This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/FwqF1yEFG7mKuQRa7RkSyKPz0W0.roa File: FwqF1yEFG7mKuQRa7RkSyKPz0W0.roa (raw, json) Hash identifier: arAr0Lk0kEre21H8drvKyvd7aUFHvFqu0QRUk2zIk0Y= Subject key identifier: 17:0A:85:D7:21:05:1B:B9:8A:B9:04:5A:ED:19:12:C8:A3:F3:D1:6D Certificate issuer: /CN=89aed2cff8ce31b334f83a0b305feef01d71da75 Certificate serial: 019B791118D4B3B3E4B02EC99EE605E64C98 Authority key identifier: 89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/FwqF1yEFG7mKuQRa7RkSyKPz0W0.roa Signing time: Thu 01 Jan 2026 10:18:42 +0000 ROA not before: Thu 01 Jan 2026 10:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31655 IP address blocks: 79.74.0.0/16 maxlen: 24 92.207.0.0/16 maxlen: 24 151.2.128.0/17 maxlen: 24 2a04:4440::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:18:d4:b3:b3:e4:b0:2e:c9:9e:e6:05:e6:4c:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89aed2cff8ce31b334f83a0b305feef01d71da75 Validity Not Before: Jan 1 10:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=170a85d721051bb98ab9045aed1912c8a3f3d16d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:dd:19:48:9e:91:96:38:a8:05:70:c9:14:17: ff:75:68:e1:57:32:7c:2f:05:20:47:61:8a:a9:9b: 64:0e:c1:7c:76:91:e4:be:25:3f:5a:53:db:ec:e4: 2d:e7:ca:b7:89:68:6d:f0:ef:04:2e:d4:f7:9f:6f: 88:86:91:8c:8b:76:2f:a0:74:d9:1c:6b:08:b6:c7: c4:64:a1:37:47:c3:31:0d:bf:d3:16:0c:c3:14:68: 32:ff:22:68:a2:df:92:ee:14:28:40:2c:df:f7:8b: e2:82:72:6f:c4:64:f8:59:98:e9:33:23:95:38:2d: b5:d6:47:7d:44:37:7c:01:a6:0a:35:fd:27:ad:6c: d4:37:76:1c:d3:26:6d:c9:0f:73:7f:9b:30:5f:0f: af:35:1e:92:d2:02:44:c5:33:ba:e5:9b:9e:53:61: 1c:d4:e6:1b:e3:73:67:c1:3b:4a:f2:c2:33:06:11: ee:ae:ab:f6:af:d1:b2:05:16:5f:36:e1:69:56:2a: 67:52:a2:16:15:69:4b:b4:71:6a:ee:bb:ac:a7:db: 3a:37:84:8c:bc:8b:78:21:cc:d1:31:67:d2:4c:7b: 34:23:47:4e:63:53:6a:74:d1:8f:81:04:ac:12:22: 8e:97:d5:64:c7:43:1a:58:68:fa:d4:1c:73:64:c1: c7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0A:85:D7:21:05:1B:B9:8A:B9:04:5A:ED:19:12:C8:A3:F3:D1:6D X509v3 Authority Key Identifier: keyid:89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/FwqF1yEFG7mKuQRa7RkSyKPz0W0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.74.0.0/16 92.207.0.0/16 151.2.128.0/17 IPv6: 2a04:4440::/29 Signature Algorithm: sha256WithRSAEncryption a6:5b:c2:ff:65:b5:47:15:85:2a:ea:29:02:a7:5b:d8:e1:19: 21:da:f2:fc:33:5c:1d:22:bb:05:dd:3c:da:52:94:b4:f7:d2: cd:6b:1b:f2:54:f8:30:4c:d4:15:48:ef:97:18:a9:f0:34:a8: 6d:e5:db:f0:97:65:c7:ea:ab:6d:08:37:35:4e:11:ed:b7:d7: 11:1f:48:e5:45:64:f4:2a:b7:84:8c:08:e0:ba:c1:28:23:aa: bf:44:62:fb:1e:c9:99:56:c5:ca:1d:c2:96:fe:5b:85:11:8e: 10:29:e2:a3:72:41:4e:9c:b0:34:89:30:c2:2c:56:ee:55:d0: aa:33:45:96:05:54:b5:0d:c0:46:5a:6d:11:d9:f4:fa:66:8e: 95:50:68:71:78:e9:2c:27:25:7a:19:1a:a2:66:57:10:51:14: bc:d9:f8:4c:16:da:a3:24:16:ad:3d:fc:3f:db:89:f6:9b:d0: 1e:06:7a:dc:52:15:e2:83:da:0b:12:1f:80:55:94:a6:94:2b: 7b:68:28:dc:11:34:14:ef:c6:78:94:d7:e9:89:b9:2e:94:de: 04:1f:e6:70:7e:5d:e7:8d:26:10:42:9e:94:88:fa:62:23:a7: 18:4b:cd:2f:0c:7a:94:00:90:16:e5:89:8d:90:62:d1:1a:f5: 81:12:4b:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5ERjUs7PksC7JnuYF5kyYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWVkMmNmZjhjZTMxYjMzNGY4M2EwYjMwNWZlZWYwMWQ3 MWRhNzUwHhcNMjYwMTAxMTAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzBhODVkNzIxMDUxYmI5OGFiOTA0NWFlZDE5MTJjOGEzZjNkMTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd0ZSJ6RljioBXDJFBf/dWjhVzJ8 LwUgR2GKqZtkDsF8dpHkviU/WlPb7OQt58q3iWht8O8ELtT3n2+IhpGMi3YvoHTZ HGsItsfEZKE3R8MxDb/TFgzDFGgy/yJoot+S7hQoQCzf94vignJvxGT4WZjpMyOV OC211kd9RDd8AaYKNf0nrWzUN3Yc0yZtyQ9zf5swXw+vNR6S0gJExTO65ZueU2Ec 1OYb43NnwTtK8sIzBhHurqv2r9GyBRZfNuFpVipnUqIWFWlLtHFq7rusp9s6N4SM vIt4IczRMWfSTHs0I0dOY1NqdNGPgQSsEiKOl9Vkx0MaWGj61BxzZMHHMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcKhdchBRu5irkEWu0ZEsij89FtMB8GA1UdIwQY MBaAFImu0s/4zjGzNPg6CzBf7vAdcdp1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWE3U3pfak9NYk0wLURvTE1GX3U4QjF4Mm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lOTBmNTEtODlhYS00OWViLTllYTYt ZmJlOGJjNWEyOWZhLzEvRndxRjF5RUZHN21LdVFSYTdSa1N5S1B6MFcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9lOTBmNTEtODlhYS00OWViLTllYTYtZmJlOGJjNWEyOWZh LzEvaWE3U3pfak9NYk0wLURvTE1GX3U4QjF4Mm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAWBAIAATAQAwMAT0oDAwBc zwMEB5cCgDANBAIAAjAHAwUDKgREQDANBgkqhkiG9w0BAQsFAAOCAQEAplvC/2W1 RxWFKuopAqdb2OEZIdry/DNcHSK7Bd082lKUtPfSzWsb8lT4MEzUFUjvlxip8DSo beXb8Jdlx+qrbQg3NU4R7bfXER9I5UVk9Cq3hIwI4LrBKCOqv0Ri+x7JmVbFyh3C lv5bhRGOECnio3JBTpywNIkwwixW7lXQqjNFlgVUtQ3ARlptEdn0+maOlVBocXjp LCclehkaomZXEFEUvNn4TBbaoyQWrT38P9uJ9pvQHgZ63FIV4oPaCxIfgFWUppQr e2go3BE0FO/GeJTX6Ym5LpTeBB/mcH5d540mEEKelIj6YiOnGEvNLwx6lACQFuWJ jZBi0Rr1gRJLTA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:07 2026 by rpki-client