This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/fYsmeN-jCqvumQk1ANzN0bj9fD0.roa File: fYsmeN-jCqvumQk1ANzN0bj9fD0.roa (raw, json) Hash identifier: HXWJlZSBJsNOWJXHSVdFO/BZWcCQBKxp4a6Uo9maQhA= Subject key identifier: 7D:8B:26:78:DF:A3:0A:AB:EE:99:09:35:00:DC:CD:D1:B8:FD:7C:3D Certificate issuer: /CN=324947c0aecefe87f9db96e5b45beb10aeb987a6 Certificate serial: 019B7C7FFCB19C29BDB56E752227EAB5D4AC Authority key identifier: 32:49:47:C0:AE:CE:FE:87:F9:DB:96:E5:B4:5B:EB:10:AE:B9:87:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MklHwK7O_of525bltFvrEK65h6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/fYsmeN-jCqvumQk1ANzN0bj9fD0.roa Signing time: Fri 02 Jan 2026 02:18:41 +0000 ROA not before: Fri 02 Jan 2026 02:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49627 IP address blocks: 91.232.130.0/24 maxlen: 24 185.68.160.0/22 maxlen: 24 193.169.138.0/23 maxlen: 24 2a03:2c60::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/MklHwK7O_of525bltFvrEK65h6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:fc:b1:9c:29:bd:b5:6e:75:22:27:ea:b5:d4:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324947c0aecefe87f9db96e5b45beb10aeb987a6 Validity Not Before: Jan 2 02:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d8b2678dfa30aabee99093500dccdd1b8fd7c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6f:32:3d:fd:b1:f8:66:b1:b4:83:b4:11:e3: 72:16:55:3f:6f:2a:e0:30:4b:6f:ee:b1:c1:44:34: 8a:36:35:da:81:84:5e:ac:88:93:f2:53:41:38:cf: 60:1b:51:aa:21:79:a0:22:c9:f2:11:b4:81:53:f9: 03:69:3b:8e:83:4d:20:ef:f3:eb:53:8e:74:58:b3: cc:27:13:19:58:14:7a:a5:a3:d2:e8:3c:74:87:fc: 69:62:78:66:7e:ea:bb:d3:34:80:09:a2:25:16:00: 7b:e9:e1:9b:37:cd:47:91:58:8f:5e:12:c8:83:22: b1:9b:dc:cf:ec:bd:10:91:6e:3e:2b:5d:fa:d6:2f: a9:10:d8:13:77:43:ea:ea:11:e5:15:d3:70:85:05: ff:b4:33:50:07:bc:8c:2e:7e:08:01:31:00:2f:98: fd:7c:dd:61:04:c6:30:a9:e6:ad:28:ad:9f:6c:82: 48:fa:15:14:1e:cd:ab:49:1c:01:f8:5b:fc:e7:db: af:02:98:cb:0f:99:a1:12:c8:9c:46:93:52:ed:bc: a5:47:2c:7c:18:ea:c9:e5:1d:f3:cb:b1:43:6f:e2: 24:5b:49:c4:c8:b3:08:8f:99:b6:31:18:b4:8c:95: fb:a3:01:1e:56:8d:7a:84:29:64:5d:e4:d0:33:c5: 58:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:8B:26:78:DF:A3:0A:AB:EE:99:09:35:00:DC:CD:D1:B8:FD:7C:3D X509v3 Authority Key Identifier: keyid:32:49:47:C0:AE:CE:FE:87:F9:DB:96:E5:B4:5B:EB:10:AE:B9:87:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MklHwK7O_of525bltFvrEK65h6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/fYsmeN-jCqvumQk1ANzN0bj9fD0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.130.0/24 185.68.160.0/22 193.169.138.0/23 IPv6: 2a03:2c60::/32 Signature Algorithm: sha256WithRSAEncryption a0:f7:8b:2e:80:09:94:a6:7e:eb:f2:58:86:7a:ea:6f:c4:8d: 05:2f:2a:d8:1e:5e:a0:88:c1:03:42:08:d9:d2:f6:2c:86:15: cf:56:97:29:45:0f:2f:d6:36:cc:82:0a:82:ca:c8:97:d7:22: a4:e6:61:87:df:67:d3:41:48:db:32:29:60:05:68:d5:aa:a9: 0c:99:74:c0:8b:d4:d5:32:a9:09:f0:fb:4c:43:e6:3b:67:d5: f0:1b:3d:5d:13:f4:db:b3:a0:af:57:69:91:99:e5:b0:da:16: ee:45:31:49:67:e5:8c:4d:49:90:75:60:4c:fd:2b:6b:64:af: 60:3e:d0:a6:61:2d:14:8d:7d:b2:e1:e9:8a:92:90:1b:d9:f1: ad:08:12:70:ca:aa:89:e7:8a:51:83:8a:53:60:20:ab:5d:73: 9e:b3:78:d8:73:d6:a3:f4:21:4f:5a:48:ff:d0:94:63:a7:53: bb:df:8e:90:d2:08:fa:79:02:7f:a3:f8:c2:f2:96:57:1f:32: 95:dc:48:ec:38:e0:51:f5:c6:18:51:d1:9f:95:5f:f2:5b:1a: 98:73:09:4f:95:87:ee:83:5c:39:6d:5d:77:bb:23:bd:86:0f: 3e:b1:12:9f:d8:32:12:60:91:13:bd:7a:f7:4e:18:55:56:4a: f0:ce:02:c1 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt8f/yxnCm9tW51IifqtdSsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNDk0N2MwYWVjZWZlODdmOWRiOTZlNWI0NWJlYjEwYWVi OTg3YTYwHhcNMjYwMTAyMDIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDhiMjY3OGRmYTMwYWFiZWU5OTA5MzUwMGRjY2RkMWI4ZmQ3YzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA128yPf2x+GaxtIO0EeNyFlU/byrg MEtv7rHBRDSKNjXagYRerIiT8lNBOM9gG1GqIXmgIsnyEbSBU/kDaTuOg00g7/Pr U450WLPMJxMZWBR6paPS6Dx0h/xpYnhmfuq70zSACaIlFgB76eGbN81HkViPXhLI gyKxm9zP7L0QkW4+K1361i+pENgTd0Pq6hHlFdNwhQX/tDNQB7yMLn4IATEAL5j9 fN1hBMYwqeatKK2fbIJI+hUUHs2rSRwB+Fv859uvApjLD5mhEsicRpNS7bylRyx8 GOrJ5R3zy7FDb+IkW0nEyLMIj5m2MRi0jJX7owEeVo16hClkXeTQM8VYsQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFH2LJnjfowqr7pkJNQDczdG4/Xw9MB8GA1UdIwQY MBaAFDJJR8Cuzv6H+duW5bRb6xCuuYemMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtsSHdLN09fb2Y1MjVibHRGdnJFSzY1aDZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9hOGQzOGItMzE3Ni00Y2M1LWJiNGYt YzM2MmQyYTllMTIxLzEvZllzbWVOLWpDcXZ1bVFrMUFOek4wYmo5ZkQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9hOGQzOGItMzE3Ni00Y2M1LWJiNGYtYzM2MmQyYTllMTIx LzEvTWtsSHdLN09fb2Y1MjVibHRGdnJFSzY1aDZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAW+iCAwQC uUSgAwQBwamKMA0EAgACMAcDBQAqAyxgMA0GCSqGSIb3DQEBCwUAA4IBAQCg94su gAmUpn7r8liGeupvxI0FLyrYHl6giMEDQgjZ0vYshhXPVpcpRQ8v1jbMggqCysiX 1yKk5mGH32fTQUjbMilgBWjVqqkMmXTAi9TVMqkJ8PtMQ+Y7Z9XwGz1dE/Tbs6Cv V2mRmeWw2hbuRTFJZ+WMTUmQdWBM/StrZK9gPtCmYS0UjX2y4emKkpAb2fGtCBJw yqqJ54pRg4pTYCCrXXOes3jYc9aj9CFPWkj/0JRjp1O7346Q0gj6eQJ/o/jC8pZX HzKV3EjsOOBR9cYYUdGflV/yWxqYcwlPlYfug1w5bV13uyO9hg8+sRKf2DISYJET vXr3ThhVVkrwzgLB -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:04 2026 by rpki-client