This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/fpXvjNNCwKvHkUZg1kDGVTSNecA.roa File: fpXvjNNCwKvHkUZg1kDGVTSNecA.roa (raw, json) Hash identifier: bzA5tKVNtWrTa4alEguYrXRgZttUBczwg68mdsX8PHQ= Subject key identifier: 7E:95:EF:8C:D3:42:C0:AB:C7:91:46:60:D6:40:C6:55:34:8D:79:C0 Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B824375D4AD09C9C8CF5D1E35CF8B443E Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/fpXvjNNCwKvHkUZg1kDGVTSNecA.roa Signing time: Sat 03 Jan 2026 05:10:17 +0000 ROA not before: Sat 03 Jan 2026 05:10:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 45.139.6.0/23 maxlen: 24 82.115.9.0/24 maxlen: 24 89.251.10.0/24 maxlen: 24 159.255.32.0/22 maxlen: 22 159.255.36.0/22 maxlen: 22 185.231.172.0/24 maxlen: 24 188.209.156.0/22 maxlen: 24 195.96.135.0/24 maxlen: 24 202.133.90.0/23 maxlen: 24 212.90.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:82:43:75:d4:ad:09:c9:c8:cf:5d:1e:35:cf:8b:44:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 3 05:10:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e95ef8cd342c0abc7914660d640c655348d79c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fb:4c:45:74:21:88:cc:25:14:ac:95:14:4e: c7:89:45:a5:5c:8d:af:9b:6b:f9:6c:cc:06:ab:51: e9:e3:63:7b:a1:3f:1e:08:dc:93:0f:6b:4e:c4:6c: 89:80:e9:8d:56:53:ce:06:fe:92:f2:5c:43:cf:82: 73:c0:61:42:8f:4a:d0:8f:94:41:04:85:d4:44:25: 51:78:b6:54:ad:75:e7:7b:8d:bb:21:b8:a1:6d:cf: c3:26:48:a7:5e:98:2e:39:bb:70:a8:6b:b9:e6:ce: 1d:37:08:73:c3:05:62:2b:f2:aa:76:47:ff:7c:25: ec:f7:69:84:90:3b:15:84:95:c6:06:9d:5c:dc:dc: 99:44:b0:8b:54:d2:01:5f:dd:98:1e:be:ed:9d:59: 99:b9:41:66:20:dd:21:bf:a1:1c:f2:08:ba:dc:2e: fa:08:b2:7a:ac:c3:65:6f:7f:f3:bb:86:47:48:99: 6f:83:a2:4b:a1:ef:92:87:97:94:4f:b5:01:76:f5: ed:c6:cb:43:31:13:ff:26:94:e8:9b:1f:b9:6d:23: 9e:19:29:83:7c:e3:93:f6:2b:16:51:77:9e:56:ee: 61:79:50:0d:07:84:49:41:c7:55:02:f1:45:c3:88: 6a:77:5f:62:c0:75:39:4c:26:2f:af:e2:e5:d2:ba: 60:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:95:EF:8C:D3:42:C0:AB:C7:91:46:60:D6:40:C6:55:34:8D:79:C0 X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/fpXvjNNCwKvHkUZg1kDGVTSNecA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.6.0/23 82.115.9.0/24 89.251.10.0/24 159.255.32.0/21 185.231.172.0/24 188.209.156.0/22 195.96.135.0/24 202.133.90.0/23 212.90.100.0/22 Signature Algorithm: sha256WithRSAEncryption c4:46:a9:a4:3e:cc:ed:bf:f0:ce:b8:e2:2d:04:ce:2a:53:9a: b3:81:20:a4:af:ab:14:30:4e:2b:34:07:a9:9b:89:d9:39:4e: a2:46:1b:44:a5:f3:04:c6:70:f7:2a:63:8a:b8:0f:76:88:50: 31:d4:70:93:3b:55:0c:b3:ff:fb:51:ea:6e:ff:7d:7d:55:ce: b0:17:f9:25:03:3e:53:e3:a8:49:ae:3d:2b:55:04:a7:35:a6: 51:1b:13:04:43:24:a4:f5:8a:a1:a7:14:88:60:18:23:de:c7: 57:a2:db:b8:47:7e:20:3a:03:99:5f:fe:ae:07:fc:fc:71:e4: 3c:24:16:7e:51:dd:9f:5b:ca:a1:c7:f8:f3:d3:4c:71:54:fa: 91:fc:5a:6a:10:20:2a:ec:46:89:3f:ba:e2:da:d5:74:30:f1: 66:79:54:15:4c:f7:e1:bc:05:e3:4f:5a:fa:e5:52:45:f4:01: 02:34:5b:76:9e:82:2a:2f:c7:58:1e:54:59:30:64:b4:56:8f: 75:8f:f7:ee:e6:16:ad:53:79:5a:57:f7:d0:ba:d4:10:97:79: 7a:17:6d:15:48:ce:f8:f6:1d:43:ff:22:f5:01:aa:f7:23:3e: 2f:c9:d7:d1:19:fe:45:09:c7:6e:40:14:96:6e:53:5c:98:a1: 4a:f4:6a:63 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZuCQ3XUrQnJyM9dHjXPi0Q+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTAzMDUxMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTk1ZWY4Y2QzNDJjMGFiYzc5MTQ2NjBkNjQwYzY1NTM0OGQ3OWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzftMRXQhiMwlFKyVFE7HiUWlXI2v m2v5bMwGq1Hp42N7oT8eCNyTD2tOxGyJgOmNVlPOBv6S8lxDz4JzwGFCj0rQj5RB BIXURCVReLZUrXXne427Ibihbc/DJkinXpguObtwqGu55s4dNwhzwwViK/Kqdkf/ fCXs92mEkDsVhJXGBp1c3NyZRLCLVNIBX92YHr7tnVmZuUFmIN0hv6Ec8gi63C76 CLJ6rMNlb3/zu4ZHSJlvg6JLoe+Sh5eUT7UBdvXtxstDMRP/JpTomx+5bSOeGSmD fOOT9isWUXeeVu5heVANB4RJQcdVAvFFw4hqd19iwHU5TCYvr+Ll0rpgrQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFH6V74zTQsCrx5FGYNZAxlU0jXnAMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvZnBYdmpOTkN3S3ZIa1VaZzFrREdWVFNOZWNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQBLYsGAwQA UnMJAwQAWfsKAwQDn/8gAwQAueesAwQCvNGcAwQAw2CHAwQByoVaAwQC1FpkMA0G CSqGSIb3DQEBCwUAA4IBAQDERqmkPsztv/DOuOItBM4qU5qzgSCkr6sUME4rNAep m4nZOU6iRhtEpfMExnD3KmOKuA92iFAx1HCTO1UMs//7Uepu/319Vc6wF/klAz5T 46hJrj0rVQSnNaZRGxMEQySk9YqhpxSIYBgj3sdXotu4R34gOgOZX/6uB/z8ceQ8 JBZ+Ud2fW8qhx/jz00xxVPqR/FpqECAq7EaJP7ri2tV0MPFmeVQVTPfhvAXjT1r6 5VJF9AECNFt2noIqL8dYHlRZMGS0Vo91j/fu5hatU3laV/fQutQQl3l6F20VSM74 9h1D/yL1Aar3Iz4vydfRGf5FCcduQBSWblNcmKFK9Gpj -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:43 2026 by rpki-client