This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/fvQ2Upwlm_BTPZuG-yhDHTrdS3A.roa File: fvQ2Upwlm_BTPZuG-yhDHTrdS3A.roa (raw, json) Hash identifier: W2tlzy8p7bFGP6in7P36ocCzYFzrqqDwRCFH7LaoTu4= Subject key identifier: 7E:F4:36:52:9C:25:9B:F0:53:3D:9B:86:FB:28:43:1D:3A:DD:4B:70 Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Certificate serial: 019B797EE17614952484FAC8A44A91AB3D32 Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/fvQ2Upwlm_BTPZuG-yhDHTrdS3A.roa Signing time: Thu 01 Jan 2026 12:18:36 +0000 ROA not before: Thu 01 Jan 2026 12:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31367 IP address blocks: 91.216.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e1:76:14:95:24:84:fa:c8:a4:4a:91:ab:3d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Validity Not Before: Jan 1 12:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ef436529c259bf0533d9b86fb28431d3add4b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a8:b7:a3:d6:9f:98:f7:89:91:b7:59:82:76: f0:0a:d9:66:91:11:65:e7:d0:a9:b1:b7:c5:29:60: ae:46:4b:08:7b:e1:52:36:f7:68:87:7d:46:9d:28: ff:61:00:4e:56:39:44:7f:f4:f0:0e:61:12:bc:96: ef:b9:47:40:d4:2e:8d:2a:4e:27:eb:b3:61:e6:6e: 90:37:ab:6b:10:81:0d:18:84:15:c4:e8:2f:ea:b7: 60:cf:7f:f8:ed:05:11:f6:43:8d:e3:96:41:c0:e0: c9:0a:ba:87:83:30:97:4a:fc:62:78:4b:12:b7:0b: 2a:c6:e8:98:cd:1d:60:f0:b6:c0:fd:7d:4c:55:77: 1b:d8:f4:f3:9d:cc:17:1c:d6:82:6e:b7:d5:7c:ce: 88:34:42:07:f9:c9:27:93:f1:cb:c2:50:23:9b:49: 8e:bc:d1:67:56:25:c1:6a:ec:87:1c:17:91:7a:7d: f8:da:fb:34:2e:ce:70:dc:52:93:fa:9d:b7:ea:87: bf:c2:f5:7f:1c:40:d6:25:d1:a4:23:49:f7:ec:36: d5:26:3f:29:a6:66:fe:36:02:53:01:dd:9f:66:f2: 98:55:c1:48:34:8b:75:95:3c:87:6e:d1:6e:ff:3a: 72:82:38:17:af:87:4b:66:ff:ed:c5:ab:9a:11:36: af:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F4:36:52:9C:25:9B:F0:53:3D:9B:86:FB:28:43:1D:3A:DD:4B:70 X509v3 Authority Key Identifier: keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/fvQ2Upwlm_BTPZuG-yhDHTrdS3A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.11.0/24 Signature Algorithm: sha256WithRSAEncryption 78:52:33:fc:5b:f2:77:5f:1f:4e:7a:e0:ee:08:f4:1a:0a:46: d5:42:e9:7c:44:3e:34:cd:a2:e1:1f:7d:b5:84:35:46:00:37: f6:6b:d8:cc:56:5f:b6:fc:c8:f2:a2:b4:a1:86:39:92:25:45: 10:64:cc:86:af:9a:62:b7:84:c1:56:ae:8e:f1:11:c1:bd:a0: de:cf:12:4b:80:cb:c1:08:12:96:59:a1:4f:98:ff:c4:01:3a: bd:57:f4:80:79:c1:21:5b:5f:20:e1:ff:ef:8f:20:25:da:2b: 2a:95:a9:48:b3:11:27:4f:86:ac:4a:5c:ce:8c:9d:12:3b:87: 4e:0a:a8:3f:c3:58:5d:3d:56:1a:ad:85:ec:ec:99:4e:29:c7: 4f:1b:65:78:a8:2f:7a:bf:52:bf:25:d9:e6:8a:83:17:8d:17: a0:a1:36:81:bc:df:95:8b:6b:9b:37:a0:53:7d:ad:b5:9d:a8: 1f:45:be:e1:a9:43:d0:02:67:fd:32:28:a8:1c:ce:d4:ba:d3: 9d:80:4b:89:7e:ae:20:b4:98:f7:dc:c7:9b:1a:f2:7d:7a:48: e8:a5:dc:89:76:98:06:68:09:c9:bf:fe:c8:54:a3:29:92:3e: 91:55:55:5c:07:12:6d:b2:1f:9c:bd:7c:ae:66:0d:1e:9b:8f: cc:f8:51:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fuF2FJUkhPrIpEqRqz0yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjFiYTYxMTFjOGYxZDNmMzdjMWI3YzFhNWVkNzM3NDAy MTkyZjIwHhcNMjYwMTAxMTIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWY0MzY1MjljMjU5YmYwNTMzZDliODZmYjI4NDMxZDNhZGQ0YjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKi3o9afmPeJkbdZgnbwCtlmkRFl 59CpsbfFKWCuRksIe+FSNvdoh31GnSj/YQBOVjlEf/TwDmESvJbvuUdA1C6NKk4n 67Nh5m6QN6trEIENGIQVxOgv6rdgz3/47QUR9kON45ZBwODJCrqHgzCXSvxieEsS twsqxuiYzR1g8LbA/X1MVXcb2PTzncwXHNaCbrfVfM6INEIH+cknk/HLwlAjm0mO vNFnViXBauyHHBeRen342vs0Ls5w3FKT+p236oe/wvV/HEDWJdGkI0n37DbVJj8p pmb+NgJTAd2fZvKYVcFINIt1lTyHbtFu/zpygjgXr4dLZv/txauaETavlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH70NlKcJZvwUz2bhvsoQx063UtwMB8GA1UdIwQY MBaAFDDxumERyPHT83wbfBpe1zdAIZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQt YzMzMDE4NjMzZDMzLzEvZnZRMlVwd2xtX0JUUFp1Ry15aERIVHJkUzNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQtYzMzMDE4NjMzZDMz LzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9gLMA0G CSqGSIb3DQEBCwUAA4IBAQB4UjP8W/J3Xx9OeuDuCPQaCkbVQul8RD40zaLhH321 hDVGADf2a9jMVl+2/MjyorShhjmSJUUQZMyGr5pit4TBVq6O8RHBvaDezxJLgMvB CBKWWaFPmP/EATq9V/SAecEhW18g4f/vjyAl2isqlalIsxEnT4asSlzOjJ0SO4dO Cqg/w1hdPVYarYXs7JlOKcdPG2V4qC96v1K/JdnmioMXjRegoTaBvN+Vi2ubN6BT fa21nagfRb7hqUPQAmf9MiioHM7UutOdgEuJfq4gtJj33MebGvJ9ekjopdyJdpgG aAnJv/7IVKMpkj6RVVVcBxJtsh+cvXyuZg0em4/M+FES -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:27 2026 by rpki-client