This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/fIODe0F2H7U5wAQ5uy_1kDKWqm8.roa File: fIODe0F2H7U5wAQ5uy_1kDKWqm8.roa (raw, json) Hash identifier: ETRCfd6hwLM8wB2Vmt5McaUCtMtxHeKB1rybYkoCFk0= Subject key identifier: 7C:83:83:7B:41:76:1F:B5:39:C0:04:39:BB:2F:F5:90:32:96:AA:6F Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Certificate serial: 019B78A2237AC3C998E5FA1953FD934586BF Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/fIODe0F2H7U5wAQ5uy_1kDKWqm8.roa Signing time: Thu 01 Jan 2026 08:17:30 +0000 ROA not before: Thu 01 Jan 2026 08:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203162 IP address blocks: 146.19.104.0/24 maxlen: 24 185.229.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:23:7a:c3:c9:98:e5:fa:19:53:fd:93:45:86:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Validity Not Before: Jan 1 08:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c83837b41761fb539c00439bb2ff5903296aa6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:45:32:43:d6:a0:df:b4:a2:05:70:28:a9:aa: 27:53:b9:62:c0:e7:c2:9f:0f:78:fd:a7:f9:ab:62: d4:4e:b3:18:51:9a:5a:b5:2c:5a:46:03:1b:76:a3: c6:c8:e3:49:b3:09:44:3d:16:77:51:ca:c4:bb:7b: 6a:35:c4:de:2b:94:0d:ad:ce:e7:ba:56:26:26:bf: 0d:33:f0:a0:04:3c:fb:62:5a:96:0a:69:cc:f8:ac: 47:f5:3f:dc:1a:a3:67:56:7e:93:02:52:04:9a:03: 86:38:1e:03:5e:82:d0:0c:26:05:63:ca:bb:f0:e4: ec:8c:07:64:22:67:91:c4:ad:e7:15:29:49:bd:72: 2e:c9:d6:34:fa:a4:1e:51:ec:3a:4d:cc:fa:29:96: af:89:a5:12:80:62:4a:0c:30:68:fd:36:86:20:83: a4:71:36:d4:81:da:01:23:22:1d:f6:70:f3:32:f0: 35:0a:c4:0e:3b:99:b2:95:39:b1:1f:1d:86:00:63: 81:b2:b2:a7:28:2b:21:5a:82:ea:fc:ea:93:45:57: 79:a5:e4:09:68:b7:e3:f0:dc:e6:65:03:e0:eb:03: b2:c9:6f:f0:bf:12:0d:4c:06:2b:6f:ea:0b:81:f3: 95:6b:71:b0:3e:5f:55:79:03:a6:4d:35:80:83:da: 53:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:83:83:7B:41:76:1F:B5:39:C0:04:39:BB:2F:F5:90:32:96:AA:6F X509v3 Authority Key Identifier: keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/fIODe0F2H7U5wAQ5uy_1kDKWqm8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.104.0/24 185.229.135.0/24 Signature Algorithm: sha256WithRSAEncryption 91:14:de:0f:a7:62:b7:44:6a:a2:eb:d3:7d:e6:cf:a3:e4:1c: 8e:2a:f0:0c:32:f8:2d:c9:e7:da:b2:41:c8:97:06:7d:aa:10: ab:a7:c1:f7:91:cb:ab:02:49:ac:87:ab:55:99:b8:9b:de:1c: dc:80:4e:7b:fb:fa:0d:ce:98:f1:ec:0c:2f:17:f3:ed:ec:30: 3c:aa:6a:44:3e:85:fb:15:24:96:2c:46:46:5e:f9:a8:28:d2: 0e:04:f4:c5:88:03:99:9e:e3:92:c4:f7:20:a2:16:80:5d:cb: 24:25:e0:19:e3:17:de:99:30:1f:4a:a1:41:67:6f:00:dd:5b: 43:e3:fb:3c:eb:31:ee:e1:c7:ec:d1:28:70:e0:57:5e:3c:f2: 9d:1d:b1:5b:41:fd:46:c8:68:a5:b7:e1:40:94:51:ea:6d:80: ff:34:cd:55:9c:3b:bf:6c:7e:9c:8f:be:5e:59:6a:19:82:90: 08:21:01:fa:e9:34:7b:9b:42:a6:47:49:b9:1f:44:8d:9f:01: 64:8f:f5:d9:02:55:94:62:10:d1:2e:a2:d3:06:9a:21:c1:d1: fe:1d:e5:a8:d6:69:30:d6:33:dd:b5:49:48:3a:d9:87:14:f8: e9:32:2a:e5:f6:c8:10:09:e2:48:ce:32:ea:34:35:ff:8b:08: 38:26:2b:2b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4oiN6w8mY5foZU/2TRYa/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNDdhYTA5ZjJjNjEwZjZmNDRiNGU3NWMxY2Q5ZGNkMzg4 NGU1NWQwHhcNMjYwMTAxMDgxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzgzODM3YjQxNzYxZmI1MzljMDA0MzliYjJmZjU5MDMyOTZhYTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokUyQ9ag37SiBXAoqaonU7liwOfC nw94/af5q2LUTrMYUZpatSxaRgMbdqPGyONJswlEPRZ3UcrEu3tqNcTeK5QNrc7n ulYmJr8NM/CgBDz7YlqWCmnM+KxH9T/cGqNnVn6TAlIEmgOGOB4DXoLQDCYFY8q7 8OTsjAdkImeRxK3nFSlJvXIuydY0+qQeUew6Tcz6KZaviaUSgGJKDDBo/TaGIIOk cTbUgdoBIyId9nDzMvA1CsQOO5mylTmxHx2GAGOBsrKnKCshWoLq/OqTRVd5peQJ aLfj8NzmZQPg6wOyyW/wvxINTAYrb+oLgfOVa3GwPl9VeQOmTTWAg9pTJwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHyDg3tBdh+1OcAEObsv9ZAylqpvMB8GA1UdIwQY MBaAFItHqgnyxhD29EtOdcHNnc04hOVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgt NTAwMTUzOWQ3MTg1LzEvZklPRGUwRjJIN1U1d0FRNXV5XzFrREtXcW04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgtNTAwMTUzOWQ3MTg1 LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkhNoAwQA ueWHMA0GCSqGSIb3DQEBCwUAA4IBAQCRFN4Pp2K3RGqi69N95s+j5ByOKvAMMvgt yefaskHIlwZ9qhCrp8H3kcurAkmsh6tVmbib3hzcgE57+/oNzpjx7AwvF/Pt7DA8 qmpEPoX7FSSWLEZGXvmoKNIOBPTFiAOZnuOSxPcgohaAXcskJeAZ4xfemTAfSqFB Z28A3VtD4/s86zHu4cfs0Shw4FdePPKdHbFbQf1GyGilt+FAlFHqbYD/NM1VnDu/ bH6cj75eWWoZgpAIIQH66TR7m0KmR0m5H0SNnwFkj/XZAlWUYhDRLqLTBpohwdH+ HeWo1mkw1jPdtUlIOtmHFPjpMirl9sgQCeJIzjLqNDX/iwg4Jisr -----END CERTIFICATE-----Generated at Mon Jan 26 05:39:34 2026 by rpki-client