This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/FZ-aPWvuWgBfQFY1SQ-VfPhdPSE.roa File: FZ-aPWvuWgBfQFY1SQ-VfPhdPSE.roa (raw, json) Hash identifier: kAr/gPbQBTDwngmXAgoqyjK0HXvUI3dNPaLYVVKDKQQ= Subject key identifier: 15:9F:9A:3D:6B:EE:5A:00:5F:40:56:35:49:0F:95:7C:F8:5D:3D:21 Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019B1F573F4E58F9C7267DACED538BBE9C1F Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/FZ-aPWvuWgBfQFY1SQ-VfPhdPSE.roa Signing time: Mon 15 Dec 2025 00:09:30 +0000 ROA not before: Mon 15 Dec 2025 00:09:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 64267 IP address blocks: 89.34.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:57:3f:4e:58:f9:c7:26:7d:ac:ed:53:8b:be:9c:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Dec 15 00:09:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=159f9a3d6bee5a005f405635490f957cf85d3d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1f:04:2e:e2:47:13:e1:32:ab:27:48:2c:aa: e6:cb:a8:2a:0f:88:14:99:79:e4:c9:d7:82:22:28: 95:0a:a7:f2:ee:82:86:5c:f5:0b:51:80:4a:f9:58: 1f:7a:a8:5d:c6:95:b0:5a:ef:1f:c8:ef:31:78:c1: c3:75:29:95:e9:35:c4:fa:53:98:37:65:35:0d:4e: 97:22:91:ef:7a:0f:1d:09:49:66:fa:d0:c3:76:55: c6:d4:f3:d0:07:af:a2:33:22:a9:29:6d:95:09:4b: fc:d2:28:d3:20:2f:9e:4f:df:66:3e:58:61:c1:8e: 5a:6d:db:c6:3f:d5:4c:13:3d:a1:e2:c5:60:97:22: ff:b4:f5:3a:d7:69:4c:12:47:34:af:3c:1c:6a:02: 6a:97:03:10:cb:54:f7:88:2f:8c:1c:d3:37:10:2b: 91:18:77:a8:6a:32:23:38:e8:58:10:50:59:ed:4f: 8c:75:eb:22:52:00:6b:8c:cc:66:91:d4:27:45:70: 26:8d:fd:84:6c:63:3b:68:e3:be:06:a6:12:d4:50: 4a:21:f8:cd:db:ac:e6:f5:dc:fe:b3:29:8e:43:85: e4:49:cb:c4:24:88:39:22:2e:4a:1a:b4:b6:85:e0: 1d:6c:49:7d:72:eb:97:e3:fa:ea:dc:99:10:19:d2: 01:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:9F:9A:3D:6B:EE:5A:00:5F:40:56:35:49:0F:95:7C:F8:5D:3D:21 X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/FZ-aPWvuWgBfQFY1SQ-VfPhdPSE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.34.171.0/24 Signature Algorithm: sha256WithRSAEncryption 71:3e:a3:84:d7:87:a7:35:d3:1f:8c:04:d7:fe:3f:0a:0c:6d: fb:82:46:b5:5c:a5:60:ce:92:de:f4:7c:fa:be:a2:9b:55:8e: a6:b2:17:04:08:56:77:c7:78:0c:e6:c0:c4:71:13:da:58:1e: 0c:94:40:20:10:af:47:62:7d:67:91:f8:b7:a7:7f:ec:3c:00: 9b:15:50:2a:70:98:f9:d8:52:fb:9c:38:d4:9f:9a:55:35:9c: 81:ee:b9:60:4e:a9:a0:74:46:f1:88:a6:d5:05:36:ea:7e:e5: 1a:3d:ab:04:cb:48:ec:ed:2d:0e:e4:0e:bd:f3:3a:59:57:2b: 03:be:48:37:be:1c:a4:45:a4:d3:35:ac:4c:7f:f5:ac:4d:61: b7:90:8f:c8:ae:f0:a2:35:2f:bc:cb:7c:fc:31:72:37:e3:91: 47:9a:7b:ce:d1:9d:7f:e8:72:8b:4d:0f:58:e0:ae:df:7d:a2: 91:50:16:97:a3:66:52:06:93:64:4a:23:7c:7f:95:b0:ce:30: 7e:9b:07:9e:25:ff:3a:8d:9d:6a:e5:e7:a7:1d:26:d5:9a:31: 39:ff:89:d7:f2:71:32:8f:4f:91:db:00:35:53:3e:0c:46:50: 52:7d:72:66:8b:51:0e:f5:c7:54:b3:f2:8a:59:f4:42:88:99: 90:1d:1d:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsfVz9OWPnHJn2s7VOLvpwfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjUxMjE1MDAwOTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTlmOWEzZDZiZWU1YTAwNWY0MDU2MzU0OTBmOTU3Y2Y4NWQzZDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1B8ELuJHE+EyqydILKrmy6gqD4gU mXnkydeCIiiVCqfy7oKGXPULUYBK+VgfeqhdxpWwWu8fyO8xeMHDdSmV6TXE+lOY N2U1DU6XIpHveg8dCUlm+tDDdlXG1PPQB6+iMyKpKW2VCUv80ijTIC+eT99mPlhh wY5abdvGP9VMEz2h4sVglyL/tPU612lMEkc0rzwcagJqlwMQy1T3iC+MHNM3ECuR GHeoajIjOOhYEFBZ7U+MdesiUgBrjMxmkdQnRXAmjf2EbGM7aOO+BqYS1FBKIfjN 26zm9dz+symOQ4XkScvEJIg5Ii5KGrS2heAdbEl9cuuX4/rq3JkQGdIBnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBWfmj1r7loAX0BWNUkPlXz4XT0hMB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvRlotYVBXdnVXZ0JmUUZZMVNRLVZmUGhkUFNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSKrMA0G CSqGSIb3DQEBCwUAA4IBAQBxPqOE14enNdMfjATX/j8KDG37gka1XKVgzpLe9Hz6 vqKbVY6mshcECFZ3x3gM5sDEcRPaWB4MlEAgEK9HYn1nkfi3p3/sPACbFVAqcJj5 2FL7nDjUn5pVNZyB7rlgTqmgdEbxiKbVBTbqfuUaPasEy0js7S0O5A698zpZVysD vkg3vhykRaTTNaxMf/WsTWG3kI/IrvCiNS+8y3z8MXI345FHmnvO0Z1/6HKLTQ9Y 4K7ffaKRUBaXo2ZSBpNkSiN8f5WwzjB+mweeJf86jZ1q5eenHSbVmjE5/4nX8nEy j0+R2wA1Uz4MRlBSfXJmi1EO9cdUs/KKWfRCiJmQHR1t -----END CERTIFICATE-----Generated at Wed Dec 17 18:07:11 2025 by rpki-client