This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/ffYBPHr80VYEZ9nh35N1GnYUaq0.roa File: ffYBPHr80VYEZ9nh35N1GnYUaq0.roa (raw, json) Hash identifier: eJAJO7UVqMGX5rHA6v1I/gJpbdqT70QsYP5GPkz+BRE= Subject key identifier: 7D:F6:01:3C:7A:FC:D1:56:04:67:D9:E1:DF:93:75:1A:76:14:6A:AD Certificate issuer: /CN=d90d2681514aefee9d3c86e1eae35736c84d1c09 Certificate serial: 019B79EBFAB1184D7112901141E9CEECB1F6 Authority key identifier: D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/ffYBPHr80VYEZ9nh35N1GnYUaq0.roa Signing time: Thu 01 Jan 2026 14:17:46 +0000 ROA not before: Thu 01 Jan 2026 14:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13101 IP address blocks: 81.91.104.0/21 maxlen: 21 103.204.204.0/22 maxlen: 22 193.143.2.0/23 maxlen: 23 193.143.6.0/23 maxlen: 23 199.175.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:fa:b1:18:4d:71:12:90:11:41:e9:ce:ec:b1:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d90d2681514aefee9d3c86e1eae35736c84d1c09 Validity Not Before: Jan 1 14:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7df6013c7afcd1560467d9e1df93751a76146aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:55:cf:e6:64:c2:de:6b:83:6d:9a:c1:75:d2: b7:fc:ad:0a:c6:42:d3:0c:35:a9:5d:06:f4:13:55: 6f:bd:0e:42:46:97:9b:78:41:60:71:c9:0a:b8:eb: 9d:b0:4c:4b:36:93:41:a6:b7:64:25:ba:48:17:81: fb:0f:c3:97:7e:4a:9d:5c:a8:57:57:4b:c0:c2:1b: 80:3a:fc:c2:78:95:51:64:5c:df:e4:b2:78:86:88: 73:f5:45:6f:06:08:57:8b:3e:d8:0e:79:9f:29:1e: e3:31:29:6d:05:2a:e9:0f:43:bc:a0:2a:1b:a0:6d: 5c:14:db:a2:40:67:56:dc:55:d4:48:28:85:4d:2c: 97:a0:d4:bd:3c:d1:76:d6:8d:cb:b7:fc:55:31:c5: b1:8a:ce:af:74:42:24:8d:0f:57:b2:16:33:f8:26: 77:9e:33:a7:88:de:93:f6:4d:a2:b2:8d:3c:f7:96: 80:bc:2d:3a:6c:26:62:a2:84:18:5a:03:ae:33:3a: 6e:28:ff:04:7c:40:cc:e1:17:da:c2:c6:07:a3:51: e6:fa:96:f7:6f:15:4d:54:02:d2:6b:5f:52:f0:7f: 1b:b7:9a:cf:69:56:79:36:d9:ed:68:32:9b:5a:46: c3:e4:ba:b5:e7:1f:dc:88:ce:e5:02:70:f4:6e:73: f3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F6:01:3C:7A:FC:D1:56:04:67:D9:E1:DF:93:75:1A:76:14:6A:AD X509v3 Authority Key Identifier: keyid:D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/ffYBPHr80VYEZ9nh35N1GnYUaq0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.91.104.0/21 103.204.204.0/22 193.143.2.0/23 193.143.6.0/23 199.175.220.0/22 Signature Algorithm: sha256WithRSAEncryption 89:31:43:56:66:ec:a1:3c:61:26:84:25:9f:ed:9c:97:01:fc: e4:09:1e:a3:62:c2:3e:d0:86:b1:5f:dc:e8:cb:75:8c:71:13: ff:ab:19:fb:b3:20:69:c8:74:e0:29:99:f2:18:05:75:fe:93: 7d:71:17:6b:8e:62:d4:6c:f2:00:fd:a3:03:2c:80:cb:3a:13: a3:49:1c:c8:2d:52:87:92:b1:ad:76:b6:06:a7:ba:d0:a7:64: 50:14:7c:0b:12:4c:e5:5c:33:77:de:a5:56:2b:8f:73:a9:ee: 51:28:b7:7d:da:50:09:fb:40:08:cb:39:3d:56:cf:31:6e:66: c5:69:ac:69:34:1a:11:b7:9e:ad:af:5f:ec:5e:95:3b:0e:1a: 73:ab:7c:81:47:89:30:22:87:3b:19:4f:75:cb:51:fd:84:f1: db:88:ec:37:90:7c:8a:9a:30:bd:88:bb:19:46:32:ad:46:77: 1e:75:77:37:45:7a:33:35:c5:63:d4:ec:80:a3:5d:0e:9a:8a: 6a:bd:47:82:1f:bb:84:68:02:3b:52:df:27:ad:cb:5f:d9:20: 98:43:10:49:d8:85:2f:0c:86:08:0f:1e:0d:6b:5d:9e:a8:2a: c8:bd:75:2e:04:51:69:fc:c1:17:b0:06:ca:84:69:c4:b9:a0: 77:76:83:e7 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt56/qxGE1xEpARQenO7LH2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MGQyNjgxNTE0YWVmZWU5ZDNjODZlMWVhZTM1NzM2Yzg0 ZDFjMDkwHhcNMjYwMTAxMTQxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGY2MDEzYzdhZmNkMTU2MDQ2N2Q5ZTFkZjkzNzUxYTc2MTQ2YWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlXP5mTC3muDbZrBddK3/K0KxkLT DDWpXQb0E1VvvQ5CRpebeEFgcckKuOudsExLNpNBprdkJbpIF4H7D8OXfkqdXKhX V0vAwhuAOvzCeJVRZFzf5LJ4hohz9UVvBghXiz7YDnmfKR7jMSltBSrpD0O8oCob oG1cFNuiQGdW3FXUSCiFTSyXoNS9PNF21o3Lt/xVMcWxis6vdEIkjQ9XshYz+CZ3 njOniN6T9k2iso0895aAvC06bCZiooQYWgOuMzpuKP8EfEDM4RfawsYHo1Hm+pb3 bxVNVALSa19S8H8bt5rPaVZ5NtntaDKbWkbD5Lq15x/ciM7lAnD0bnPzTQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFH32ATx6/NFWBGfZ4d+TdRp2FGqtMB8GA1UdIwQY MBaAFNkNJoFRSu/unTyG4erjVzbITRwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlEwbWdWRks3LTZkUEliaDZ1TlhOc2hOSEFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9lMGQ5NTYtN2I4Ny00ZWRkLWI5NDQt MWQwZjI5YjRiOTdmLzEvZmZZQlBIcjgwVllFWjluaDM1TjFHbllVYXEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9lMGQ5NTYtN2I4Ny00ZWRkLWI5NDQtMWQwZjI5YjRiOTdm LzEvMlEwbWdWRks3LTZkUEliaDZ1TlhOc2hOSEFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDUVtoAwQC Z8zMAwQBwY8CAwQBwY8GAwQCx6/cMA0GCSqGSIb3DQEBCwUAA4IBAQCJMUNWZuyh PGEmhCWf7ZyXAfzkCR6jYsI+0IaxX9zoy3WMcRP/qxn7syBpyHTgKZnyGAV1/pN9 cRdrjmLUbPIA/aMDLIDLOhOjSRzILVKHkrGtdrYGp7rQp2RQFHwLEkzlXDN33qVW K49zqe5RKLd92lAJ+0AIyzk9Vs8xbmbFaaxpNBoRt56tr1/sXpU7Dhpzq3yBR4kw Ioc7GU91y1H9hPHbiOw3kHyKmjC9iLsZRjKtRncedXc3RXozNcVj1OyAo10Omopq vUeCH7uEaAI7Ut8nrctf2SCYQxBJ2IUvDIYIDx4Na12eqCrIvXUuBFFp/MEXsAbK hGnEuaB3doPn -----END CERTIFICATE-----Generated at Mon Jan 26 10:25:29 2026 by rpki-client