This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/FSxy8Ovh14yqtFHhoBFX5nBXdNU.roa File: FSxy8Ovh14yqtFHhoBFX5nBXdNU.roa (raw, json) Hash identifier: duw06+xYQMFPNJS8Nqk1JSY0w1hNxbHtXY/z+S+qyJI= Subject key identifier: 15:2C:72:F0:EB:E1:D7:8C:AA:B4:51:E1:A0:11:57:E6:70:57:74:D5 Certificate issuer: /CN=d1a8969d7e32cbf927664b2dc436b96e7149a62b Certificate serial: 019B7C7EF4EE8DCC995AEB5F33E4B2A6EE0F Authority key identifier: D1:A8:96:9D:7E:32:CB:F9:27:66:4B:2D:C4:36:B9:6E:71:49:A6:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0aiWnX4yy_knZkstxDa5bnFJpis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/FSxy8Ovh14yqtFHhoBFX5nBXdNU.roa Signing time: Fri 02 Jan 2026 02:17:33 +0000 ROA not before: Fri 02 Jan 2026 02:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51518 IP address blocks: 91.217.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.crl rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.mft rsync://rpki.ripe.net/repository/DEFAULT/0aiWnX4yy_knZkstxDa5bnFJpis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:f4:ee:8d:cc:99:5a:eb:5f:33:e4:b2:a6:ee:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1a8969d7e32cbf927664b2dc436b96e7149a62b Validity Not Before: Jan 2 02:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=152c72f0ebe1d78caab451e1a01157e6705774d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fe:5d:0f:05:87:46:b5:e6:f0:0d:32:2b:f5: 46:1c:d2:0d:9f:b3:95:9b:50:9e:1d:95:60:65:ab: 26:e3:6e:2a:bb:2d:56:79:b5:c0:fe:d5:bc:36:cf: fa:93:38:68:c4:94:21:e3:91:c0:b3:92:8a:9f:85: fc:2e:de:72:42:63:8c:55:bf:df:0a:93:73:f8:49: b6:2f:89:e3:73:8b:0f:6d:9b:8e:5e:47:15:40:c7: 24:dc:76:6f:71:1c:77:f6:9e:62:f3:8a:8b:41:d4: 94:2e:57:fd:15:f2:60:a4:69:19:a2:aa:f8:02:88: 72:27:8f:f8:64:b4:59:77:34:9f:95:c5:c1:0c:05: a0:0c:7f:c8:32:eb:72:8c:63:bf:68:9f:fc:34:5c: 59:00:8b:4e:db:19:ed:52:4d:ba:31:23:f7:45:c6: 44:a8:dd:14:84:58:4d:15:ae:d4:99:09:57:f3:6d: 13:13:f2:19:0e:ec:cd:46:09:12:92:7f:77:7e:25: e4:ca:75:c4:a0:6b:1d:ba:c8:24:2f:4b:3a:fa:69: 76:98:94:e2:0d:83:1b:02:48:d9:45:30:8b:41:52: 9a:02:22:06:5e:c6:32:48:4d:64:58:9e:b7:77:7c: 6a:83:60:e1:7a:9f:cb:20:eb:5b:00:20:d3:94:8d: 78:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:2C:72:F0:EB:E1:D7:8C:AA:B4:51:E1:A0:11:57:E6:70:57:74:D5 X509v3 Authority Key Identifier: keyid:D1:A8:96:9D:7E:32:CB:F9:27:66:4B:2D:C4:36:B9:6E:71:49:A6:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0aiWnX4yy_knZkstxDa5bnFJpis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/FSxy8Ovh14yqtFHhoBFX5nBXdNU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.78.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:bd:35:a1:03:3d:f6:97:be:11:52:f5:f6:58:56:63:6a:b2: 4c:64:50:10:0f:ed:d6:68:86:5a:57:ff:79:d3:5c:d5:5c:16: 33:a4:e3:30:5f:f2:a2:80:38:9b:f8:60:94:45:bc:fb:db:9f: 4d:9e:f8:5c:73:8e:9b:21:7c:45:c4:bc:90:77:08:3d:23:90: 40:ba:2d:1b:26:41:2b:ac:58:79:ca:8f:75:4d:40:77:a1:66: 29:6a:7d:07:b9:5f:b9:79:9e:9d:8f:f7:04:1e:21:c8:94:f5: 8c:15:b8:0a:ab:99:91:e8:74:6f:91:7e:12:a4:44:83:a6:a1: 6e:e7:70:ac:5b:38:46:c7:c8:b8:3e:a5:5a:58:5f:77:e9:e5: dc:ee:ef:ce:aa:b2:07:2d:30:7f:02:43:5c:fc:28:53:4f:c3: e6:45:9d:e3:c9:ea:f9:43:7f:7e:ca:77:56:9b:03:df:e7:40: 47:9d:b3:f1:fd:b5:1e:e6:09:f6:4d:a8:17:ce:01:e9:51:05: 46:04:26:42:30:d6:62:bf:9a:c6:4d:2b:e7:86:fb:6a:d4:a0: 4a:b2:44:a2:24:44:bf:29:f1:36:b2:d0:9a:27:cb:9e:ce:c0: c4:ca:6f:9a:e1:42:23:78:04:b5:1a:c2:f4:fd:08:7a:4c:26: e1:52:93:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fvTujcyZWutfM+Sypu4PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYTg5NjlkN2UzMmNiZjkyNzY2NGIyZGM0MzZiOTZlNzE0 OWE2MmIwHhcNMjYwMTAyMDIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTJjNzJmMGViZTFkNzhjYWFiNDUxZTFhMDExNTdlNjcwNTc3NGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/5dDwWHRrXm8A0yK/VGHNINn7OV m1CeHZVgZasm424quy1WebXA/tW8Ns/6kzhoxJQh45HAs5KKn4X8Lt5yQmOMVb/f CpNz+Em2L4njc4sPbZuOXkcVQMck3HZvcRx39p5i84qLQdSULlf9FfJgpGkZoqr4 AohyJ4/4ZLRZdzSflcXBDAWgDH/IMutyjGO/aJ/8NFxZAItO2xntUk26MSP3RcZE qN0UhFhNFa7UmQlX820TE/IZDuzNRgkSkn93fiXkynXEoGsdusgkL0s6+ml2mJTi DYMbAkjZRTCLQVKaAiIGXsYySE1kWJ63d3xqg2Dhep/LIOtbACDTlI14HwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBUscvDr4deMqrRR4aARV+ZwV3TVMB8GA1UdIwQY MBaAFNGolp1+Msv5J2ZLLcQ2uW5xSaYrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGFpV25YNHl5X2tuWmtzdHhEYTVibkZKcGlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yNzI5NGUtYjllNy00NjYwLTkzMmQt MjEwNDhhNzM0YTQ2LzEvRlN4eThPdmgxNHlxdEZIaG9CRlg1bkJYZE5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8yNzI5NGUtYjllNy00NjYwLTkzMmQtMjEwNDhhNzM0YTQ2 LzEvMGFpV25YNHl5X2tuWmtzdHhEYTVibkZKcGlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW9lOMA0G CSqGSIb3DQEBCwUAA4IBAQCavTWhAz32l74RUvX2WFZjarJMZFAQD+3WaIZaV/95 01zVXBYzpOMwX/KigDib+GCURbz7259Nnvhcc46bIXxFxLyQdwg9I5BAui0bJkEr rFh5yo91TUB3oWYpan0HuV+5eZ6dj/cEHiHIlPWMFbgKq5mR6HRvkX4SpESDpqFu 53CsWzhGx8i4PqVaWF936eXc7u/OqrIHLTB/AkNc/ChTT8PmRZ3jyer5Q39+yndW mwPf50BHnbPx/bUe5gn2TagXzgHpUQVGBCZCMNZiv5rGTSvnhvtq1KBKskSiJES/ KfE2stCaJ8uezsDEym+a4UIjeAS1GsL0/Qh6TCbhUpO9 -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:56 2026 by rpki-client