This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/FzsVJPIrsEyHqExyGhlWZtGTTjY.roa File: FzsVJPIrsEyHqExyGhlWZtGTTjY.roa (raw, json) Hash identifier: +Pd3PneLFWSwpSYwbblYDY0Nhc65YzGQwcvoKLnitm4= Subject key identifier: 17:3B:15:24:F2:2B:B0:4C:87:A8:4C:72:1A:19:56:66:D1:93:4E:36 Certificate issuer: /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c Certificate serial: 019B7910DFAAE0892A3D8870818B86730B60 Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/FzsVJPIrsEyHqExyGhlWZtGTTjY.roa Signing time: Thu 01 Jan 2026 10:18:27 +0000 ROA not before: Thu 01 Jan 2026 10:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213780 IP address blocks: 89.208.119.0/24 maxlen: 24 92.38.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:df:aa:e0:89:2a:3d:88:70:81:8b:86:73:0b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c Validity Not Before: Jan 1 10:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=173b1524f22bb04c87a84c721a195666d1934e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:99:13:71:10:eb:c3:97:39:b1:ce:67:c8:d8: 7d:a2:fc:0a:14:c0:fa:1d:21:6a:d7:54:c5:1a:d2: e5:3f:8d:4d:35:e6:e2:10:86:17:d0:fe:9f:d7:05: 2e:03:8f:b6:02:14:d9:26:78:1b:36:8d:73:6f:cf: 46:d0:8d:59:0e:37:de:80:58:1c:3a:2b:44:49:a0: 8e:57:8b:18:b2:d2:d8:26:39:64:4c:66:d9:59:95: 09:0f:96:00:ba:d7:a0:15:a1:dc:fa:47:97:40:76: bb:38:81:ca:ed:32:42:9a:01:30:57:bb:6b:37:7a: cb:bb:a7:f6:9d:d8:b9:3e:f0:58:bf:5a:ab:59:cc: fc:74:82:05:38:1b:74:c4:51:98:51:0a:f6:da:16: ff:bd:98:94:d8:ac:88:e7:bf:fe:a7:82:b7:f4:b8: 00:7d:cb:26:9d:11:a4:a2:80:55:e0:18:41:48:a2: 2d:59:40:0d:31:af:da:98:3c:91:f1:b4:4d:51:87: d3:48:12:19:2a:47:c6:bc:ad:f7:ec:19:2f:df:ae: 22:73:3f:25:60:3c:22:1e:59:c6:9d:e0:13:57:ad: 5f:f8:1c:fe:b0:68:e3:dd:43:8a:6e:53:98:41:94: df:f8:0a:66:8e:6a:e6:89:d2:2a:ae:a5:35:cb:ce: c3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:3B:15:24:F2:2B:B0:4C:87:A8:4C:72:1A:19:56:66:D1:93:4E:36 X509v3 Authority Key Identifier: keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/FzsVJPIrsEyHqExyGhlWZtGTTjY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.208.119.0/24 92.38.222.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:79:e5:d1:a3:d3:ad:e3:6d:85:bf:ed:77:ec:be:f1:b6:72: 23:51:ff:85:45:e0:42:9f:83:d6:49:78:19:52:a8:84:da:27: bf:97:63:ff:6c:86:d0:e2:97:d7:2e:47:dc:15:e3:8b:f0:b2: e6:17:ac:75:d2:29:75:1d:16:fc:5e:84:a9:99:14:c0:27:2a: 8c:4a:e5:35:c7:a7:f5:f3:cf:07:ce:87:88:c9:96:67:4e:05: 8b:88:6d:6b:57:1a:d2:62:0a:d1:c0:71:42:4a:37:6d:72:0a: 2d:a2:37:bf:5e:37:61:53:f7:55:0b:11:4c:82:f7:f4:55:10: 6a:75:6a:e7:41:e4:69:03:0e:fd:5d:c0:c1:45:93:0a:a7:4d: 84:f7:0c:99:d5:1c:8b:bf:63:f4:73:ad:a5:ec:2f:6c:0d:32: 12:1b:6a:06:f5:06:d0:81:68:10:b8:f0:2b:78:55:29:4d:f3: a8:03:ea:1b:ef:bf:9b:3f:04:0d:fb:1c:0f:d4:b2:95:20:f7: e3:cf:a1:e9:95:c2:6b:27:70:cd:39:91:32:5f:22:d4:52:9d: 71:c3:7b:86:24:88:08:23:58:f9:b0:fe:89:6e:28:4c:e1:f8: 12:b3:41:a6:f3:e6:6b:1b:9d:8a:23:1a:43:f8:45:bd:4e:15: e4:a9:da:39 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EN+q4IkqPYhwgYuGcwtgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMWM3NTcxNTk2ZTQ0NGFhMzIzNzFjYmFiNzI0ZDQ2ZDNj M2M1MmMwHhcNMjYwMTAxMTAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzNiMTUyNGYyMmJiMDRjODdhODRjNzIxYTE5NTY2NmQxOTM0ZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpkTcRDrw5c5sc5nyNh9ovwKFMD6 HSFq11TFGtLlP41NNebiEIYX0P6f1wUuA4+2AhTZJngbNo1zb89G0I1ZDjfegFgc OitESaCOV4sYstLYJjlkTGbZWZUJD5YAutegFaHc+keXQHa7OIHK7TJCmgEwV7tr N3rLu6f2ndi5PvBYv1qrWcz8dIIFOBt0xFGYUQr22hb/vZiU2KyI57/+p4K39LgA fcsmnRGkooBV4BhBSKItWUANMa/amDyR8bRNUYfTSBIZKkfGvK337Bkv364icz8l YDwiHlnGneATV61f+Bz+sGjj3UOKblOYQZTf+ApmjmrmidIqrqU1y87DowIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBc7FSTyK7BMh6hMchoZVmbRk042MB8GA1UdIwQY MBaAFMocdXFZbkRKoyNxy6tyTUbTw8UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zMzYyYzYtYTAzYS00ZjlmLWEwOTEt Yjc2MmMwMTc1ZjI3LzEvRnpzVkpQSXJzRXlIcUV4eUdobFdadEdUVGpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zMzYyYzYtYTAzYS00ZjlmLWEwOTEtYjc2MmMwMTc1ZjI3 LzEveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWdB3AwQA XCbeMA0GCSqGSIb3DQEBCwUAA4IBAQB7eeXRo9Ot422Fv+137L7xtnIjUf+FReBC n4PWSXgZUqiE2ie/l2P/bIbQ4pfXLkfcFeOL8LLmF6x10il1HRb8XoSpmRTAJyqM SuU1x6f1888HzoeIyZZnTgWLiG1rVxrSYgrRwHFCSjdtcgotoje/XjdhU/dVCxFM gvf0VRBqdWrnQeRpAw79XcDBRZMKp02E9wyZ1RyLv2P0c62l7C9sDTISG2oG9QbQ gWgQuPAreFUpTfOoA+ob77+bPwQN+xwP1LKVIPfjz6HplcJrJ3DNOZEyXyLUUp1x w3uGJIgII1j5sP6JbihM4fgSs0Gm8+ZrG52KIxpD+EW9ThXkqdo5 -----END CERTIFICATE-----Generated at Sun Jan 25 21:27:41 2026 by rpki-client