This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/FVFRIPh6vjxNZF9GmdKTzMvxW20.roa File: FVFRIPh6vjxNZF9GmdKTzMvxW20.roa (raw, json) Hash identifier: RxEPmyeQKw2S/n6YHyV1FFH2RRQ1FPtU6WCYyBI+QSs= Subject key identifier: 15:51:51:20:F8:7A:BE:3C:4D:64:5F:46:99:D2:93:CC:CB:F1:5B:6D Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e Certificate serial: 019B797E18BE8B8EAC0B8E0AA74074BDC844 Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/FVFRIPh6vjxNZF9GmdKTzMvxW20.roa Signing time: Thu 01 Jan 2026 12:17:45 +0000 ROA not before: Thu 01 Jan 2026 12:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13119 IP address blocks: 80.94.16.0/20 maxlen: 20 109.69.88.0/21 maxlen: 24 212.14.48.0/20 maxlen: 24 213.155.160.0/19 maxlen: 19 2001:4c5c::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:18:be:8b:8e:ac:0b:8e:0a:a7:40:74:bd:c8:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e Validity Not Before: Jan 1 12:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15515120f87abe3c4d645f4699d293cccbf15b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1c:99:87:32:98:43:c0:f0:90:79:91:db:60: 55:83:6e:b0:08:10:f8:55:ef:64:84:e8:5b:45:2a: 64:fb:ea:96:4e:1b:b5:5b:ad:67:0d:01:5d:28:14: 9e:6d:5d:c2:57:49:c4:ca:56:bd:ba:97:fe:0f:eb: 66:23:1e:1a:7c:15:09:a4:30:60:dc:72:cb:05:1d: 02:80:f0:f3:87:46:05:9a:a5:37:eb:e6:e2:77:ac: 13:ec:7f:6f:12:34:74:18:ef:39:27:74:f0:26:b5: 49:89:41:18:46:45:11:e7:73:d7:e2:84:14:bb:80: c8:c3:de:9d:79:dd:61:b4:83:37:53:4c:5d:a2:48: a8:42:36:1c:0b:12:e0:e4:77:0f:0d:33:fa:58:1c: 46:a2:0f:63:f5:85:7b:0f:d5:fa:29:4a:13:a2:ed: 6d:4c:4d:ad:ab:13:24:08:0f:d1:2f:f1:c1:2b:24: 0e:ea:31:bb:d0:1b:50:30:1d:c7:28:c1:a2:ef:ee: b4:7e:1c:a9:f6:dc:e8:e1:a5:46:93:0e:5b:37:24: fe:51:fd:d7:55:7f:4a:c5:34:44:02:f5:b5:6d:30: e1:87:61:1e:1a:ad:a7:79:5d:91:dc:10:fa:67:87: 6f:73:d3:8b:59:76:71:25:23:54:58:4d:d1:fa:21: 68:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:51:51:20:F8:7A:BE:3C:4D:64:5F:46:99:D2:93:CC:CB:F1:5B:6D X509v3 Authority Key Identifier: keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/FVFRIPh6vjxNZF9GmdKTzMvxW20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.94.16.0/20 109.69.88.0/21 212.14.48.0/20 213.155.160.0/19 IPv6: 2001:4c5c::/30 Signature Algorithm: sha256WithRSAEncryption 4e:b6:7e:1c:81:19:17:59:89:b3:e4:13:33:64:3d:96:47:ad: de:7e:99:39:f8:4c:95:ee:4a:1a:d8:0a:60:d9:de:ac:58:90: 42:18:d3:52:6c:44:9c:ac:3a:34:fe:02:7a:07:df:67:34:9c: 36:98:24:f1:d9:94:7a:9b:8f:6c:8a:bb:58:1b:2e:78:93:c3: 28:f6:3c:6a:d7:02:1c:b2:86:d3:f3:08:33:a0:5f:b1:53:38: 17:b5:ac:3c:67:8b:42:91:e0:3e:6c:5e:e3:d4:c4:11:e1:1d: 8c:2d:d9:6e:11:65:14:64:10:e5:b1:13:ce:27:f0:b1:05:09: 5a:57:c7:3e:63:5f:f6:c8:60:48:b3:7b:7d:14:f5:8e:a8:b6: f0:13:33:a1:55:32:68:87:83:db:b5:5b:f0:e6:88:86:82:e5: 78:e9:0d:18:97:5f:00:41:eb:07:12:6f:b1:61:7c:e2:ba:46: 8d:44:48:24:5a:d8:92:ba:24:f7:96:4f:25:13:59:3b:10:d2: 43:1c:ee:d9:d0:44:de:20:c0:90:ca:69:54:5a:7b:9f:a3:b0: cb:11:1c:c9:00:ca:26:2a:32:e6:7c:bc:20:eb:70:af:bb:c3: 92:59:ab:f3:e1:79:de:3c:46:a6:8f:e9:c9:bc:57:30:a5:c3: 73:5c:1b:5d -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt5fhi+i46sC44Kp0B0vchEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzY0ZGMyMWNiNWZkNGQwYmNiMDJjYzJiNDNmZDc1MWZk OTFlMWUwHhcNMjYwMTAxMTIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTUxNTEyMGY4N2FiZTNjNGQ2NDVmNDY5OWQyOTNjY2NiZjE1YjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxyZhzKYQ8DwkHmR22BVg26wCBD4 Ve9khOhbRSpk++qWThu1W61nDQFdKBSebV3CV0nEyla9upf+D+tmIx4afBUJpDBg 3HLLBR0CgPDzh0YFmqU36+bid6wT7H9vEjR0GO85J3TwJrVJiUEYRkUR53PX4oQU u4DIw96ded1htIM3U0xdokioQjYcCxLg5HcPDTP6WBxGog9j9YV7D9X6KUoTou1t TE2tqxMkCA/RL/HBKyQO6jG70BtQMB3HKMGi7+60fhyp9tzo4aVGkw5bNyT+Uf3X VX9KxTREAvW1bTDhh2EeGq2neV2R3BD6Z4dvc9OLWXZxJSNUWE3R+iFovwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFBVRUSD4er48TWRfRpnSk8zL8VttMB8GA1UdIwQY MBaAFCrGTcIctf1NC8sCzCtD/XUf2R4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kZTFkYjQtZWM3OC00ZTQxLTk1NzAt MDk3YzNjMWMyNTQwLzEvRlZGUklQaDZ2anhOWkY5R21kS1R6TXZ4VzIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9kZTFkYjQtZWM3OC00ZTQxLTk1NzAtMDk3YzNjMWMyNTQw LzEvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEUF4QAwQD bUVYAwQE1A4wAwQF1ZugMA0EAgACMAcDBQIgAUxcMA0GCSqGSIb3DQEBCwUAA4IB AQBOtn4cgRkXWYmz5BMzZD2WR63efpk5+EyV7koa2Apg2d6sWJBCGNNSbEScrDo0 /gJ6B99nNJw2mCTx2ZR6m49sirtYGy54k8Mo9jxq1wIcsobT8wgzoF+xUzgXtaw8 Z4tCkeA+bF7j1MQR4R2MLdluEWUUZBDlsRPOJ/CxBQlaV8c+Y1/2yGBIs3t9FPWO qLbwEzOhVTJoh4PbtVvw5oiGguV46Q0Yl18AQesHEm+xYXziukaNREgkWtiSuiT3 lk8lE1k7ENJDHO7Z0ETeIMCQymlUWnufo7DLERzJAMomKjLmfLwg63Cvu8OSWavz 4XnePEamj+nJvFcwpcNzXBtd -----END CERTIFICATE-----Generated at Mon Jan 26 13:44:43 2026 by rpki-client