This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/f-YXM7BH83V0kvUXvW2GIs5BDg0.roa File: f-YXM7BH83V0kvUXvW2GIs5BDg0.roa (raw, json) Hash identifier: AsELevMPRLK8TdZ3qZnEEYe0IBvxlKOGzstiZBn5CSk= Subject key identifier: 7F:E6:17:33:B0:47:F3:75:74:92:F5:17:BD:6D:86:22:CE:41:0E:0D Certificate issuer: /CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d Certificate serial: 019B7BA3EA42CACB36CF23FCCA654F9B84B0 Authority key identifier: FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/f-YXM7BH83V0kvUXvW2GIs5BDg0.roa Signing time: Thu 01 Jan 2026 22:18:18 +0000 ROA not before: Thu 01 Jan 2026 22:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6698 IP address blocks: 91.239.78.0/23 maxlen: 23 213.111.148.0/24 maxlen: 24 213.111.149.0/24 maxlen: 24 213.111.150.0/24 maxlen: 24 213.111.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:ea:42:ca:cb:36:cf:23:fc:ca:65:4f:9b:84:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d Validity Not Before: Jan 1 22:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fe61733b047f3757492f517bd6d8622ce410e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c3:b0:a3:06:79:70:cc:11:c8:3f:f3:70:f2: 6f:34:9b:9c:83:ab:f1:69:52:3e:4d:71:58:f5:54: a1:d4:b6:45:2c:e9:1f:90:62:51:fd:11:b5:d3:e0: 14:14:f6:df:a4:48:e7:0d:3a:50:03:65:0f:00:5e: 89:93:b4:1d:05:cd:7f:cc:93:c9:f4:53:a9:86:e5: 31:af:93:99:b0:a9:8a:c0:84:d4:75:f8:13:a2:e8: 78:21:c9:ba:91:80:e4:d4:2c:42:fd:79:92:89:52: f4:ee:cd:8c:99:50:5d:6f:aa:ab:aa:37:3d:9d:d3: 57:a2:2f:14:99:61:88:7b:0f:5b:1b:82:86:05:04: 22:0f:07:1d:41:0c:27:cb:a3:a1:58:65:b2:14:53: 34:f5:60:7e:64:f6:81:52:35:a3:42:7e:7b:14:49: 03:74:a2:26:a7:24:4b:99:a5:2c:b4:35:66:c9:56: b1:bd:20:2b:64:0c:ac:83:1d:01:71:22:ff:a0:7c: fa:1c:da:0a:cb:52:5a:e8:b6:57:83:37:9c:bc:b0: f7:9b:9f:cc:1b:29:1c:ae:2f:41:ee:5b:a4:15:1e: d9:12:e0:cf:c9:f2:37:2d:8a:ec:3e:da:8c:a7:bc: ad:69:94:8a:f5:e3:6f:7f:cf:dc:4f:f7:e3:74:0a: 63:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E6:17:33:B0:47:F3:75:74:92:F5:17:BD:6D:86:22:CE:41:0E:0D X509v3 Authority Key Identifier: keyid:FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/f-YXM7BH83V0kvUXvW2GIs5BDg0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.78.0/23 213.111.148.0-213.111.150.255 213.111.152.0/23 Signature Algorithm: sha256WithRSAEncryption 9e:d3:28:be:bc:c9:22:62:ef:51:a1:38:d4:3e:85:6b:23:4f: 59:76:ab:7e:37:cf:1b:ae:cf:2b:db:53:e9:59:2c:6f:81:02: 13:04:0e:00:fe:ff:17:d3:f4:cc:ed:70:b7:28:e9:76:24:e6: 7e:75:4a:a2:0d:de:d7:fe:09:cb:ed:7a:82:72:1e:dd:a8:7e: da:f7:81:28:43:d6:88:7f:32:73:47:03:89:54:ad:3a:99:ac: 2b:69:f0:38:bb:23:00:a0:97:77:2c:2d:bc:94:29:59:5f:26: 19:b2:ad:2c:5c:06:fd:8a:db:e2:7f:aa:37:08:f7:a5:bf:de: b8:b2:ea:cf:94:44:9c:41:22:3c:d4:23:ed:82:81:1a:c9:d4: 7d:58:80:6c:3d:56:6a:07:89:48:f1:f7:cc:ab:d4:58:3e:ab: fc:cc:c6:0a:61:a4:a9:1e:7b:2b:91:c2:d4:99:32:f1:d4:cf: 75:b4:f5:4c:47:ca:37:94:7a:15:0b:dc:31:f4:0e:90:bd:b9: 75:48:8f:83:45:09:5e:f5:d4:7b:fd:88:b4:2e:26:d1:eb:ee: 30:e6:93:56:5c:1f:12:e0:b7:b6:a5:51:98:87:6b:42:31:d4: 54:97:70:34:0f:8d:bd:2e:1f:c6:6f:b8:75:dd:54:e1:2f:09: 52:37:8e:63 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt7o+pCyss2zyP8ymVPm4SwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmN2Q4YTc5YmFkNGY5ODNkMGM0OTg5NWFmNTBlYThhMDNl YmM3MGQwHhcNMjYwMTAxMjIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmU2MTczM2IwNDdmMzc1NzQ5MmY1MTdiZDZkODYyMmNlNDEwZTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsOwowZ5cMwRyD/zcPJvNJucg6vx aVI+TXFY9VSh1LZFLOkfkGJR/RG10+AUFPbfpEjnDTpQA2UPAF6Jk7QdBc1/zJPJ 9FOphuUxr5OZsKmKwITUdfgTouh4Icm6kYDk1CxC/XmSiVL07s2MmVBdb6qrqjc9 ndNXoi8UmWGIew9bG4KGBQQiDwcdQQwny6OhWGWyFFM09WB+ZPaBUjWjQn57FEkD dKImpyRLmaUstDVmyVaxvSArZAysgx0BcSL/oHz6HNoKy1Ja6LZXgzecvLD3m5/M Gykcri9B7lukFR7ZEuDPyfI3LYrsPtqMp7ytaZSK9eNvf8/cT/fjdApj2QIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFH/mFzOwR/N1dJL1F71thiLOQQ4NMB8GA1UdIwQY MBaAFP99inm61PmD0MSYla9Q6ooD68cNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzMyS2ViclUtWVBReEppVnIxRHFpZ1ByeHcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi80NDI0ZWYtNjhhYS00YjcwLWIyY2Mt MDg3M2UzOTk0ZDBlLzEvZi1ZWE03Qkg4M1Ywa3ZVWHZXMkdJczVCRGcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi80NDI0ZWYtNjhhYS00YjcwLWIyY2MtMDg3M2UzOTk0ZDBl LzEvXzMyS2ViclUtWVBReEppVnIxRHFpZ1ByeHcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBW+9OMAwD BALVb5QDBADVb5YDBAHVb5gwDQYJKoZIhvcNAQELBQADggEBAJ7TKL68ySJi71Gh ONQ+hWsjT1l2q343zxuuzyvbU+lZLG+BAhMEDgD+/xfT9MztcLco6XYk5n51SqIN 3tf+CcvteoJyHt2oftr3gShD1oh/MnNHA4lUrTqZrCtp8Di7IwCgl3csLbyUKVlf JhmyrSxcBv2K2+J/qjcI96W/3riy6s+URJxBIjzUI+2CgRrJ1H1YgGw9VmoHiUjx 98yr1Fg+q/zMxgphpKkeeyuRwtSZMvHUz3W09UxHyjeUehUL3DH0DpC9uXVIj4NF CV711Hv9iLQuJtHr7jDmk1ZcHxLgt7alUZiHa0Ix1FSXcDQPjb0uH8ZvuHXdVOEv CVI3jmM= -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:10 2026 by rpki-client