This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/fe3bi-doKDNu4dmU6DR8DAdVKZc.roa File: fe3bi-doKDNu4dmU6DR8DAdVKZc.roa (raw, json) Hash identifier: OoARVSCOyCQLc2Hu8VCrhllOD8R6T0zZ8zONXrdJeEI= Subject key identifier: 7D:ED:DB:8B:E7:68:28:33:6E:E1:D9:94:E8:34:7C:0C:07:55:29:97 Certificate issuer: /CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26 Certificate serial: 019B7EA75A0419B7EBF4CE67E6E11B04E3AC Authority key identifier: 74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/fe3bi-doKDNu4dmU6DR8DAdVKZc.roa Signing time: Fri 02 Jan 2026 12:20:55 +0000 ROA not before: Fri 02 Jan 2026 12:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3330 IP address blocks: 195.149.75.0/24 maxlen: 24 2001:67c:29cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:5a:04:19:b7:eb:f4:ce:67:e6:e1:1b:04:e3:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26 Validity Not Before: Jan 2 12:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7deddb8be76828336ee1d994e8347c0c07552997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7e:bb:0b:24:ae:92:a1:10:e3:1f:1b:e9:f1: e1:96:4f:e8:09:8c:14:63:d6:36:5a:34:51:0e:c4: 7e:aa:ce:1b:84:da:b4:e1:f3:43:f1:52:ba:f3:eb: f1:cb:02:96:8a:74:84:68:d9:38:05:5e:cf:44:b9: be:db:78:f8:9b:f5:5b:18:98:b8:16:e2:bf:93:37: 3d:31:bb:c6:47:3f:97:fb:66:83:47:f1:d6:e4:b6: dd:b2:cc:a7:50:23:9c:97:77:ef:3b:05:fe:ea:c4: 29:bf:8b:95:99:54:83:c1:5a:56:9e:e7:7b:ae:fc: 72:e6:48:73:0b:62:5f:7d:6f:66:0d:cd:07:96:cf: ce:74:30:4d:0c:06:1f:d9:e4:6f:85:d2:c8:60:31: 77:72:29:24:5f:6f:e6:de:a5:b2:1d:14:2e:a3:a1: e0:e1:9a:3f:d1:7a:e3:7d:f4:af:ec:3a:9b:eb:4f: e8:17:75:3d:f5:d5:bf:f7:36:be:df:b5:de:2a:e9: 1c:6d:6d:58:df:ad:24:81:1a:85:20:a7:4c:04:4c: 68:f2:0f:8d:0d:3b:d4:88:ca:1e:83:3c:05:a0:95: e9:e1:b1:95:34:38:78:44:f5:51:bb:4f:d6:1d:aa: 92:26:ec:bd:f4:b1:b8:32:ba:d3:ec:81:4e:d7:d2: 19:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:ED:DB:8B:E7:68:28:33:6E:E1:D9:94:E8:34:7C:0C:07:55:29:97 X509v3 Authority Key Identifier: keyid:74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/fe3bi-doKDNu4dmU6DR8DAdVKZc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.149.75.0/24 IPv6: 2001:67c:29cc::/48 Signature Algorithm: sha256WithRSAEncryption 18:ac:69:8e:39:69:f4:17:c1:f1:03:61:42:c2:76:bb:a9:52: a3:77:22:b1:69:83:8e:c0:4d:62:67:fe:75:c4:06:85:86:7b: 0c:1d:b7:10:fd:e0:9d:e6:f7:34:0e:d5:e3:66:18:fb:d7:66: bc:fe:46:01:63:0d:c8:95:97:08:4b:7f:70:2e:bc:32:fc:59: 2f:bf:f2:7e:e1:ec:60:ba:98:f0:f8:cf:f0:41:46:f7:df:c0: ab:ea:69:1f:4f:3c:df:7e:5d:e7:c7:31:94:ae:60:bf:a9:3a: 25:ba:a0:a3:19:04:e4:d9:4d:94:69:52:a0:42:4e:5a:4a:e6: 4a:38:03:04:de:e2:f9:21:13:b0:c1:4a:c6:31:f3:09:0e:23: 43:0c:f7:79:73:7c:e4:1a:7a:de:c7:41:ba:e1:84:e9:3a:0e: 17:1a:c5:95:f4:6d:7f:75:78:10:28:a8:34:47:52:91:f0:69: 23:5d:9e:bf:19:d3:25:05:31:a0:18:f6:f0:87:f4:9a:c8:64: 44:79:f0:13:b5:5d:91:01:a1:9b:e4:f5:24:7c:3a:8f:20:98: 54:86:e5:24:97:ec:a9:3b:ef:60:a3:64:ae:d5:86:3f:de:57: 3f:f4:cd:ee:c7:5b:f0:d5:c3:dc:c3:6c:15:ab:67:02:df:42: 39:bc:4a:ba -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+p1oEGbfr9M5n5uEbBOOsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MjQ4OGYwZDliNGIxNzFhMmUyZjBmYTU1OWI0M2Y5YTVi MzJlMjYwHhcNMjYwMTAyMTIyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGVkZGI4YmU3NjgyODMzNmVlMWQ5OTRlODM0N2MwYzA3NTUyOTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2367CySukqEQ4x8b6fHhlk/oCYwU Y9Y2WjRRDsR+qs4bhNq04fND8VK68+vxywKWinSEaNk4BV7PRLm+23j4m/VbGJi4 FuK/kzc9MbvGRz+X+2aDR/HW5LbdssynUCOcl3fvOwX+6sQpv4uVmVSDwVpWnud7 rvxy5khzC2JffW9mDc0Hls/OdDBNDAYf2eRvhdLIYDF3cikkX2/m3qWyHRQuo6Hg 4Zo/0XrjffSv7Dqb60/oF3U99dW/9za+37XeKukcbW1Y360kgRqFIKdMBExo8g+N DTvUiMoegzwFoJXp4bGVNDh4RPVRu0/WHaqSJuy99LG4MrrT7IFO19IZ+wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFH3t24vnaCgzbuHZlOg0fAwHVSmXMB8GA1UdIwQY MBaAFHQkiPDZtLFxouLw+lWbQ/mlsy4mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZENTSThObTBzWEdpNHZENlZadEQtYVd6TGlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iYzRjMjMtZjdjZS00MmYxLTg4MTkt ZjJiYmZiYTcxYTI4LzEvZmUzYmktZG9LRE51NGRtVTZEUjhEQWRWS1pjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9iYzRjMjMtZjdjZS00MmYxLTg4MTktZjJiYmZiYTcxYTI4 LzEvZENTSThObTBzWEdpNHZENlZadEQtYVd6TGlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAw5VLMA8E AgACMAkDBwAgAQZ8KcwwDQYJKoZIhvcNAQELBQADggEBABisaY45afQXwfEDYULC drupUqN3IrFpg47ATWJn/nXEBoWGewwdtxD94J3m9zQO1eNmGPvXZrz+RgFjDciV lwhLf3AuvDL8WS+/8n7h7GC6mPD4z/BBRvffwKvqaR9PPN9+XefHMZSuYL+pOiW6 oKMZBOTZTZRpUqBCTlpK5ko4AwTe4vkhE7DBSsYx8wkOI0MM93lzfOQaet7HQbrh hOk6DhcaxZX0bX91eBAoqDRHUpHwaSNdnr8Z0yUFMaAY9vCH9JrIZER58BO1XZEB oZvk9SR8Oo8gmFSG5SSX7Kk772CjZK7Vhj/eVz/0ze7HW/DVw9zDbBWrZwLfQjm8 Sro= -----END CERTIFICATE-----Generated at Tue Jan 27 03:54:02 2026 by rpki-client