This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/Fb3olNFabx3E1XAvVtesXUZBCV4.roa File: Fb3olNFabx3E1XAvVtesXUZBCV4.roa (raw, json) Hash identifier: ezk1XNuD5gDuGAhkZULFvXspa5WbFw4VI1h7QP1S62k= Subject key identifier: 15:BD:E8:94:D1:5A:6F:1D:C4:D5:70:2F:56:D7:AC:5D:46:41:09:5E Certificate issuer: /CN=a7e05eeda36b1d86c5a3a3f0c0515bec4822e5f4 Certificate serial: 019B7AC7D987D4E40443B0830A0747AFFB10 Authority key identifier: A7:E0:5E:ED:A3:6B:1D:86:C5:A3:A3:F0:C0:51:5B:EC:48:22:E5:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/Fb3olNFabx3E1XAvVtesXUZBCV4.roa Signing time: Thu 01 Jan 2026 18:17:56 +0000 ROA not before: Thu 01 Jan 2026 18:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39716 IP address blocks: 89.186.0.0/23 maxlen: 23 89.186.4.0/22 maxlen: 22 89.186.8.0/22 maxlen: 22 89.186.12.0/23 maxlen: 23 89.186.15.0/24 maxlen: 24 89.186.16.0/24 maxlen: 24 89.186.17.0/24 maxlen: 24 89.186.21.0/24 maxlen: 24 89.186.22.0/24 maxlen: 24 89.186.24.0/22 maxlen: 22 89.186.30.0/23 maxlen: 23 195.242.124.0/24 maxlen: 24 195.242.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.mft rsync://rpki.ripe.net/repository/DEFAULT/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d9:87:d4:e4:04:43:b0:83:0a:07:47:af:fb:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7e05eeda36b1d86c5a3a3f0c0515bec4822e5f4 Validity Not Before: Jan 1 18:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15bde894d15a6f1dc4d5702f56d7ac5d4641095e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b6:52:47:47:4f:8c:08:f6:9d:73:b5:0d:17: d6:22:03:e3:3f:1c:4f:37:2b:45:07:2e:57:75:43: 54:96:f6:27:ac:a0:48:b2:c9:e8:68:73:34:f2:9d: ea:40:c5:45:23:ab:9b:1b:19:73:d7:b4:b6:1c:63: 9c:22:a4:9c:88:aa:e5:f7:f8:8a:b6:c6:e9:14:20: 23:e5:62:72:b7:50:7e:fa:3c:cf:27:d8:6f:09:d5: ab:14:f9:52:84:13:0e:ba:2f:39:36:f9:ea:0d:42: 05:61:c9:60:75:ff:f0:27:ac:c7:3a:10:1e:af:16: 35:e5:79:4e:16:13:f9:4f:6d:4a:f4:86:24:20:5a: ff:ed:5a:53:27:2c:2a:cb:55:77:2f:81:b0:39:af: 84:d0:29:8f:dc:0d:64:08:37:61:6b:cf:6b:a2:e2: 4e:ec:bf:76:86:a2:d4:09:cb:01:6a:03:fd:b9:7c: 0c:7a:37:60:45:d6:9e:bf:92:6a:4f:b1:d8:0d:29: 04:92:4d:2c:e6:3c:8b:31:c0:2e:ec:a1:b7:1f:aa: 46:aa:2e:b1:e7:0e:57:f9:2d:52:fc:ac:e1:37:24: 14:44:cc:67:c6:41:66:68:48:94:5a:7d:bd:94:d1: 80:49:94:8e:3e:ee:0d:9b:5f:b4:80:b8:1e:be:74: 83:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:BD:E8:94:D1:5A:6F:1D:C4:D5:70:2F:56:D7:AC:5D:46:41:09:5E X509v3 Authority Key Identifier: keyid:A7:E0:5E:ED:A3:6B:1D:86:C5:A3:A3:F0:C0:51:5B:EC:48:22:E5:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/Fb3olNFabx3E1XAvVtesXUZBCV4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.186.0.0/23 89.186.4.0-89.186.13.255 89.186.15.0-89.186.17.255 89.186.21.0-89.186.22.255 89.186.24.0/22 89.186.30.0/23 195.242.124.0/23 Signature Algorithm: sha256WithRSAEncryption 91:a5:0d:3c:9a:ce:b6:4a:4f:59:e1:86:53:81:22:c4:06:9b: b7:b3:2f:22:9f:58:32:d7:61:a4:85:cb:1c:38:ca:40:53:c4: f6:1c:1f:51:6d:db:11:da:4a:00:72:39:af:4f:95:06:3b:ed: d6:4d:e5:f1:2d:06:9e:7a:9d:8e:36:bd:3f:db:8c:a8:02:e5: b7:0a:65:c2:02:3a:15:ee:f2:f7:75:87:3f:50:33:66:41:79: 51:4b:ad:9d:12:d4:71:60:f4:95:73:d2:0f:3a:42:4b:67:3b: 9b:3c:d7:ea:5d:cd:5e:61:e9:42:77:05:ac:0c:45:d6:87:11: 39:b4:2c:5d:75:1a:25:19:23:c9:d7:01:1d:7e:d5:65:0a:4f: 50:06:8c:ec:87:df:09:b3:07:cc:b3:1f:5f:eb:3b:ce:94:fd: a9:f5:71:cb:24:23:a8:5e:37:3c:8e:a2:1a:6e:f8:90:30:f2: 8f:a1:4e:14:72:73:86:16:e0:3c:38:cf:9c:99:9c:7f:84:39: 11:ab:99:24:ec:df:c4:cf:74:f0:f3:71:8c:a9:f0:b6:25:fc: 5f:2b:b1:6a:03:64:f0:f6:42:1a:3e:76:4a:3d:67:e6:04:15: e2:45:e7:77:de:39:5d:83:bd:ed:03:01:57:36:e1:54:1d:06: 4d:56:55:63 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt6x9mH1OQEQ7CDCgdHr/sQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZTA1ZWVkYTM2YjFkODZjNWEzYTNmMGMwNTE1YmVjNDgy MmU1ZjQwHhcNMjYwMTAxMTgxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWJkZTg5NGQxNWE2ZjFkYzRkNTcwMmY1NmQ3YWM1ZDQ2NDEwOTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobZSR0dPjAj2nXO1DRfWIgPjPxxP NytFBy5XdUNUlvYnrKBIssnoaHM08p3qQMVFI6ubGxlz17S2HGOcIqSciKrl9/iK tsbpFCAj5WJyt1B++jzPJ9hvCdWrFPlShBMOui85NvnqDUIFYclgdf/wJ6zHOhAe rxY15XlOFhP5T21K9IYkIFr/7VpTJywqy1V3L4GwOa+E0CmP3A1kCDdha89rouJO 7L92hqLUCcsBagP9uXwMejdgRdaev5JqT7HYDSkEkk0s5jyLMcAu7KG3H6pGqi6x 5w5X+S1S/KzhNyQURMxnxkFmaEiUWn29lNGASZSOPu4Nm1+0gLgevnSDNQIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFBW96JTRWm8dxNVwL1bXrF1GQQleMB8GA1UdIwQY MBaAFKfgXu2jax2GxaOj8MBRW+xIIuX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC1CZTdhTnJIWWJGbzZQd3dGRmI3RWdpNWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9mYTYwODAtM2NkZC00YjM0LThmMTMt MGRiMjk2ZDU0NTc4LzEvRmIzb2xORmFieDNFMVhBdlZ0ZXNYVVpCQ1Y0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9mYTYwODAtM2NkZC00YjM0LThmMTMtMGRiMjk2ZDU0NTc4 LzEvcC1CZTdhTnJIWWJGbzZQd3dGRmI3RWdpNWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQBWboAMAwD BAJZugQDBAFZugwwDAMEAFm6DwMEAVm6EDAMAwQAWboVAwQAWboWAwQCWboYAwQB WboeAwQBw/J8MA0GCSqGSIb3DQEBCwUAA4IBAQCRpQ08ms62Sk9Z4YZTgSLEBpu3 sy8in1gy12GkhcscOMpAU8T2HB9RbdsR2koAcjmvT5UGO+3WTeXxLQaeep2ONr0/ 24yoAuW3CmXCAjoV7vL3dYc/UDNmQXlRS62dEtRxYPSVc9IPOkJLZzubPNfqXc1e YelCdwWsDEXWhxE5tCxddRolGSPJ1wEdftVlCk9QBozsh98JswfMsx9f6zvOlP2p 9XHLJCOoXjc8jqIabviQMPKPoU4UcnOGFuA8OM+cmZx/hDkRq5kk7N/Ez3Tw83GM qfC2JfxfK7FqA2Tw9kIaPnZKPWfmBBXiRed33jldg73tAwFXNuFUHQZNVlVj -----END CERTIFICATE-----Generated at Tue Feb 10 06:50:28 2026 by rpki-client