This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/fLaxsW89f11aQKq9KNmjn6zptGA.roa File: fLaxsW89f11aQKq9KNmjn6zptGA.roa (raw, json) Hash identifier: HbgZ5Aywh4i4Y3ASONqgQY+RDwgBhWmFhWjC2EBV7i4= Subject key identifier: 7C:B6:B1:B1:6F:3D:7F:5D:5A:40:AA:BD:28:D9:A3:9F:AC:E9:B4:60 Certificate issuer: /CN=fadbe65b28ff25667409cce635be096e3e6defca Certificate serial: 019B78355B14B47A1435B722301D63EC0975 Authority key identifier: FA:DB:E6:5B:28:FF:25:66:74:09:CC:E6:35:BE:09:6E:3E:6D:EF:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/fLaxsW89f11aQKq9KNmjn6zptGA.roa Signing time: Thu 01 Jan 2026 06:18:41 +0000 ROA not before: Thu 01 Jan 2026 06:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20712 IP address blocks: 91.208.66.0/24 maxlen: 24 2001:678:3c4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.mft rsync://rpki.ripe.net/repository/DEFAULT/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:5b:14:b4:7a:14:35:b7:22:30:1d:63:ec:09:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadbe65b28ff25667409cce635be096e3e6defca Validity Not Before: Jan 1 06:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cb6b1b16f3d7f5d5a40aabd28d9a39face9b460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d2:29:c8:43:4f:e0:31:58:d6:ab:40:fd:7d: 07:bd:31:8a:9d:b5:ee:3a:16:14:47:28:d0:e6:b0: 34:b1:ef:2f:54:ee:c4:1d:be:3b:5f:d4:c5:56:ea: f3:62:a6:bf:b9:31:f3:cb:10:cb:ea:2c:0d:54:97: 0f:c4:43:7f:a9:f1:f2:e5:79:9f:32:8e:61:1a:38: a4:9a:7d:f4:4a:3f:b7:3b:c7:70:36:9d:af:75:a7: 98:24:47:1f:91:47:51:87:77:65:ed:37:6e:de:f1: c7:b9:d4:5d:f6:55:0b:71:b3:7f:df:3d:92:18:02: 60:47:80:91:bf:1b:0f:3b:5d:51:78:52:4e:34:01: 9f:f3:c6:ea:5f:83:d0:be:27:b4:f2:f5:a8:96:a1: 7f:f1:fd:c5:09:20:3e:fe:99:2c:ab:58:19:27:8b: f3:c4:29:2c:4b:bc:12:f9:af:9f:b1:74:d1:d6:1c: 30:62:e2:3f:3a:97:f1:79:62:4a:b2:a2:39:9c:08: 46:97:a4:ef:7f:60:cf:a1:fb:97:42:38:27:c4:30: 66:85:c4:f2:03:5a:ce:e1:45:7e:78:63:8a:71:1a: 01:e5:31:a8:ee:ac:56:50:cb:ee:e0:cf:86:6d:b4: 7f:73:ec:89:b7:8b:5d:d4:07:11:06:03:90:14:7a: 1e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B6:B1:B1:6F:3D:7F:5D:5A:40:AA:BD:28:D9:A3:9F:AC:E9:B4:60 X509v3 Authority Key Identifier: keyid:FA:DB:E6:5B:28:FF:25:66:74:09:CC:E6:35:BE:09:6E:3E:6D:EF:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/fLaxsW89f11aQKq9KNmjn6zptGA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.66.0/24 IPv6: 2001:678:3c4::/48 Signature Algorithm: sha256WithRSAEncryption 57:71:5c:e5:95:d1:31:8c:d7:08:46:4a:1a:71:24:f6:ec:9e: b4:d0:04:79:0c:86:84:90:d4:9f:f6:4a:77:1d:8f:e9:fe:60: a0:62:e8:06:f3:df:e1:08:80:0d:ed:86:ec:9f:db:1b:ec:b9: 80:5b:42:57:b1:9f:f6:52:1c:22:02:b0:33:e0:7a:ad:65:74: 60:85:b9:20:58:09:af:4d:c9:2c:30:97:41:9c:06:61:61:8c: 77:62:1c:85:3c:bb:b7:70:83:6d:d0:08:2c:4f:e8:62:ed:b5: 80:b5:8b:2b:6d:b2:34:66:29:32:56:84:27:a4:99:fb:48:d6: 4c:5e:1b:da:52:ca:a3:92:a6:c9:97:9e:39:4c:d6:e2:88:5c: c2:50:af:10:d3:1a:2b:89:d1:ba:58:52:c3:a0:41:f8:71:93: 57:6e:b6:aa:86:d1:36:2d:6b:17:bc:e4:83:52:48:c0:da:ba: cc:21:09:3b:f9:98:93:42:53:43:eb:6f:f2:a9:b1:67:65:ba: a7:e6:da:d5:68:d1:a6:83:d7:c0:aa:56:56:b5:bc:aa:64:d7: 36:13:d1:8a:14:60:e9:3b:05:32:d6:2f:57:ad:16:11:4e:da: 63:4b:be:fd:f4:76:8f:be:8e:e0:c5:f2:10:90:e9:52:42:25: 96:97:d1:76 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZt4NVsUtHoUNbciMB1j7Al1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZGJlNjViMjhmZjI1NjY3NDA5Y2NlNjM1YmUwOTZlM2U2 ZGVmY2EwHhcNMjYwMTAxMDYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2I2YjFiMTZmM2Q3ZjVkNWE0MGFhYmQyOGQ5YTM5ZmFjZTliNDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9IpyENP4DFY1qtA/X0HvTGKnbXu OhYURyjQ5rA0se8vVO7EHb47X9TFVurzYqa/uTHzyxDL6iwNVJcPxEN/qfHy5Xmf Mo5hGjikmn30Sj+3O8dwNp2vdaeYJEcfkUdRh3dl7Tdu3vHHudRd9lULcbN/3z2S GAJgR4CRvxsPO11ReFJONAGf88bqX4PQvie08vWolqF/8f3FCSA+/pksq1gZJ4vz xCksS7wS+a+fsXTR1hwwYuI/OpfxeWJKsqI5nAhGl6Tvf2DPofuXQjgnxDBmhcTy A1rO4UV+eGOKcRoB5TGo7qxWUMvu4M+GbbR/c+yJt4td1AcRBgOQFHoeYQIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFHy2sbFvPX9dWkCqvSjZo5+s6bRgMB8GA1UdIwQY MBaAFPrb5lso/yVmdAnM5jW+CW4+be/KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS10dm1XeWpfSldaMENjem1OYjRKYmo1dDc4by5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2MvNDhlOTc2LTM3MDctNDY4NS1hNWY5 LTk2MWI3OGQ5ZDRiYy8xL2ZMYXhzVzg5ZjExYVFLcTlLTm1qbjZ6cHRHQS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvN2MvNDhlOTc2LTM3MDctNDY4NS1hNWY5LTk2MWI3OGQ5ZDRi Yy8xLzEtdHZtV3lqX0pXWjBDY3ptTmI0SmJqNXQ3OG8uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBABb0EIw DwQCAAIwCQMHACABBngDxDANBgkqhkiG9w0BAQsFAAOCAQEAV3Fc5ZXRMYzXCEZK GnEk9uyetNAEeQyGhJDUn/ZKdx2P6f5goGLoBvPf4QiADe2G7J/bG+y5gFtCV7Gf 9lIcIgKwM+B6rWV0YIW5IFgJr03JLDCXQZwGYWGMd2IchTy7t3CDbdAILE/oYu21 gLWLK22yNGYpMlaEJ6SZ+0jWTF4b2lLKo5KmyZeeOUzW4ohcwlCvENMaK4nRulhS w6BB+HGTV262qobRNi1rF7zkg1JIwNq6zCEJO/mYk0JTQ+tv8qmxZ2W6p+ba1WjR poPXwKpWVrW8qmTXNhPRihRg6TsFMtYvV60WEU7aY0u+/fR2j76O4MXyEJDpUkIl lpfRdg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:31 2026 by rpki-client