This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/FjK0gZzIRFGA1r0HMqyZjh1eSaU.roa File: FjK0gZzIRFGA1r0HMqyZjh1eSaU.roa (raw, json) Hash identifier: 5jTPa/LgCeRZQvqoHjBqfoQDZ2FKgfEuFxlRAqDizkI= Subject key identifier: 16:32:B4:81:9C:C8:44:51:80:D6:BD:07:32:AC:99:8E:1D:5E:49:A5 Certificate issuer: /CN=8916aaa5d252fd90145fedac683762d6e2074155 Certificate serial: 019B791015DB04E73A9A2097061E64CC9A73 Authority key identifier: 89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/FjK0gZzIRFGA1r0HMqyZjh1eSaU.roa Signing time: Thu 01 Jan 2026 10:17:35 +0000 ROA not before: Thu 01 Jan 2026 10:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13101 IP address blocks: 89.28.176.0/21 maxlen: 21 95.214.160.0/22 maxlen: 22 185.243.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:15:db:04:e7:3a:9a:20:97:06:1e:64:cc:9a:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8916aaa5d252fd90145fedac683762d6e2074155 Validity Not Before: Jan 1 10:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1632b4819cc8445180d6bd0732ac998e1d5e49a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:00:f7:54:4b:80:ee:40:b5:e2:5c:64:a2:af: d9:1e:54:3c:1e:0c:85:a5:75:48:63:69:a1:7a:12: 75:60:ce:cd:f4:79:c6:0c:28:98:51:eb:6e:49:12: 45:1a:b0:79:4a:b8:5d:8a:64:b4:97:a1:6a:74:24: f3:2d:9f:02:6a:0e:2d:20:42:39:69:e5:a1:3c:50: a6:53:37:cf:77:5d:ac:e0:5d:ec:56:86:85:14:7d: 58:33:62:d0:da:ba:64:fa:a8:6e:11:31:f7:68:68: 65:f2:95:23:48:45:4f:10:c4:6a:78:ca:eb:9e:85: 0c:a9:26:66:a7:55:ed:90:0c:56:16:e2:51:af:db: b9:dd:67:39:2c:f1:b0:fc:6a:4d:78:30:de:74:d7: 9f:09:7f:dd:6f:6f:b7:ff:1f:f3:ce:d4:92:6e:2d: 47:e8:1a:df:7f:45:e0:a4:37:c0:e8:07:24:00:88: 58:d2:1d:3a:6f:f8:13:64:40:ce:6f:d3:79:66:b0: 4c:5e:a0:de:d8:87:8b:9a:f4:81:48:cb:20:1d:01: a9:5a:6c:c6:c8:3d:39:bc:78:b5:6a:28:fe:cf:92: f4:55:11:86:20:81:d9:60:d8:d5:e9:19:fa:bd:00: 54:6d:3f:e8:73:41:1d:ca:19:4b:ac:16:cf:cb:a3: 7e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:32:B4:81:9C:C8:44:51:80:D6:BD:07:32:AC:99:8E:1D:5E:49:A5 X509v3 Authority Key Identifier: keyid:89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/FjK0gZzIRFGA1r0HMqyZjh1eSaU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.28.176.0/21 95.214.160.0/22 185.243.68.0/22 Signature Algorithm: sha256WithRSAEncryption bb:5f:63:f4:ca:77:3c:f1:af:79:5d:71:02:3d:38:70:5e:99: e6:84:ba:a9:08:65:73:4a:32:c3:2f:c7:ed:3d:30:b6:ba:f5: ec:c6:09:3e:ae:d7:b8:b6:95:bf:68:a9:c1:98:67:14:01:04: 3c:2e:64:ae:fa:8c:40:aa:4b:ee:79:4a:40:dc:a8:ac:25:6b: 31:74:42:84:bf:40:5b:a2:6a:93:c3:c4:31:bc:cb:d4:95:99: 93:22:e8:21:4e:ea:b5:b2:c2:ce:0d:c5:65:36:fe:27:01:cd: d5:14:3d:86:14:ce:79:9f:05:87:f2:dc:42:e8:99:ce:f8:27: 8c:10:3a:51:34:6e:78:d4:b7:84:98:f6:2a:49:d3:ff:af:5e: ef:eb:33:7c:57:68:62:37:74:0d:f6:e8:bd:2b:d1:62:b6:32: 4e:04:20:75:52:97:52:a1:73:7e:06:73:fc:0b:73:4e:5f:75: 68:c8:94:1f:5e:83:c7:63:23:af:e4:97:85:37:a3:32:f5:91: 9a:02:52:73:3f:f6:e3:39:2c:29:a1:ff:c0:ec:bc:21:66:4a: 97:6b:86:dc:1f:99:aa:02:61:5b:7f:24:67:c9:36:db:cc:d9: d6:cf:08:78:a9:51:99:97:62:dd:e3:77:5d:15:2a:1b:46:64: 23:f7:41:d5 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EBXbBOc6miCXBh5kzJpzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MTZhYWE1ZDI1MmZkOTAxNDVmZWRhYzY4Mzc2MmQ2ZTIw NzQxNTUwHhcNMjYwMTAxMTAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjMyYjQ4MTljYzg0NDUxODBkNmJkMDczMmFjOTk4ZTFkNWU0OWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQD3VEuA7kC14lxkoq/ZHlQ8HgyF pXVIY2mhehJ1YM7N9HnGDCiYUetuSRJFGrB5SrhdimS0l6FqdCTzLZ8Cag4tIEI5 aeWhPFCmUzfPd12s4F3sVoaFFH1YM2LQ2rpk+qhuETH3aGhl8pUjSEVPEMRqeMrr noUMqSZmp1XtkAxWFuJRr9u53Wc5LPGw/GpNeDDedNefCX/db2+3/x/zztSSbi1H 6Brff0XgpDfA6AckAIhY0h06b/gTZEDOb9N5ZrBMXqDe2IeLmvSBSMsgHQGpWmzG yD05vHi1aij+z5L0VRGGIIHZYNjV6Rn6vQBUbT/oc0EdyhlLrBbPy6N+JwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBYytIGcyERRgNa9BzKsmY4dXkmlMB8GA1UdIwQY MBaAFIkWqqXSUv2QFF/trGg3YtbiB0FVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVJhcXBkSlNfWkFVWC0yc2FEZGkxdUlIUVZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS85MDc0MDktNWU2MS00YzY2LTk0ZTYt ZDY5ZWE5M2NiYWZiLzEvRmpLMGdaeklSRkdBMXIwSE1xeVpqaDFlU2FVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS85MDc0MDktNWU2MS00YzY2LTk0ZTYtZDY5ZWE5M2NiYWZi LzEvaVJhcXBkSlNfWkFVWC0yc2FEZGkxdUlIUVZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDWRywAwQC X9agAwQCufNEMA0GCSqGSIb3DQEBCwUAA4IBAQC7X2P0ync88a95XXECPThwXpnm hLqpCGVzSjLDL8ftPTC2uvXsxgk+rte4tpW/aKnBmGcUAQQ8LmSu+oxAqkvueUpA 3KisJWsxdEKEv0BbomqTw8QxvMvUlZmTIughTuq1ssLODcVlNv4nAc3VFD2GFM55 nwWH8txC6JnO+CeMEDpRNG541LeEmPYqSdP/r17v6zN8V2hiN3QN9ui9K9FitjJO BCB1UpdSoXN+BnP8C3NOX3VoyJQfXoPHYyOv5JeFN6My9ZGaAlJzP/bjOSwpof/A 7LwhZkqXa4bcH5mqAmFbfyRnyTbbzNnWzwh4qVGZl2Ld43ddFSobRmQj90HV -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:27 2026 by rpki-client