This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/feUrijd_KveyJ7eNJ1rBQYy4hhQ.roa File: feUrijd_KveyJ7eNJ1rBQYy4hhQ.roa (raw, json) Hash identifier: 8ChsNr7pTk9JhrykIfRkpxl+JlzU+6lvsFJu1WkZIeY= Subject key identifier: 7D:E5:2B:8A:37:7F:2A:F7:B2:27:B7:8D:27:5A:C1:41:8C:B8:86:14 Certificate issuer: /CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d Certificate serial: 019B7B35409B57AC57F8CAD6E9ABF59F84D1 Authority key identifier: F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/feUrijd_KveyJ7eNJ1rBQYy4hhQ.roa Signing time: Thu 01 Jan 2026 20:17:26 +0000 ROA not before: Thu 01 Jan 2026 20:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197914 IP address blocks: 130.0.192.0/21 maxlen: 24 194.50.60.0/24 maxlen: 24 195.66.112.0/24 maxlen: 24 2a03:a580::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:40:9b:57:ac:57:f8:ca:d6:e9:ab:f5:9f:84:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d Validity Not Before: Jan 1 20:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7de52b8a377f2af7b227b78d275ac1418cb88614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:54:7e:91:9d:d7:67:1a:06:e5:a0:eb:73:3e: ab:31:9f:9e:67:02:76:3d:41:fa:89:3a:a6:bb:33: 5e:72:bc:b4:04:69:2d:0c:d0:f2:d2:93:1b:20:6d: 39:f4:9e:2d:2e:4f:eb:11:16:2c:c4:a3:37:97:ae: 11:85:a5:e1:9b:a9:04:69:4e:27:bf:f5:6f:28:56: 84:fe:7a:0e:e9:91:f5:29:61:46:7e:16:57:61:9d: 11:85:ae:c9:22:ce:5e:d3:90:a5:ca:45:91:39:70: d0:e9:e2:ec:fa:27:df:5e:14:54:e5:b1:31:1e:d3: da:db:2b:e8:de:ba:38:08:4e:92:a5:0f:83:29:33: b1:66:f4:74:0a:71:3b:93:fc:f8:ca:fe:d4:d0:a1: e9:70:34:86:13:05:95:2d:ce:68:6a:cc:ba:a8:eb: e4:40:91:1d:fa:13:97:25:62:c8:fc:c4:13:74:11: 0d:51:d2:9c:ff:df:50:37:8d:b8:34:21:c2:1b:4c: 3f:10:9b:e7:5f:46:f9:c2:4a:9b:dd:63:6b:4a:ce: af:19:73:1a:0e:26:9a:d9:ce:7c:2f:da:16:13:b2: 8c:0d:64:b3:b1:da:f0:28:6c:f7:f1:16:70:57:dd: 07:ac:f1:25:87:72:8b:1a:8a:9f:eb:4f:90:be:5f: 19:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E5:2B:8A:37:7F:2A:F7:B2:27:B7:8D:27:5A:C1:41:8C:B8:86:14 X509v3 Authority Key Identifier: keyid:F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/feUrijd_KveyJ7eNJ1rBQYy4hhQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.0.192.0/21 194.50.60.0/24 195.66.112.0/24 IPv6: 2a03:a580::/32 Signature Algorithm: sha256WithRSAEncryption 9e:57:df:d7:61:19:48:ba:76:09:7b:a5:e7:25:f3:6c:d1:2a: 3b:57:b5:81:1a:f2:52:38:09:df:77:77:5e:b1:3c:47:8b:a7: 54:3b:63:48:e0:c4:64:d9:6f:84:ca:21:76:a7:d5:bf:21:63: 9d:12:54:f1:01:f4:5a:b2:f0:34:44:cb:9c:ef:4b:26:86:bc: 24:ea:85:dd:d0:5b:03:4f:ec:7a:f9:e3:f0:a4:12:f0:92:d6: 9a:82:29:19:53:4c:c8:05:13:95:12:6a:81:ea:ae:cb:c4:8f: 2d:17:8e:55:4f:ed:6d:28:67:b7:1f:7d:3c:d3:f7:68:2b:4a: 2d:80:fb:96:d5:55:bf:78:59:5f:1c:87:0b:ef:b5:b0:ec:94: d3:01:7c:d2:c5:c8:3e:5d:78:14:f7:f8:08:8e:c7:dc:7f:48: 48:9b:0d:5a:31:7e:17:a6:ab:68:29:6d:6f:9e:c4:04:bf:c0: 2f:c1:8e:25:d1:04:b4:97:e5:6a:8a:57:9e:39:3a:9b:8d:62: 2f:eb:f1:87:89:b5:40:4a:04:fa:ed:30:92:2d:36:dc:82:3d: 6a:e1:fa:ca:e8:52:b8:c9:6a:8d:dd:5e:6e:0b:76:9d:8f:23: 1d:c2:a4:6c:f8:d4:5f:9d:60:c7:c4:2d:39:0b:6a:ed:fe:14: 14:78:e1:5f -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt7NUCbV6xX+MrW6av1n4TRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YTViMDQyZmU0OGVlYjEyM2JlNTZkYmY5ZThkZGEyMGMx ZWExMWQwHhcNMjYwMTAxMjAxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGU1MmI4YTM3N2YyYWY3YjIyN2I3OGQyNzVhYzE0MThjYjg4NjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FR+kZ3XZxoG5aDrcz6rMZ+eZwJ2 PUH6iTqmuzNecry0BGktDNDy0pMbIG059J4tLk/rERYsxKM3l64RhaXhm6kEaU4n v/VvKFaE/noO6ZH1KWFGfhZXYZ0Rha7JIs5e05ClykWROXDQ6eLs+iffXhRU5bEx HtPa2yvo3ro4CE6SpQ+DKTOxZvR0CnE7k/z4yv7U0KHpcDSGEwWVLc5oasy6qOvk QJEd+hOXJWLI/MQTdBENUdKc/99QN424NCHCG0w/EJvnX0b5wkqb3WNrSs6vGXMa Diaa2c58L9oWE7KMDWSzsdrwKGz38RZwV90HrPElh3KLGoqf60+Qvl8ZSwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFH3lK4o3fyr3sie3jSdawUGMuIYUMB8GA1UdIwQY MBaAFPSlsEL+SO6xI75W2/no3aIMHqEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUtXd1F2NUk3ckVqdmxiYi1lamRvZ3dlb1IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zODkyMzEtMmI1Zi00YzllLTk0MWQt YjRiMjg0MzdmZTZjLzEvZmVVcmlqZF9LdmV5SjdlTkoxckJRWXk0aGhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zODkyMzEtMmI1Zi00YzllLTk0MWQtYjRiMjg0MzdmZTZj LzEvOUtXd1F2NUk3ckVqdmxiYi1lamRvZ3dlb1IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDggDAAwQA wjI8AwQAw0JwMA0EAgACMAcDBQAqA6WAMA0GCSqGSIb3DQEBCwUAA4IBAQCeV9/X YRlIunYJe6XnJfNs0So7V7WBGvJSOAnfd3desTxHi6dUO2NI4MRk2W+EyiF2p9W/ IWOdElTxAfRasvA0RMuc70smhrwk6oXd0FsDT+x6+ePwpBLwktaagikZU0zIBROV EmqB6q7LxI8tF45VT+1tKGe3H3080/doK0otgPuW1VW/eFlfHIcL77Ww7JTTAXzS xcg+XXgU9/gIjsfcf0hImw1aMX4XpqtoKW1vnsQEv8AvwY4l0QS0l+VqileeOTqb jWIv6/GHibVASgT67TCSLTbcgj1q4frK6FK4yWqN3V5uC3adjyMdwqRs+NRfnWDH xC05C2rt/hQUeOFf -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:20 2026 by rpki-client