This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/fjtIBl8uGYXx5FbFWQCduXCWshw.roa File: fjtIBl8uGYXx5FbFWQCduXCWshw.roa (raw, json) Hash identifier: zrVzd80Zje4kj+P47bbID7HmrvjHSL/sLV713Qnk0iQ= Subject key identifier: 7E:3B:48:06:5F:2E:19:85:F1:E4:56:C5:59:00:9D:B9:70:96:B2:1C Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F853D8D6ED0FE6E16E618C5CC43F4DD Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/fjtIBl8uGYXx5FbFWQCduXCWshw.roa Signing time: Fri 02 Jan 2026 16:23:16 +0000 ROA not before: Fri 02 Jan 2026 16:23:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54903 IP address blocks: 91.242.64.0/22 maxlen: 22 91.242.71.0/24 maxlen: 24 91.242.81.0/24 maxlen: 24 91.242.83.0/24 maxlen: 24 91.242.100.0/23 maxlen: 23 91.242.107.0/24 maxlen: 24 91.242.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:3d:8d:6e:d0:fe:6e:16:e6:18:c5:cc:43:f4:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e3b48065f2e1985f1e456c559009db97096b21c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:69:77:d6:8d:a0:16:5b:1e:e2:39:7c:1d:17: 6f:7a:45:3f:b4:dd:19:6b:70:e4:e1:64:c0:f2:e9: f8:7f:b5:ab:f4:5a:0d:b3:12:68:18:0c:4b:f9:31: ca:85:85:d9:03:dc:de:1f:e3:90:54:3c:09:18:84: e9:23:fc:7e:28:26:8c:f8:29:3f:28:a9:10:eb:68: 1d:5c:84:f9:9f:8f:27:40:fe:11:82:66:ab:56:d9: 15:38:2a:af:84:d9:43:d4:28:2e:03:03:7c:b7:7f: 49:b5:bd:2c:1b:cc:7d:dc:79:c6:52:c1:bf:29:cf: c0:bc:55:b3:4d:72:27:55:fd:62:71:1e:56:fb:5b: 6f:1f:1e:36:69:46:74:2b:e5:eb:ae:5c:69:0e:89: b4:a2:3d:9a:8a:28:8c:fe:34:f5:41:c3:74:4e:f4: fe:32:22:f7:19:79:28:5f:35:32:7a:7f:a3:a3:aa: 5e:a7:eb:05:1d:6d:34:36:d2:46:ce:e2:6e:c7:78: b4:3a:e1:88:ec:85:4b:d0:bd:3c:8f:b8:87:c9:00: 52:3a:3a:7b:8f:26:de:dd:f0:34:f2:c3:36:28:55: f0:aa:24:ee:5a:eb:5e:ac:7f:5c:0f:8f:c0:c2:5b: a7:e3:e5:b9:6d:ed:34:5c:9d:4f:34:21:b9:96:75: ad:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:3B:48:06:5F:2E:19:85:F1:E4:56:C5:59:00:9D:B9:70:96:B2:1C X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/fjtIBl8uGYXx5FbFWQCduXCWshw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.242.64.0/22 91.242.71.0/24 91.242.81.0/24 91.242.83.0/24 91.242.100.0/23 91.242.107.0-91.242.111.255 Signature Algorithm: sha256WithRSAEncryption 50:60:39:90:8b:81:db:43:5d:46:be:73:cd:7d:2f:82:70:d3: ac:93:a8:f2:49:89:65:35:75:17:36:25:2a:a4:1b:e9:c5:e5: f0:f7:3e:a0:d9:ec:7e:5b:7b:93:61:d5:74:62:a7:83:d6:ab: 65:76:fc:c5:d5:84:eb:c6:25:e5:30:0e:c2:ea:98:50:c0:cc: 80:93:23:42:76:b8:d4:5d:61:7c:41:0a:29:5d:1c:e3:ca:43: e9:27:41:f5:71:f7:4a:8c:e4:a9:d7:99:1d:a1:db:d6:d2:92: 17:32:92:e0:62:01:f3:7e:ed:14:ed:ae:56:be:61:c7:a6:2e: eb:50:02:13:0a:9d:94:24:bf:89:44:a9:72:17:94:77:36:94: 4e:96:9b:3c:0a:c8:a7:14:f8:6b:88:c8:e0:0f:49:a9:d7:7c: fc:f6:b6:3c:0d:7b:8a:9f:f3:ab:f5:27:ad:14:ed:6a:f3:c6: b6:1c:2d:53:f7:fc:a4:b2:e8:fb:ca:d6:f2:7c:c4:09:f9:a5: 81:33:12:e8:25:ae:0e:57:09:99:81:92:4c:74:72:c2:15:4a: 33:85:bb:22:ed:c6:0a:d5:13:3d:d3:08:da:be:e2:7d:cb:7c: d2:23:6b:ae:e0:e6:84:d8:fb:e3:94:3f:1d:51:a4:5a:3e:53: e5:53:d9:b5 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt/hT2NbtD+bhbmGMXMQ/TdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTNiNDgwNjVmMmUxOTg1ZjFlNDU2YzU1OTAwOWRiOTcwOTZiMjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlml31o2gFlse4jl8HRdvekU/tN0Z a3Dk4WTA8un4f7Wr9FoNsxJoGAxL+THKhYXZA9zeH+OQVDwJGITpI/x+KCaM+Ck/ KKkQ62gdXIT5n48nQP4RgmarVtkVOCqvhNlD1CguAwN8t39Jtb0sG8x93HnGUsG/ Kc/AvFWzTXInVf1icR5W+1tvHx42aUZ0K+XrrlxpDom0oj2aiiiM/jT1QcN0TvT+ MiL3GXkoXzUyen+jo6pep+sFHW00NtJGzuJux3i0OuGI7IVL0L08j7iHyQBSOjp7 jybe3fA08sM2KFXwqiTuWuterH9cD4/Awlun4+W5be00XJ1PNCG5lnWt0QIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFH47SAZfLhmF8eRWxVkAnblwlrIcMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvZmp0SUJsOHVHWVh4NUZiRldRQ2R1WENXc2h3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQCW/JAAwQA W/JHAwQAW/JRAwQAW/JTAwQBW/JkMAwDBABb8msDBARb8mAwDQYJKoZIhvcNAQEL BQADggEBAFBgOZCLgdtDXUa+c819L4Jw06yTqPJJiWU1dRc2JSqkG+nF5fD3PqDZ 7H5be5Nh1XRip4PWq2V2/MXVhOvGJeUwDsLqmFDAzICTI0J2uNRdYXxBCildHOPK Q+knQfVx90qM5KnXmR2h29bSkhcykuBiAfN+7RTtrla+YcemLutQAhMKnZQkv4lE qXIXlHc2lE6WmzwKyKcU+GuIyOAPSanXfPz2tjwNe4qf86v1J60U7WrzxrYcLVP3 /KSy6PvK1vJ8xAn5pYEzEuglrg5XCZmBkkx0csIVSjOFuyLtxgrVEz3TCNq+4n3L fNIja67g5oTY++OUPx1RpFo+U+VT2bU= -----END CERTIFICATE-----Generated at Wed Jan 21 15:37:15 2026 by rpki-client