This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Fv8XOMLJqv4ixAPIsYD_VvS1qZw.roa File: Fv8XOMLJqv4ixAPIsYD_VvS1qZw.roa (raw, json) Hash identifier: yfRunlAZ/llU87V2B221bL3MKTdOLNwvKSzEbH2Vw1s= Subject key identifier: 16:FF:17:38:C2:C9:AA:FE:22:C4:03:C8:B1:80:FF:56:F4:B5:A9:9C Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F855C8A436F42CFDAD885F147554245 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Fv8XOMLJqv4ixAPIsYD_VvS1qZw.roa Signing time: Fri 02 Jan 2026 16:23:24 +0000 ROA not before: Fri 02 Jan 2026 16:23:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199614 IP address blocks: 194.58.61.0/24 maxlen: 24 194.87.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:5c:8a:43:6f:42:cf:da:d8:85:f1:47:55:42:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16ff1738c2c9aafe22c403c8b180ff56f4b5a99c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:39:d5:cf:6d:78:13:3f:68:c8:f1:80:56:c9: 43:aa:b3:21:bc:12:0b:3f:51:07:f5:08:f3:af:28: 4c:af:4d:9a:8e:1d:09:b3:1c:33:3a:d3:b7:11:57: b9:66:f8:fd:f2:c4:ac:9d:10:d9:7e:82:08:32:e4: c8:0a:4d:f8:11:bb:5c:ef:86:d8:cc:fd:43:8d:f4: 80:36:f0:63:6c:5e:fc:10:e5:ab:c3:fa:82:0b:3d: 25:fc:56:c8:87:80:88:d1:c4:a5:36:0f:44:aa:5b: 53:4b:9c:3d:d9:80:fa:b0:32:b1:57:c8:1e:c6:1e: 94:6e:63:ee:7d:e7:99:41:28:96:a6:25:5a:bc:33: f5:24:ff:5e:ec:9b:ff:86:bf:c1:3c:ca:4b:d4:4c: 26:ec:41:0a:cc:22:44:f4:20:f0:dc:76:9c:27:66: 40:cf:0a:48:36:0d:23:6e:ab:35:02:9a:6e:85:d6: ac:5e:89:8e:ca:63:e3:c1:f4:c1:47:ff:95:76:a3: a2:8f:0b:93:bb:63:c5:3a:0a:53:58:e0:be:c5:f9: 58:0b:c0:32:21:7a:e7:ee:c2:94:b3:35:13:f0:e7: a5:7d:ef:1b:54:53:a1:16:c3:c7:33:b8:a0:3c:55: ee:0b:98:57:64:d6:ff:08:f3:62:4e:00:ac:93:c2: a4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:FF:17:38:C2:C9:AA:FE:22:C4:03:C8:B1:80:FF:56:F4:B5:A9:9C X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Fv8XOMLJqv4ixAPIsYD_VvS1qZw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.58.61.0/24 194.87.171.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:e3:3a:0f:37:c2:f4:5c:6d:ea:ee:55:f0:2f:fa:03:3f:f0: f3:d2:94:23:2f:c3:68:d2:12:f5:65:a6:b7:b2:68:34:e2:07: 59:56:3c:86:66:18:e2:d3:5c:e8:9c:ba:94:c3:3c:57:8c:ef: 98:83:f8:2d:5c:14:e0:0e:08:65:2e:06:cf:55:b2:f5:fb:de: fd:5d:2a:c1:6f:8b:6e:1b:2e:cd:9b:c4:92:3d:e6:f7:73:df: 91:57:7d:35:ce:08:7a:12:b0:e3:ec:ce:c4:4a:3d:73:02:a6: b3:a4:4a:82:c5:b3:a3:9f:42:2d:6b:6d:70:af:96:79:fc:1b: 59:01:39:30:55:b1:15:71:52:40:71:a7:67:7e:83:75:75:a5: 1e:4a:f4:f7:c2:38:83:91:d1:e9:c0:b0:48:c8:ea:0a:20:2f: 70:94:b0:5d:13:45:b1:7e:42:b3:38:da:f8:e2:a3:81:b1:d5: 16:8c:4f:d6:bf:d6:26:3d:e8:1c:b6:e7:d8:a8:a4:ef:2a:f0: d3:50:27:88:7a:8d:cb:05:24:89:57:48:8d:f6:0c:43:45:bc: 97:2e:82:23:64:d6:80:71:a3:71:8f:66:4f:97:2b:cd:fe:24: 28:99:fa:88:0e:8c:64:89:74:89:c7:c7:dc:b0:fe:5b:38:bc: 24:1b:17:47 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hVyKQ29Cz9rYhfFHVUJFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmZmMTczOGMyYzlhYWZlMjJjNDAzYzhiMTgwZmY1NmY0YjVhOTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDnVz214Ez9oyPGAVslDqrMhvBIL P1EH9QjzryhMr02ajh0JsxwzOtO3EVe5Zvj98sSsnRDZfoIIMuTICk34Ebtc74bY zP1DjfSANvBjbF78EOWrw/qCCz0l/FbIh4CI0cSlNg9EqltTS5w92YD6sDKxV8ge xh6UbmPufeeZQSiWpiVavDP1JP9e7Jv/hr/BPMpL1Ewm7EEKzCJE9CDw3HacJ2ZA zwpINg0jbqs1AppuhdasXomOymPjwfTBR/+VdqOijwuTu2PFOgpTWOC+xflYC8Ay IXrn7sKUszUT8Oelfe8bVFOhFsPHM7igPFXuC5hXZNb/CPNiTgCsk8KkMQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBb/FzjCyar+IsQDyLGA/1b0tamcMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvRnY4WE9NTEpxdjRpeEFQSXNZRF9WdlMxcVp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwjo9AwQA wlerMA0GCSqGSIb3DQEBCwUAA4IBAQA94zoPN8L0XG3q7lXwL/oDP/Dz0pQjL8No 0hL1Zaa3smg04gdZVjyGZhji01zonLqUwzxXjO+Yg/gtXBTgDghlLgbPVbL1+979 XSrBb4tuGy7Nm8SSPeb3c9+RV301zgh6ErDj7M7ESj1zAqazpEqCxbOjn0Ita21w r5Z5/BtZATkwVbEVcVJAcadnfoN1daUeSvT3wjiDkdHpwLBIyOoKIC9wlLBdE0Wx fkKzONr44qOBsdUWjE/Wv9YmPegctufYqKTvKvDTUCeIeo3LBSSJV0iN9gxDRbyX LoIjZNaAcaNxj2ZPlyvN/iQomfqIDoxkiXSJx8fcsP5bOLwkGxdH -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:28 2026 by rpki-client