This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/FL8p74tWI7ntw6R2xksbD1PAPss.roa File: FL8p74tWI7ntw6R2xksbD1PAPss.roa (raw, json) Hash identifier: gYU94roAVzlnVYJ/I8E+mMblo4Z/HWZwqnYhXEb29/s= Subject key identifier: 14:BF:29:EF:8B:56:23:B9:ED:C3:A4:76:C6:4B:1B:0F:53:C0:3E:CB Certificate issuer: /CN=d79ea47ae161cbb3daef97789730d70c4cba89d0 Certificate serial: 019B7EA6FA91BC70911C5EA6132CA6D4F917 Authority key identifier: D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/FL8p74tWI7ntw6R2xksbD1PAPss.roa Signing time: Fri 02 Jan 2026 12:20:30 +0000 ROA not before: Fri 02 Jan 2026 12:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1942 IP address blocks: 129.88.0.0/16 maxlen: 16 147.171.0.0/16 maxlen: 16 152.77.0.0/16 maxlen: 16 192.33.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:fa:91:bc:70:91:1c:5e:a6:13:2c:a6:d4:f9:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d79ea47ae161cbb3daef97789730d70c4cba89d0 Validity Not Before: Jan 2 12:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14bf29ef8b5623b9edc3a476c64b1b0f53c03ecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:58:e0:5c:25:55:d4:7f:7a:76:0c:1d:0b:90: 19:b3:42:3b:2a:49:ae:d2:38:1a:03:74:92:69:50: d8:be:2b:48:da:41:64:d0:fc:bf:8d:37:5b:22:65: 0f:a4:bd:6c:28:f6:92:bb:bb:23:fa:33:27:77:a2: 92:8a:0e:4a:94:bc:1d:ad:83:5a:c9:3d:79:77:18: 2a:86:d0:17:ca:65:eb:b2:74:15:cb:b7:52:ee:ff: 76:04:a9:bc:58:9f:6b:36:4f:4d:a4:6c:1f:2d:d0: 94:ed:d6:37:95:fa:eb:9f:5e:a3:b5:a6:95:ef:bb: f5:b6:48:6e:a7:63:48:fd:9c:91:09:30:98:5c:81: ce:7f:f6:a5:07:2a:14:cd:6a:11:a4:47:4f:8b:65: 27:79:ee:18:61:40:28:71:44:23:e9:e1:e0:f2:04: 5e:a9:bf:ee:9d:99:dd:cd:c5:39:1a:71:08:03:7c: 3c:e3:03:ad:ed:2d:19:c8:59:89:3c:2f:d6:b5:fe: 54:23:57:91:8b:a4:e3:7e:ef:32:16:f9:b1:9c:ca: 2a:57:70:ae:e6:fe:16:89:ab:d1:cd:a4:1e:4d:1e: c5:4a:f7:03:42:1f:b2:9f:aa:00:b9:3b:28:cf:e8: cb:40:46:bf:3c:50:ad:8e:7a:47:9b:fc:22:8f:45: 01:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:BF:29:EF:8B:56:23:B9:ED:C3:A4:76:C6:4B:1B:0F:53:C0:3E:CB X509v3 Authority Key Identifier: keyid:D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/FL8p74tWI7ntw6R2xksbD1PAPss.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 129.88.0.0/16 147.171.0.0/16 152.77.0.0/16 192.33.171.0/24 Signature Algorithm: sha256WithRSAEncryption 25:40:ca:fa:8c:e7:97:52:ee:c7:9d:b2:f1:4f:bf:f2:23:d7: f2:17:6a:16:cd:2c:88:6a:e1:ce:22:0e:9c:8c:77:6d:d9:0b: 62:9f:f2:36:04:8b:ad:56:90:74:58:10:48:04:63:91:f6:f8: c7:a8:94:94:0c:a8:ab:ce:18:66:35:16:69:f8:27:a5:97:65: 10:41:ff:3d:68:4a:a9:05:6d:7b:83:f4:9a:e3:20:4d:29:cd: 81:f3:38:74:dc:6a:d7:1a:72:ab:fb:43:6e:64:f0:f8:64:67: cf:c9:82:f4:ac:a0:98:a9:2b:36:e5:8c:0a:cb:d2:36:3a:9e: 0a:b9:f5:49:aa:db:34:cd:e7:6d:45:ff:d8:39:27:0d:4a:11: 3e:f6:6a:ea:79:00:62:ea:9a:be:ef:72:e5:8c:57:7a:da:5b: 91:ee:ba:b1:0d:4d:9f:e5:28:57:b8:b8:8e:aa:ef:58:87:9e: 09:f1:5c:7f:59:9a:59:37:15:7d:d2:3c:72:9a:a5:23:bb:b0: 31:c5:d0:84:1b:1d:92:4d:df:33:94:18:d7:14:c2:b6:5f:ea: 5a:04:a5:b8:28:95:c8:c7:fd:e0:2f:b1:00:ac:5f:a7:4a:80: 67:1d:95:d2:43:e1:31:4d:fa:c5:49:a3:c7:0c:1a:ff:5b:64: 19:dd:1b:94 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pvqRvHCRHF6mEyym1PkXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OWVhNDdhZTE2MWNiYjNkYWVmOTc3ODk3MzBkNzBjNGNi YTg5ZDAwHhcNMjYwMTAyMTIyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGJmMjllZjhiNTYyM2I5ZWRjM2E0NzZjNjRiMWIwZjUzYzAzZWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVjgXCVV1H96dgwdC5AZs0I7Kkmu 0jgaA3SSaVDYvitI2kFk0Py/jTdbImUPpL1sKPaSu7sj+jMnd6KSig5KlLwdrYNa yT15dxgqhtAXymXrsnQVy7dS7v92BKm8WJ9rNk9NpGwfLdCU7dY3lfrrn16jtaaV 77v1tkhup2NI/ZyRCTCYXIHOf/alByoUzWoRpEdPi2Unee4YYUAocUQj6eHg8gRe qb/unZndzcU5GnEIA3w84wOt7S0ZyFmJPC/Wtf5UI1eRi6Tjfu8yFvmxnMoqV3Cu 5v4WiavRzaQeTR7FSvcDQh+yn6oAuTsoz+jLQEa/PFCtjnpHm/wij0UBVQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBS/Ke+LViO57cOkdsZLGw9TwD7LMB8GA1UdIwQY MBaAFNeepHrhYcuz2u+XeJcw1wxMuonQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTU2a2V1Rmh5N1BhNzVkNGx6RFhERXk2aWRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kOWNiNDEtMWMzYi00NmFiLWE5OTMt M2MzZTUwZGRhNmNjLzEvRkw4cDc0dFdJN250dzZSMnhrc2JEMVBBUHNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9kOWNiNDEtMWMzYi00NmFiLWE5OTMtM2MzZTUwZGRhNmNj LzEvMTU2a2V1Rmh5N1BhNzVkNGx6RFhERXk2aWRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAATAVAwMAgVgDAwCT qwMDAJhNAwQAwCGrMA0GCSqGSIb3DQEBCwUAA4IBAQAlQMr6jOeXUu7HnbLxT7/y I9fyF2oWzSyIauHOIg6cjHdt2Qtin/I2BIutVpB0WBBIBGOR9vjHqJSUDKirzhhm NRZp+Cell2UQQf89aEqpBW17g/Sa4yBNKc2B8zh03GrXGnKr+0NuZPD4ZGfPyYL0 rKCYqSs25YwKy9I2Op4KufVJqts0zedtRf/YOScNShE+9mrqeQBi6pq+73LljFd6 2luR7rqxDU2f5ShXuLiOqu9Yh54J8Vx/WZpZNxV90jxymqUju7AxxdCEGx2STd8z lBjXFMK2X+paBKW4KJXIx/3gL7EArF+nSoBnHZXSQ+ExTfrFSaPHDBr/W2QZ3RuU -----END CERTIFICATE-----Generated at Mon Jan 26 06:18:00 2026 by rpki-client