This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/FNXyXh4u9cQeDiTojAZDbFOJ9gQ.roa File: FNXyXh4u9cQeDiTojAZDbFOJ9gQ.roa (raw, json) Hash identifier: vdj4wBHSjblmAlNCcBX+3EsBObFP0noHb9x3mmO5lZM= Subject key identifier: 14:D5:F2:5E:1E:2E:F5:C4:1E:0E:24:E8:8C:06:43:6C:53:89:F6:04 Certificate issuer: /CN=3b5fc69b7c6ee869930ce0b8391ee5d84c53494a Certificate serial: 019B7CED5B3AF20598B764522CD92AF01F4D Authority key identifier: 3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/FNXyXh4u9cQeDiTojAZDbFOJ9gQ.roa Signing time: Fri 02 Jan 2026 04:18:08 +0000 ROA not before: Fri 02 Jan 2026 04:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 91.211.196.0/22 maxlen: 24 193.109.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:5b:3a:f2:05:98:b7:64:52:2c:d9:2a:f0:1f:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b5fc69b7c6ee869930ce0b8391ee5d84c53494a Validity Not Before: Jan 2 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14d5f25e1e2ef5c41e0e24e88c06436c5389f604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:38:63:03:12:42:c7:b8:b0:6d:9b:b1:c7:7b: 46:bc:51:2c:02:f5:35:16:01:ba:b9:30:4b:6c:aa: 51:b0:65:83:98:16:80:63:f6:02:fb:bc:5f:31:58: 9c:31:0e:98:f5:4e:2a:d2:7d:93:66:5c:f8:95:bc: bb:fd:26:1d:28:2c:eb:74:05:c5:13:60:c4:0e:66: 5c:12:04:0d:d4:54:5d:f7:dd:76:4d:de:3c:86:cf: 62:46:26:66:4f:e8:c8:7a:96:74:07:36:26:85:17: 4b:4b:f3:ba:cf:ab:53:6b:03:3f:73:db:a1:7d:d6: fd:b4:9d:1e:c8:b5:e9:d0:63:20:07:a3:61:44:e1: ed:fc:3a:a2:b2:cc:ef:e5:f5:af:29:a4:c3:65:a7: 7e:cc:64:e8:f5:64:c4:3e:7e:31:93:ce:c4:93:45: c8:da:80:99:de:f1:48:47:22:97:f4:af:3e:b4:85: 61:13:a3:33:0c:1c:a1:02:7f:c9:33:f8:ef:54:d4: 51:2a:5d:d6:ee:89:2e:6a:16:4a:f8:c0:58:86:6e: b9:2b:2f:ec:86:f0:bd:3e:73:4b:d8:ce:9e:b3:f0: ab:90:4a:4f:03:de:15:a0:d1:02:22:0d:bc:54:76: 85:64:9e:d9:cb:52:42:16:19:70:09:e3:b1:0e:9e: cb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D5:F2:5E:1E:2E:F5:C4:1E:0E:24:E8:8C:06:43:6C:53:89:F6:04 X509v3 Authority Key Identifier: keyid:3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/FNXyXh4u9cQeDiTojAZDbFOJ9gQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.211.196.0/22 193.109.152.0/21 Signature Algorithm: sha256WithRSAEncryption 4d:ed:42:2b:2c:8a:42:b3:49:19:6f:d8:5f:4a:b5:13:e1:9b: cb:7c:43:02:55:fc:44:90:6b:0d:50:29:be:b1:c8:88:84:48: 51:f5:df:79:9c:9e:9b:f7:4b:eb:8b:3f:57:bf:ee:e4:59:b0: 72:34:56:95:cd:2a:b0:b1:5d:be:46:14:5c:1e:06:ab:76:14: b5:66:32:a5:52:01:e7:56:4e:cf:73:aa:d7:f6:03:31:4c:6d: 1c:c1:d9:f9:66:2f:bf:b8:76:41:32:02:f5:fc:7e:bd:79:16: 78:58:3d:75:ec:2f:4f:95:a2:d4:11:62:ff:c8:76:83:68:2f: 03:c3:ba:ca:6d:06:4d:94:3f:fd:bc:8d:26:b7:bb:f2:9a:86: 2f:33:73:07:42:6a:9f:f1:be:94:dc:47:f6:9a:93:b2:c8:4b: 78:91:c3:91:a8:c0:77:ef:dd:2b:81:c1:42:62:3d:7f:46:b5: 75:d1:b0:fc:b5:f4:40:2b:98:1e:a0:03:d7:f1:0d:73:c7:cf: ba:9d:70:91:0a:70:bb:e1:45:70:58:45:da:46:b2:f0:e0:5f: 88:e7:62:e3:46:cf:29:14:d3:4d:53:d5:7b:65:b2:e7:a7:ea: 43:3f:e1:14:ff:ae:36:8d:44:fb:18:35:53:28:90:46:6a:a8: 95:7b:a0:8f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87Vs68gWYt2RSLNkq8B9NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNWZjNjliN2M2ZWU4Njk5MzBjZTBiODM5MWVlNWQ4NGM1 MzQ5NGEwHhcNMjYwMTAyMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGQ1ZjI1ZTFlMmVmNWM0MWUwZTI0ZTg4YzA2NDM2YzUzODlmNjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzhjAxJCx7iwbZuxx3tGvFEsAvU1 FgG6uTBLbKpRsGWDmBaAY/YC+7xfMVicMQ6Y9U4q0n2TZlz4lby7/SYdKCzrdAXF E2DEDmZcEgQN1FRd9912Td48hs9iRiZmT+jIepZ0BzYmhRdLS/O6z6tTawM/c9uh fdb9tJ0eyLXp0GMgB6NhROHt/Dqisszv5fWvKaTDZad+zGTo9WTEPn4xk87Ek0XI 2oCZ3vFIRyKX9K8+tIVhE6MzDByhAn/JM/jvVNRRKl3W7okuahZK+MBYhm65Ky/s hvC9PnNL2M6es/CrkEpPA94VoNECIg28VHaFZJ7Zy1JCFhlwCeOxDp7LjwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBTV8l4eLvXEHg4k6IwGQ2xTifYEMB8GA1UdIwQY MBaAFDtfxpt8buhpkwzguDke5dhMU0lKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzFfR20zeHU2R21URE9DNE9SN2wyRXhUU1VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC83YzE3MjctOWVhZi00OWM5LWFhZmMt Zjk5NDUzYTk1YTk5LzEvRk5YeVhoNHU5Y1FlRGlUb2pBWkRiRk9KOWdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC83YzE3MjctOWVhZi00OWM5LWFhZmMtZjk5NDUzYTk1YTk5 LzEvTzFfR20zeHU2R21URE9DNE9SN2wyRXhUU1VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW9PEAwQD wW2YMA0GCSqGSIb3DQEBCwUAA4IBAQBN7UIrLIpCs0kZb9hfSrUT4ZvLfEMCVfxE kGsNUCm+sciIhEhR9d95nJ6b90vriz9Xv+7kWbByNFaVzSqwsV2+RhRcHgardhS1 ZjKlUgHnVk7Pc6rX9gMxTG0cwdn5Zi+/uHZBMgL1/H69eRZ4WD117C9PlaLUEWL/ yHaDaC8Dw7rKbQZNlD/9vI0mt7vymoYvM3MHQmqf8b6U3Ef2mpOyyEt4kcORqMB3 790rgcFCYj1/RrV10bD8tfRAK5geoAPX8Q1zx8+6nXCRCnC74UVwWEXaRrLw4F+I 52LjRs8pFNNNU9V7ZbLnp+pDP+EU/642jUT7GDVTKJBGaqiVe6CP -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:04 2026 by rpki-client