLbWG518h0njj_cqP2p6E.roa File: fA_uTKLLbWG518h0njj_cqP2p6E.roa (raw, json) Hash identifier: 4mY7FOvfpwAUXlFXu+ZK1/hojb4S0OMizyAm+Nun5mU= Subject key identifier: 7C:0F:EE:4C:A2:CB:6D:61:B9:D7:C8:74:9E:38:FF:72:A3:F6:A7:A1 Certificate issuer: /CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18 Certificate serial: 019B783527659D48111CC83550242DA6102A Authority key identifier: 1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/fA_uTKLLbWG518h0njj_cqP2p6E.roa Signing time: Thu 01 Jan 2026 06:18:28 +0000 ROA not before: Thu 01 Jan 2026 06:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50300 IP address blocks: 5.102.168.0/21 maxlen: 24 109.74.240.0/20 maxlen: 24 176.12.104.0/21 maxlen: 24 185.32.72.0/22 maxlen: 24 185.48.164.0/22 maxlen: 24 2a00:1c10::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:27:65:9d:48:11:1c:c8:35:50:24:2d:a6:10:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18 Validity Not Before: Jan 1 06:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c0fee4ca2cb6d61b9d7c8749e38ff72a3f6a7a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3b:21:09:2a:aa:e5:8a:89:e6:0a:0d:31:67: 79:c1:8a:57:b7:ce:fb:02:1e:c1:8f:a8:be:a1:62: 44:b5:2c:01:49:ee:21:da:71:e7:09:60:f4:b9:32: d5:6d:99:97:2f:39:e8:d4:3d:93:60:d8:a7:4c:f4: 6b:3b:f1:cf:3a:11:bd:c6:dc:54:f5:1d:9b:bf:ee: 57:0f:c7:31:b1:8d:86:be:db:c1:c8:54:4d:84:0e: c9:47:17:b6:14:38:7d:11:a1:86:6a:a8:ad:d6:f8: 72:f7:e3:38:4e:8f:28:74:67:dc:15:fa:98:af:30: 00:4e:72:68:45:75:7c:19:5c:2a:53:83:65:00:6f: 50:81:72:2d:26:81:59:78:4e:c4:40:be:17:e1:22: 96:a2:a8:c6:25:7f:1f:c3:b4:73:fb:2e:91:f4:ba: 03:a3:00:61:81:8d:78:c6:46:3a:c9:a5:05:d0:f9: 08:91:79:95:0a:46:cd:9f:86:17:96:77:e7:34:d0: 72:f1:06:2c:0e:8c:94:89:5e:51:f3:5e:05:b7:37: fc:9a:c8:b9:fd:05:67:5f:29:61:3f:21:69:4f:d6: 72:a7:22:0b:b2:d8:3a:a2:18:ac:78:e3:5d:5b:36: 81:09:c9:54:3d:54:d1:dc:7f:e4:83:d5:12:97:2c: 54:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:0F:EE:4C:A2:CB:6D:61:B9:D7:C8:74:9E:38:FF:72:A3:F6:A7:A1 X509v3 Authority Key Identifier: keyid:1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/fA_uTKLLbWG518h0njj_cqP2p6E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.102.168.0/21 109.74.240.0/20 176.12.104.0/21 185.32.72.0/22 185.48.164.0/22 IPv6: 2a00:1c10::/32 Signature Algorithm: sha256WithRSAEncryption a2:7f:2f:01:d9:db:06:d1:24:50:80:ec:b1:ae:b8:69:19:2a: 8c:de:d8:c6:92:7c:e3:bd:c6:ca:ff:35:62:50:09:80:76:71: 31:54:4a:cf:6d:26:36:35:2f:3d:03:6c:99:d7:95:66:a3:6a: 2c:43:d3:35:5e:05:8d:36:6d:ce:91:16:5e:b7:c3:a8:98:d2: 2b:35:2e:99:18:b4:bd:0f:23:9c:9c:32:b8:ad:f2:db:c1:d5: 54:a5:ce:f8:b8:e2:f6:2d:7d:87:05:1a:97:9b:ca:0b:53:d0: b2:54:b3:8a:26:80:3a:6d:0f:a1:90:95:78:d6:25:64:68:03: 4f:a3:cf:af:30:31:f6:c8:32:0d:3d:35:40:13:a2:0b:29:55: fb:5f:f9:53:d6:02:6b:86:cb:1f:ea:bf:ff:53:b5:be:61:73: 31:9e:1a:76:85:cc:b8:04:4e:1b:01:4a:7c:b3:a7:b1:7b:b3: 29:0d:3f:3e:95:83:7d:18:91:ea:59:15:d9:9a:a5:3b:b9:cf: 12:de:96:8f:b4:ab:8f:e8:d2:e1:c3:8e:29:d9:56:a1:12:ec: 5e:67:48:7f:4b:eb:1c:66:7f:63:b9:e3:83:2c:fb:c3:78:e9: 07:53:69:c0:d7:e3:75:c1:2b:e7:05:6d:cc:7c:a1:a8:3b:80: 6d:e9:2b:5d -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt4NSdlnUgRHMg1UCQtphAqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYWQ3YjlmMWM0OWY4ZDEzZTFhNjdhYmNmMmZiYTM1YjBh NjZkMTgwHhcNMjYwMTAxMDYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzBmZWU0Y2EyY2I2ZDYxYjlkN2M4NzQ5ZTM4ZmY3MmEzZjZhN2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjshCSqq5YqJ5goNMWd5wYpXt877 Ah7Bj6i+oWJEtSwBSe4h2nHnCWD0uTLVbZmXLzno1D2TYNinTPRrO/HPOhG9xtxU 9R2bv+5XD8cxsY2GvtvByFRNhA7JRxe2FDh9EaGGaqit1vhy9+M4To8odGfcFfqY rzAATnJoRXV8GVwqU4NlAG9QgXItJoFZeE7EQL4X4SKWoqjGJX8fw7Rz+y6R9LoD owBhgY14xkY6yaUF0PkIkXmVCkbNn4YXlnfnNNBy8QYsDoyUiV5R814Ftzf8msi5 /QVnXylhPyFpT9ZypyILstg6ohiseONdWzaBCclUPVTR3H/kg9USlyxUHQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFHwP7kyiy21hudfIdJ44/3Kj9qehMB8GA1UdIwQY MBaAFB2te58cSfjRPhpnq88vujWwpm0YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGExN254eEotTkUtR21lcnp5LTZOYkNtYlJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zYzM5ZjAtN2U5Ny00ZWY3LTg5NDQt NWViZDhlYWVlMmM2LzEvZkFfdVRLTExiV0c1MThoMG5qal9jcVAycDZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zYzM5ZjAtN2U5Ny00ZWY3LTg5NDQtNWViZDhlYWVlMmM2 LzEvSGExN254eEotTkUtR21lcnp5LTZOYkNtYlJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDBWaoAwQE bUrwAwQDsAxoAwQCuSBIAwQCuTCkMA0EAgACMAcDBQAqABwQMA0GCSqGSIb3DQEB CwUAA4IBAQCify8B2dsG0SRQgOyxrrhpGSqM3tjGknzjvcbK/zViUAmAdnExVErP bSY2NS89A2yZ15Vmo2osQ9M1XgWNNm3OkRZet8OomNIrNS6ZGLS9DyOcnDK4rfLb wdVUpc74uOL2LX2HBRqXm8oLU9CyVLOKJoA6bQ+hkJV41iVkaANPo8+vMDH2yDIN PTVAE6ILKVX7X/lT1gJrhssf6r//U7W+YXMxnhp2hcy4BE4bAUp8s6exe7MpDT8+ lYN9GJHqWRXZmqU7uc8S3paPtKuP6NLhw44p2VahEuxeZ0h/S+scZn9jueODLPvD eOkHU2nA1+N1wSvnBW3MfKGoO4Bt6Std -----END CERTIFICATE-----Generated at Mon Jan 12 23:34:50 2026 by rpki-client