This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/FNdC6V014hPt1Cj_9ePfXPj82Z8.roa File: FNdC6V014hPt1Cj_9ePfXPj82Z8.roa (raw, json) Hash identifier: me6C5aY++lhd9zOBr03z1dtrXd+vXTlDDm5g9m7Go/8= Subject key identifier: 14:D7:42:E9:5D:35:E2:13:ED:D4:28:FF:F5:E3:DF:5C:F8:FC:D9:9F Certificate issuer: /CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917 Certificate serial: 019B7911012340FCDF1303B6F7668A4E17DE Authority key identifier: DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/FNdC6V014hPt1Cj_9ePfXPj82Z8.roa Signing time: Thu 01 Jan 2026 10:18:36 +0000 ROA not before: Thu 01 Jan 2026 10:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56496 IP address blocks: 89.19.52.0/22 maxlen: 22 89.19.52.0/23 maxlen: 23 89.19.52.0/24 maxlen: 24 89.19.53.0/24 maxlen: 24 89.19.54.0/23 maxlen: 23 89.19.54.0/24 maxlen: 24 89.19.55.0/24 maxlen: 24 91.224.210.0/23 maxlen: 23 91.224.210.0/24 maxlen: 24 91.224.211.0/24 maxlen: 24 2a0d:bac0::/29 maxlen: 29 2a0d:bac0::/32 maxlen: 32 2a0d:bac1::/32 maxlen: 32 2a0d:bac2::/32 maxlen: 32 2a0d:bac3::/32 maxlen: 32 2a0d:bac4::/32 maxlen: 32 2a0d:bac5::/32 maxlen: 32 2a0d:bac6::/32 maxlen: 32 2a0d:bac7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 20:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:01:23:40:fc:df:13:03:b6:f7:66:8a:4e:17:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917 Validity Not Before: Jan 1 10:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14d742e95d35e213edd428fff5e3df5cf8fcd99f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ce:1e:e8:98:ab:88:3f:86:6c:2a:63:3a:d4: 47:ee:5c:a6:db:4e:95:75:5c:6d:c7:b4:12:d6:81: e7:53:f0:c6:9f:e5:72:94:75:00:99:4e:b0:88:4b: f8:d6:c6:7e:94:9a:95:22:ca:27:66:6e:17:63:f1: d0:25:d3:25:ff:ac:cd:a1:89:4a:d2:6c:27:ca:18: ab:8f:05:61:b4:a0:7f:51:ae:a5:84:8e:14:1a:5f: b5:d8:16:19:77:96:55:94:af:e6:00:fb:86:42:30: 04:f6:fe:4d:8b:e1:63:11:ec:1a:9e:e0:39:b3:bc: 1b:20:fd:06:eb:55:da:53:a8:ee:a3:87:ad:d7:d7: 58:64:0a:4a:2f:74:ee:61:b8:3e:b1:56:dd:99:b7: 90:9c:d5:47:26:4c:af:d9:69:d1:d1:cd:59:63:96: d0:6a:f3:a9:a5:aa:40:5c:75:5d:d8:b0:3d:cc:92: c2:f1:3f:49:6e:f9:24:4e:5d:82:22:2d:e9:fe:d4: cf:12:a3:87:76:2e:09:f7:fe:b8:12:b7:46:0b:fd: e8:c1:38:d6:d7:7e:98:16:ae:23:67:76:1b:c8:bb: f6:5a:81:cc:ec:fb:c7:84:e6:86:57:7d:ae:a4:9c: a2:1d:41:e3:24:62:09:51:68:98:ce:71:bc:65:c3: bf:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D7:42:E9:5D:35:E2:13:ED:D4:28:FF:F5:E3:DF:5C:F8:FC:D9:9F X509v3 Authority Key Identifier: keyid:DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/FNdC6V014hPt1Cj_9ePfXPj82Z8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.19.52.0/22 91.224.210.0/23 IPv6: 2a0d:bac0::/29 Signature Algorithm: sha256WithRSAEncryption 74:fd:e5:a0:56:19:22:1d:48:e4:8f:ad:d4:80:90:38:99:cc: 98:ba:26:81:96:4d:91:5d:dc:33:10:e8:b9:ec:3c:12:6a:0f: 2f:c6:88:10:98:24:54:48:b6:f1:90:88:49:17:18:03:74:20: 3c:ad:cb:3a:78:6d:63:83:58:4b:a0:68:f5:f0:8e:9d:ff:61: 95:8b:4a:55:49:35:3b:dd:a4:b3:57:33:dd:28:b2:b1:91:6b: 85:78:67:3f:2a:e1:55:d5:3c:6e:1a:22:27:64:2c:81:f6:6b: 39:30:02:cb:01:5c:a5:b4:da:78:24:13:2d:2a:0c:15:43:84: 91:84:39:1d:bc:15:72:13:77:5b:e8:2c:40:5e:b6:15:70:2c: 63:1d:15:ea:d5:90:b3:49:3c:54:51:3a:a5:d8:47:16:41:fe: 63:a1:60:0b:b1:a2:5f:2a:ad:6c:41:92:88:cb:24:89:38:2b: ae:07:df:be:45:a6:8a:66:00:5d:1c:b9:e1:a4:9d:7d:da:fd: fc:7d:a9:46:d6:b9:21:93:9d:14:63:72:85:a6:f7:06:7b:14: 41:ca:38:19:1c:6f:2a:9f:4b:fa:51:8f:10:3d:15:01:4f:e3: 80:dc:b6:7c:51:88:b9:47:04:aa:7e:a4:bf:15:9e:05:94:f8: 4d:a6:b8:6a -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5EQEjQPzfEwO292aKThfeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMmMyZmVmOWM4Y2FmOGYyZjA4MjExZWYwMmMzZDBhZDM0 NzQ5MTcwHhcNMjYwMTAxMTAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGQ3NDJlOTVkMzVlMjEzZWRkNDI4ZmZmNWUzZGY1Y2Y4ZmNkOTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1s4e6JiriD+GbCpjOtRH7lym206V dVxtx7QS1oHnU/DGn+VylHUAmU6wiEv41sZ+lJqVIsonZm4XY/HQJdMl/6zNoYlK 0mwnyhirjwVhtKB/Ua6lhI4UGl+12BYZd5ZVlK/mAPuGQjAE9v5Ni+FjEewanuA5 s7wbIP0G61XaU6juo4et19dYZApKL3TuYbg+sVbdmbeQnNVHJkyv2WnR0c1ZY5bQ avOppapAXHVd2LA9zJLC8T9JbvkkTl2CIi3p/tTPEqOHdi4J9/64ErdGC/3owTjW 136YFq4jZ3YbyLv2WoHM7PvHhOaGV32upJyiHUHjJGIJUWiYznG8ZcO/ZQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBTXQuldNeIT7dQo//Xj31z4/NmfMB8GA1UdIwQY MBaAFNwsL++cjK+PLwghHvAsPQrTR0kXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0N3djc1eU1yNDh2Q0NFZThDdzlDdE5IU1JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8wODUzMWItYmQ2Ni00ZmNlLWE1Njkt ODY0NGM1ODE0YzlhLzEvRk5kQzZWMDE0aFB0MUNqXzllUGZYUGo4Mlo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8wODUzMWItYmQ2Ni00ZmNlLWE1NjktODY0NGM1ODE0Yzlh LzEvM0N3djc1eU1yNDh2Q0NFZThDdzlDdE5IU1JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCWRM0AwQB W+DSMA0EAgACMAcDBQMqDbrAMA0GCSqGSIb3DQEBCwUAA4IBAQB0/eWgVhkiHUjk j63UgJA4mcyYuiaBlk2RXdwzEOi57DwSag8vxogQmCRUSLbxkIhJFxgDdCA8rcs6 eG1jg1hLoGj18I6d/2GVi0pVSTU73aSzVzPdKLKxkWuFeGc/KuFV1TxuGiInZCyB 9ms5MALLAVyltNp4JBMtKgwVQ4SRhDkdvBVyE3db6CxAXrYVcCxjHRXq1ZCzSTxU UTql2EcWQf5joWALsaJfKq1sQZKIyySJOCuuB9++RaaKZgBdHLnhpJ192v38falG 1rkhk50UY3KFpvcGexRByjgZHG8qn0v6UY8QPRUBT+OA3LZ8UYi5RwSqfqS/FZ4F lPhNprhq -----END CERTIFICATE-----Generated at Mon Feb 2 07:56:13 2026 by rpki-client