This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/fo0lrdRlefUeF4nkReob4pKTJIc.roa File: fo0lrdRlefUeF4nkReob4pKTJIc.roa (raw, json) Hash identifier: i3MhDgEPbBKNozohRpkOstSN7+oppEOt3HEvpIjhaCA= Subject key identifier: 7E:8D:25:AD:D4:65:79:F5:1E:17:89:E4:45:EA:1B:E2:92:93:24:87 Certificate issuer: /CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf Certificate serial: 019B7A5B45D4FE185EC128BD39FEB21FBB1F Authority key identifier: 46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/fo0lrdRlefUeF4nkReob4pKTJIc.roa Signing time: Thu 01 Jan 2026 16:19:20 +0000 ROA not before: Thu 01 Jan 2026 16:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199070 IP address blocks: 91.242.170.0/23 maxlen: 23 91.242.170.0/24 maxlen: 24 91.242.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:45:d4:fe:18:5e:c1:28:bd:39:fe:b2:1f:bb:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf Validity Not Before: Jan 1 16:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e8d25add46579f51e1789e445ea1be292932487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2b:b3:75:12:03:da:99:c0:65:9e:51:ea:8d: 40:c6:3a:6e:2a:05:8f:45:d9:ea:de:41:f8:5a:40: 78:1b:10:8a:e0:f5:2e:15:50:2b:79:d8:54:e0:7c: 64:b4:5a:3d:99:de:5e:24:14:ee:50:2f:a4:e6:9d: 10:91:b0:68:02:61:78:5a:e1:86:3b:17:3b:89:39: 1a:8b:c8:6d:ef:ae:ee:2b:16:02:c5:63:5a:90:d5: ad:b7:4d:b7:66:62:de:66:c4:f2:b8:61:93:4b:33: 04:66:3c:9e:8e:5c:e2:aa:93:cc:c5:97:bd:30:e6: a2:02:57:0a:1d:df:d9:7c:c6:f7:52:96:b7:c5:6d: 8e:eb:5d:98:aa:5d:7e:d2:4a:e0:de:8f:1a:7a:49: 6c:d2:07:72:7c:66:7f:96:1f:e7:ed:0c:80:0d:bb: a7:b8:6f:d3:69:cf:f1:cd:23:e5:74:44:97:e1:bf: bb:30:89:75:0a:b3:37:55:78:3b:92:9d:2c:34:17: 5d:69:38:34:2b:77:15:3b:ae:d6:7f:aa:bf:6b:51: 49:19:1d:e1:bc:32:a6:19:c4:fa:40:a2:71:5c:fd: 3e:80:ce:2e:8f:73:9e:4d:bc:3b:84:86:0e:ec:59: 51:7f:b5:dd:34:77:46:00:13:5e:f0:2b:25:7b:96: 34:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:8D:25:AD:D4:65:79:F5:1E:17:89:E4:45:EA:1B:E2:92:93:24:87 X509v3 Authority Key Identifier: keyid:46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/fo0lrdRlefUeF4nkReob4pKTJIc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.242.170.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:6e:73:5a:44:df:02:b9:87:11:8b:05:6e:9c:fb:3d:de:50: 82:93:cf:af:29:77:6a:e5:eb:e2:4d:9a:d9:84:15:fc:57:8a: c6:56:2b:7a:2f:5f:b2:43:51:55:1b:ab:eb:ba:a3:33:47:1e: 49:30:f4:47:f2:b7:27:89:11:bb:cc:19:51:8b:fe:97:6b:de: a0:95:b8:26:25:14:57:b1:62:8e:40:76:d9:16:75:8b:34:4a: d7:7f:e5:ee:ba:4e:29:3b:bb:31:1d:55:19:20:43:8a:aa:6e: 83:43:cd:0a:a1:0a:6c:ba:f7:b9:72:cd:57:6f:86:10:b6:32: b1:f0:b7:30:13:41:84:54:49:96:f9:89:e6:ef:cd:8b:68:01: d5:9d:66:0f:2b:98:e2:ee:34:17:ef:27:ac:f7:b6:04:ba:3a: 69:28:b3:46:31:f7:02:da:54:47:54:fc:fc:f0:3b:ab:bf:40: 4b:92:c6:5e:c4:33:7a:6c:e6:0d:b4:57:3d:43:bb:f8:5a:cb: 61:14:31:b0:ac:91:81:a9:f1:4d:56:96:c7:37:25:6b:fb:b1: 6f:09:63:70:97:3b:e7:3f:7e:86:3b:a8:e1:0b:7e:06:cb:4b: 84:f1:df:54:75:5c:9e:83:c4:fc:c7:44:6a:ed:71:83:a9:b0: 2d:5f:dd:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W0XU/hhewSi9Of6yH7sfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2YWY2Y2EzMzUzNGI4NTMwYjlmMjE0ZWM4ZWE5M2RkMjVi ZDFmY2YwHhcNMjYwMTAxMTYxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZThkMjVhZGQ0NjU3OWY1MWUxNzg5ZTQ0NWVhMWJlMjkyOTMyNDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSuzdRID2pnAZZ5R6o1AxjpuKgWP Rdnq3kH4WkB4GxCK4PUuFVAredhU4HxktFo9md5eJBTuUC+k5p0QkbBoAmF4WuGG Oxc7iTkai8ht767uKxYCxWNakNWtt023ZmLeZsTyuGGTSzMEZjyejlziqpPMxZe9 MOaiAlcKHd/ZfMb3Upa3xW2O612Yql1+0krg3o8aekls0gdyfGZ/lh/n7QyADbun uG/Tac/xzSPldESX4b+7MIl1CrM3VXg7kp0sNBddaTg0K3cVO67Wf6q/a1FJGR3h vDKmGcT6QKJxXP0+gM4uj3OeTbw7hIYO7FlRf7XdNHdGABNe8Csle5Y0fQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH6NJa3UZXn1HheJ5EXqG+KSkySHMB8GA1UdIwQY MBaAFEavbKM1NLhTC58hTsjqk90lvR/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnE5c296VTB1Rk1MbnlGT3lPcVQzU1c5SDg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS84ZTgwYWYtMmQ2NC00Nzg0LTgxMTUt YzVjZWZkOThmNjIxLzEvZm8wbHJkUmxlZlVlRjRua1Jlb2I0cEtUSkljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS84ZTgwYWYtMmQ2NC00Nzg0LTgxMTUtYzVjZWZkOThmNjIx LzEvUnE5c296VTB1Rk1MbnlGT3lPcVQzU1c5SDg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW/KqMA0G CSqGSIb3DQEBCwUAA4IBAQAbbnNaRN8CuYcRiwVunPs93lCCk8+vKXdq5eviTZrZ hBX8V4rGVit6L1+yQ1FVG6vruqMzRx5JMPRH8rcniRG7zBlRi/6Xa96glbgmJRRX sWKOQHbZFnWLNErXf+Xuuk4pO7sxHVUZIEOKqm6DQ80KoQpsuve5cs1Xb4YQtjKx 8LcwE0GEVEmW+Ynm782LaAHVnWYPK5ji7jQX7yes97YEujppKLNGMfcC2lRHVPz8 8Durv0BLksZexDN6bOYNtFc9Q7v4WsthFDGwrJGBqfFNVpbHNyVr+7FvCWNwlzvn P36GO6jhC34Gy0uE8d9UdVyeg8T8x0Rq7XGDqbAtX90+ -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:17 2026 by rpki-client