This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/FxSV3pjhlX5ncwMd1BJ4YPhboEI.roa File: FxSV3pjhlX5ncwMd1BJ4YPhboEI.roa (raw, json) Hash identifier: V6ldsVa/sdoxhFtU1dGezva/tghG5qZAguTA3/NtrDw= Subject key identifier: 17:14:95:DE:98:E1:95:7E:67:73:03:1D:D4:12:78:60:F8:5B:A0:42 Certificate issuer: /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce Certificate serial: 019B7DCA12C0F0D9279C1C35E3D2EF2C1BCF Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/FxSV3pjhlX5ncwMd1BJ4YPhboEI.roa Signing time: Fri 02 Jan 2026 08:19:13 +0000 ROA not before: Fri 02 Jan 2026 08:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 91.192.4.0/24 maxlen: 24 91.192.5.0/24 maxlen: 24 91.192.6.0/24 maxlen: 24 91.192.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:12:c0:f0:d9:27:9c:1c:35:e3:d2:ef:2c:1b:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce Validity Not Before: Jan 2 08:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=171495de98e1957e6773031dd4127860f85ba042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0a:50:af:14:b8:c1:aa:ea:90:ab:2f:8f:13: ac:44:12:8f:42:d1:82:50:98:33:7f:6f:a4:ca:cb: 3d:8b:1d:6b:5e:c5:57:a1:4d:34:48:fa:14:34:77: 22:d8:e8:b2:13:15:43:c6:40:c1:46:54:08:b7:07: bb:05:eb:7b:39:90:9b:16:8d:f0:65:5e:41:20:a3: 6e:8a:b5:a1:30:9f:d4:7c:cc:19:5e:e0:e8:20:8e: 2c:d0:8b:91:d3:99:26:15:92:49:4a:f5:a8:e0:a6: 11:8d:f8:f1:b5:a4:ab:18:88:80:75:ff:a8:d9:ae: 05:82:a7:8b:53:bc:b5:ff:22:f1:78:43:81:73:00: ac:ee:95:13:18:59:ab:10:92:5a:c0:c9:53:ce:78: 72:20:ac:3f:2e:e9:a6:22:45:45:03:03:f7:79:56: 15:e9:75:46:1c:13:4f:b4:6d:41:90:d0:91:9c:19: 71:91:3f:bd:df:87:4a:9c:7d:1b:17:9a:44:69:36: d5:cf:f1:c6:65:10:5f:67:b4:71:86:50:94:ff:a4: 9f:91:88:5a:75:70:24:14:a3:ca:bc:cc:5a:c8:80: e3:03:43:9e:40:60:35:f9:71:27:68:de:3b:78:97: 47:5d:1c:4e:92:08:d2:6d:25:ec:16:22:4f:b5:4a: 0c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:14:95:DE:98:E1:95:7E:67:73:03:1D:D4:12:78:60:F8:5B:A0:42 X509v3 Authority Key Identifier: keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/FxSV3pjhlX5ncwMd1BJ4YPhboEI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.4.0/22 Signature Algorithm: sha256WithRSAEncryption 77:ca:42:35:5d:49:6f:e3:14:21:1e:60:bd:e4:ba:38:2d:f3: 0b:cc:a5:9b:cb:06:57:91:d0:7f:73:4c:a4:82:16:79:9b:bb: 44:bd:4c:84:16:34:e2:6d:c0:12:c8:bb:d8:77:55:8a:22:6b: a0:0e:8d:48:4e:6a:1e:75:af:84:52:df:aa:6c:dc:67:27:90: c5:46:98:c6:62:b5:86:2c:10:a5:31:19:1f:83:67:f9:fa:37: da:60:65:8d:24:d4:73:b4:6a:52:9b:0a:6c:75:b8:5a:c2:d1: 81:54:b0:e0:5c:7f:47:58:74:f7:86:39:00:db:5e:39:dc:4b: 8e:9d:73:50:e7:57:22:b6:ad:e5:99:0e:a2:62:88:6a:8c:48: e4:a9:fb:85:e8:a5:0d:35:6f:33:32:b6:75:75:41:09:8b:b5: 3f:9b:ca:1a:7e:26:7b:2f:38:80:1e:d4:c5:44:63:9f:02:36: 89:0b:e9:bd:4b:9f:27:c5:32:65:d9:26:d0:2c:ad:76:1c:55: 39:86:4b:10:c1:cb:16:38:af:c0:db:bf:3c:7f:25:43:6f:32: 97:57:7c:9e:89:33:a6:6b:95:a1:27:89:30:6b:19:64:bd:ba: f6:c8:a8:a5:61:b7:0a:64:bb:5b:35:40:e7:72:f6:af:04:73: 00:f9:61:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yhLA8NknnBw149LvLBvPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQ2NDc2Nzc3M2YxMjM5YjY0NmJiNjZiZGNmNGY3ZmIx MjA2Y2UwHhcNMjYwMTAyMDgxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzE0OTVkZTk4ZTE5NTdlNjc3MzAzMWRkNDEyNzg2MGY4NWJhMDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ApQrxS4warqkKsvjxOsRBKPQtGC UJgzf2+kyss9ix1rXsVXoU00SPoUNHci2OiyExVDxkDBRlQItwe7Bet7OZCbFo3w ZV5BIKNuirWhMJ/UfMwZXuDoII4s0IuR05kmFZJJSvWo4KYRjfjxtaSrGIiAdf+o 2a4FgqeLU7y1/yLxeEOBcwCs7pUTGFmrEJJawMlTznhyIKw/LummIkVFAwP3eVYV 6XVGHBNPtG1BkNCRnBlxkT+934dKnH0bF5pEaTbVz/HGZRBfZ7RxhlCU/6SfkYha dXAkFKPKvMxayIDjA0OeQGA1+XEnaN47eJdHXRxOkgjSbSXsFiJPtUoMTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBcUld6Y4ZV+Z3MDHdQSeGD4W6BCMB8GA1UdIwQY MBaAFLkUZHZ3c/Ejm2Rrtmvc9Pf7EgbOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJSa2RuZHo4U09iWkd1MmE5ejA5X3NTQnM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xM2ZjZDEtZDgwNi00ZTU2LTg1MzMt NDc1ZGJiYjBjMDhjLzEvRnhTVjNwamhsWDVuY3dNZDFCSjRZUGhib0VJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8xM2ZjZDEtZDgwNi00ZTU2LTg1MzMtNDc1ZGJiYjBjMDhj LzEvdVJSa2RuZHo4U09iWkd1MmE5ejA5X3NTQnM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8AEMA0G CSqGSIb3DQEBCwUAA4IBAQB3ykI1XUlv4xQhHmC95Lo4LfMLzKWbywZXkdB/c0yk ghZ5m7tEvUyEFjTibcASyLvYd1WKImugDo1ITmoeda+EUt+qbNxnJ5DFRpjGYrWG LBClMRkfg2f5+jfaYGWNJNRztGpSmwpsdbhawtGBVLDgXH9HWHT3hjkA21453EuO nXNQ51citq3lmQ6iYohqjEjkqfuF6KUNNW8zMrZ1dUEJi7U/m8oafiZ7LziAHtTF RGOfAjaJC+m9S58nxTJl2SbQLK12HFU5hksQwcsWOK/A2788fyVDbzKXV3yeiTOm a5WhJ4kwaxlkvbr2yKilYbcKZLtbNUDncvavBHMA+WGv -----END CERTIFICATE-----Generated at Tue Jan 20 01:21:56 2026 by rpki-client