This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/fiVTOMWIAL1C2XiZRFiNx2SBNqM.roa File: fiVTOMWIAL1C2XiZRFiNx2SBNqM.roa (raw, json) Hash identifier: S/2TOdVEhHfoVPnKhpPpBMFYD/MvlT/LDYLlM9jxQwg= Subject key identifier: 7E:25:53:38:C5:88:00:BD:42:D9:78:99:44:58:8D:C7:64:81:36:A3 Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515 Certificate serial: 019B7C7FE8ACC06703C8033FDBB830685493 Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/fiVTOMWIAL1C2XiZRFiNx2SBNqM.roa Signing time: Fri 02 Jan 2026 02:18:36 +0000 ROA not before: Fri 02 Jan 2026 02:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214996 IP address blocks: 159.195.12.0/22 maxlen: 22 159.195.16.0/22 maxlen: 22 159.195.91.0/24 maxlen: 24 159.195.92.0/22 maxlen: 22 2a0a:4cc0:101::/48 maxlen: 48 2a0a:4cc0:101::/52 maxlen: 52 2a0a:4cc0:120::/43 maxlen: 43 2a0a:4cc0:2000::/43 maxlen: 48 2a0a:4cc0:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:e8:ac:c0:67:03:c8:03:3f:db:b8:30:68:54:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515 Validity Not Before: Jan 2 02:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e255338c58800bd42d9789944588dc7648136a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e9:e7:69:98:cd:42:2c:3e:ff:69:dd:e1:59: 8d:da:ed:5e:20:eb:3e:0e:e7:d1:9f:24:32:61:de: 26:ec:fc:66:6f:a3:c6:0f:74:03:d6:e0:26:3d:13: 06:e2:d4:bc:0e:78:0a:dc:ff:54:18:f3:52:b0:6a: c9:04:e1:df:a0:3b:ec:d8:24:d7:81:19:09:2b:2b: 43:de:f1:54:38:54:e6:11:0b:a7:e1:0e:aa:07:26: 6e:5b:d7:d6:a1:eb:85:4c:d4:0c:26:8d:a3:d4:ba: f0:69:c9:6b:7d:68:3b:b0:bb:f9:ae:80:07:23:f2: 29:36:1e:23:71:3c:38:14:80:99:d2:4e:5d:53:74: 25:ff:3b:35:08:42:1d:64:5f:29:ac:08:2b:03:4f: b8:af:66:5a:c1:a6:10:23:ac:e2:9e:74:03:bc:45: fe:00:07:bd:7b:39:d8:28:00:f9:d9:51:0b:73:d2: a4:af:0d:e1:8a:b4:f3:80:9e:8c:8f:04:88:a3:68: c8:c9:ee:63:29:a6:d8:41:3e:7f:55:c9:cd:f0:14: 16:48:d4:53:15:1a:a2:d5:92:6b:38:6b:46:02:44: 26:54:8b:04:0b:31:43:b1:c1:4b:7c:ee:e5:f2:b2: 3e:5f:1a:89:bc:b8:cc:44:6f:c0:6b:1c:6b:d9:8b: 8e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:25:53:38:C5:88:00:BD:42:D9:78:99:44:58:8D:C7:64:81:36:A3 X509v3 Authority Key Identifier: keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/fiVTOMWIAL1C2XiZRFiNx2SBNqM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.195.12.0-159.195.19.255 159.195.91.0-159.195.95.255 IPv6: 2a0a:4cc0:101::/48 2a0a:4cc0:120::/43 2a0a:4cc0:2000::/43 Signature Algorithm: sha256WithRSAEncryption 5e:57:10:8e:37:19:6c:19:0b:a1:43:4a:d3:e4:a1:28:be:87: 2d:f7:53:83:48:32:5c:29:f7:dd:26:4b:16:40:55:31:31:bf: 5b:39:d3:c2:2c:d1:2f:6e:e0:15:7c:a5:13:6e:9a:b3:d5:26: 1f:4e:0f:24:72:1e:90:a7:63:19:5d:9f:6f:36:38:1c:22:9e: 90:56:b5:57:8b:d5:bb:af:c4:7a:f2:fc:9a:ba:ad:f2:a0:8a: 38:80:7f:64:74:ab:f3:c6:4e:8b:6f:d1:05:31:f7:ec:d3:bb: b6:25:57:64:1f:59:2a:be:3a:f8:74:57:d8:1d:ff:76:a4:7e: 5e:cd:08:a1:f8:6b:a6:f5:49:23:9f:cc:5a:b2:61:35:83:3a: 55:d6:e0:e3:23:01:fa:f6:10:92:58:93:3e:fd:5f:e3:5d:5d: 78:6a:36:4d:6e:a5:6d:e8:ef:2b:d5:ac:bd:80:c0:97:e9:75: f0:ef:c2:84:b6:53:a4:98:85:98:9a:7c:3e:39:c4:1e:67:5d: df:4d:d3:1b:02:eb:8d:05:49:79:0c:9e:67:39:8e:13:44:98: 71:66:27:60:a5:c8:fe:05:7c:48:12:12:90:c2:00:5b:93:93: 93:d6:d4:1f:ee:f9:88:20:b6:32:8b:ee:41:11:72:67:0f:b1: 27:8d:5d:38 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt8f+iswGcDyAM/27gwaFSTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MmVlYjg3OTA4NWM5NDE5NDI5N2RkOWU0Y2QyNDljZDI1 MTY1MTUwHhcNMjYwMTAyMDIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTI1NTMzOGM1ODgwMGJkNDJkOTc4OTk0NDU4OGRjNzY0ODEzNmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOnnaZjNQiw+/2nd4VmN2u1eIOs+ DufRnyQyYd4m7Pxmb6PGD3QD1uAmPRMG4tS8DngK3P9UGPNSsGrJBOHfoDvs2CTX gRkJKytD3vFUOFTmEQun4Q6qByZuW9fWoeuFTNQMJo2j1LrwaclrfWg7sLv5roAH I/IpNh4jcTw4FICZ0k5dU3Ql/zs1CEIdZF8prAgrA0+4r2ZawaYQI6zinnQDvEX+ AAe9eznYKAD52VELc9Kkrw3hirTzgJ6MjwSIo2jIye5jKabYQT5/VcnN8BQWSNRT FRqi1ZJrOGtGAkQmVIsECzFDscFLfO7l8rI+XxqJvLjMRG/Aaxxr2YuOWwIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFH4lUzjFiAC9Qtl4mURYjcdkgTajMB8GA1UdIwQY MBaAFPYu64eQhclBlCl92eTNJJzSUWUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzIt NWZiZjlhMjliNmUxLzEvZmlWVE9NV0lBTDFDMlhpWlJGaU54MlNCTnFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzItNWZiZjlhMjliNmUx LzEvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzAiBAIAATAcMAwDBAKfwwwD BAKfwxAwDAMEAJ/DWwMEBZ/DQDAhBAIAAjAbAwcAKgpMwAEBAwcFKgpMwAEgAwcF KgpMwCAAMA0GCSqGSIb3DQEBCwUAA4IBAQBeVxCONxlsGQuhQ0rT5KEovoct91OD SDJcKffdJksWQFUxMb9bOdPCLNEvbuAVfKUTbpqz1SYfTg8kch6Qp2MZXZ9vNjgc Ip6QVrVXi9W7r8R68vyauq3yoIo4gH9kdKvzxk6Lb9EFMffs07u2JVdkH1kqvjr4 dFfYHf92pH5ezQih+Gum9Ukjn8xasmE1gzpV1uDjIwH69hCSWJM+/V/jXV14ajZN bqVt6O8r1ay9gMCX6XXw78KEtlOkmIWYmnw+OcQeZ13fTdMbAuuNBUl5DJ5nOY4T RJhxZidgpcj+BXxIEhKQwgBbk5OT1tQf7vmIILYyi+5BEXJnD7EnjV04 -----END CERTIFICATE-----Generated at Mon Jan 26 01:52:43 2026 by rpki-client