This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/feFpbgaA_8ODcMfVc_V_mfl727s.roa File: feFpbgaA_8ODcMfVc_V_mfl727s.roa (raw, json) Hash identifier: vDrb2+rFyQM8sOu/Abj+uxS/ki6Xx6oaox5voNWFwNA= Subject key identifier: 7D:E1:69:6E:06:80:FF:C3:83:70:C7:D5:73:F5:7F:99:F9:7B:DB:BB Certificate issuer: /CN=bdf9884aaa8bc4530a6fdad7926bffb69a7a5003 Certificate serial: 019BDA4E46DBF5412B0C79FE6F64E9634617 Authority key identifier: BD:F9:88:4A:AA:8B:C4:53:0A:6F:DA:D7:92:6B:FF:B6:9A:7A:50:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfmISqqLxFMKb9rXkmv_tpp6UAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/feFpbgaA_8ODcMfVc_V_mfl727s.roa Signing time: Tue 20 Jan 2026 07:28:41 +0000 ROA not before: Tue 20 Jan 2026 07:28:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209851 IP address blocks: 91.201.216.0/22 maxlen: 22 91.201.216.0/24 maxlen: 24 91.201.217.0/24 maxlen: 24 91.201.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.mft rsync://rpki.ripe.net/repository/DEFAULT/vfmISqqLxFMKb9rXkmv_tpp6UAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:4e:46:db:f5:41:2b:0c:79:fe:6f:64:e9:63:46:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdf9884aaa8bc4530a6fdad7926bffb69a7a5003 Validity Not Before: Jan 20 07:28:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7de1696e0680ffc38370c7d573f57f99f97bdbbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a7:31:80:b7:d5:5f:96:e5:22:e1:ca:be:20: 1c:75:22:ff:30:00:80:a5:2e:b5:51:7e:43:2d:a6: cf:56:29:67:3d:2b:6c:b9:3d:0c:8b:e6:42:45:b4: 9c:e6:b3:74:1c:41:31:d7:75:48:c7:cb:18:7d:d7: 75:5e:4d:9b:b3:d0:3e:f7:f4:25:3d:5b:02:96:7e: fe:82:52:03:7d:4a:02:94:50:aa:fa:3c:96:5f:8b: 5c:98:67:b4:9a:55:c3:4a:54:5e:25:d5:15:a1:00: f1:12:0c:6c:53:2c:8d:8f:ad:1e:89:1d:52:97:cd: 9c:81:54:0f:78:cf:76:cd:72:8e:8a:92:82:94:f2: c7:da:ea:36:bb:3a:0e:ed:c4:6d:75:c8:48:e9:20: 22:d2:f8:23:e4:3d:3b:ff:94:20:1e:e5:c9:63:7b: 3e:83:04:c8:a5:2b:a3:14:16:aa:fc:ef:02:6a:d8: 9a:f5:6e:40:a0:ae:00:e3:56:5d:0f:7a:09:54:a3: 86:ff:6d:dd:a4:63:5d:88:86:aa:00:75:5c:54:6e: b7:e0:ee:8a:b3:49:e8:b9:7b:f8:e4:a3:b7:51:be: 6a:a3:30:2c:34:9e:1b:00:af:c0:95:ae:0d:34:2b: f4:53:13:59:b4:bc:2f:f5:83:a6:27:0c:44:5f:db: 6d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E1:69:6E:06:80:FF:C3:83:70:C7:D5:73:F5:7F:99:F9:7B:DB:BB X509v3 Authority Key Identifier: keyid:BD:F9:88:4A:AA:8B:C4:53:0A:6F:DA:D7:92:6B:FF:B6:9A:7A:50:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfmISqqLxFMKb9rXkmv_tpp6UAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/feFpbgaA_8ODcMfVc_V_mfl727s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.201.216.0/22 Signature Algorithm: sha256WithRSAEncryption 26:4a:87:cc:54:03:a2:cc:be:3c:c1:b4:be:54:d5:75:e4:d8: ef:da:2f:64:11:71:83:84:bf:74:fe:fe:84:59:c5:b1:a9:f0: 14:52:b1:e6:d2:8b:1e:dc:17:81:96:84:90:b7:c1:9e:71:cb: 62:b8:58:53:85:de:2b:d8:8b:be:e6:fc:bd:2e:a2:5d:13:d7: 95:86:68:b4:10:42:96:ad:0b:66:41:c6:b7:3a:41:2a:1d:29: 17:10:a0:3f:fa:45:e4:f2:22:ea:d0:a3:63:5a:8d:5a:fc:4c: 4d:63:1a:8c:2c:28:26:aa:dd:6d:56:31:07:af:30:f8:d2:2e: 5a:b4:25:30:ce:99:5c:46:3a:0a:6a:46:c5:f3:7a:f9:a7:c7: 5a:fd:53:ab:32:0f:98:3f:b3:a1:a7:07:9d:07:b1:a5:88:b6: ee:0c:43:40:c5:40:f3:8f:7a:b8:77:31:09:86:67:91:7e:dd: f8:13:60:20:fd:c9:ea:42:4c:c6:9e:1e:a1:d3:6c:71:a2:a9: aa:2c:f1:ac:27:6d:f7:8d:d2:55:7b:4f:43:9c:1b:37:a3:e7: f8:fd:0c:e5:77:e9:5e:e4:d1:d6:6c:2c:6d:52:85:6f:0e:14: b8:5e:32:ed:90:9e:70:23:26:aa:03:12:04:92:c0:b0:cc:3b: 13:d3:f1:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvaTkbb9UErDHn+b2TpY0YXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZjk4ODRhYWE4YmM0NTMwYTZmZGFkNzkyNmJmZmI2OWE3 YTUwMDMwHhcNMjYwMTIwMDcyODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGUxNjk2ZTA2ODBmZmMzODM3MGM3ZDU3M2Y1N2Y5OWY5N2JkYmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9acxgLfVX5blIuHKviAcdSL/MACA pS61UX5DLabPVilnPStsuT0Mi+ZCRbSc5rN0HEEx13VIx8sYfdd1Xk2bs9A+9/Ql PVsCln7+glIDfUoClFCq+jyWX4tcmGe0mlXDSlReJdUVoQDxEgxsUyyNj60eiR1S l82cgVQPeM92zXKOipKClPLH2uo2uzoO7cRtdchI6SAi0vgj5D07/5QgHuXJY3s+ gwTIpSujFBaq/O8Catia9W5AoK4A41ZdD3oJVKOG/23dpGNdiIaqAHVcVG634O6K s0nouXv45KO3Ub5qozAsNJ4bAK/Ala4NNCv0UxNZtLwv9YOmJwxEX9tt7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH3haW4GgP/Dg3DH1XP1f5n5e9u7MB8GA1UdIwQY MBaAFL35iEqqi8RTCm/a15Jr/7aaelADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZtSVNxcUx4Rk1LYjlyWGttdl90cHA2VUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9lMzQ0YmMtMTY4Yi00ZjZlLWEwNWMt Yzg3OThlODg1MjdhLzEvZmVGcGJnYUFfOE9EY01mVmNfVl9tZmw3MjdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9lMzQ0YmMtMTY4Yi00ZjZlLWEwNWMtYzg3OThlODg1Mjdh LzEvdmZtSVNxcUx4Rk1LYjlyWGttdl90cHA2VUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8nYMA0G CSqGSIb3DQEBCwUAA4IBAQAmSofMVAOizL48wbS+VNV15Njv2i9kEXGDhL90/v6E WcWxqfAUUrHm0ose3BeBloSQt8GecctiuFhThd4r2Iu+5vy9LqJdE9eVhmi0EEKW rQtmQca3OkEqHSkXEKA/+kXk8iLq0KNjWo1a/ExNYxqMLCgmqt1tVjEHrzD40i5a tCUwzplcRjoKakbF83r5p8da/VOrMg+YP7OhpwedB7GliLbuDENAxUDzj3q4dzEJ hmeRft34E2Ag/cnqQkzGnh6h02xxoqmqLPGsJ233jdJVe09DnBs3o+f4/Qzld+le 5NHWbCxtUoVvDhS4XjLtkJ5wIyaqAxIEksCwzDsT0/EA -----END CERTIFICATE-----Generated at Mon Feb 2 07:58:56 2026 by rpki-client