This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/fzzU9xiTwboQ9mMNg2Eegpb3LX0.roa File: fzzU9xiTwboQ9mMNg2Eegpb3LX0.roa (raw, json) Hash identifier: nwpw3EqTS3bDEUKnzI/z5QrY+YFUcA5dqpUchh6jOTc= Subject key identifier: 7F:3C:D4:F7:18:93:C1:BA:10:F6:63:0D:83:61:1E:82:96:F7:2D:7D Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed Certificate serial: 019B7F83CF19681CADDEECEF7EDF733B5EB9 Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/fzzU9xiTwboQ9mMNg2Eegpb3LX0.roa Signing time: Fri 02 Jan 2026 16:21:43 +0000 ROA not before: Fri 02 Jan 2026 16:21:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203303 IP address blocks: 45.10.91.0/24 maxlen: 24 185.138.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:cf:19:68:1c:ad:de:ec:ef:7e:df:73:3b:5e:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed Validity Not Before: Jan 2 16:21:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f3cd4f71893c1ba10f6630d83611e8296f72d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:53:b9:a5:0d:4b:42:51:bd:59:35:b0:80:c1: 16:be:06:26:5f:d8:fc:92:d1:52:c2:3c:23:f6:ec: 20:58:7e:a6:2c:75:97:66:11:71:3a:5a:a7:68:a1: 03:8d:da:ca:38:b5:6f:15:c2:de:ee:ae:67:47:7a: ea:04:a0:d0:c5:a2:c3:4a:9c:40:45:0d:66:c4:5e: 37:32:74:92:ce:e6:75:c9:6e:55:d8:8f:50:cf:48: c0:fa:f2:f2:4c:d9:0e:1e:33:8a:7b:79:92:a5:13: 9e:04:2c:52:4f:68:9b:47:7d:c7:68:39:47:b7:ea: 00:c4:20:2f:61:03:8d:e9:63:84:3d:fb:cc:3d:29: f9:4a:b9:37:aa:cc:a4:af:94:1e:98:79:76:38:70: 96:c7:13:da:00:d2:6b:14:0b:94:a2:ec:da:13:f3: 8c:2b:f6:13:d1:2d:2e:df:a0:af:b4:cc:41:1f:21: 86:2d:a2:eb:4d:62:a6:ec:05:49:59:b0:ee:62:ff: 13:fb:06:a2:56:30:41:fc:94:ff:c0:df:b8:62:f8: e0:45:58:8c:44:6b:b4:7e:89:ba:e0:ae:fa:f9:2e: 3c:8d:fb:b6:f5:a7:99:ff:cc:9f:1e:67:99:83:e7: f7:40:73:04:2f:a9:53:cf:6b:21:2d:3c:0a:90:5b: 43:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:3C:D4:F7:18:93:C1:BA:10:F6:63:0D:83:61:1E:82:96:F7:2D:7D X509v3 Authority Key Identifier: keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/fzzU9xiTwboQ9mMNg2Eegpb3LX0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.91.0/24 185.138.228.0/24 Signature Algorithm: sha256WithRSAEncryption 61:af:96:35:71:07:8d:0c:78:7f:a5:2f:34:19:c3:d0:e8:43: c2:1d:85:22:d8:8c:da:0e:02:0b:8b:94:b7:84:2b:e4:ff:4a: 91:d1:01:29:12:67:40:8e:2e:61:a4:af:48:dd:27:a9:f9:fa: fa:0b:bc:6b:47:14:ca:c2:c6:65:0a:1a:c4:a6:1f:84:76:3d: ce:08:98:be:0f:b4:da:3f:f8:b4:ec:20:f3:cb:a9:6d:1b:e3: ab:35:e1:44:ae:8c:06:21:1b:4b:58:a3:38:f9:c5:9a:c6:20: ab:42:09:54:df:a8:b8:f2:04:fb:37:ac:75:5a:64:94:28:0d: 1c:bd:b3:e6:c0:30:b6:e2:d1:aa:1a:0c:5c:0e:7c:db:10:83: ab:de:6d:8b:71:9a:08:f9:3d:8f:e5:a6:1e:87:ae:36:9f:aa: 87:52:df:c3:e6:e2:d9:56:a6:ec:af:2e:79:bc:df:5a:69:b7: 36:78:0b:0c:57:f5:b8:8b:c5:e1:c4:1b:4b:67:31:a7:a2:0c: 51:e5:b5:86:8c:5a:b9:aa:c2:91:20:c0:30:ee:53:a6:ee:8d: 60:11:f7:34:ac:c9:0a:a8:29:2b:1e:27:0b:d9:1b:24:cf:79: 6e:53:e6:fa:fd:7c:6a:3b:19:3b:c1:2d:f4:e4:a7:12:94:83: c9:c8:84:53 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/g88ZaByt3uzvft9zO165MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZmFkOTZkZDA1YWY4YzJkMjYxOTJjODQxMTMxZjJmOTc0 NTlmZWQwHhcNMjYwMTAyMTYyMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjNjZDRmNzE4OTNjMWJhMTBmNjYzMGQ4MzYxMWU4Mjk2ZjcyZDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFO5pQ1LQlG9WTWwgMEWvgYmX9j8 ktFSwjwj9uwgWH6mLHWXZhFxOlqnaKEDjdrKOLVvFcLe7q5nR3rqBKDQxaLDSpxA RQ1mxF43MnSSzuZ1yW5V2I9Qz0jA+vLyTNkOHjOKe3mSpROeBCxST2ibR33HaDlH t+oAxCAvYQON6WOEPfvMPSn5Srk3qsykr5QemHl2OHCWxxPaANJrFAuUouzaE/OM K/YT0S0u36CvtMxBHyGGLaLrTWKm7AVJWbDuYv8T+waiVjBB/JT/wN+4YvjgRViM RGu0fom64K76+S48jfu29aeZ/8yfHmeZg+f3QHMEL6lTz2shLTwKkFtDNwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFH881PcYk8G6EPZjDYNhHoKW9y19MB8GA1UdIwQY MBaAFFX62W3QWvjC0mGSyEETHy+XRZ/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAt MzBmZjJjODNmMDAxLzEvZnp6VTl4aVR3Ym9ROW1NTmcyRWVncGIzTFgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAtMzBmZjJjODNmMDAx LzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQpbAwQA uYrkMA0GCSqGSIb3DQEBCwUAA4IBAQBhr5Y1cQeNDHh/pS80GcPQ6EPCHYUi2Iza DgILi5S3hCvk/0qR0QEpEmdAji5hpK9I3Sep+fr6C7xrRxTKwsZlChrEph+Edj3O CJi+D7TaP/i07CDzy6ltG+OrNeFErowGIRtLWKM4+cWaxiCrQglU36i48gT7N6x1 WmSUKA0cvbPmwDC24tGqGgxcDnzbEIOr3m2LcZoI+T2P5aYeh642n6qHUt/D5uLZ Vqbsry55vN9aabc2eAsMV/W4i8XhxBtLZzGnogxR5bWGjFq5qsKRIMAw7lOm7o1g Efc0rMkKqCkrHicL2Rskz3luU+b6/XxqOxk7wS305KcSlIPJyIRT -----END CERTIFICATE-----Generated at Tue Feb 10 04:26:33 2026 by rpki-client