This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/fwm7fzG5pxOjSuDOIihEra1brNg.roa File: fwm7fzG5pxOjSuDOIihEra1brNg.roa (raw, json) Hash identifier: ug1WSCwOpgGYULTJoI2iMuB9cmJ8u3W7T1znsyEC4BY= Subject key identifier: 7F:09:BB:7F:31:B9:A7:13:A3:4A:E0:CE:22:28:44:AD:AD:5B:AC:D8 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE62D345F3235B04A9EC96771AE418 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/fwm7fzG5pxOjSuDOIihEra1brNg.roa Signing time: Fri 02 Jan 2026 04:19:16 +0000 ROA not before: Fri 02 Jan 2026 04:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197537 IP address blocks: 87.229.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:62:d3:45:f3:23:5b:04:a9:ec:96:77:1a:e4:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f09bb7f31b9a713a34ae0ce222844adad5bacd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:25:08:44:a6:27:f3:d3:c9:5b:57:5a:13:19: 69:38:8f:81:45:4d:6f:f0:3d:55:87:9b:8d:6a:fb: 8a:ad:08:ab:a1:4a:57:65:5a:fd:00:9f:57:3c:cc: 16:b1:73:93:91:b0:04:dc:78:d9:4a:70:55:5d:e2: 73:ae:29:ab:4c:10:4b:ef:01:96:d6:7c:93:eb:e7: 66:e4:cb:50:30:6f:a4:df:60:bd:be:df:93:24:f6: d5:4b:04:99:f3:de:95:5a:02:8c:d9:8f:30:ca:c7: 0c:f4:16:cc:c4:7d:3c:aa:ad:8d:fc:d5:8c:a5:95: a5:b8:3e:1d:51:18:99:ad:8f:54:78:ba:8c:50:b2: 4e:a6:7f:62:f5:55:f1:43:93:15:2d:25:9a:58:65: ff:d1:b2:1b:c7:ef:65:82:de:e8:88:c4:e2:98:b3: 2f:eb:49:54:41:3b:ee:e1:e3:e2:0d:a7:22:7f:c6: 79:eb:0e:de:de:52:74:4b:ff:db:8d:cb:f3:fe:14: 24:c6:dd:6c:54:c8:e4:22:36:13:72:83:80:c6:3c: 84:cb:c4:98:07:7a:3f:14:b3:a5:c2:b1:53:07:58: c1:6d:23:db:88:8d:47:0a:b2:26:70:0c:97:79:0d: 57:ca:52:9d:fa:ef:45:dc:9a:63:ef:45:a7:37:db: f1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:09:BB:7F:31:B9:A7:13:A3:4A:E0:CE:22:28:44:AD:AD:5B:AC:D8 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/fwm7fzG5pxOjSuDOIihEra1brNg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.71.0/24 Signature Algorithm: sha256WithRSAEncryption 17:1a:d1:b7:39:98:67:32:2b:ce:dc:31:a3:a0:39:7b:75:ca: ed:5f:d5:e7:66:9c:7f:6f:1a:f9:c7:3b:99:be:aa:31:99:22: 4f:a2:2b:4c:f0:af:d7:cd:56:b3:f8:64:81:9c:55:5d:e3:29: b8:cc:ff:7a:0a:f8:db:52:71:97:9b:97:9c:fa:b6:35:f3:ba: de:90:88:71:04:bc:7d:06:42:d8:04:4a:93:62:b5:a9:6f:a7: 48:57:72:e2:af:57:62:f8:42:fb:5d:13:04:60:fd:65:c3:10: 67:98:8f:14:2e:b4:4e:06:74:56:a5:1b:2b:8b:b8:f6:09:20: f9:9f:fb:cd:70:db:a7:26:36:65:2c:0b:50:0f:11:a8:7e:c7: 99:f9:9a:b7:92:69:f5:af:ef:d9:8b:dd:57:a3:fc:33:54:cf: 86:8c:00:95:b4:d1:99:ec:c4:b3:74:f8:2c:a7:1c:74:55:b4: 60:1e:35:f5:62:cf:1f:bf:57:83:6c:05:d5:70:eb:d4:99:f9: 9c:f8:ed:86:88:2a:e3:fd:87:dd:12:cc:81:ca:79:a7:cb:c0: 5b:85:f9:99:fb:9e:f1:4a:bd:98:c2:de:57:f9:0f:47:bf:c2: 83:c5:5e:bb:ec:db:9a:47:07:44:a0:d0:ae:fc:42:2e:30:39: 0d:72:2b:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87mLTRfMjWwSp7JZ3GuQYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjA5YmI3ZjMxYjlhNzEzYTM0YWUwY2UyMjI4NDRhZGFkNWJhY2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSUIRKYn89PJW1daExlpOI+BRU1v 8D1Vh5uNavuKrQiroUpXZVr9AJ9XPMwWsXOTkbAE3HjZSnBVXeJzrimrTBBL7wGW 1nyT6+dm5MtQMG+k32C9vt+TJPbVSwSZ896VWgKM2Y8wyscM9BbMxH08qq2N/NWM pZWluD4dURiZrY9UeLqMULJOpn9i9VXxQ5MVLSWaWGX/0bIbx+9lgt7oiMTimLMv 60lUQTvu4ePiDacif8Z56w7e3lJ0S//bjcvz/hQkxt1sVMjkIjYTcoOAxjyEy8SY B3o/FLOlwrFTB1jBbSPbiI1HCrImcAyXeQ1XylKd+u9F3Jpj70WnN9vxBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH8Ju38xuacTo0rgziIoRK2tW6zYMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvZndtN2Z6RzVweE9qU3VET0lpaEVyYTFick5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+VHMA0G CSqGSIb3DQEBCwUAA4IBAQAXGtG3OZhnMivO3DGjoDl7dcrtX9XnZpx/bxr5xzuZ vqoxmSJPoitM8K/XzVaz+GSBnFVd4ym4zP96CvjbUnGXm5ec+rY187rekIhxBLx9 BkLYBEqTYrWpb6dIV3Lir1di+EL7XRMEYP1lwxBnmI8ULrROBnRWpRsri7j2CSD5 n/vNcNunJjZlLAtQDxGofseZ+Zq3kmn1r+/Zi91Xo/wzVM+GjACVtNGZ7MSzdPgs pxx0VbRgHjX1Ys8fv1eDbAXVcOvUmfmc+O2GiCrj/YfdEsyBynmny8BbhfmZ+57x Sr2Ywt5X+Q9Hv8KDxV677NuaRwdEoNCu/EIuMDkNciv7 -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:53 2026 by rpki-client