This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/FVti0CnJBxW_ujwVe576uT5sBZY.roa File: FVti0CnJBxW_ujwVe576uT5sBZY.roa (raw, json) Hash identifier: wKPtK/uPr/cpuHyaQuhDbiv2SdMMAyJiY4SSf65iULo= Subject key identifier: 15:5B:62:D0:29:C9:07:15:BF:BA:3C:15:7B:9E:FA:B9:3E:6C:05:96 Certificate issuer: /CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553 Certificate serial: 019B7E38E893A2C8FA79B17C0EB4A1D02075 Authority key identifier: A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/FVti0CnJBxW_ujwVe576uT5sBZY.roa Signing time: Fri 02 Jan 2026 10:20:17 +0000 ROA not before: Fri 02 Jan 2026 10:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9008 IP address blocks: 80.90.32.0/19 maxlen: 24 85.93.192.0/19 maxlen: 24 109.69.240.0/21 maxlen: 24 185.211.232.0/22 maxlen: 24 195.200.240.0/23 maxlen: 24 2001:1610::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e8:93:a2:c8:fa:79:b1:7c:0e:b4:a1:d0:20:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553 Validity Not Before: Jan 2 10:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=155b62d029c90715bfba3c157b9efab93e6c0596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ae:9d:59:47:e3:1e:c1:f0:5b:08:6f:e8:0b: 27:a4:c3:5a:61:ad:b5:43:30:c9:17:5a:73:42:cf: c0:c7:1f:83:72:51:d4:0b:47:c6:8e:5b:61:ac:af: 0f:5f:88:a6:0a:03:bf:25:c0:b3:96:2d:74:2c:c5: b4:ce:49:e3:27:8f:e8:e4:ed:52:dd:6b:99:ba:82: 7b:43:9f:e9:18:76:4c:02:bf:25:e9:c8:8b:b1:0b: e9:9c:ea:b0:20:c3:c5:40:e6:af:ee:02:11:df:84: 93:e8:96:81:33:33:78:ae:dd:df:f9:01:7d:e6:ec: 72:4f:18:1e:d9:04:b5:16:81:03:9e:b2:7f:24:58: 69:83:3f:ac:64:7c:79:5b:d2:db:3e:2a:59:5d:15: 12:4e:a3:a6:55:53:3d:8f:1e:93:8c:85:52:56:cb: b3:a1:0c:74:e9:e1:c8:66:65:0e:2a:47:0d:f8:6b: bb:a1:f7:b3:4b:ae:3b:b2:e2:67:6c:40:23:af:c0: 04:f6:3f:5c:48:fc:81:39:8c:b9:51:ac:9e:01:c1: 84:17:cb:b1:8c:57:1f:6f:07:76:b5:d0:97:35:3c: 2f:5c:5d:49:2b:48:5e:af:fd:51:b3:46:44:89:24: d2:2a:7b:94:02:16:9a:8b:e6:36:12:56:25:65:60: fb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5B:62:D0:29:C9:07:15:BF:BA:3C:15:7B:9E:FA:B9:3E:6C:05:96 X509v3 Authority Key Identifier: keyid:A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/FVti0CnJBxW_ujwVe576uT5sBZY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.90.32.0/19 85.93.192.0/19 109.69.240.0/21 185.211.232.0/22 195.200.240.0/23 IPv6: 2001:1610::/29 Signature Algorithm: sha256WithRSAEncryption 7d:f9:f2:9a:7e:d2:87:43:80:7e:8b:8c:5b:96:64:e5:72:51: 20:fa:00:02:54:6f:56:04:b2:06:2c:ac:9f:a1:d8:e2:b7:22: 2a:74:e0:d5:d5:48:e3:6b:78:32:12:df:33:31:72:63:88:eb: f5:4e:12:2c:e9:c5:0c:ee:cc:15:2d:31:48:44:04:ec:14:31: 39:e2:45:27:b3:b4:3c:29:79:80:d9:01:19:7e:f4:17:64:90: 14:a0:14:27:0f:ea:b3:b8:2c:b5:7d:7f:82:f4:83:d9:c7:0f: 42:e1:ed:e8:d1:14:31:a7:14:48:ae:8e:9d:b6:cb:f0:a1:d3: 45:d7:13:b6:43:05:35:bc:2d:86:3f:4e:e9:89:3d:d3:29:ac: 17:01:95:82:b1:bf:7d:ac:cd:75:8b:ba:2a:79:48:c8:1f:33: 49:c5:71:06:6c:b8:b4:a1:16:7e:9f:55:f1:70:e4:f3:6a:fe: 41:a9:52:ca:ce:31:86:5f:de:0e:85:9a:90:b0:26:54:96:cf: d6:03:72:93:b5:2a:4a:cb:a1:bb:1f:70:16:98:19:21:bf:95: 22:b0:01:7a:70:3e:32:63:5e:61:e2:eb:ce:3b:b6:80:08:54: 27:7f:9c:9b:0d:4b:c4:e6:e3:59:9f:0d:b5:8e:cc:c0:44:22: 14:40:eb:c1 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt+OOiTosj6ebF8DrSh0CB1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YWJhNjNlODA2YTIxZDQ2MDM1Y2E2ZTlkMzQ1YjAzZGJj OGU1NTMwHhcNMjYwMTAyMTAyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTViNjJkMDI5YzkwNzE1YmZiYTNjMTU3YjllZmFiOTNlNmMwNTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo66dWUfjHsHwWwhv6AsnpMNaYa21 QzDJF1pzQs/Axx+DclHUC0fGjlthrK8PX4imCgO/JcCzli10LMW0zknjJ4/o5O1S 3WuZuoJ7Q5/pGHZMAr8l6ciLsQvpnOqwIMPFQOav7gIR34ST6JaBMzN4rt3f+QF9 5uxyTxge2QS1FoEDnrJ/JFhpgz+sZHx5W9LbPipZXRUSTqOmVVM9jx6TjIVSVsuz oQx06eHIZmUOKkcN+Gu7ofezS647suJnbEAjr8AE9j9cSPyBOYy5UayeAcGEF8ux jFcfbwd2tdCXNTwvXF1JK0her/1Rs0ZEiSTSKnuUAhaai+Y2ElYlZWD79QIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFBVbYtApyQcVv7o8FXue+rk+bAWWMB8GA1UdIwQY MBaAFKirpj6AaiHUYDXKbp00WwPbyOVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTg2ZGEtNTFkNC00NjE4LTk1Zjkt ZjRhMzllMThjZmI0LzEvRlZ0aTBDbkpCeFdfdWp3VmU1NzZ1VDVzQlpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi82MTg2ZGEtNTFkNC00NjE4LTk1ZjktZjRhMzllMThjZmI0 LzEvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQFUFogAwQF VV3AAwQDbUXwAwQCudPoAwQBw8jwMA0EAgACMAcDBQMgARYQMA0GCSqGSIb3DQEB CwUAA4IBAQB9+fKaftKHQ4B+i4xblmTlclEg+gACVG9WBLIGLKyfodjityIqdODV 1Ujja3gyEt8zMXJjiOv1ThIs6cUM7swVLTFIRATsFDE54kUns7Q8KXmA2QEZfvQX ZJAUoBQnD+qzuCy1fX+C9IPZxw9C4e3o0RQxpxRIro6dtsvwodNF1xO2QwU1vC2G P07piT3TKawXAZWCsb99rM11i7oqeUjIHzNJxXEGbLi0oRZ+n1XxcOTzav5BqVLK zjGGX94OhZqQsCZUls/WA3KTtSpKy6G7H3AWmBkhv5UisAF6cD4yY15h4uvOO7aA CFQnf5ybDUvE5uNZnw21jszARCIUQOvB -----END CERTIFICATE-----Generated at Mon Jan 19 18:06:01 2026 by rpki-client