This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/FvWk7ZFUzYMXdurfDb5I7qSsm-w.roa File: FvWk7ZFUzYMXdurfDb5I7qSsm-w.roa (raw, json) Hash identifier: qTbl4NTq62nI1e2eOQ+PRcMBLw7F9yXGF00ckT1wuOc= Subject key identifier: 16:F5:A4:ED:91:54:CD:83:17:76:EA:DF:0D:BE:48:EE:A4:AC:9B:EC Certificate issuer: /CN=be604ff35a29c91156be4bd229b3baf77c8397bd Certificate serial: 019B7B365CC5C0FF6C7D2794346DD673CCEA Authority key identifier: BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/FvWk7ZFUzYMXdurfDb5I7qSsm-w.roa Signing time: Thu 01 Jan 2026 20:18:38 +0000 ROA not before: Thu 01 Jan 2026 20:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208795 IP address blocks: 5.35.104.0/21 maxlen: 24 94.131.80.0/20 maxlen: 24 94.131.176.0/20 maxlen: 24 194.116.140.0/24 maxlen: 24 2a07:aa40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.crl rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:5c:c5:c0:ff:6c:7d:27:94:34:6d:d6:73:cc:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be604ff35a29c91156be4bd229b3baf77c8397bd Validity Not Before: Jan 1 20:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16f5a4ed9154cd831776eadf0dbe48eea4ac9bec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d5:d6:f6:e3:06:30:c8:fe:7f:87:e4:6a:84: bc:2e:ce:47:98:8d:da:85:44:1e:e6:e7:8c:51:a9: f3:ff:5f:64:e7:6e:b4:81:85:03:98:a9:21:8b:49: f1:eb:41:37:d4:23:f3:fe:eb:28:37:8e:c3:2e:da: cd:4a:70:4a:5f:c8:eb:b2:c4:d2:be:15:e7:8c:fa: b9:0e:4b:60:b6:28:d1:be:0b:71:d9:38:85:84:04: 51:9f:01:c4:f2:2a:ee:1a:f6:38:fd:6c:e8:a9:4e: 17:7a:c2:9d:36:8a:b3:44:ae:de:65:52:9f:09:97: 09:f7:0d:15:45:03:ea:fc:fc:25:15:ec:23:08:95: bd:04:76:4a:fd:07:31:9a:a8:4f:f0:57:40:48:ba: af:5d:a2:cf:07:0d:70:e5:b8:19:30:52:9a:0c:f8: 80:c7:b2:bf:7c:14:a9:2b:ab:32:31:93:8a:af:aa: 52:62:12:f8:ca:9e:7b:9b:01:8f:7a:b4:53:21:d9: 0c:61:33:de:bc:ef:6c:3a:ea:f8:ad:54:5e:aa:03: bb:ed:6b:45:c5:5e:25:c2:42:89:6b:4e:1a:64:f2: 9e:d7:98:cc:6c:52:1d:cd:37:93:e9:59:c0:a5:65: d5:8b:55:a6:6f:54:82:ba:fd:f4:ce:4b:0c:a5:68: 21:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F5:A4:ED:91:54:CD:83:17:76:EA:DF:0D:BE:48:EE:A4:AC:9B:EC X509v3 Authority Key Identifier: keyid:BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/FvWk7ZFUzYMXdurfDb5I7qSsm-w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.35.104.0/21 94.131.80.0/20 94.131.176.0/20 194.116.140.0/24 IPv6: 2a07:aa40::/29 Signature Algorithm: sha256WithRSAEncryption 6d:88:05:2d:d0:4b:f6:a5:49:ce:75:a6:cf:28:19:c1:04:d0: 1d:35:4b:fb:ad:8d:91:a5:a2:20:ba:f8:ba:b8:2d:a7:c3:8a: 4b:7d:fa:10:37:93:98:cc:7e:ee:b9:64:0a:b4:ef:0c:2f:50: b8:6e:a8:83:00:ef:75:17:9e:88:57:5f:83:48:0d:81:06:a3: 04:3e:33:57:1f:e3:c6:79:4f:dc:0f:b4:b9:62:64:7e:0e:7c: aa:e1:83:b5:88:d8:01:af:7a:79:05:61:3d:08:19:51:3b:39: 56:ab:de:b0:4b:d3:8e:64:f7:46:92:b0:44:20:ab:0b:0f:be: 56:29:94:e5:77:19:eb:f8:0f:8d:67:82:f5:57:8d:7c:ef:fe: 98:ed:b4:29:14:4b:7a:59:f7:48:5c:26:cd:78:e8:92:48:ff: c4:c1:55:fd:d9:6d:9c:97:75:9d:8b:6f:5a:4b:06:c1:40:df: a6:e0:0f:ec:e3:1a:2f:fb:a8:3e:67:cc:59:a5:42:f6:54:b5: 8e:38:eb:ad:e2:cb:6a:d7:d0:3f:d8:63:87:58:70:d4:fa:ba: d8:6f:94:d1:ee:38:7c:9c:47:71:3d:99:55:38:0b:9b:6f:8b: f9:96:b1:9e:e6:be:3c:f9:35:83:92:f1:25:49:a0:d9:c0:cf: 43:0c:77:9c -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt7NlzFwP9sfSeUNG3Wc8zqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNjA0ZmYzNWEyOWM5MTE1NmJlNGJkMjI5YjNiYWY3N2M4 Mzk3YmQwHhcNMjYwMTAxMjAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmY1YTRlZDkxNTRjZDgzMTc3NmVhZGYwZGJlNDhlZWE0YWM5YmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9XW9uMGMMj+f4fkaoS8Ls5HmI3a hUQe5ueMUanz/19k5260gYUDmKkhi0nx60E31CPz/usoN47DLtrNSnBKX8jrssTS vhXnjPq5DktgtijRvgtx2TiFhARRnwHE8iruGvY4/WzoqU4XesKdNoqzRK7eZVKf CZcJ9w0VRQPq/PwlFewjCJW9BHZK/QcxmqhP8FdASLqvXaLPBw1w5bgZMFKaDPiA x7K/fBSpK6syMZOKr6pSYhL4yp57mwGPerRTIdkMYTPevO9sOur4rVReqgO77WtF xV4lwkKJa04aZPKe15jMbFIdzTeT6VnApWXVi1Wmb1SCuv30zksMpWghGQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFBb1pO2RVM2DF3bq3w2+SO6krJvsMB8GA1UdIwQY MBaAFL5gT/NaKckRVr5L0imzuvd8g5e9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdm1CUDgxb3B5UkZXdmt2U0tiTzY5M3lEbDcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lODQ5YmItMTMwNC00NGVhLTgzOGYt MWEzOWMzZDM0ZjA4LzEvRnZXazdaRlV6WU1YZHVyZkRiNUk3cVNzbS13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9lODQ5YmItMTMwNC00NGVhLTgzOGYtMWEzOWMzZDM0ZjA4 LzEvdm1CUDgxb3B5UkZXdmt2U0tiTzY5M3lEbDcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDBSNoAwQE XoNQAwQEXoOwAwQAwnSMMA0EAgACMAcDBQMqB6pAMA0GCSqGSIb3DQEBCwUAA4IB AQBtiAUt0Ev2pUnOdabPKBnBBNAdNUv7rY2RpaIguvi6uC2nw4pLffoQN5OYzH7u uWQKtO8ML1C4bqiDAO91F56IV1+DSA2BBqMEPjNXH+PGeU/cD7S5YmR+Dnyq4YO1 iNgBr3p5BWE9CBlROzlWq96wS9OOZPdGkrBEIKsLD75WKZTldxnr+A+NZ4L1V418 7/6Y7bQpFEt6WfdIXCbNeOiSSP/EwVX92W2cl3Wdi29aSwbBQN+m4A/s4xov+6g+ Z8xZpUL2VLWOOOut4stq19A/2GOHWHDU+rrYb5TR7jh8nEdxPZlVOAubb4v5lrGe 5r48+TWDkvElSaDZwM9DDHec -----END CERTIFICATE-----Generated at Mon Feb 9 20:45:38 2026 by rpki-client