This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/fFpafy4u190DTCOPzJA2IU3Yun8.roa File: fFpafy4u190DTCOPzJA2IU3Yun8.roa (raw, json) Hash identifier: qkxwTsYonpEmwXLYN4+BkXLnLH6SkvbgatzFJDlgvt0= Subject key identifier: 7C:5A:5A:7F:2E:2E:D7:DD:03:4C:23:8F:CC:90:36:21:4D:D8:BA:7F Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042 Certificate serial: 019B79EBB22501516747681E0B4245BDFEE5 Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/fFpafy4u190DTCOPzJA2IU3Yun8.roa Signing time: Thu 01 Jan 2026 14:17:28 +0000 ROA not before: Thu 01 Jan 2026 14:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25255 IP address blocks: 46.220.0.0/16 maxlen: 16 77.116.0.0/14 maxlen: 14 77.116.0.0/17 maxlen: 17 77.116.128.0/17 maxlen: 17 77.117.0.0/17 maxlen: 17 77.119.128.0/20 maxlen: 20 77.119.128.0/22 maxlen: 22 77.119.160.0/20 maxlen: 20 77.119.192.0/19 maxlen: 19 77.119.224.0/19 maxlen: 19 81.3.192.0/18 maxlen: 18 81.3.192.0/24 maxlen: 24 81.3.201.0/24 maxlen: 24 81.3.204.0/23 maxlen: 23 81.3.206.0/23 maxlen: 23 81.3.210.0/24 maxlen: 24 81.3.211.0/24 maxlen: 24 91.141.0.0/17 maxlen: 17 91.141.0.0/20 maxlen: 20 91.141.0.0/22 maxlen: 22 91.141.32.0/19 maxlen: 19 91.141.64.0/20 maxlen: 20 94.245.192.0/18 maxlen: 18 94.245.192.0/24 maxlen: 24 109.126.64.0/18 maxlen: 18 178.112.0.0/14 maxlen: 14 178.112.0.0/17 maxlen: 17 178.112.128.0/17 maxlen: 17 178.113.0.0/17 maxlen: 17 178.115.32.0/19 maxlen: 19 178.115.64.0/20 maxlen: 20 178.115.128.0/20 maxlen: 20 178.115.128.0/22 maxlen: 22 178.115.224.0/19 maxlen: 19 178.165.128.0/17 maxlen: 17 178.165.128.0/20 maxlen: 20 178.165.128.0/22 maxlen: 22 178.165.160.0/19 maxlen: 19 178.165.192.0/20 maxlen: 20 194.24.128.0/19 maxlen: 19 194.24.158.0/24 maxlen: 24 194.24.159.0/24 maxlen: 24 213.94.64.0/18 maxlen: 18 213.94.64.0/21 maxlen: 21 213.94.76.0/24 maxlen: 24 213.94.77.0/24 maxlen: 24 213.94.78.0/24 maxlen: 24 213.94.79.0/24 maxlen: 24 213.94.80.0/22 maxlen: 22 213.94.95.0/24 maxlen: 24 213.94.96.0/21 maxlen: 21 2a02:2861::/32 maxlen: 32 2a02:2861:d::/48 maxlen: 48 2a02:2861:e::/48 maxlen: 48 2a02:2864::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:b2:25:01:51:67:47:68:1e:0b:42:45:bd:fe:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042 Validity Not Before: Jan 1 14:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c5a5a7f2e2ed7dd034c238fcc9036214dd8ba7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:81:a4:05:ba:1b:2f:8d:9c:b9:c0:e0:86:58: 50:e2:55:22:0b:a0:6b:88:e1:de:ea:cf:1e:d3:da: 1f:a5:5e:be:74:2f:d8:d4:ec:b7:10:a4:62:e9:fd: cb:7e:ba:85:fa:00:2f:39:d4:80:88:2b:d0:20:57: 4c:fe:df:dc:4b:34:42:10:e1:98:dd:c5:45:d8:74: 0e:65:ad:95:9b:c6:3f:73:a7:57:82:ad:6b:0e:ba: 28:e6:c8:a5:31:25:a5:64:7c:79:f7:be:d2:d0:9e: 37:83:0b:00:89:06:22:6e:36:38:cb:f7:c4:27:e0: bd:04:83:15:c0:bd:da:05:74:70:4c:a0:2e:e0:84: 22:c3:12:38:83:7f:59:64:91:e8:0f:de:9c:c4:a1: f4:31:50:fb:0a:4e:7a:e3:2c:fd:26:03:3a:a7:a2: aa:41:f6:a5:42:54:01:2c:77:48:93:49:81:1d:bb: 99:a8:09:86:f4:9d:4c:3c:f3:26:39:f5:c4:72:4e: 50:1a:bb:fc:26:51:03:f9:e2:50:c4:15:bf:80:95: de:ea:a6:86:c0:32:44:35:69:0d:25:13:b4:1f:b5: 25:b5:57:c2:87:47:54:50:49:73:6c:ec:be:30:39: 4b:b0:82:e4:3b:36:95:1b:a9:95:0c:b2:6a:de:ef: 3f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:5A:5A:7F:2E:2E:D7:DD:03:4C:23:8F:CC:90:36:21:4D:D8:BA:7F X509v3 Authority Key Identifier: keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/fFpafy4u190DTCOPzJA2IU3Yun8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.220.0.0/16 77.116.0.0/14 81.3.192.0/18 91.141.0.0/17 94.245.192.0/18 109.126.64.0/18 178.112.0.0/14 178.165.128.0/17 194.24.128.0/19 213.94.64.0/18 IPv6: 2a02:2861::/32 2a02:2864::/30 Signature Algorithm: sha256WithRSAEncryption 02:a0:55:c3:18:ee:65:d1:d9:56:79:5a:e7:0b:48:6e:f0:78: 56:a6:86:52:fc:be:1c:c3:9f:06:0d:4a:ff:c9:06:f2:b1:50: a0:53:02:e5:5f:84:a2:97:61:42:27:05:a4:50:de:f3:2d:54: 45:cc:b2:d7:ca:e3:06:23:82:26:09:c9:88:8d:55:ef:19:e7: 51:c8:c6:40:30:5f:bf:cf:2e:25:63:bf:54:40:bf:a3:d1:b3: bb:ee:4e:4d:9c:02:1b:09:4c:ac:ac:80:53:97:89:ab:48:43: 14:40:5e:fe:2f:f1:d7:01:91:7f:b4:9a:5b:18:bb:c4:dc:2b: 2f:ec:a6:71:b1:84:54:8c:70:9f:5f:65:cc:eb:15:6a:8b:85: 11:a5:05:0a:4e:9a:31:6f:fb:2c:6d:b6:e8:86:e1:9f:74:ff: e9:96:04:4f:1f:50:86:df:77:ca:e3:9a:52:7f:a3:9a:75:1d: cf:eb:bd:e7:e6:88:8b:2b:05:32:6e:60:5c:29:77:f0:ff:5a: 82:2d:b4:9f:4c:1b:ff:81:59:73:1c:fd:54:f8:47:5b:f3:09: ef:19:cc:c4:56:99:23:44:01:79:e6:47:90:eb:cb:48:b9:63: 81:19:a4:d2:49:3e:14:68:72:50:d4:d9:b7:51:b8:f8:d4:23: 2f:83:ea:07 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgISAZt567IlAVFnR2geC0JFvf7lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOWQxOTdmYmJlZTJhMWRjY2I0ZjU1NzIyYTgyMTBkMzEw NWIwNDIwHhcNMjYwMTAxMTQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzVhNWE3ZjJlMmVkN2RkMDM0YzIzOGZjYzkwMzYyMTRkZDhiYTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YGkBbobL42cucDghlhQ4lUiC6Br iOHe6s8e09ofpV6+dC/Y1Oy3EKRi6f3LfrqF+gAvOdSAiCvQIFdM/t/cSzRCEOGY 3cVF2HQOZa2Vm8Y/c6dXgq1rDroo5silMSWlZHx5977S0J43gwsAiQYibjY4y/fE J+C9BIMVwL3aBXRwTKAu4IQiwxI4g39ZZJHoD96cxKH0MVD7Ck564yz9JgM6p6Kq QfalQlQBLHdIk0mBHbuZqAmG9J1MPPMmOfXEck5QGrv8JlED+eJQxBW/gJXe6qaG wDJENWkNJRO0H7UltVfCh0dUUElzbOy+MDlLsILkOzaVG6mVDLJq3u8/9wIDAQAB o4ICUjCCAk4wHQYDVR0OBBYEFHxaWn8uLtfdA0wjj8yQNiFN2Lp/MB8GA1UdIwQY MBaAFNudGX+77iodzLT1VyKoIQ0xBbBCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wOWQxMzctNDc3Yi00ZWZlLWEzZDMt NGIyMzk1NmZiZDg2LzEvZkZwYWZ5NHUxOTBEVENPUHpKQTJJVTNZdW44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8wOWQxMzctNDc3Yi00ZWZlLWEzZDMtNGIyMzk1NmZiZDg2 LzEvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGgGCCsGAQUFBwEHAQH/BFkwVzA/BAIAATA5AwMALtwDAwJN dAMEBlEDwAMEB1uNAAMEBl71wAMEBm1+QAMDArJwAwQHsqWAAwQFwhiAAwQG1V5A MBQEAgACMA4DBQAqAihhAwUCKgIoZDANBgkqhkiG9w0BAQsFAAOCAQEAAqBVwxju ZdHZVnla5wtIbvB4VqaGUvy+HMOfBg1K/8kG8rFQoFMC5V+EopdhQicFpFDe8y1U Rcyy18rjBiOCJgnJiI1V7xnnUcjGQDBfv88uJWO/VEC/o9Gzu+5OTZwCGwlMrKyA U5eJq0hDFEBe/i/x1wGRf7SaWxi7xNwrL+ymcbGEVIxwn19lzOsVaouFEaUFCk6a MW/7LG226Ibhn3T/6ZYETx9Qht93yuOaUn+jmnUdz+u95+aIiysFMm5gXCl38P9a gi20n0wb/4FZcxz9VPhHW/MJ7xnMxFaZI0QBeeZHkOvLSLljgRmk0kk+FGhyUNTZ t1G4+NQjL4PqBw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:20 2026 by rpki-client