This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/fLzeZ00IYj-IxnoGIbn7t2eWUGI.roa File: fLzeZ00IYj-IxnoGIbn7t2eWUGI.roa (raw, json) Hash identifier: YW5jkNHqF6tBgAJfKMQglVG8Rn1wn5A7xiLfsMA393U= Subject key identifier: 7C:BC:DE:67:4D:08:62:3F:88:C6:7A:06:21:B9:FB:B7:67:96:50:62 Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c Certificate serial: 019B7DCB289B9A6621C3519A08838743F4F1 Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/fLzeZ00IYj-IxnoGIbn7t2eWUGI.roa Signing time: Fri 02 Jan 2026 08:20:24 +0000 ROA not before: Fri 02 Jan 2026 08:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30785 IP address blocks: 82.150.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:28:9b:9a:66:21:c3:51:9a:08:83:87:43:f4:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c Validity Not Before: Jan 2 08:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cbcde674d08623f88c67a0621b9fbb767965062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7e:8e:7d:48:6c:fd:f2:c5:7f:b1:ed:9b:72: 14:93:89:99:cf:5e:23:ea:63:e4:91:05:f7:52:01: d6:70:64:64:d5:3c:9b:23:dc:ba:33:9a:4b:7f:9f: 63:2a:a7:d5:80:8f:d4:53:3c:8d:42:42:30:fa:81: e6:2c:c4:01:84:04:f9:9a:a7:d3:f4:7f:30:b3:50: e9:34:8c:9e:aa:15:7b:ea:b1:ad:08:a0:d7:39:3f: 1f:c8:8b:b6:7c:17:90:37:c9:9e:72:14:bb:38:4b: f4:04:2c:e8:45:22:44:81:ea:b8:45:9b:29:e0:74: 47:7e:99:dd:8e:bf:7b:bd:f5:29:d3:c9:a8:93:b8: b4:93:b3:db:ed:b0:75:66:8d:59:11:71:8d:3b:dd: 0c:37:70:f5:be:e4:7c:5a:87:21:72:65:43:86:4e: b0:e7:b9:66:26:b8:90:9b:c1:08:b5:b1:56:4c:fa: 41:60:ce:79:31:a9:b6:12:c7:25:7c:a8:d5:9c:eb: 9d:f9:da:e1:bb:75:58:e9:b3:39:b5:b8:ae:5c:9f: a3:23:d5:65:7f:11:a1:a8:bc:a1:0d:63:63:14:d1: 19:85:0f:02:38:ab:00:fc:81:a9:89:fc:fa:cf:93: c9:8c:1d:8c:ba:59:5e:3e:83:2b:1a:b8:0c:a0:49: 24:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:BC:DE:67:4D:08:62:3F:88:C6:7A:06:21:B9:FB:B7:67:96:50:62 X509v3 Authority Key Identifier: keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/fLzeZ00IYj-IxnoGIbn7t2eWUGI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.150.140.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:d0:e5:02:3e:04:3b:5c:5e:26:5e:4c:10:ca:72:7a:e1:fe: 7b:e8:0d:36:63:02:2d:e6:05:65:62:4b:9f:03:81:02:a0:80: ee:04:60:89:74:e7:b2:4e:14:41:48:50:26:1d:19:57:c8:eb: 7d:0c:77:c6:b1:34:8a:61:af:78:ab:ec:f9:6d:8e:02:60:17: fd:a2:19:e1:e6:94:14:c6:60:26:17:4b:68:d0:d9:c0:a8:a2: ac:00:67:81:d3:23:3c:e9:04:ad:28:2a:1a:12:03:ab:e5:80: 2a:0c:ba:77:03:ca:09:ce:e0:e6:07:6f:91:25:2c:47:ed:d5: c9:c9:87:19:fe:29:8c:ff:b5:ec:27:af:fa:0a:ce:c0:26:9c: 90:3d:fc:6c:37:c0:e7:56:b6:a2:1b:d5:a3:b9:9e:95:92:64: 83:46:3a:2b:fe:ef:7b:2d:41:c8:23:af:bc:5e:fd:86:e1:c1: ed:1a:3b:ff:92:96:3e:65:90:4b:3e:59:d3:47:1e:eb:a6:49: 5a:24:7e:46:ee:1f:3b:35:45:41:10:f9:61:82:ec:5e:85:cf: 18:2b:02:6b:2f:2b:5b:94:fd:b5:96:57:94:4a:9c:f0:0d:03: 7e:27:34:5f:6d:45:0e:a1:0c:6f:d0:cb:95:f2:f3:e7:75:cc: d4:0e:e1:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yyibmmYhw1GaCIOHQ/TxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMWZlMzBmYzZiNGIwZDBmNmRiNGUxYmZiYmQ1MDE5NWRj YTU3NWMwHhcNMjYwMTAyMDgyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2JjZGU2NzRkMDg2MjNmODhjNjdhMDYyMWI5ZmJiNzY3OTY1MDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2n6OfUhs/fLFf7Htm3IUk4mZz14j 6mPkkQX3UgHWcGRk1TybI9y6M5pLf59jKqfVgI/UUzyNQkIw+oHmLMQBhAT5mqfT 9H8ws1DpNIyeqhV76rGtCKDXOT8fyIu2fBeQN8mechS7OEv0BCzoRSJEgeq4RZsp 4HRHfpndjr97vfUp08mok7i0k7Pb7bB1Zo1ZEXGNO90MN3D1vuR8WochcmVDhk6w 57lmJriQm8EItbFWTPpBYM55Mam2EsclfKjVnOud+drhu3VY6bM5tbiuXJ+jI9Vl fxGhqLyhDWNjFNEZhQ8COKsA/IGpifz6z5PJjB2MullePoMrGrgMoEkk9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHy83mdNCGI/iMZ6BiG5+7dnllBiMB8GA1UdIwQY MBaAFCAf4w/GtLDQ9ttOG/u9UBldyldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYt ZmMxMjFjODAwYjMwLzEvZkx6ZVowMElZai1JeG5vR0libjd0MmVXVUdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYtZmMxMjFjODAwYjMw LzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUpaMMA0G CSqGSIb3DQEBCwUAA4IBAQBN0OUCPgQ7XF4mXkwQynJ64f576A02YwIt5gVlYkuf A4ECoIDuBGCJdOeyThRBSFAmHRlXyOt9DHfGsTSKYa94q+z5bY4CYBf9ohnh5pQU xmAmF0to0NnAqKKsAGeB0yM86QStKCoaEgOr5YAqDLp3A8oJzuDmB2+RJSxH7dXJ yYcZ/imM/7XsJ6/6Cs7AJpyQPfxsN8DnVraiG9WjuZ6VkmSDRjor/u97LUHII6+8 Xv2G4cHtGjv/kpY+ZZBLPlnTRx7rpklaJH5G7h87NUVBEPlhguxehc8YKwJrLytb lP21lleUSpzwDQN+JzRfbUUOoQxv0MuV8vPndczUDuE2 -----END CERTIFICATE-----Generated at Sun Jan 25 21:06:42 2026 by rpki-client