This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/fmZxjRZiqOQwHDt7j51f9SOA6RI.roa File: fmZxjRZiqOQwHDt7j51f9SOA6RI.roa (raw, json) Hash identifier: L9SLemKUDE99zwW/1qnnl1xaC8S5UDziumUBVKNLf1U= Subject key identifier: 7E:66:71:8D:16:62:A8:E4:30:1C:3B:7B:8F:9D:5F:F5:23:80:E9:12 Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e Certificate serial: 019B7C122CE66119EA062114688DFD779887 Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/fmZxjRZiqOQwHDt7j51f9SOA6RI.roa Signing time: Fri 02 Jan 2026 00:18:44 +0000 ROA not before: Fri 02 Jan 2026 00:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202538 IP address blocks: 212.79.122.0/24 maxlen: 24 212.87.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:2c:e6:61:19:ea:06:21:14:68:8d:fd:77:98:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e Validity Not Before: Jan 2 00:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e66718d1662a8e4301c3b7b8f9d5ff52380e912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6f:5e:c6:0d:29:2d:00:78:14:64:90:25:9f: e3:82:bd:e3:04:55:c1:12:17:33:4d:39:af:01:cb: 57:5c:51:a9:b7:83:19:75:1d:e3:82:6c:d6:bd:1d: 2a:55:f3:27:8b:bf:36:37:ed:d7:9b:12:73:ea:f8: 2a:16:b9:44:6c:23:d4:3b:46:e4:89:a8:3c:83:68: 2d:f1:f5:15:60:6c:ff:af:3f:84:90:92:36:59:75: 12:c8:c4:55:36:c4:a6:84:22:72:f5:52:86:71:4d: ff:eb:5c:56:ff:b8:75:ed:42:6d:62:15:23:a5:93: 08:a6:fb:da:0d:e1:ba:99:80:f7:ac:7a:fd:e8:20: 4d:10:d9:4b:60:2e:39:ae:03:df:cc:c9:26:e9:a2: 58:53:2d:c2:e4:1f:bc:7c:55:f9:d3:82:cf:30:ea: e2:f5:60:06:13:d4:2e:ca:9b:4f:1a:e3:07:5a:ad: b6:01:2c:6f:a8:b3:65:e2:2f:19:80:1c:cf:0b:8e: 1b:44:1f:de:b6:87:48:1f:cb:3a:1b:af:ae:d2:81: 34:cc:db:11:13:4e:3f:3f:12:85:7b:7c:fa:46:08: cf:33:cf:83:db:2f:76:fd:a4:52:f4:e4:98:75:3a: c3:57:fb:f2:5e:46:b3:38:fd:8b:a1:66:86:3f:03: b0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:66:71:8D:16:62:A8:E4:30:1C:3B:7B:8F:9D:5F:F5:23:80:E9:12 X509v3 Authority Key Identifier: keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/fmZxjRZiqOQwHDt7j51f9SOA6RI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.79.122.0/24 212.87.169.0/24 Signature Algorithm: sha256WithRSAEncryption 88:1b:23:60:74:15:1d:15:5c:47:2c:d8:fc:b7:d4:33:fe:7d: 30:46:f4:db:83:16:1e:8e:d1:30:52:c4:a9:66:21:6d:3d:a3: 00:42:8a:f6:6f:f6:50:c2:01:8d:70:02:84:33:eb:f7:13:95: 17:ec:3e:c4:f1:04:d2:c1:34:a8:ce:5a:58:24:02:05:23:24: 28:84:b0:da:69:2f:b5:d3:6e:5a:92:ce:8c:f0:32:57:6b:76: b9:2e:25:19:90:64:40:dd:9a:15:a2:0d:72:95:02:0b:7b:f7: 06:fb:cf:ec:a4:64:f4:3e:67:87:ac:c6:c4:4b:d9:e9:3e:aa: b6:bc:9c:26:79:62:26:3d:56:20:4c:0b:97:89:ab:d8:e0:4e: a8:38:21:cd:c4:26:d9:ce:c9:38:28:a8:de:b6:79:9f:b8:9f: 86:47:fe:af:5c:8e:9d:c6:2f:c4:4a:2a:9c:c5:32:cd:a6:04: 8b:0a:b6:2c:3b:16:d3:75:d5:e9:91:cb:65:70:ea:bb:42:65: 9d:c6:89:d0:14:7a:b0:05:98:21:2c:97:a7:9e:b2:aa:5a:5c: 08:b8:e6:7c:7f:bb:05:9b:b3:72:78:9d:1f:49:78:fa:31:a7: 30:66:5f:5a:22:9a:9d:bf:49:b1:c2:14:4d:ac:dd:ed:f8:e5: e9:90:0b:b0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EizmYRnqBiEUaI39d5iHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NjViYWUyNTc3OGJlZWQ4ODgwYzA4ZGYyZDNmMzdmYzM3 YWJjMWUwHhcNMjYwMTAyMDAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTY2NzE4ZDE2NjJhOGU0MzAxYzNiN2I4ZjlkNWZmNTIzODBlOTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG9exg0pLQB4FGSQJZ/jgr3jBFXB EhczTTmvActXXFGpt4MZdR3jgmzWvR0qVfMni782N+3XmxJz6vgqFrlEbCPUO0bk iag8g2gt8fUVYGz/rz+EkJI2WXUSyMRVNsSmhCJy9VKGcU3/61xW/7h17UJtYhUj pZMIpvvaDeG6mYD3rHr96CBNENlLYC45rgPfzMkm6aJYUy3C5B+8fFX504LPMOri 9WAGE9QuyptPGuMHWq22ASxvqLNl4i8ZgBzPC44bRB/etodIH8s6G6+u0oE0zNsR E04/PxKFe3z6RgjPM8+D2y92/aRS9OSYdTrDV/vyXkazOP2LoWaGPwOw1wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFH5mcY0WYqjkMBw7e4+dX/UjgOkSMB8GA1UdIwQY MBaAFKhluuJXeL7tiIDAjfLT83/DerweMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTkt MWI2Zjc1MGNmOWEyLzEvZm1aeGpSWmlxT1F3SER0N2o1MWY5U09BNlJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTktMWI2Zjc1MGNmOWEy LzEvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1E96AwQA 1FepMA0GCSqGSIb3DQEBCwUAA4IBAQCIGyNgdBUdFVxHLNj8t9Qz/n0wRvTbgxYe jtEwUsSpZiFtPaMAQor2b/ZQwgGNcAKEM+v3E5UX7D7E8QTSwTSozlpYJAIFIyQo hLDaaS+1025aks6M8DJXa3a5LiUZkGRA3ZoVog1ylQILe/cG+8/spGT0PmeHrMbE S9npPqq2vJwmeWImPVYgTAuXiavY4E6oOCHNxCbZzsk4KKjetnmfuJ+GR/6vXI6d xi/ESiqcxTLNpgSLCrYsOxbTddXpkctlcOq7QmWdxonQFHqwBZghLJennrKqWlwI uOZ8f7sFm7NyeJ0fSXj6MacwZl9aIpqdv0mxwhRNrN3t+OXpkAuw -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:25 2026 by rpki-client