This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/ffMr-vGRUopXUQF11fs9N-58S5A.roa File: ffMr-vGRUopXUQF11fs9N-58S5A.roa (raw, json) Hash identifier: f6/aHTleq3uzGygn/Gg7UKDvdBVMxROzI3ip6izS/3g= Subject key identifier: 7D:F3:2B:FA:F1:91:52:8A:57:51:01:75:D5:FB:3D:37:EE:7C:4B:90 Certificate issuer: /CN=a16b0d8ab49436550b6abf45b79035aec6aff23c Certificate serial: 019B77C6C13C311A6482487267E9A2E0F20F Authority key identifier: A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/ffMr-vGRUopXUQF11fs9N-58S5A.roa Signing time: Thu 01 Jan 2026 04:17:52 +0000 ROA not before: Thu 01 Jan 2026 04:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20836 IP address blocks: 95.157.64.0/19 maxlen: 24 95.157.75.0/24 maxlen: 24 95.157.96.0/19 maxlen: 24 178.249.184.0/21 maxlen: 24 178.249.189.0/24 maxlen: 24 185.47.228.0/22 maxlen: 24 217.171.32.0/20 maxlen: 24 2001:b60::/32 maxlen: 48 2001:b61::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c1:3c:31:1a:64:82:48:72:67:e9:a2:e0:f2:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a16b0d8ab49436550b6abf45b79035aec6aff23c Validity Not Before: Jan 1 04:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7df32bfaf191528a57510175d5fb3d37ee7c4b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0a:80:b1:46:09:8e:ff:f8:fd:60:0a:69:d6: 98:c6:0a:7f:4d:11:73:a7:99:9a:b5:2e:a0:aa:26: 75:e3:4c:90:3b:78:0a:9e:9f:a9:80:1f:4b:64:d8: 87:62:39:3d:a9:1d:70:b5:57:ee:b3:c3:d8:18:53: 69:32:66:a0:51:1d:83:80:54:9a:28:12:95:16:23: 83:90:a1:b3:b1:a6:53:78:ed:15:0d:c1:8a:d6:b2: 00:f9:4d:ea:de:cd:16:aa:41:df:eb:77:48:03:01: 43:88:95:c8:e9:aa:ef:cc:51:a9:0b:06:86:bb:f0: b9:d4:78:70:42:6d:3f:30:36:db:ef:51:ea:f2:e2: d8:91:bc:a0:e2:c7:a7:84:0c:cc:63:0a:11:d6:cf: e2:79:60:c5:d4:48:6b:18:c1:08:10:34:87:2f:e9: c5:14:91:15:0f:ae:c0:46:66:c7:c7:c1:32:df:1e: cb:dd:63:08:97:75:ff:1d:2b:3f:fc:43:3e:30:9c: e3:a0:71:f0:ae:d8:d1:f0:05:29:e5:a6:81:c7:3c: 46:8f:57:88:33:7f:6c:82:09:25:7a:dd:a4:7b:08: 6c:88:d7:5f:60:9b:e3:65:59:37:6b:75:c4:c7:3a: 62:6a:4f:9a:28:d1:15:2f:dd:da:38:28:46:45:99: 0a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F3:2B:FA:F1:91:52:8A:57:51:01:75:D5:FB:3D:37:EE:7C:4B:90 X509v3 Authority Key Identifier: keyid:A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/ffMr-vGRUopXUQF11fs9N-58S5A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.157.64.0/18 178.249.184.0/21 185.47.228.0/22 217.171.32.0/20 IPv6: 2001:b60::/31 Signature Algorithm: sha256WithRSAEncryption 13:fe:e6:5b:ef:4f:a5:6e:52:7a:e3:2a:b7:e3:6e:e5:e5:a9: 98:f6:c2:d6:6d:c3:b5:46:97:85:09:ed:68:a3:03:b1:96:17: 1e:8a:7c:3f:5f:df:7a:d3:26:43:83:5d:d5:56:7b:f4:e6:29: 67:18:b2:d7:18:6f:3c:e4:f2:45:68:4a:a0:02:61:62:2e:16: 5e:86:b8:68:e1:90:57:e6:af:2d:e1:71:cc:6e:2e:26:63:b8: 94:43:41:59:9b:93:a2:b7:df:34:53:90:f2:20:8c:a2:b8:35: 11:90:8c:48:8b:43:44:84:0b:58:19:6a:26:56:5b:c0:89:49: d7:db:1f:49:c3:67:df:8d:9e:87:5e:b6:ed:5f:5d:00:0f:20: 5f:01:4a:64:9e:ae:00:a7:22:78:11:38:45:a2:fa:8f:d1:e0: eb:2c:61:28:60:a1:9f:ee:8a:78:cc:f3:14:8b:76:70:02:ad: d1:4e:8b:89:e2:61:61:5e:9c:b2:62:0b:9c:6e:0d:53:e1:2d: 1d:a9:d5:28:e0:bf:be:f4:48:fe:da:53:65:60:45:a4:0f:4f: 0e:02:81:2e:45:d0:56:4a:e4:85:11:dd:e5:cb:46:59:fd:3c: 65:59:d2:52:c4:a7:c8:6b:1c:6a:8d:a4:89:27:86:7c:d0:6d: 38:5f:aa:5d -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt3xsE8MRpkgkhyZ+mi4PIPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNmIwZDhhYjQ5NDM2NTUwYjZhYmY0NWI3OTAzNWFlYzZh ZmYyM2MwHhcNMjYwMTAxMDQxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGYzMmJmYWYxOTE1MjhhNTc1MTAxNzVkNWZiM2QzN2VlN2M0YjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigqAsUYJjv/4/WAKadaYxgp/TRFz p5matS6gqiZ140yQO3gKnp+pgB9LZNiHYjk9qR1wtVfus8PYGFNpMmagUR2DgFSa KBKVFiODkKGzsaZTeO0VDcGK1rIA+U3q3s0WqkHf63dIAwFDiJXI6arvzFGpCwaG u/C51HhwQm0/MDbb71Hq8uLYkbyg4senhAzMYwoR1s/ieWDF1EhrGMEIEDSHL+nF FJEVD67ARmbHx8Ey3x7L3WMIl3X/HSs//EM+MJzjoHHwrtjR8AUp5aaBxzxGj1eI M39sggklet2kewhsiNdfYJvjZVk3a3XExzpiak+aKNEVL93aOChGRZkKbQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFH3zK/rxkVKKV1EBddX7PTfufEuQMB8GA1UdIwQY MBaAFKFrDYq0lDZVC2q/RbeQNa7Gr/I8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1dzTmlyU1VObFVMYXI5RnQ1QTFyc2F2OGp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81ZjQ1MTgtODJlOS00MjkyLWE1NGUt MTVjYzlkYzdiZDg3LzEvZmZNci12R1JVb3BYVVFGMTFmczlOLTU4UzVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC81ZjQ1MTgtODJlOS00MjkyLWE1NGUtMTVjYzlkYzdiZDg3 LzEvb1dzTmlyU1VObFVMYXI5RnQ1QTFyc2F2OGp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQGX51AAwQD svm4AwQCuS/kAwQE2asgMA0EAgACMAcDBQEgAQtgMA0GCSqGSIb3DQEBCwUAA4IB AQAT/uZb70+lblJ64yq3427l5amY9sLWbcO1RpeFCe1oowOxlhceinw/X9960yZD g13VVnv05ilnGLLXGG885PJFaEqgAmFiLhZehrho4ZBX5q8t4XHMbi4mY7iUQ0FZ m5Oit980U5DyIIyiuDURkIxIi0NEhAtYGWomVlvAiUnX2x9Jw2ffjZ6HXrbtX10A DyBfAUpknq4ApyJ4EThFovqP0eDrLGEoYKGf7op4zPMUi3ZwAq3RTouJ4mFhXpyy Ygucbg1T4S0dqdUo4L++9Ej+2lNlYEWkD08OAoEuRdBWSuSFEd3ly0ZZ/TxlWdJS xKfIaxxqjaSJJ4Z80G04X6pd -----END CERTIFICATE-----Generated at Sun Jan 25 16:38:43 2026 by rpki-client