This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fvC0q4qW_pEQIrbvYYlc6Q6FdZE.roa File: fvC0q4qW_pEQIrbvYYlc6Q6FdZE.roa (raw, json) Hash identifier: 6xXZPNVItazvIdFvD9Le5DBjn/3nG0NNzRyMz+hraf8= Subject key identifier: 7E:F0:B4:AB:8A:96:FE:91:10:22:B6:EF:61:89:5C:E9:0E:85:75:91 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AD054640978A51F576C49C4ED562B Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fvC0q4qW_pEQIrbvYYlc6Q6FdZE.roa Signing time: Thu 01 Jan 2026 16:18:50 +0000 ROA not before: Thu 01 Jan 2026 16:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213607 IP address blocks: 81.168.85.0/24 maxlen: 24 82.153.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d0:54:64:09:78:a5:1f:57:6c:49:c4:ed:56:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ef0b4ab8a96fe911022b6ef61895ce90e857591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:82:07:d5:68:5f:60:db:15:9d:14:3d:99:03: cb:ea:b0:b3:ee:a9:60:a8:82:d7:1f:bf:f2:60:29: 88:1a:57:84:b9:93:79:dc:14:1b:68:0c:d6:e6:77: 4e:58:27:2b:e1:13:b6:7a:25:6b:64:70:6a:69:96: 49:3b:e1:0e:91:0d:23:6b:c5:6e:48:84:e8:c3:b9: 05:eb:e0:98:22:e5:a0:23:c5:76:67:c0:26:99:61: f1:ff:14:94:0d:0a:86:3c:73:02:2f:1c:ac:db:fc: 47:fd:1b:9b:46:07:02:c2:f3:b9:11:94:e9:c8:58: ad:1a:54:74:7e:b2:52:0a:da:1d:b1:5b:93:28:a8: fc:7e:ba:57:61:3f:d4:c4:21:6c:7f:4d:79:c7:32: 9f:9f:cd:e4:ce:b5:c6:87:dc:07:3f:74:99:44:81: ca:09:81:25:ac:52:91:2f:88:d1:d8:11:34:51:3e: 1e:1f:44:2c:59:d7:6e:7b:5c:9d:e7:0b:bc:e5:ae: e9:13:2b:b3:aa:fd:b4:f0:0d:98:5e:76:08:d0:63: 33:93:2d:3e:0f:85:49:e4:65:8c:82:bc:07:e6:ac: c1:4b:5f:87:b3:30:07:e8:3e:d6:10:95:59:bd:51: ef:c2:a3:a7:d2:37:81:b5:f3:87:5d:2d:6d:f8:cb: 6e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F0:B4:AB:8A:96:FE:91:10:22:B6:EF:61:89:5C:E9:0E:85:75:91 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fvC0q4qW_pEQIrbvYYlc6Q6FdZE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.168.85.0/24 82.153.236.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:30:8b:7b:26:52:d7:8f:30:48:c9:99:61:c3:28:58:af:b4: 40:d4:ac:2f:69:1f:5a:5b:c5:88:02:df:9f:ef:5f:05:6a:6a: 4e:76:a4:8f:98:29:bd:1d:ad:1a:96:61:20:45:c0:08:21:a7: 57:e0:58:dc:d8:27:30:c1:0f:be:04:11:8e:5d:27:55:0d:09: c1:79:f8:a2:c3:e4:2a:52:0c:b7:fc:b6:12:4d:93:1e:7c:67: 3e:21:01:79:21:69:75:7e:10:dd:5e:37:b4:6d:7d:b0:6f:28: 9d:30:b9:a9:d1:51:25:84:14:37:aa:41:21:73:1f:b0:58:49: 0f:e7:89:79:41:09:5d:6e:c0:d5:ff:76:50:0a:1a:17:f4:a2: 2e:32:a0:eb:61:dd:e9:02:34:4e:5b:d6:3d:f3:b0:72:14:6b: cf:17:17:ea:3b:06:57:aa:cf:3a:00:53:4c:8f:b9:8b:e8:4c: 91:4c:20:7d:b0:fb:51:12:c7:40:b5:4d:f9:a7:ce:d9:29:05: 79:52:8c:e3:e6:99:8c:5c:4d:c0:76:45:c9:c2:1d:f7:ac:8a: 1c:4a:69:3c:b8:6e:22:69:c3:67:ba:8d:d7:4d:db:ff:4c:69: 44:52:e0:11:ab:58:cd:cc:09:9d:d1:da:29:5a:64:df:3d:d9: dc:27:80:6d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WtBUZAl4pR9XbEnE7VYrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWYwYjRhYjhhOTZmZTkxMTAyMmI2ZWY2MTg5NWNlOTBlODU3NTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoIH1WhfYNsVnRQ9mQPL6rCz7qlg qILXH7/yYCmIGleEuZN53BQbaAzW5ndOWCcr4RO2eiVrZHBqaZZJO+EOkQ0ja8Vu SITow7kF6+CYIuWgI8V2Z8AmmWHx/xSUDQqGPHMCLxys2/xH/RubRgcCwvO5EZTp yFitGlR0frJSCtodsVuTKKj8frpXYT/UxCFsf015xzKfn83kzrXGh9wHP3SZRIHK CYElrFKRL4jR2BE0UT4eH0QsWddue1yd5wu85a7pEyuzqv208A2YXnYI0GMzky0+ D4VJ5GWMgrwH5qzBS1+HszAH6D7WEJVZvVHvwqOn0jeBtfOHXS1t+MtugwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFH7wtKuKlv6RECK272GJXOkOhXWRMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvZnZDMHE0cVdfcEVRSXJidllZbGM2UTZGZFpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUahVAwQA UpnsMA0GCSqGSIb3DQEBCwUAA4IBAQB9MIt7JlLXjzBIyZlhwyhYr7RA1KwvaR9a W8WIAt+f718FampOdqSPmCm9Ha0almEgRcAIIadX4Fjc2CcwwQ++BBGOXSdVDQnB efiiw+QqUgy3/LYSTZMefGc+IQF5IWl1fhDdXje0bX2wbyidMLmp0VElhBQ3qkEh cx+wWEkP54l5QQldbsDV/3ZQChoX9KIuMqDrYd3pAjROW9Y987ByFGvPFxfqOwZX qs86AFNMj7mL6EyRTCB9sPtREsdAtU35p87ZKQV5Uozj5pmMXE3AdkXJwh33rIoc Smk8uG4iacNnuo3XTdv/TGlEUuARq1jNzAmd0dopWmTfPdncJ4Bt -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:36 2026 by rpki-client