This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/FoEw3sSBgl3t0ttG82J0ACX5bo8.roa File: FoEw3sSBgl3t0ttG82J0ACX5bo8.roa (raw, json) Hash identifier: MuH9TiWx0hlkjcPkeOxwnOHNyUeFkmZNNs45DwxLq/w= Subject key identifier: 16:81:30:DE:C4:81:82:5D:ED:D2:DB:46:F3:62:74:00:25:F9:6E:8F Certificate issuer: /CN=d7622be88a5ceaef8c330d7e96fff435e82053b4 Certificate serial: 019B7AC912F3FCECF0F86E21C3DE5C9D8078 Authority key identifier: D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/FoEw3sSBgl3t0ttG82J0ACX5bo8.roa Signing time: Thu 01 Jan 2026 18:19:16 +0000 ROA not before: Thu 01 Jan 2026 18:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 91.234.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:12:f3:fc:ec:f0:f8:6e:21:c3:de:5c:9d:80:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7622be88a5ceaef8c330d7e96fff435e82053b4 Validity Not Before: Jan 1 18:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=168130dec481825dedd2db46f362740025f96e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fe:6c:eb:f2:a0:05:71:95:24:21:42:f6:1e: ef:8a:95:f8:bc:8e:64:12:8d:7f:f2:62:d3:c6:2e: eb:5b:27:c5:a4:4e:03:14:17:d9:18:cd:7b:1d:d8: b3:50:b5:93:87:27:b3:65:0a:3a:2d:f8:82:20:da: 88:20:10:f2:8e:e5:6f:ba:52:fc:23:6e:6d:a3:7b: 16:99:f6:0e:ed:dc:c0:fe:72:f9:1b:ae:4f:65:8b: ec:57:76:dd:7f:fa:d1:b3:51:87:45:d2:12:e5:6c: de:91:7a:73:a0:6d:db:14:d7:8d:de:a5:44:bd:9c: d2:5f:65:5c:f7:36:0c:05:48:a5:56:ec:e6:4d:f2: 15:bc:9b:f5:88:e1:2e:e0:05:91:70:5e:5c:26:6e: a6:ed:30:57:6e:81:1b:f0:82:5e:d2:56:f5:73:b8: 2e:91:80:b4:65:e2:5c:e0:77:7b:57:d1:c8:46:b7: 67:c3:a8:68:fb:4a:65:27:62:c5:72:73:79:72:31: 9a:7a:47:7a:4f:3c:6d:7b:87:f7:ab:3f:e6:76:e0: 6f:10:1e:4f:1c:10:b5:af:be:24:77:3e:89:d4:68: 22:2e:ab:d9:a8:bb:f2:ec:1e:e7:25:c3:c8:ae:1b: 49:89:53:16:15:04:27:df:6e:bb:17:b1:3e:fb:ac: 79:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:81:30:DE:C4:81:82:5D:ED:D2:DB:46:F3:62:74:00:25:F9:6E:8F X509v3 Authority Key Identifier: keyid:D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/FoEw3sSBgl3t0ttG82J0ACX5bo8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.239.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:21:20:2c:16:71:cd:2c:1d:74:41:2f:93:77:01:b5:0f:62: 6f:21:45:59:37:60:c7:9d:28:62:6a:bf:12:76:f8:77:26:1f: 74:6f:4c:b3:47:82:2c:53:95:74:a9:a8:3d:66:9f:97:f7:f3: 55:a6:23:29:48:53:01:b2:3a:9c:5a:13:07:41:fd:85:a0:a7: 33:e1:4f:6f:5a:7f:ae:38:cb:95:e8:71:ff:c3:e8:97:76:fd: 65:1b:7f:2f:5d:d9:ed:6a:5f:9e:3c:1f:06:89:4f:cc:5b:1c: a4:2f:73:2e:35:df:41:1c:8d:ae:82:6d:0a:63:00:35:e8:07: e4:4a:f8:c6:46:e2:fe:d4:c0:ec:49:65:9b:51:28:6b:ce:44: 09:f0:36:2f:ee:fa:4b:8c:75:03:f0:16:f6:a6:20:20:7d:86: 71:d2:d6:42:61:d7:01:99:ee:23:14:7f:2a:61:a7:2f:80:46: d0:9a:b9:6f:50:51:3a:f3:50:97:4f:3a:2b:00:d2:1c:c1:a3: e1:4e:0f:21:22:60:88:81:01:5e:f8:af:ba:78:87:7a:c8:ea: b1:6e:15:32:49:3d:5f:30:13:e1:fa:bb:ed:ed:7b:84:20:5a: d0:9d:96:b0:1d:d1:08:c1:5e:1b:59:26:f8:37:9e:a5:8b:42: 3f:ae:3e:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yRLz/Ozw+G4hw95cnYB4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NjIyYmU4OGE1Y2VhZWY4YzMzMGQ3ZTk2ZmZmNDM1ZTgy MDUzYjQwHhcNMjYwMTAxMTgxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjgxMzBkZWM0ODE4MjVkZWRkMmRiNDZmMzYyNzQwMDI1Zjk2ZThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP5s6/KgBXGVJCFC9h7vipX4vI5k Eo1/8mLTxi7rWyfFpE4DFBfZGM17HdizULWThyezZQo6LfiCINqIIBDyjuVvulL8 I25to3sWmfYO7dzA/nL5G65PZYvsV3bdf/rRs1GHRdIS5WzekXpzoG3bFNeN3qVE vZzSX2Vc9zYMBUilVuzmTfIVvJv1iOEu4AWRcF5cJm6m7TBXboEb8IJe0lb1c7gu kYC0ZeJc4Hd7V9HIRrdnw6ho+0plJ2LFcnN5cjGaekd6Tzxte4f3qz/mduBvEB5P HBC1r74kdz6J1GgiLqvZqLvy7B7nJcPIrhtJiVMWFQQn3267F7E++6x5VwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBaBMN7EgYJd7dLbRvNidAAl+W6PMB8GA1UdIwQY MBaAFNdiK+iKXOrvjDMNfpb/9DXoIFO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJJcjZJcGM2dS1NTXcxLWx2XzBOZWdnVTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jMGE5NzEtZDk2Zi00M2Q0LWE4YmMt MzA2MjUzMTc0MzBkLzEvRm9FdzNzU0JnbDN0MHR0RzgySjBBQ1g1Ym84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9jMGE5NzEtZDk2Zi00M2Q0LWE4YmMtMzA2MjUzMTc0MzBk LzEvMTJJcjZJcGM2dS1NTXcxLWx2XzBOZWdnVTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+rvMA0G CSqGSIb3DQEBCwUAA4IBAQBsISAsFnHNLB10QS+TdwG1D2JvIUVZN2DHnShiar8S dvh3Jh90b0yzR4IsU5V0qag9Zp+X9/NVpiMpSFMBsjqcWhMHQf2FoKcz4U9vWn+u OMuV6HH/w+iXdv1lG38vXdntal+ePB8GiU/MWxykL3MuNd9BHI2ugm0KYwA16Afk SvjGRuL+1MDsSWWbUShrzkQJ8DYv7vpLjHUD8Bb2piAgfYZx0tZCYdcBme4jFH8q YacvgEbQmrlvUFE681CXTzorANIcwaPhTg8hImCIgQFe+K+6eId6yOqxbhUyST1f MBPh+rvt7XuEIFrQnZawHdEIwV4bWSb4N56li0I/rj6Y -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:38 2026 by rpki-client