This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/FX91S7TqeS_5eNXFwkhAJLeDMDY.roa File: FX91S7TqeS_5eNXFwkhAJLeDMDY.roa (raw, json) Hash identifier: 7/g0n2srHScQb2lUJNavUfjGDwgVOP/uF61M1Zy+4aU= Subject key identifier: 15:7F:75:4B:B4:EA:79:2F:F9:78:D5:C5:C2:48:40:24:B7:83:30:36 Certificate issuer: /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195 Certificate serial: 019B7F80A8935DB025549E698888647E4EB8 Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/FX91S7TqeS_5eNXFwkhAJLeDMDY.roa Signing time: Fri 02 Jan 2026 16:18:16 +0000 ROA not before: Fri 02 Jan 2026 16:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42337 IP address blocks: 91.216.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:a8:93:5d:b0:25:54:9e:69:88:88:64:7e:4e:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195 Validity Not Before: Jan 2 16:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=157f754bb4ea792ff978d5c5c2484024b7833036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:45:39:de:5b:85:be:72:d5:b3:7b:a7:da:a2: d1:9e:ff:8f:0c:45:72:80:ae:64:46:96:f4:50:67: b3:5b:cd:88:5c:98:7e:5c:66:44:a1:20:f5:15:aa: f5:51:cc:94:00:c7:e0:25:bd:17:13:1f:8d:f8:b9: 95:17:ce:e1:4a:06:25:ce:03:e6:c5:25:75:bc:92: 87:ce:f1:47:1e:bb:b7:d4:62:e2:f8:4e:91:64:d2: 8d:24:46:ad:6a:3a:92:4c:da:9f:c8:dd:07:cf:19: 3c:28:b6:29:58:ce:49:9d:f3:87:12:a6:a4:53:cc: d2:d7:1d:64:96:9d:b0:7e:69:be:03:d2:a2:6b:b2: 18:5f:51:e8:dd:35:52:88:43:ce:33:de:bf:79:36: 58:86:65:04:da:6e:2a:71:59:d1:dc:6b:1c:be:99: ee:dd:f5:6f:da:73:eb:03:ed:41:9a:9b:71:e0:05: 98:82:6f:da:c5:f0:7e:c4:7c:c5:52:02:a4:97:75: 9b:f3:8e:33:f0:d9:e8:6f:41:b0:b6:c1:0d:30:ce: 18:c4:b2:b8:3b:dd:fa:3a:ad:bd:11:d2:55:e6:21: d9:05:f2:cf:e4:51:7f:9d:cb:08:3f:9f:4d:c9:81: 79:72:15:05:46:08:8f:be:2e:d9:ec:39:44:09:f5: 21:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:7F:75:4B:B4:EA:79:2F:F9:78:D5:C5:C2:48:40:24:B7:83:30:36 X509v3 Authority Key Identifier: keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/FX91S7TqeS_5eNXFwkhAJLeDMDY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.4.0/24 Signature Algorithm: sha256WithRSAEncryption 34:89:ed:c6:1a:e1:e3:84:25:2b:0e:b9:81:d9:16:ce:5b:86: 0f:57:a4:9e:f5:34:8d:9b:3c:0c:15:00:47:bd:56:5d:f1:ed: 4c:da:8d:47:4e:df:89:57:1d:d0:51:1e:ec:78:d1:54:1d:3b: d8:42:be:d7:f7:53:b4:8b:5d:9b:d0:53:3f:20:eb:8d:5a:bb: 5c:10:05:7d:6e:2c:ef:0a:b2:07:1a:d3:09:af:7a:c4:54:34: d1:20:b5:69:b6:b5:6d:29:35:8c:64:cd:e4:78:29:1d:20:52: 9f:72:19:3a:73:54:5a:0b:bb:a1:5d:4e:fd:4f:48:cf:4b:92: 39:b9:3a:85:dd:6b:75:30:c9:b1:e5:6a:1f:84:eb:07:de:6a: 00:32:2a:b5:fa:a5:2c:2c:e6:c2:ca:e4:11:e5:5f:c3:67:50: 14:c5:1a:e0:97:7a:8c:50:84:85:f0:d3:34:7e:64:16:4f:12: bd:48:e5:df:e7:30:dc:85:50:60:ea:c8:af:00:4f:e8:2c:67: 3b:26:75:c3:82:05:5e:97:2c:60:cf:f0:09:53:00:06:62:de: 49:51:4e:b2:cc:9e:b4:1a:de:55:21:c5:63:0a:da:8e:21:79: 64:8f:4e:3f:aa:63:54:13:e4:3c:25:12:88:92:11:7c:fb:dd: d4:53:99:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gKiTXbAlVJ5piIhkfk64MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWJkMjZiYzVkODFlZWU5YzhlMWEyZDBkNzhkMTBkYWFl MDgxOTUwHhcNMjYwMTAyMTYxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTdmNzU0YmI0ZWE3OTJmZjk3OGQ1YzVjMjQ4NDAyNGI3ODMzMDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUU53luFvnLVs3un2qLRnv+PDEVy gK5kRpb0UGezW82IXJh+XGZEoSD1Far1UcyUAMfgJb0XEx+N+LmVF87hSgYlzgPm xSV1vJKHzvFHHru31GLi+E6RZNKNJEatajqSTNqfyN0Hzxk8KLYpWM5JnfOHEqak U8zS1x1klp2wfmm+A9Kia7IYX1Ho3TVSiEPOM96/eTZYhmUE2m4qcVnR3Gscvpnu 3fVv2nPrA+1Bmptx4AWYgm/axfB+xHzFUgKkl3Wb844z8Nnob0GwtsENMM4YxLK4 O936Oq29EdJV5iHZBfLP5FF/ncsIP59NyYF5chUFRgiPvi7Z7DlECfUhcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBV/dUu06nkv+XjVxcJIQCS3gzA2MB8GA1UdIwQY MBaAFMRb0mvF2B7unI4aLQ140Q2q4IGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC84NzgyOWEtZTMzMi00MjRmLTljNGYt ZTQ0N2JlMmFjNjhlLzEvRlg5MVM3VHFlU181ZU5YRndraEFKTGVETURZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC84NzgyOWEtZTMzMi00MjRmLTljNGYtZTQ0N2JlMmFjNjhl LzEveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9gEMA0G CSqGSIb3DQEBCwUAA4IBAQA0ie3GGuHjhCUrDrmB2RbOW4YPV6Se9TSNmzwMFQBH vVZd8e1M2o1HTt+JVx3QUR7seNFUHTvYQr7X91O0i12b0FM/IOuNWrtcEAV9bizv CrIHGtMJr3rEVDTRILVptrVtKTWMZM3keCkdIFKfchk6c1RaC7uhXU79T0jPS5I5 uTqF3Wt1MMmx5WofhOsH3moAMiq1+qUsLObCyuQR5V/DZ1AUxRrgl3qMUISF8NM0 fmQWTxK9SOXf5zDchVBg6sivAE/oLGc7JnXDggVelyxgz/AJUwAGYt5JUU6yzJ60 Gt5VIcVjCtqOIXlkj04/qmNUE+Q8JRKIkhF8+93UU5ny -----END CERTIFICATE-----Generated at Mon Jan 26 03:57:11 2026 by rpki-client