This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/f84vJw7wG4ISORQxAMD5iiMwEgg.roa File: f84vJw7wG4ISORQxAMD5iiMwEgg.roa (raw, json) Hash identifier: XaUoU6IIIIA7AtaKVBXhP/8omy3ZC6BdNEc6ogpNveA= Subject key identifier: 7F:CE:2F:27:0E:F0:1B:82:12:39:14:31:00:C0:F9:8A:23:30:12:08 Certificate issuer: /CN=16914c51d031411c1340171593603163c3d4a08e Certificate serial: 019B7CED2868EF743A2F21B3ACFC3AF622F6 Authority key identifier: 16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/f84vJw7wG4ISORQxAMD5iiMwEgg.roa Signing time: Fri 02 Jan 2026 04:17:55 +0000 ROA not before: Fri 02 Jan 2026 04:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45054 IP address blocks: 91.203.152.0/22 maxlen: 22 176.123.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:28:68:ef:74:3a:2f:21:b3:ac:fc:3a:f6:22:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16914c51d031411c1340171593603163c3d4a08e Validity Not Before: Jan 2 04:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fce2f270ef01b821239143100c0f98a23301208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b6:bb:ec:d1:d2:20:1b:e7:9a:74:60:d7:06: ef:28:18:8f:2a:a3:9c:6e:f4:bb:35:30:84:41:a3: 09:22:d5:cd:b8:d5:25:ac:b8:b3:5e:5e:40:3c:bc: 20:83:48:ed:97:a0:80:0f:ea:cb:cf:27:d7:d0:76: d6:89:2f:b1:82:65:ba:d2:eb:42:1c:7e:58:59:1d: 0d:a3:bd:ae:ee:6a:e5:4c:55:cc:e9:9a:ea:78:9a: 60:27:60:6e:02:0c:97:39:e5:68:a7:69:12:e8:68: 56:31:33:26:2a:db:64:24:20:67:66:5c:d5:95:8b: 70:8c:31:36:a2:96:79:ab:9a:7c:7e:7b:2e:e6:6b: ac:2c:82:0d:84:3e:27:67:04:75:87:1f:b6:a0:27: 29:ed:1e:76:b6:28:2a:44:39:f3:8c:41:de:77:cb: 3e:79:82:3f:b9:84:16:e6:85:51:f6:4b:57:14:90: 00:7d:30:91:09:74:30:16:6e:45:72:d1:92:c2:7b: a7:f6:8d:f1:3e:05:38:4f:29:03:b8:e7:7b:f2:0c: ea:67:03:16:41:d7:98:77:e8:dd:09:d1:4f:d5:a0: da:64:4c:82:01:12:12:ce:8d:3f:ae:f9:cd:db:02: 02:7f:23:5f:36:f6:ba:d6:c4:62:7e:f3:92:b6:d3: d2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:CE:2F:27:0E:F0:1B:82:12:39:14:31:00:C0:F9:8A:23:30:12:08 X509v3 Authority Key Identifier: keyid:16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/f84vJw7wG4ISORQxAMD5iiMwEgg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.203.152.0/22 176.123.128.0/19 Signature Algorithm: sha256WithRSAEncryption 26:84:eb:fd:7e:c1:6e:23:dc:30:bd:cd:7e:c4:ba:9f:f8:05: d1:8a:c3:2e:20:df:ab:d8:47:62:46:3e:5c:2d:4c:5c:40:07: 7a:c3:46:9d:b4:9b:d8:74:f2:c8:c4:e7:b1:6f:fd:39:c6:3b: 3d:23:25:e9:b6:1a:b5:1d:b5:ce:fc:c0:68:cb:a0:46:1c:71: 1c:e9:99:db:63:fd:9c:80:31:e3:67:e8:f6:12:f7:c4:c0:6f: 53:ca:dd:cd:ac:3d:f9:61:c6:2a:7e:d6:52:0b:64:ba:d6:95: bc:c4:4f:0d:2f:d0:40:37:4d:bb:c1:c3:0f:31:82:03:a2:58: 93:b8:6e:4a:ee:c7:d6:cd:ad:9a:39:14:6f:ce:9c:ef:a8:3f: a6:e2:24:09:31:fc:13:00:71:ab:c7:67:0f:50:0d:d5:46:19: 55:95:6e:8b:bc:18:d0:a5:b4:95:60:a2:77:c7:42:ed:8c:5a: 51:05:77:d2:dd:37:39:57:0f:5e:0d:94:6e:c3:ee:13:94:e5: da:7b:0d:2e:a4:9d:02:07:43:c2:2e:75:05:31:d3:27:35:4a: c8:33:82:ad:8f:3d:4e:b0:45:6d:d9:bd:48:a6:f9:be:cd:19: a7:9f:f5:ba:9c:96:bf:f5:85:64:13:2d:3b:f8:c7:b2:e7:f1: aa:ab:1a:02 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87Sho73Q6LyGzrPw69iL2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2OTE0YzUxZDAzMTQxMWMxMzQwMTcxNTkzNjAzMTYzYzNk NGEwOGUwHhcNMjYwMTAyMDQxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmNlMmYyNzBlZjAxYjgyMTIzOTE0MzEwMGMwZjk4YTIzMzAxMjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ba77NHSIBvnmnRg1wbvKBiPKqOc bvS7NTCEQaMJItXNuNUlrLizXl5APLwgg0jtl6CAD+rLzyfX0HbWiS+xgmW60utC HH5YWR0No72u7mrlTFXM6ZrqeJpgJ2BuAgyXOeVop2kS6GhWMTMmKttkJCBnZlzV lYtwjDE2opZ5q5p8fnsu5musLIINhD4nZwR1hx+2oCcp7R52tigqRDnzjEHed8s+ eYI/uYQW5oVR9ktXFJAAfTCRCXQwFm5FctGSwnun9o3xPgU4TykDuOd78gzqZwMW QdeYd+jdCdFP1aDaZEyCARISzo0/rvnN2wICfyNfNva61sRifvOSttPSTQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFH/OLycO8BuCEjkUMQDA+YojMBIIMB8GA1UdIwQY MBaAFBaRTFHQMUEcE0AXFZNgMWPD1KCOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnBGTVVkQXhRUndUUUJjVmsyQXhZOFBVb0k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9mOTBhN2QtOGEwNS00NzU1LWI2NmIt MDlmMTljNmU1MWIyLzEvZjg0dkp3N3dHNElTT1JReEFNRDVpaU13RWdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9mOTBhN2QtOGEwNS00NzU1LWI2NmItMDlmMTljNmU1MWIy LzEvRnBGTVVkQXhRUndUUUJjVmsyQXhZOFBVb0k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8uYAwQF sHuAMA0GCSqGSIb3DQEBCwUAA4IBAQAmhOv9fsFuI9wwvc1+xLqf+AXRisMuIN+r 2EdiRj5cLUxcQAd6w0adtJvYdPLIxOexb/05xjs9IyXpthq1HbXO/MBoy6BGHHEc 6ZnbY/2cgDHjZ+j2EvfEwG9Tyt3NrD35YcYqftZSC2S61pW8xE8NL9BAN027wcMP MYIDoliTuG5K7sfWza2aORRvzpzvqD+m4iQJMfwTAHGrx2cPUA3VRhlVlW6LvBjQ pbSVYKJ3x0LtjFpRBXfS3Tc5Vw9eDZRuw+4TlOXaew0upJ0CB0PCLnUFMdMnNUrI M4Ktjz1OsEVt2b1Ipvm+zRmnn/W6nJa/9YVkEy07+Mey5/GqqxoC -----END CERTIFICATE-----Generated at Mon Jan 26 04:12:06 2026 by rpki-client