This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/fpFnfvbA54P3sZ5pzN7AL0lmNB0.roa File: fpFnfvbA54P3sZ5pzN7AL0lmNB0.roa (raw, json) Hash identifier: cjDNMEiojJKLh2hXDBwgYbO51l/jmyZJJoYDVGMIRHc= Subject key identifier: 7E:91:67:7E:F6:C0:E7:83:F7:B1:9E:69:CC:DE:C0:2F:49:66:34:1D Certificate issuer: /CN=f5d901201ff0b1b97ef3d1a72da41e18f0145762 Certificate serial: 019B7EA6FDF5525847985845B40C45893A02 Authority key identifier: F5:D9:01:20:1F:F0:B1:B9:7E:F3:D1:A7:2D:A4:1E:18:F0:14:57:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/fpFnfvbA54P3sZ5pzN7AL0lmNB0.roa Signing time: Fri 02 Jan 2026 12:20:31 +0000 ROA not before: Fri 02 Jan 2026 12:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43843 IP address blocks: 91.142.64.0/21 maxlen: 21 91.142.68.0/24 maxlen: 24 91.142.69.0/24 maxlen: 24 91.142.70.0/24 maxlen: 24 91.142.71.0/24 maxlen: 24 93.94.24.0/21 maxlen: 21 93.94.24.0/24 maxlen: 24 93.94.25.0/24 maxlen: 24 93.94.26.0/24 maxlen: 24 93.94.28.0/24 maxlen: 24 109.69.128.0/21 maxlen: 21 109.69.128.0/24 maxlen: 24 109.69.129.0/24 maxlen: 24 109.69.130.0/24 maxlen: 24 109.69.131.0/24 maxlen: 24 109.69.132.0/24 maxlen: 24 185.74.248.0/22 maxlen: 22 185.74.248.0/24 maxlen: 24 185.74.249.0/24 maxlen: 24 212.78.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.mft rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:fd:f5:52:58:47:98:58:45:b4:0c:45:89:3a:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5d901201ff0b1b97ef3d1a72da41e18f0145762 Validity Not Before: Jan 2 12:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e91677ef6c0e783f7b19e69ccdec02f4966341d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2f:b0:41:ad:34:7f:e9:75:2d:81:01:5c:c2: 78:8c:cb:30:f8:02:db:ee:db:95:c2:91:1e:89:d3: 82:0f:b6:5d:36:3c:1a:ba:46:3d:90:9e:26:69:5c: 6f:d8:a2:84:d9:7a:ef:22:68:3e:9f:93:ef:24:a1: f0:38:a6:31:93:6e:ce:87:f1:48:8c:01:3f:8e:34: 63:1d:50:32:d8:5e:79:70:54:3f:7e:8a:24:06:76: 13:dd:22:04:be:cc:8b:ef:a7:a3:f5:1e:ce:4f:0c: 8d:46:c4:c2:fe:8d:b1:c5:de:2a:90:46:49:57:c6: 5a:c3:ee:54:1f:4b:a8:9d:8f:1c:c6:57:d9:13:0c: d5:ec:ae:cd:be:6d:f7:fe:04:ae:60:0b:6a:3e:55: ac:7b:a4:4f:9b:14:44:49:6f:40:74:0e:4d:23:a1: bd:af:2f:a5:77:32:52:bc:f9:d2:88:c1:5a:30:91: 19:f9:a5:2a:14:f7:d9:e3:d5:f4:64:74:63:f4:5e: 64:ad:e9:c5:20:ed:41:3c:4c:8e:a5:9d:15:9f:30: 84:7a:6f:95:05:f3:1a:04:62:32:75:5a:4c:d0:b7: 85:0c:a3:d2:78:f9:36:17:cf:cd:dc:ff:4a:d7:6d: 5b:71:02:2d:0d:8a:67:24:ac:bd:e1:ed:2f:0e:7f: 01:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:91:67:7E:F6:C0:E7:83:F7:B1:9E:69:CC:DE:C0:2F:49:66:34:1D X509v3 Authority Key Identifier: keyid:F5:D9:01:20:1F:F0:B1:B9:7E:F3:D1:A7:2D:A4:1E:18:F0:14:57:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/fpFnfvbA54P3sZ5pzN7AL0lmNB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.142.64.0/21 93.94.24.0/21 109.69.128.0/21 185.74.248.0/22 212.78.31.0/24 Signature Algorithm: sha256WithRSAEncryption 53:64:15:70:58:3b:8e:53:81:d3:42:46:af:69:a0:f6:c0:98: 9e:ff:68:06:84:16:0c:6b:bc:7f:b3:a3:33:12:5c:32:b1:ee: b1:0b:73:78:aa:fb:67:d8:57:4c:94:8f:ff:03:fb:60:f4:90: ee:72:9b:1f:1d:df:ea:fe:f7:7e:05:4e:47:04:88:fd:80:cc: 74:b7:2a:bf:a1:ff:17:8a:db:44:bc:eb:12:86:91:98:98:f1: e6:78:b5:04:32:f5:0b:56:ef:b5:e0:ec:5b:8e:d4:4f:c7:ed: e6:fc:b8:ea:58:8f:ce:37:91:26:11:45:40:39:dc:61:72:93: 64:55:e3:31:de:e9:7b:cb:18:64:b2:ae:cd:91:42:ca:09:64: 86:3a:5c:66:7d:f4:2f:0d:00:7c:ff:20:c7:f6:c3:93:24:34: 18:0b:3a:6f:db:19:39:19:53:39:7f:42:93:bf:89:09:ac:65: 82:93:a8:47:23:c2:fd:74:36:cb:8e:a1:ae:f9:19:2c:f4:6d: 70:86:e1:98:66:32:22:40:07:7d:ae:eb:a9:42:74:2b:19:89: 34:e4:b1:9b:0d:13:28:8e:23:37:d1:a7:46:6d:4e:70:bf:c0: fa:6d:59:33:dd:70:7d:37:7e:d0:3c:3a:b3:13:df:3b:9e:df: 5c:c9:0e:dc -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt+pv31UlhHmFhFtAxFiToCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZDkwMTIwMWZmMGIxYjk3ZWYzZDFhNzJkYTQxZTE4ZjAx NDU3NjIwHhcNMjYwMTAyMTIyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTkxNjc3ZWY2YzBlNzgzZjdiMTllNjljY2RlYzAyZjQ5NjYzNDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4S+wQa00f+l1LYEBXMJ4jMsw+ALb 7tuVwpEeidOCD7ZdNjwaukY9kJ4maVxv2KKE2XrvImg+n5PvJKHwOKYxk27Oh/FI jAE/jjRjHVAy2F55cFQ/fookBnYT3SIEvsyL76ej9R7OTwyNRsTC/o2xxd4qkEZJ V8Zaw+5UH0uonY8cxlfZEwzV7K7Nvm33/gSuYAtqPlWse6RPmxRESW9AdA5NI6G9 ry+ldzJSvPnSiMFaMJEZ+aUqFPfZ49X0ZHRj9F5krenFIO1BPEyOpZ0VnzCEem+V BfMaBGIydVpM0LeFDKPSePk2F8/N3P9K121bcQItDYpnJKy94e0vDn8B7wIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFH6RZ372wOeD97GeaczewC9JZjQdMB8GA1UdIwQY MBaAFPXZASAf8LG5fvPRpy2kHhjwFFdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWRrQklCX3dzYmwtODlHbkxhUWVHUEFVVjJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9hZDU1NDUtZjhhZi00Mjc4LTkwYTUt YTNiYmM4N2E3N2NjLzEvZnBGbmZ2YkE1NFAzc1o1cHpON0FMMGxtTkIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9hZDU1NDUtZjhhZi00Mjc4LTkwYTUtYTNiYmM4N2E3N2Nj LzEvOWRrQklCX3dzYmwtODlHbkxhUWVHUEFVVjJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDW45AAwQD XV4YAwQDbUWAAwQCuUr4AwQA1E4fMA0GCSqGSIb3DQEBCwUAA4IBAQBTZBVwWDuO U4HTQkavaaD2wJie/2gGhBYMa7x/s6MzElwyse6xC3N4qvtn2FdMlI//A/tg9JDu cpsfHd/q/vd+BU5HBIj9gMx0tyq/of8XittEvOsShpGYmPHmeLUEMvULVu+14Oxb jtRPx+3m/LjqWI/ON5EmEUVAOdxhcpNkVeMx3ul7yxhksq7NkULKCWSGOlxmffQv DQB8/yDH9sOTJDQYCzpv2xk5GVM5f0KTv4kJrGWCk6hHI8L9dDbLjqGu+Rks9G1w huGYZjIiQAd9ruupQnQrGYk05LGbDRMojiM30adGbU5wv8D6bVkz3XB9N37QPDqz E987nt9cyQ7c -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:51 2026 by rpki-client