This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/FVoehWVHfRAM9Wax2PLEzeuzUcQ.roa File: FVoehWVHfRAM9Wax2PLEzeuzUcQ.roa (raw, json) Hash identifier: jKrRrki3jFgX40lflCLx2Zym5UZldktVdjD6ypmdCdQ= Subject key identifier: 15:5A:1E:85:65:47:7D:10:0C:F5:66:B1:D8:F2:C4:CD:EB:B3:51:C4 Certificate issuer: /CN=0f65bd21c683207da0c39fb3798535af49e0bff5 Certificate serial: 019B791104E2182EDDA60EAA63C559F047B6 Authority key identifier: 0F:65:BD:21:C6:83:20:7D:A0:C3:9F:B3:79:85:35:AF:49:E0:BF:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/FVoehWVHfRAM9Wax2PLEzeuzUcQ.roa Signing time: Thu 01 Jan 2026 10:18:36 +0000 ROA not before: Thu 01 Jan 2026 10:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41913 IP address blocks: 89.36.170.0/23 maxlen: 24 91.135.64.0/20 maxlen: 24 91.135.68.0/24 maxlen: 24 91.135.76.0/24 maxlen: 24 91.208.227.0/24 maxlen: 24 185.20.208.0/22 maxlen: 24 185.172.198.0/23 maxlen: 24 2a01:278::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:04:e2:18:2e:dd:a6:0e:aa:63:c5:59:f0:47:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f65bd21c683207da0c39fb3798535af49e0bff5 Validity Not Before: Jan 1 10:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=155a1e8565477d100cf566b1d8f2c4cdebb351c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:30:fa:68:d4:82:85:52:ba:ca:04:73:2f:a8: 3a:65:98:8e:5e:1b:2b:7b:19:d2:a2:7a:a1:9d:4a: a6:4e:d1:b8:de:75:72:28:e5:fe:30:e2:71:c9:d0: cf:5e:2d:4d:84:24:86:06:11:2d:17:5a:e4:16:d9: 0c:57:02:e6:eb:a8:c7:1c:f4:bd:b0:09:df:c9:d6: d6:01:3b:af:78:97:f0:63:f6:87:70:47:00:c8:db: b3:9f:a5:38:06:47:26:b3:70:52:9d:c2:1c:3d:01: fd:8a:1a:1e:62:a0:0b:e3:0a:31:97:5e:53:13:8d: 08:90:9d:29:24:57:19:96:89:7b:89:af:ef:a9:29: 40:fa:44:8b:25:ce:45:2f:09:18:90:3d:48:63:b2: 39:e9:73:1c:d3:29:0b:e1:13:44:4c:c0:ee:37:17: 15:0f:77:0d:63:3a:1d:d9:1b:e5:d1:d9:95:91:87: d9:f0:0c:9c:5a:23:6a:7f:ff:fd:45:fb:0c:47:9f: 3c:aa:3d:f2:1d:a1:ca:3d:5f:a4:08:e0:06:c8:85: 1f:02:cb:1b:80:d0:22:ee:83:a5:01:31:ae:ce:97: a3:02:ed:97:c7:2d:b3:89:19:c0:c5:6a:53:ee:1a: 3f:ed:ea:fe:fd:fa:28:e4:83:79:07:08:cc:97:ca: 5a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5A:1E:85:65:47:7D:10:0C:F5:66:B1:D8:F2:C4:CD:EB:B3:51:C4 X509v3 Authority Key Identifier: keyid:0F:65:BD:21:C6:83:20:7D:A0:C3:9F:B3:79:85:35:AF:49:E0:BF:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/FVoehWVHfRAM9Wax2PLEzeuzUcQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.36.170.0/23 91.135.64.0/20 91.208.227.0/24 185.20.208.0/22 185.172.198.0/23 IPv6: 2a01:278::/32 Signature Algorithm: sha256WithRSAEncryption 6f:a5:6f:32:ed:64:e4:d4:fd:e0:9d:62:6b:6b:91:62:67:3b: 8c:e4:69:de:e9:dc:93:94:3f:9d:46:f7:49:79:29:93:74:e1: a1:48:db:04:9a:3e:d1:60:44:b7:75:4e:4a:11:3a:ad:e2:ab: ca:77:f6:41:94:f7:a5:1d:af:6c:41:4c:ac:8b:17:ab:b2:53: c8:fb:8e:41:ab:63:75:c4:31:40:e7:32:65:f2:0b:cf:0d:5d: 86:2e:e2:70:97:62:41:7a:c8:c6:64:0b:97:83:12:6d:b9:b8: f9:a0:8b:31:8f:d0:88:8f:fc:dd:de:32:1a:e1:44:9d:a2:5e: 7b:b7:07:d5:c3:d8:c7:97:ef:6c:e9:d5:3a:c2:55:23:ca:4f: b4:21:b9:89:dc:3a:ae:bf:0c:d4:67:d9:7d:4c:5c:62:17:f8: 4a:2a:a2:6d:ca:a0:ad:90:eb:57:33:73:7d:54:84:9a:3b:bb: ad:09:52:a0:89:da:f9:e0:3b:c5:ef:1a:50:b7:ce:fa:1d:bb: 15:17:32:63:24:e5:4e:c3:6e:04:ef:c9:97:3f:62:3d:74:54: d8:b4:1f:8d:5f:b2:b2:59:f3:91:20:84:a3:f1:13:8d:ce:aa: 44:63:7c:c5:35:67:12:de:a4:4f:f7:aa:1b:87:cb:54:0d:72: 32:86:ab:07 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt5EQTiGC7dpg6qY8VZ8Ee2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNjViZDIxYzY4MzIwN2RhMGMzOWZiMzc5ODUzNWFmNDll MGJmZjUwHhcNMjYwMTAxMTAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTVhMWU4NTY1NDc3ZDEwMGNmNTY2YjFkOGYyYzRjZGViYjM1MWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zD6aNSChVK6ygRzL6g6ZZiOXhsr exnSonqhnUqmTtG43nVyKOX+MOJxydDPXi1NhCSGBhEtF1rkFtkMVwLm66jHHPS9 sAnfydbWATuveJfwY/aHcEcAyNuzn6U4Bkcms3BSncIcPQH9ihoeYqAL4woxl15T E40IkJ0pJFcZlol7ia/vqSlA+kSLJc5FLwkYkD1IY7I56XMc0ykL4RNETMDuNxcV D3cNYzod2Rvl0dmVkYfZ8AycWiNqf//9RfsMR588qj3yHaHKPV+kCOAGyIUfAssb gNAi7oOlATGuzpejAu2Xxy2ziRnAxWpT7ho/7er+/foo5IN5BwjMl8paNQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFBVaHoVlR30QDPVmsdjyxM3rs1HEMB8GA1UdIwQY MBaAFA9lvSHGgyB9oMOfs3mFNa9J4L/1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDJXOUljYURJSDJndzUtemVZVTFyMG5ndl9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80YTk5OWYtZDFmYS00ODg3LWJhZTgt ZTIzZjEwZTRiOTFjLzEvRlZvZWhXVkhmUkFNOVdheDJQTEV6ZXV6VWNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80YTk5OWYtZDFmYS00ODg3LWJhZTgtZTIzZjEwZTRiOTFj LzEvRDJXOUljYURJSDJndzUtemVZVTFyMG5ndl9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQBWSSqAwQE W4dAAwQAW9DjAwQCuRTQAwQBuazGMA0EAgACMAcDBQAqAQJ4MA0GCSqGSIb3DQEB CwUAA4IBAQBvpW8y7WTk1P3gnWJra5FiZzuM5Gne6dyTlD+dRvdJeSmTdOGhSNsE mj7RYES3dU5KETqt4qvKd/ZBlPelHa9sQUysixerslPI+45Bq2N1xDFA5zJl8gvP DV2GLuJwl2JBesjGZAuXgxJtubj5oIsxj9CIj/zd3jIa4USdol57twfVw9jHl+9s 6dU6wlUjyk+0IbmJ3DquvwzUZ9l9TFxiF/hKKqJtyqCtkOtXM3N9VISaO7utCVKg idr54DvF7xpQt876HbsVFzJjJOVOw24E78mXP2I9dFTYtB+NX7KyWfORIISj8RON zqpEY3zFNWcS3qRP96obh8tUDXIyhqsH -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:13 2026 by rpki-client