This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/fz94s-VUXoVDwH_u7pJCcjEzPzc.roa File: fz94s-VUXoVDwH_u7pJCcjEzPzc.roa (raw, json) Hash identifier: SETDMEUFwHfaec63U1CUG7TyGKgVUHcXmHb5uidUG/A= Subject key identifier: 7F:3F:78:B3:E5:54:5E:85:43:C0:7F:EE:EE:92:42:72:31:33:3F:37 Certificate issuer: /CN=66feef09c450990af34779ce701be6cd54b3d924 Certificate serial: 019B7BA526A49B4326670D2D3113E87BE60D Authority key identifier: 66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/fz94s-VUXoVDwH_u7pJCcjEzPzc.roa Signing time: Thu 01 Jan 2026 22:19:39 +0000 ROA not before: Thu 01 Jan 2026 22:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35007 IP address blocks: 83.168.118.0/24 maxlen: 24 83.168.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:26:a4:9b:43:26:67:0d:2d:31:13:e8:7b:e6:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66feef09c450990af34779ce701be6cd54b3d924 Validity Not Before: Jan 1 22:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f3f78b3e5545e8543c07feeee92427231333f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8b:19:f3:4d:bd:db:e6:e2:2d:3f:cf:9c:c3: 37:ed:89:fb:68:dd:16:ae:ab:b5:de:3e:ba:ee:f3: 89:b0:0c:9a:9e:66:6c:7b:57:90:92:9f:b9:08:0f: ea:9c:2e:51:ff:3f:51:cd:74:1c:90:99:96:75:a6: 90:fb:50:01:e2:72:57:49:75:12:26:68:fb:c4:ae: aa:1f:c6:38:12:2f:71:63:84:b3:b1:cc:ac:a4:19: 29:ad:16:80:86:05:9f:dd:a4:f5:30:84:57:8f:dd: 8b:d4:04:4b:16:5a:c8:14:ca:a7:ea:c4:b3:83:50: ac:a5:08:68:69:77:a9:d6:d8:5b:a9:30:ec:36:cb: f9:86:b8:c5:9a:a9:58:9c:82:dc:e9:b0:09:2a:f2: af:4a:d5:9d:e3:ef:30:74:88:b9:42:c3:d7:ba:09: fe:d8:73:20:59:a0:70:f1:47:f3:e2:96:85:e1:26: 8f:a3:c6:a9:73:7d:6e:a6:ee:e2:ec:57:15:54:28: a3:07:af:f0:b8:ee:f0:dc:ee:9b:5a:39:7d:34:b6: a3:8f:fd:a8:d1:6d:11:e3:1c:eb:2c:cd:25:ed:91: 1b:8b:29:b9:de:a5:bb:64:70:2b:9f:ed:d8:c8:f1: 06:68:56:13:95:ee:dc:81:11:92:ce:72:0a:e0:4e: 70:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:3F:78:B3:E5:54:5E:85:43:C0:7F:EE:EE:92:42:72:31:33:3F:37 X509v3 Authority Key Identifier: keyid:66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/fz94s-VUXoVDwH_u7pJCcjEzPzc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.168.118.0/23 Signature Algorithm: sha256WithRSAEncryption 69:15:3e:5e:ed:fb:28:0f:39:a8:b6:e6:a6:19:be:9f:7d:56: 13:7e:c9:b8:90:a8:23:99:24:1c:ec:9b:e2:74:ea:f0:76:0c: 35:b6:ed:1d:04:21:a4:b2:29:ce:46:6d:e8:d6:cd:4d:69:38: 74:a5:8b:a7:5f:7d:b7:e4:e7:84:d9:d4:9d:aa:77:70:f1:a8: 75:02:70:34:cf:fb:4b:58:6c:40:e9:71:37:09:12:0b:63:d6: 48:ec:1a:71:43:6a:ac:34:43:1e:e6:7f:86:22:6e:d3:a2:9c: c2:6a:be:bf:2a:b9:01:69:e6:88:0c:83:38:cb:71:c3:97:1f: fa:c0:76:cb:70:d5:34:37:4a:95:f4:54:6f:53:cf:7e:91:d6: 84:81:54:cf:e7:8a:12:21:cf:95:aa:1d:ac:a1:86:2f:3c:0c: 9e:37:38:c0:f9:1f:d3:07:8c:e7:92:4e:16:7e:d4:68:a4:9f: ea:19:1f:c8:8d:dd:27:40:fe:d8:d9:4b:e8:b3:8b:a2:fb:14: 68:c4:1e:70:65:cd:a2:fc:c7:bb:1c:a0:64:88:15:65:d1:ad: f6:87:02:42:4f:23:8b:8d:a0:9f:2e:ff:b4:37:72:a7:a4:40: f2:39:ab:0d:aa:9a:72:a5:23:a9:08:7b:e5:52:b4:4b:6a:a3: 01:1c:be:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pSakm0MmZw0tMRPoe+YNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZmVlZjA5YzQ1MDk5MGFmMzQ3NzljZTcwMWJlNmNkNTRi M2Q5MjQwHhcNMjYwMTAxMjIxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjNmNzhiM2U1NTQ1ZTg1NDNjMDdmZWVlZTkyNDI3MjMxMzMzZjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4sZ80292+biLT/PnMM37Yn7aN0W rqu13j667vOJsAyanmZse1eQkp+5CA/qnC5R/z9RzXQckJmWdaaQ+1AB4nJXSXUS Jmj7xK6qH8Y4Ei9xY4SzscyspBkprRaAhgWf3aT1MIRXj92L1ARLFlrIFMqn6sSz g1CspQhoaXep1thbqTDsNsv5hrjFmqlYnILc6bAJKvKvStWd4+8wdIi5QsPXugn+ 2HMgWaBw8Ufz4paF4SaPo8apc31upu7i7FcVVCijB6/wuO7w3O6bWjl9NLajj/2o 0W0R4xzrLM0l7ZEbiym53qW7ZHArn+3YyPEGaFYTle7cgRGSznIK4E5wuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH8/eLPlVF6FQ8B/7u6SQnIxMz83MB8GA1UdIwQY MBaAFGb+7wnEUJkK80d5znAb5s1Us9kkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnY3dkNjUlFtUXJ6UjNuT2NCdm16VlN6MlNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9hMTU5N2ItNmVmMi00NDMwLWFhNTYt ODI0NTFmMzNmNGNhLzEvZno5NHMtVlVYb1ZEd0hfdTdwSkNjakV6UHpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9hMTU5N2ItNmVmMi00NDMwLWFhNTYtODI0NTFmMzNmNGNh LzEvWnY3dkNjUlFtUXJ6UjNuT2NCdm16VlN6MlNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBU6h2MA0G CSqGSIb3DQEBCwUAA4IBAQBpFT5e7fsoDzmotuamGb6ffVYTfsm4kKgjmSQc7Jvi dOrwdgw1tu0dBCGksinORm3o1s1NaTh0pYunX3235OeE2dSdqndw8ah1AnA0z/tL WGxA6XE3CRILY9ZI7BpxQ2qsNEMe5n+GIm7TopzCar6/KrkBaeaIDIM4y3HDlx/6 wHbLcNU0N0qV9FRvU89+kdaEgVTP54oSIc+Vqh2soYYvPAyeNzjA+R/TB4znkk4W ftRopJ/qGR/Ijd0nQP7Y2Uvos4ui+xRoxB5wZc2i/Me7HKBkiBVl0a32hwJCTyOL jaCfLv+0N3KnpEDyOasNqppypSOpCHvlUrRLaqMBHL4V -----END CERTIFICATE-----Generated at Mon Jan 26 02:24:38 2026 by rpki-client