This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/fpoDjOJ9QESVX1PbeV9GOhFqUeA.roa File: fpoDjOJ9QESVX1PbeV9GOhFqUeA.roa (raw, json) Hash identifier: nvenMpmvgQohsKJVJpGxy+qy+qgPY9hH3SAbWuq6Adk= Subject key identifier: 7E:9A:03:8C:E2:7D:40:44:95:5F:53:DB:79:5F:46:3A:11:6A:51:E0 Certificate issuer: /CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591 Certificate serial: 019B77590D3EA1C5FB8B5AD012D1CF887198 Authority key identifier: 45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/fpoDjOJ9QESVX1PbeV9GOhFqUeA.roa Signing time: Thu 01 Jan 2026 02:18:03 +0000 ROA not before: Thu 01 Jan 2026 02:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210484 IP address blocks: 146.19.89.0/24 maxlen: 24 194.164.182.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:0d:3e:a1:c5:fb:8b:5a:d0:12:d1:cf:88:71:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591 Validity Not Before: Jan 1 02:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e9a038ce27d4044955f53db795f463a116a51e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:03:5a:b6:50:cd:f7:b7:fa:00:63:c4:13:83: b1:9f:e6:8d:ed:04:99:30:e7:6a:00:6e:d9:4b:a6: 08:2f:59:48:28:4d:1f:f1:a0:15:b9:40:80:2d:d4: 95:4e:ec:95:fd:c7:45:3d:b8:f7:28:06:4a:bb:cf: 93:69:d8:a6:53:46:3c:d5:bd:ca:4a:e9:36:41:28: 6f:e3:33:7c:8f:33:0f:8b:a2:ae:81:c0:8f:43:bc: 7f:af:2b:df:5a:7a:72:b6:00:32:a1:7b:3f:77:2a: 06:a7:3e:dd:29:87:b8:0b:0e:7a:4d:9a:85:0b:fe: 82:0b:27:9b:6d:d4:68:25:fc:67:d5:31:56:a4:80: d8:b8:86:56:5e:dc:d6:44:56:d2:76:a2:6b:fc:33: 2d:e4:49:2a:2c:73:a7:e6:ef:d4:da:86:e8:75:b2: 37:ef:cd:01:47:42:ce:7a:10:60:06:33:a4:b7:43: ac:9f:63:ae:19:85:f2:be:75:2c:84:48:eb:3c:78: 57:ba:d0:4f:44:fd:a0:30:64:ef:8f:54:48:c5:47: 69:12:b6:f6:c2:ef:6f:9f:50:10:74:bf:0f:35:8a: 68:97:d5:90:dc:f2:4d:9b:52:3f:f3:84:91:ca:70: a8:ba:01:fd:ee:67:d4:c4:8d:07:df:ab:6a:3e:59: 18:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:9A:03:8C:E2:7D:40:44:95:5F:53:DB:79:5F:46:3A:11:6A:51:E0 X509v3 Authority Key Identifier: keyid:45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/fpoDjOJ9QESVX1PbeV9GOhFqUeA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.89.0/24 194.164.182.0/23 Signature Algorithm: sha256WithRSAEncryption 08:f9:d6:aa:b2:48:e7:2b:dd:38:09:66:6c:87:b2:f6:e3:e2: db:21:67:e7:a5:85:fe:5f:fc:70:d0:57:54:bc:a3:bc:07:20: 51:6a:67:0a:7c:cc:a2:b0:67:dd:cb:25:33:d5:43:73:46:a2: 2c:fa:e3:36:55:6c:a8:0e:58:b8:e0:03:bd:7a:61:09:57:0d: 3a:19:e3:b5:ef:b2:89:e8:fd:a7:91:61:19:6f:23:4c:63:dd: 43:cb:6d:ff:25:12:d3:e5:85:83:69:f1:f1:fa:0d:ea:75:4c: 64:bf:e8:e7:36:50:bb:37:32:30:5f:1f:ec:5e:8d:1b:32:2e: 92:a1:c1:e4:d7:29:a1:9d:63:c5:f8:de:a3:78:dc:05:b8:c3: a4:b2:39:4c:b9:7b:9d:24:7b:00:4c:c2:06:b7:53:99:3a:6a: 76:ce:c0:70:8f:a9:b7:51:8c:03:5e:a5:6e:df:cd:e0:52:d5: 23:b9:10:81:70:9b:2f:d7:ba:66:fa:51:71:c6:59:8e:71:05: 18:3e:29:53:0a:b5:0b:96:57:7e:4f:a0:e5:67:77:28:bf:66: b5:98:32:c6:46:1d:06:06:b8:ad:d2:ba:c5:77:64:24:2b:8a: 16:6b:c2:07:d3:94:32:22:a5:b7:99:2c:c3:9a:80:f4:ae:b4: 97:1d:c5:2a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WQ0+ocX7i1rQEtHPiHGYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1YzVjMTI2MmU4M2Q3YmZhOTAyYzJjODYyYTE1ZjFlNDJk MjU1OTEwHhcNMjYwMTAxMDIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTlhMDM4Y2UyN2Q0MDQ0OTU1ZjUzZGI3OTVmNDYzYTExNmE1MWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugNatlDN97f6AGPEE4Oxn+aN7QSZ MOdqAG7ZS6YIL1lIKE0f8aAVuUCALdSVTuyV/cdFPbj3KAZKu8+TadimU0Y81b3K Suk2QShv4zN8jzMPi6KugcCPQ7x/ryvfWnpytgAyoXs/dyoGpz7dKYe4Cw56TZqF C/6CCyebbdRoJfxn1TFWpIDYuIZWXtzWRFbSdqJr/DMt5EkqLHOn5u/U2obodbI3 780BR0LOehBgBjOkt0Osn2OuGYXyvnUshEjrPHhXutBPRP2gMGTvj1RIxUdpErb2 wu9vn1AQdL8PNYpol9WQ3PJNm1I/84SRynCougH97mfUxI0H36tqPlkY2QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFH6aA4zifUBElV9T23lfRjoRalHgMB8GA1UdIwQY MBaAFEXFwSYug9e/qQLCyGKhXx5C0lWRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmNYQkppNkQxNy1wQXNMSVlxRmZIa0xTVlpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9mNjg2YjItZmYzMy00MWUxLTliMWMt ZjEwNjAzYjM3NjhkLzEvZnBvRGpPSjlRRVNWWDFQYmVWOUdPaEZxVWVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9mNjg2YjItZmYzMy00MWUxLTliMWMtZjEwNjAzYjM3Njhk LzEvUmNYQkppNkQxNy1wQXNMSVlxRmZIa0xTVlpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkhNZAwQB wqS2MA0GCSqGSIb3DQEBCwUAA4IBAQAI+daqskjnK904CWZsh7L24+LbIWfnpYX+ X/xw0FdUvKO8ByBRamcKfMyisGfdyyUz1UNzRqIs+uM2VWyoDli44AO9emEJVw06 GeO177KJ6P2nkWEZbyNMY91Dy23/JRLT5YWDafHx+g3qdUxkv+jnNlC7NzIwXx/s Xo0bMi6SocHk1ymhnWPF+N6jeNwFuMOksjlMuXudJHsATMIGt1OZOmp2zsBwj6m3 UYwDXqVu383gUtUjuRCBcJsv17pm+lFxxlmOcQUYPilTCrULlld+T6DlZ3cov2a1 mDLGRh0GBrit0rrFd2QkK4oWa8IH05QyIqW3mSzDmoD0rrSXHcUq -----END CERTIFICATE-----Generated at Mon Feb 9 23:54:43 2026 by rpki-client