This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/fomrS4dX5UyQctRbUOlEOReM51s.roa File: fomrS4dX5UyQctRbUOlEOReM51s.roa (raw, json) Hash identifier: OwhdfcJ0K62trAYFFVz/ZuzwZmZiy8nl9/D+tMVNouE= Subject key identifier: 7E:89:AB:4B:87:57:E5:4C:90:72:D4:5B:50:E9:44:39:17:8C:E7:5B Certificate issuer: /CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f Certificate serial: 019B7E375D9004424EE6B48BB9CA2527B7F8 Authority key identifier: AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/fomrS4dX5UyQctRbUOlEOReM51s.roa Signing time: Fri 02 Jan 2026 10:18:36 +0000 ROA not before: Fri 02 Jan 2026 10:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39729 IP address blocks: 213.158.64.0/19 maxlen: 24 213.158.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:5d:90:04:42:4e:e6:b4:8b:b9:ca:25:27:b7:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f Validity Not Before: Jan 2 10:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e89ab4b8757e54c9072d45b50e94439178ce75b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0e:9f:ab:47:00:67:fc:2f:2e:62:14:da:e2: 5a:42:eb:06:70:b9:6a:2c:4c:c3:5a:72:a1:b9:c9: 62:d2:1e:77:b1:06:ee:59:4b:35:7c:dd:bb:23:8a: d4:e9:65:38:ee:86:67:e4:a2:70:a9:39:bc:07:31: f0:df:fe:dc:30:47:e7:39:b2:e6:1f:07:7c:bf:aa: 10:4a:13:7d:9a:76:b5:9e:ce:5b:2d:29:08:10:3f: ab:48:d4:2f:c8:35:d8:ab:a9:1a:6c:f3:98:64:9e: f1:73:35:c8:29:d7:58:85:18:9f:c8:81:cf:d8:d1: 34:17:e2:8e:4d:49:f6:67:7d:be:33:41:ec:fe:63: e7:35:c1:32:68:d3:47:f8:14:9b:20:4d:7f:ff:a0: fc:ae:22:cc:d7:1e:40:26:d6:df:38:3c:a5:b0:91: 41:ee:0b:83:79:18:ad:db:f0:4d:52:18:1f:a4:e8: 56:df:be:e3:57:47:27:be:78:78:59:93:51:2a:27: d2:3f:21:d2:76:98:78:f6:89:58:97:2a:61:5f:60: 7f:e3:6a:bc:f0:56:87:78:90:8d:40:d0:2f:cc:b5: 0b:67:cb:78:27:4e:6e:af:10:48:08:9e:11:15:53: dd:de:39:3b:52:b7:fe:b8:c0:f5:a2:a5:5d:8a:d5: c2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:89:AB:4B:87:57:E5:4C:90:72:D4:5B:50:E9:44:39:17:8C:E7:5B X509v3 Authority Key Identifier: keyid:AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/fomrS4dX5UyQctRbUOlEOReM51s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.158.64.0/19 Signature Algorithm: sha256WithRSAEncryption 5a:a4:74:94:96:53:8a:fd:11:8c:68:df:61:86:0b:9b:89:ff: 54:aa:84:3f:af:43:41:6e:a3:89:2d:62:4b:1e:d9:66:ab:db: 1d:24:42:18:72:ea:f6:bb:e2:88:7d:c7:77:63:d1:fc:90:77: b4:9e:17:14:72:c3:a5:35:ce:47:ff:07:9e:52:25:03:a9:99: 1b:72:f9:c7:4b:81:d2:0d:0d:28:cc:e1:31:69:9e:a2:fd:bc: 97:2d:3a:3f:61:8b:cd:89:16:a1:52:7b:47:a2:08:b9:45:e2: 7d:8e:0d:df:eb:db:6e:1c:f8:9a:43:6d:b8:a0:34:bb:e8:95: 7f:d7:ab:2e:f1:f3:26:73:3a:a2:e8:b9:e4:e6:79:5c:c4:c4: 31:16:1c:ae:34:0b:10:44:6b:81:7c:8d:65:85:d3:f1:33:30: e9:82:07:85:dd:8e:84:d6:16:2f:4d:af:54:be:9f:ef:ee:84: 57:30:d0:99:3c:b2:29:94:e6:a5:41:3e:73:42:48:0a:bd:ce: a0:09:50:8d:5b:f9:cf:b0:8f:74:15:d6:1c:98:d9:f0:cb:0b: e8:d8:ab:d5:58:11:85:77:f9:cd:e2:59:c8:7f:a6:be:93:12: d9:f8:c2:1a:6a:a2:45:d9:fc:13:71:22:33:ca:43:af:6b:28: 5a:4d:5d:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N12QBEJO5rSLucolJ7f4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMGRjMTJiMGYxYjUzM2Q4ZDA0ZWM2MTE3ZDZiOWU1MTJm Y2FhOWYwHhcNMjYwMTAyMTAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTg5YWI0Yjg3NTdlNTRjOTA3MmQ0NWI1MGU5NDQzOTE3OGNlNzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw6fq0cAZ/wvLmIU2uJaQusGcLlq LEzDWnKhucli0h53sQbuWUs1fN27I4rU6WU47oZn5KJwqTm8BzHw3/7cMEfnObLm Hwd8v6oQShN9mna1ns5bLSkIED+rSNQvyDXYq6kabPOYZJ7xczXIKddYhRifyIHP 2NE0F+KOTUn2Z32+M0Hs/mPnNcEyaNNH+BSbIE1//6D8riLM1x5AJtbfODylsJFB 7guDeRit2/BNUhgfpOhW377jV0cnvnh4WZNRKifSPyHSdph49olYlyphX2B/42q8 8FaHeJCNQNAvzLULZ8t4J05urxBICJ4RFVPd3jk7Urf+uMD1oqVditXCswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH6Jq0uHV+VMkHLUW1DpRDkXjOdbMB8GA1UdIwQY MBaAFK8NwSsPG1M9jQTsYRfWueUS/KqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnczQkt3OGJVejJOQk94aEY5YTU1Ukw4cXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jMzE3NGEtYTc5NC00NGVlLThkMjYt YmM1YjY5MTQ0NTg3LzEvZm9tclM0ZFg1VXlRY3RSYlVPbEVPUmVNNTFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9jMzE3NGEtYTc5NC00NGVlLThkMjYtYmM1YjY5MTQ0NTg3 LzEvcnczQkt3OGJVejJOQk94aEY5YTU1Ukw4cXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1Z5AMA0G CSqGSIb3DQEBCwUAA4IBAQBapHSUllOK/RGMaN9hhgubif9UqoQ/r0NBbqOJLWJL Htlmq9sdJEIYcur2u+KIfcd3Y9H8kHe0nhcUcsOlNc5H/weeUiUDqZkbcvnHS4HS DQ0ozOExaZ6i/byXLTo/YYvNiRahUntHogi5ReJ9jg3f69tuHPiaQ224oDS76JV/ 16su8fMmczqi6Lnk5nlcxMQxFhyuNAsQRGuBfI1lhdPxMzDpggeF3Y6E1hYvTa9U vp/v7oRXMNCZPLIplOalQT5zQkgKvc6gCVCNW/nPsI90FdYcmNnwywvo2KvVWBGF d/nN4lnIf6a+kxLZ+MIaaqJF2fwTcSIzykOvayhaTV0V -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:47 2026 by rpki-client