This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/fa-o86UHfmGbW4nW_MeJ2MJ47-A.roa File: fa-o86UHfmGbW4nW_MeJ2MJ47-A.roa (raw, json) Hash identifier: eUT3sgFq5ihgZcPeVuZNQUnESvSB8D10v8Jv+k0SYWA= Subject key identifier: 7D:AF:A8:F3:A5:07:7E:61:9B:5B:89:D6:FC:C7:89:D8:C2:78:EF:E0 Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7 Certificate serial: 019B797EBED48811BEA43E2A1731950EB7CB Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/fa-o86UHfmGbW4nW_MeJ2MJ47-A.roa Signing time: Thu 01 Jan 2026 12:18:28 +0000 ROA not before: Thu 01 Jan 2026 12:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204528 IP address blocks: 62.56.156.0/24 maxlen: 24 81.199.3.0/24 maxlen: 24 81.199.4.0/24 maxlen: 24 81.199.15.0/24 maxlen: 24 81.199.20.0/24 maxlen: 24 81.199.94.0/24 maxlen: 24 81.199.97.0/24 maxlen: 24 81.199.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:be:d4:88:11:be:a4:3e:2a:17:31:95:0e:b7:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7 Validity Not Before: Jan 1 12:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7dafa8f3a5077e619b5b89d6fcc789d8c278efe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:83:ee:a4:32:0b:f2:8f:3e:27:01:a3:fa:36: 30:e1:cd:4c:16:07:f3:12:4c:59:df:94:b5:a6:5c: 6e:79:7d:6e:46:66:38:be:10:c7:a9:7d:ea:1f:a9: 3e:bb:f5:94:ab:a0:17:f5:cc:97:4c:8c:bf:fa:63: 94:eb:2f:75:71:9e:c7:fb:e6:bb:6f:41:94:8e:09: 12:5e:16:51:df:a5:a0:ff:94:f5:ae:b1:41:17:c7: 57:1f:7c:ad:f6:8a:43:7c:69:1a:93:9e:83:d0:1a: 01:fa:b1:24:fa:ec:b5:bd:93:16:7d:e0:43:b4:b6: de:73:bc:e0:3d:b5:2f:40:6b:09:d6:fa:12:16:5f: 38:96:4a:2a:6e:a5:e7:45:c1:31:55:85:c3:2e:e3: e0:b2:bd:67:4d:5b:eb:07:06:11:7d:cd:d8:72:06: 3c:07:89:ca:66:0c:6b:a8:85:1e:c5:e1:25:96:55: ac:1c:1e:e4:48:32:a6:6c:b4:c3:d9:d1:2d:b5:87: c0:c2:eb:e3:62:f5:75:45:1b:6a:19:8c:88:f5:df: 27:5d:3f:f1:f1:17:a1:76:44:a5:e1:b0:e5:f1:c8: 70:46:2a:32:de:32:3d:e9:3c:03:27:fa:08:28:a1: 1b:b1:0c:96:fd:97:50:b2:29:a0:13:a9:49:60:d9: 6b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AF:A8:F3:A5:07:7E:61:9B:5B:89:D6:FC:C7:89:D8:C2:78:EF:E0 X509v3 Authority Key Identifier: keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/fa-o86UHfmGbW4nW_MeJ2MJ47-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.56.156.0/24 81.199.3.0-81.199.4.255 81.199.15.0/24 81.199.20.0/24 81.199.94.0/24 81.199.97.0/24 81.199.201.0/24 Signature Algorithm: sha256WithRSAEncryption 86:ae:b7:26:04:c5:37:b6:7c:c0:2b:a9:4f:ed:96:d6:5e:d6: cc:fc:b1:4b:94:7e:55:82:02:14:e0:9f:ff:c6:21:be:2b:a5: 74:c1:a8:33:2c:5d:24:f1:0b:12:78:c6:f6:af:dc:85:4c:9d: 54:f4:bd:53:aa:e0:f0:f0:a9:f2:33:be:ec:c9:04:11:3b:4c: 2b:c1:73:12:a0:53:47:3b:6c:23:72:dd:06:5b:bb:7c:e3:a3: a1:c2:dd:f7:81:81:33:de:75:d6:c1:89:63:33:ad:bb:7a:e8: 1a:43:7e:98:3d:61:f6:a4:1a:0a:02:7f:68:88:37:27:da:bb: 2f:05:00:89:34:7f:2f:c9:a7:dc:89:13:51:8d:0c:0c:8c:16: ce:c9:ec:8f:b7:27:33:3d:07:f2:2e:a3:98:9e:8c:80:4f:5a: 59:26:67:10:3c:4c:94:6a:62:e6:2c:6f:e1:65:19:c4:e3:53: 85:bb:b5:8c:47:c7:84:e8:02:17:04:3d:60:38:ce:1d:ce:fb: 42:9e:8f:d4:0f:d2:87:ad:2d:36:ef:7a:f0:2c:66:5b:2f:a7: ef:f1:90:4b:af:ee:03:01:d8:b9:44:3a:a7:62:9f:c3:d6:be: 9d:ac:d8:6d:d0:3a:42:25:dd:e9:5b:8c:9d:83:41:ce:9c:fa: 56:f2:fa:cf -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt5fr7UiBG+pD4qFzGVDrfLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMTgyYmVlOWFhMDEwYzFmZmQyZDgwNGY2YWE3YjE0YmRk YjkxZjcwHhcNMjYwMTAxMTIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGFmYThmM2E1MDc3ZTYxOWI1Yjg5ZDZmY2M3ODlkOGMyNzhlZmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIPupDIL8o8+JwGj+jYw4c1MFgfz EkxZ35S1plxueX1uRmY4vhDHqX3qH6k+u/WUq6AX9cyXTIy/+mOU6y91cZ7H++a7 b0GUjgkSXhZR36Wg/5T1rrFBF8dXH3yt9opDfGkak56D0BoB+rEk+uy1vZMWfeBD tLbec7zgPbUvQGsJ1voSFl84lkoqbqXnRcExVYXDLuPgsr1nTVvrBwYRfc3YcgY8 B4nKZgxrqIUexeElllWsHB7kSDKmbLTD2dEttYfAwuvjYvV1RRtqGYyI9d8nXT/x 8RehdkSl4bDl8chwRioy3jI96TwDJ/oIKKEbsQyW/ZdQsimgE6lJYNlrsQIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFH2vqPOlB35hm1uJ1vzHidjCeO/gMB8GA1UdIwQY MBaAFFAYK+6aoBDB/9LYBPaqexS925H3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0Zjkt MTlkMWJiNjFkOWE3LzEvZmEtbzg2VUhmbUdiVzRuV19NZUoyTUo0Ny1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0ZjktMTlkMWJiNjFkOWE3 LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAPjicMAwD BABRxwMDBABRxwQDBABRxw8DBABRxxQDBABRx14DBABRx2EDBABRx8kwDQYJKoZI hvcNAQELBQADggEBAIautyYExTe2fMArqU/tltZe1sz8sUuUflWCAhTgn//GIb4r pXTBqDMsXSTxCxJ4xvav3IVMnVT0vVOq4PDwqfIzvuzJBBE7TCvBcxKgU0c7bCNy 3QZbu3zjo6HC3feBgTPeddbBiWMzrbt66BpDfpg9YfakGgoCf2iINyfauy8FAIk0 fy/Jp9yJE1GNDAyMFs7J7I+3JzM9B/Iuo5iejIBPWlkmZxA8TJRqYuYsb+FlGcTj U4W7tYxHx4ToAhcEPWA4zh3O+0Kej9QP0oetLTbvevAsZlsvp+/xkEuv7gMB2LlE Oqdin8PWvp2s2G3QOkIl3elbjJ2DQc6c+lby+s8= -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:59 2026 by rpki-client