This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/fUMyqRdYIh_R-8CA9gJo1w88MT4.roa File: fUMyqRdYIh_R-8CA9gJo1w88MT4.roa (raw, json) Hash identifier: 0n8T3bgS7/ZpBehpJPzHRTQQIvK4fBVJaSQE1Tqq5Lg= Subject key identifier: 7D:43:32:A9:17:58:22:1F:D1:FB:C0:80:F6:02:68:D7:0F:3C:31:3E Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84 Certificate serial: 019B7E371F498E4D2A7C2E34FF42974C51A9 Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/fUMyqRdYIh_R-8CA9gJo1w88MT4.roa Signing time: Fri 02 Jan 2026 10:18:20 +0000 ROA not before: Fri 02 Jan 2026 10:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61431 IP address blocks: 91.196.136.0/24 maxlen: 24 91.196.138.0/24 maxlen: 24 95.181.214.0/24 maxlen: 24 95.181.215.0/24 maxlen: 24 109.196.128.0/24 maxlen: 24 109.196.129.0/24 maxlen: 24 109.196.130.0/24 maxlen: 24 109.196.131.0/24 maxlen: 24 109.196.133.0/24 maxlen: 24 109.196.134.0/24 maxlen: 24 109.196.135.0/24 maxlen: 24 109.196.136.0/23 maxlen: 23 109.196.138.0/23 maxlen: 23 109.196.140.0/24 maxlen: 24 109.196.141.0/24 maxlen: 24 109.196.142.0/24 maxlen: 24 109.196.143.0/24 maxlen: 24 188.68.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:1f:49:8e:4d:2a:7c:2e:34:ff:42:97:4c:51:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84 Validity Not Before: Jan 2 10:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d4332a91758221fd1fbc080f60268d70f3c313e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:11:1b:dd:7f:e2:8f:22:c6:4c:80:4c:a2:2f: b8:6e:fb:82:ac:d9:ae:32:4d:be:77:a0:ee:a6:d4: b5:dd:bb:23:b1:57:a2:43:04:70:a5:c6:f1:69:c5: 76:5a:64:bb:08:c4:ee:d7:b3:6c:41:dc:76:47:3e: 64:13:45:52:fd:58:4d:35:ef:25:61:29:bf:4c:79: fa:d3:61:ac:8c:29:67:4f:e4:af:ea:ce:77:4c:d2: ee:3f:18:41:ae:02:3f:3a:35:6f:4a:1d:31:a0:a0: 5b:86:96:74:ea:95:70:45:1d:24:c8:d4:69:62:ed: 0a:d8:bb:98:33:f2:c7:0b:18:12:43:d5:c9:ca:b3: 24:48:c2:8a:4d:c8:bc:d7:3e:6f:6c:ee:4d:1b:fb: 85:be:36:51:58:2a:02:01:a0:01:c7:e2:a3:12:de: bf:97:97:cf:48:dd:c9:18:58:b6:7a:a0:ea:1f:e7: ac:14:a9:eb:5e:b9:e6:05:81:68:c8:ef:e4:d8:79: 81:f6:fe:f9:87:87:ca:6c:42:0d:45:74:ce:e8:e9: f0:bb:5b:1d:91:de:7b:23:36:80:9c:9f:c6:11:41: b9:aa:68:83:04:12:d6:67:a4:85:5b:d2:94:9c:81: e9:83:b4:74:24:d9:66:2c:28:cf:e3:da:60:af:76: 65:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:43:32:A9:17:58:22:1F:D1:FB:C0:80:F6:02:68:D7:0F:3C:31:3E X509v3 Authority Key Identifier: keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/fUMyqRdYIh_R-8CA9gJo1w88MT4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.196.136.0/24 91.196.138.0/24 95.181.214.0/23 109.196.128.0/22 109.196.133.0-109.196.143.255 188.68.5.0/24 Signature Algorithm: sha256WithRSAEncryption b0:00:29:bd:40:a7:7a:37:ef:b4:a5:6c:4e:9e:d6:89:a9:84: 64:6a:88:b3:07:5e:28:4c:73:56:18:08:79:b8:a6:72:e5:26: 69:4a:9d:e5:8a:41:bd:98:db:40:f4:a0:a5:86:b7:42:26:fe: 7d:9e:53:b8:1f:dc:c6:8b:ce:7b:be:0f:47:79:d9:95:6b:d0: fb:c4:0d:c8:6a:97:8c:ac:7d:3e:4d:74:6d:76:7d:ee:e7:f1: 41:bb:17:ae:e0:88:04:06:e3:1c:68:ff:c2:a8:d2:4e:32:51: 1c:60:aa:35:95:3e:b6:96:ea:a1:9a:62:90:b8:b8:60:d4:b2: f4:54:b0:e1:f1:7b:4c:f8:0b:02:d3:a0:de:b1:fe:3a:0f:6b: b0:9a:3f:c8:7f:10:96:e7:a8:f2:e8:4f:db:ff:1f:4e:86:3e: a2:f7:07:2e:0e:d9:75:75:12:ad:f4:db:af:83:81:72:86:8c: d1:78:92:1e:3e:97:86:cf:23:05:67:71:49:62:a3:6f:e1:bb: 63:01:12:ef:b2:c8:c1:5f:df:bc:14:50:0a:7d:2d:9b:28:23: 1b:a2:bf:36:db:a2:58:32:9b:61:a6:00:4a:57:28:32:9b:19: e1:b3:40:24:fc:c2:37:1b:e3:46:f5:a2:bc:99:1c:b8:64:74: b3:e3:38:cf -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt+Nx9Jjk0qfC40/0KXTFGpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMzhlZjQxYjJjMDEwNWE5MWNjYmI5Yzg5MzM3ZmFlYjEy OWZmODQwHhcNMjYwMTAyMTAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDQzMzJhOTE3NTgyMjFmZDFmYmMwODBmNjAyNjhkNzBmM2MzMTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBEb3X/ijyLGTIBMoi+4bvuCrNmu Mk2+d6DuptS13bsjsVeiQwRwpcbxacV2WmS7CMTu17NsQdx2Rz5kE0VS/VhNNe8l YSm/THn602GsjClnT+Sv6s53TNLuPxhBrgI/OjVvSh0xoKBbhpZ06pVwRR0kyNRp Yu0K2LuYM/LHCxgSQ9XJyrMkSMKKTci81z5vbO5NG/uFvjZRWCoCAaABx+KjEt6/ l5fPSN3JGFi2eqDqH+esFKnrXrnmBYFoyO/k2HmB9v75h4fKbEINRXTO6Onwu1sd kd57IzaAnJ/GEUG5qmiDBBLWZ6SFW9KUnIHpg7R0JNlmLCjP49pgr3ZleQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFH1DMqkXWCIf0fvAgPYCaNcPPDE+MB8GA1UdIwQY MBaAFIM470GywBBakcy7nIkzf66xKf+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3Mzgt MjhmYzc3OTY3NzYzLzEvZlVNeXFSZFlJaF9SLThDQTlnSm8xdzg4TVQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3MzgtMjhmYzc3OTY3NzYz LzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAW8SIAwQA W8SKAwQBX7XWAwQCbcSAMAwDBABtxIUDBARtxIADBAC8RAUwDQYJKoZIhvcNAQEL BQADggEBALAAKb1Ap3o377SlbE6e1omphGRqiLMHXihMc1YYCHm4pnLlJmlKneWK Qb2Y20D0oKWGt0Im/n2eU7gf3MaLznu+D0d52ZVr0PvEDchql4ysfT5NdG12fe7n 8UG7F67giAQG4xxo/8Ko0k4yURxgqjWVPraW6qGaYpC4uGDUsvRUsOHxe0z4CwLT oN6x/joPa7CaP8h/EJbnqPLoT9v/H06GPqL3By4O2XV1Eq3026+DgXKGjNF4kh4+ l4bPIwVncUlio2/hu2MBEu+yyMFf37wUUAp9LZsoIxuivzbbolgym2GmAEpXKDKb GeGzQCT8wjcb40b1oryZHLhkdLPjOM8= -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:46 2026 by rpki-client