This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/FvV4UNNN1I3u5_f_mw8uvFShvcA.roa File: FvV4UNNN1I3u5_f_mw8uvFShvcA.roa (raw, json) Hash identifier: qoCza9pR6RXvspT8eRTV0uWK0mL3e+fmf3gOpC7a0Ko= Subject key identifier: 16:F5:78:50:D3:4D:D4:8D:EE:E7:F7:FF:9B:0F:2E:BC:54:A1:BD:C0 Certificate issuer: /CN=e20f87dab96b50f76eea49b181ea94d26a205327 Certificate serial: 019B7D5CDE6A1559FE147028FE1C0AE3B846 Authority key identifier: E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/FvV4UNNN1I3u5_f_mw8uvFShvcA.roa Signing time: Fri 02 Jan 2026 06:19:56 +0000 ROA not before: Fri 02 Jan 2026 06:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29148 IP address blocks: 87.239.56.0/21 maxlen: 21 91.221.110.0/23 maxlen: 23 91.221.110.0/24 maxlen: 24 91.221.111.0/24 maxlen: 24 185.228.212.0/23 maxlen: 23 185.228.212.0/24 maxlen: 24 185.228.213.0/24 maxlen: 24 185.228.214.0/23 maxlen: 23 185.228.214.0/24 maxlen: 24 185.228.215.0/24 maxlen: 24 2a0d:4a00::/32 maxlen: 36 2a0d:4a00:a000::/36 maxlen: 36 2a0d:4a00:b000::/36 maxlen: 36 2a0d:4a00:c000::/36 maxlen: 36 2a0d:4a00:d000::/36 maxlen: 36 2a0d:4a00:e000::/36 maxlen: 36 2a0d:4a00:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:de:6a:15:59:fe:14:70:28:fe:1c:0a:e3:b8:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e20f87dab96b50f76eea49b181ea94d26a205327 Validity Not Before: Jan 2 06:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16f57850d34dd48deee7f7ff9b0f2ebc54a1bdc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:22:01:75:e7:6e:07:fd:8d:25:89:10:38:99: b8:7c:9f:89:cf:27:43:51:d0:ae:52:f1:c1:2d:10: 9e:47:10:b2:b8:af:8e:6a:e3:70:e8:5a:a2:86:c1: d6:74:e3:ef:f3:e1:3e:d8:a7:e8:d4:16:1d:5d:7f: 48:0a:a2:b0:5f:6a:7b:90:a4:b3:cf:4b:e0:b0:34: 6f:eb:45:99:ed:de:f6:8d:35:94:ed:04:37:4d:a3: d4:3f:99:50:09:93:77:59:7f:49:92:68:d9:0d:53: 25:73:da:5a:a9:85:4c:6c:5b:f0:3b:e2:3f:ff:77: 88:ba:01:a6:41:74:63:f0:92:ec:05:09:ac:c7:24: 30:26:86:40:68:e1:cb:4d:f0:7d:1c:c4:f2:02:60: 4d:25:c0:b3:73:52:11:b7:cf:60:37:ff:30:52:41: 95:87:ca:20:40:03:c3:13:53:e0:74:a8:28:9f:c4: 83:8b:f7:ee:7f:8a:41:c9:dc:ca:79:01:c9:43:c6: c6:3c:16:f3:c5:51:ec:29:42:bf:a9:ae:80:c0:d6: 74:cc:6f:c7:af:3d:f7:c8:65:d5:2f:14:a6:1f:a2: 82:83:2f:6e:0f:d8:9c:52:03:82:11:36:66:6d:74: 0d:66:49:a9:da:ea:19:a2:56:13:af:b3:e4:78:80: df:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F5:78:50:D3:4D:D4:8D:EE:E7:F7:FF:9B:0F:2E:BC:54:A1:BD:C0 X509v3 Authority Key Identifier: keyid:E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/FvV4UNNN1I3u5_f_mw8uvFShvcA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.239.56.0/21 91.221.110.0/23 185.228.212.0/22 IPv6: 2a0d:4a00::/32 Signature Algorithm: sha256WithRSAEncryption 1f:8f:78:f9:70:93:f6:b6:70:45:6e:3c:70:91:68:67:b3:d2: dc:b5:15:4b:4b:8e:20:6f:1b:ac:2d:b2:30:a6:24:4e:c3:f6: 33:e2:3a:f7:b0:0f:42:05:c9:83:b4:24:6b:ad:c1:b9:30:a1: 99:f4:ef:e6:39:93:a4:2c:e6:4f:1a:79:f6:e1:e6:8d:da:42: f6:12:c0:0c:b0:f3:d4:c2:0b:e7:9b:70:83:89:52:5d:05:7d: 26:81:65:2b:4c:c5:b8:74:9c:5e:06:53:e9:54:83:f2:bc:d7: 07:18:16:b8:82:26:13:2f:55:0e:2f:d7:2a:2d:0c:c1:af:f8: 4b:37:2d:ae:ef:59:6a:f4:e4:3c:c4:c2:65:29:41:b0:b5:8b: a3:b9:c7:c5:a6:42:da:81:52:fc:07:de:14:f1:a8:c1:f5:87: 33:bb:5e:82:81:2e:a1:5a:b3:cd:35:3a:32:e1:82:9e:c2:0f: 7f:ed:7b:a4:60:c3:0d:b6:cc:db:74:c1:ac:47:49:2d:36:49: d8:01:a9:bc:f3:41:d2:30:b4:49:35:32:ec:a9:65:a5:db:29: 02:67:17:ed:50:c7:6f:26:cb:ea:bd:b8:98:67:27:b7:d2:57: b7:79:3b:51:46:a5:42:48:51:c5:8e:21:3f:33:29:15:d2:4f: a6:56:0b:65 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9XN5qFVn+FHAo/hwK47hGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMGY4N2RhYjk2YjUwZjc2ZWVhNDliMTgxZWE5NGQyNmEy MDUzMjcwHhcNMjYwMTAyMDYxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmY1Nzg1MGQzNGRkNDhkZWVlN2Y3ZmY5YjBmMmViYzU0YTFiZGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCIBdeduB/2NJYkQOJm4fJ+JzydD UdCuUvHBLRCeRxCyuK+OauNw6FqihsHWdOPv8+E+2Kfo1BYdXX9ICqKwX2p7kKSz z0vgsDRv60WZ7d72jTWU7QQ3TaPUP5lQCZN3WX9JkmjZDVMlc9paqYVMbFvwO+I/ /3eIugGmQXRj8JLsBQmsxyQwJoZAaOHLTfB9HMTyAmBNJcCzc1IRt89gN/8wUkGV h8ogQAPDE1PgdKgon8SDi/fuf4pBydzKeQHJQ8bGPBbzxVHsKUK/qa6AwNZ0zG/H rz33yGXVLxSmH6KCgy9uD9icUgOCETZmbXQNZkmp2uoZolYTr7PkeIDf9QIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFBb1eFDTTdSN7uf3/5sPLrxUob3AMB8GA1UdIwQY MBaAFOIPh9q5a1D3bupJsYHqlNJqIFMnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGctSDJybHJVUGR1NmtteGdlcVUwbW9nVXljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zZmJhMDUtZGFlZC00M2I3LWI4NzAt ZmEwMmMxMjY1ZDVlLzEvRnZWNFVOTk4xSTN1NV9mX213OHV2RlNodmNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8zZmJhMDUtZGFlZC00M2I3LWI4NzAtZmEwMmMxMjY1ZDVl LzEvNGctSDJybHJVUGR1NmtteGdlcVUwbW9nVXljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDV+84AwQB W91uAwQCueTUMA0EAgACMAcDBQAqDUoAMA0GCSqGSIb3DQEBCwUAA4IBAQAfj3j5 cJP2tnBFbjxwkWhns9LctRVLS44gbxusLbIwpiROw/Yz4jr3sA9CBcmDtCRrrcG5 MKGZ9O/mOZOkLOZPGnn24eaN2kL2EsAMsPPUwgvnm3CDiVJdBX0mgWUrTMW4dJxe BlPpVIPyvNcHGBa4giYTL1UOL9cqLQzBr/hLNy2u71lq9OQ8xMJlKUGwtYujucfF pkLagVL8B94U8ajB9Yczu16CgS6hWrPNNToy4YKewg9/7XukYMMNtszbdMGsR0kt NknYAam880HSMLRJNTLsqWWl2ykCZxftUMdvJsvqvbiYZye30le3eTtRRqVCSFHF jiE/MykV0k+mVgtl -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:52 2026 by rpki-client