This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/fd1xrTIYmkH8h8_zV14R4Xwx3xA.roa File: fd1xrTIYmkH8h8_zV14R4Xwx3xA.roa (raw, json) Hash identifier: DuMMp6iWusBZnJRack5skbisuXs/1s70bXxQ0VM4qus= Subject key identifier: 7D:DD:71:AD:32:18:9A:41:FC:87:CF:F3:57:5E:11:E1:7C:31:DF:10 Certificate issuer: /CN=82fa25b2fcb1468114b738928ab20d8761bf8831 Certificate serial: 019B7AC95C031C82A17AEF2AE2F9EC1FC736 Authority key identifier: 82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/fd1xrTIYmkH8h8_zV14R4Xwx3xA.roa Signing time: Thu 01 Jan 2026 18:19:35 +0000 ROA not before: Thu 01 Jan 2026 18:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25215 IP address blocks: 155.140.82.0/24 maxlen: 24 155.140.83.0/24 maxlen: 24 155.140.90.0/24 maxlen: 24 155.140.91.0/24 maxlen: 24 155.140.102.0/23 maxlen: 24 155.140.104.0/23 maxlen: 24 159.50.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.crl rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:5c:03:1c:82:a1:7a:ef:2a:e2:f9:ec:1f:c7:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82fa25b2fcb1468114b738928ab20d8761bf8831 Validity Not Before: Jan 1 18:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ddd71ad32189a41fc87cff3575e11e17c31df10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1c:a8:33:5c:c2:41:de:7a:ee:02:d7:ca:e3: d6:dd:a0:8f:b4:88:ff:f8:db:77:fa:fa:ac:f2:67: e5:17:f7:ab:cc:72:0a:dc:33:e0:19:79:99:25:10: be:46:b3:73:b4:fa:8c:e9:56:3f:17:0e:ba:e3:b2: 86:e6:87:13:8c:40:c0:38:96:ee:d7:fc:fc:17:32: 0d:8f:71:8b:06:71:5c:a8:d4:f8:7f:1b:e7:c5:44: 0b:d0:c9:fe:3f:00:11:a4:ba:05:34:d7:19:0f:90: 4c:0d:06:0c:bf:67:40:44:cb:fa:60:4c:f2:b7:77: eb:2b:bb:84:48:35:16:fb:c1:5c:9d:ec:ee:68:ff: 72:51:c8:79:73:ea:d9:23:61:1c:52:ca:43:34:13: af:bb:59:2f:e8:96:be:55:51:8d:02:a1:e0:6c:a1: 69:0f:5d:6b:fb:35:f6:af:67:7d:9f:aa:e3:dd:f9: 6c:2f:e0:c5:df:6e:4c:27:81:45:21:5b:9a:61:15: 0f:4b:c2:c1:0c:95:19:47:a2:71:a1:41:a9:2c:ff: b0:0c:8b:c8:87:73:7e:d6:b6:37:fe:d4:01:dd:44: c3:25:70:4a:af:9f:a7:f4:23:56:5a:c2:07:a7:7f: a8:01:e0:bc:71:22:f7:74:b2:92:2c:1c:f3:c9:46: 35:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:DD:71:AD:32:18:9A:41:FC:87:CF:F3:57:5E:11:E1:7C:31:DF:10 X509v3 Authority Key Identifier: keyid:82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/fd1xrTIYmkH8h8_zV14R4Xwx3xA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.140.82.0/23 155.140.90.0/23 155.140.102.0-155.140.105.255 159.50.174.0/24 Signature Algorithm: sha256WithRSAEncryption 30:45:45:d6:6e:22:34:31:9e:90:e7:20:31:ee:87:46:0a:9f: 49:5d:0d:91:f6:58:4b:ab:b6:ba:06:77:61:09:55:24:29:5a: 8a:22:56:4c:13:dc:e7:8e:26:02:e8:04:8b:ac:64:e5:20:92: 2e:f2:d5:d4:9a:1a:d6:f6:0a:41:86:4f:48:16:f3:f3:a4:16: d9:e7:96:09:a9:87:a0:90:ba:18:34:21:60:bc:ef:54:7b:15: df:43:03:28:da:c0:2c:08:51:ec:cb:be:4e:58:bf:30:6d:7f: 64:d9:9f:d3:72:2d:68:6b:00:04:66:74:a6:7e:90:fa:e7:6c: ad:25:59:b6:3b:bb:6a:2c:c5:90:0c:50:a5:ad:f8:06:d2:52: c6:8c:bf:63:68:5f:e1:ab:d1:5d:4c:df:04:27:77:2a:e9:7b: cf:49:22:2b:a2:86:09:aa:2d:0b:a6:5a:c5:50:85:74:1d:ab: cb:c3:b1:be:46:91:f5:13:b1:e7:f4:fc:80:39:aa:09:1b:88: 6c:8b:fc:f5:5e:dc:f8:4a:eb:96:58:de:79:6e:a5:1a:09:cd: ba:f2:1e:5e:76:b6:b8:58:fb:cd:67:6b:eb:a0:60:f4:eb:e3: 43:95:56:3e:fa:b3:86:cc:56:8f:5e:e0:0f:90:f9:7f:7c:b7: 5d:83:4e:60 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt6yVwDHIKheu8q4vnsH8c2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZmEyNWIyZmNiMTQ2ODExNGI3Mzg5MjhhYjIwZDg3NjFi Zjg4MzEwHhcNMjYwMTAxMTgxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGRkNzFhZDMyMTg5YTQxZmM4N2NmZjM1NzVlMTFlMTdjMzFkZjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxyoM1zCQd567gLXyuPW3aCPtIj/ +Nt3+vqs8mflF/erzHIK3DPgGXmZJRC+RrNztPqM6VY/Fw6647KG5ocTjEDAOJbu 1/z8FzINj3GLBnFcqNT4fxvnxUQL0Mn+PwARpLoFNNcZD5BMDQYMv2dARMv6YEzy t3frK7uESDUW+8FcnezuaP9yUch5c+rZI2EcUspDNBOvu1kv6Ja+VVGNAqHgbKFp D11r+zX2r2d9n6rj3flsL+DF325MJ4FFIVuaYRUPS8LBDJUZR6JxoUGpLP+wDIvI h3N+1rY3/tQB3UTDJXBKr5+n9CNWWsIHp3+oAeC8cSL3dLKSLBzzyUY18QIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFH3dca0yGJpB/IfP81deEeF8Md8QMB8GA1UdIwQY MBaAFIL6JbL8sUaBFLc4koqyDYdhv4gxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3ZvbHN2eXhSb0VVdHppU2lySU5oMkdfaURFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xMzcxYTYtZjVmMy00M2JmLWFmZjQt NzY4NWM5NjcwMDE3LzEvZmQxeHJUSVlta0g4aDhfelYxNFI0WHd4M3hBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8xMzcxYTYtZjVmMy00M2JmLWFmZjQtNzY4NWM5NjcwMDE3 LzEvZ3ZvbHN2eXhSb0VVdHppU2lySU5oMkdfaURFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBm4xSAwQB m4xaMAwDBAGbjGYDBAGbjGgDBACfMq4wDQYJKoZIhvcNAQELBQADggEBADBFRdZu IjQxnpDnIDHuh0YKn0ldDZH2WEurtroGd2EJVSQpWooiVkwT3OeOJgLoBIusZOUg ki7y1dSaGtb2CkGGT0gW8/OkFtnnlgmph6CQuhg0IWC871R7Fd9DAyjawCwIUezL vk5YvzBtf2TZn9NyLWhrAARmdKZ+kPrnbK0lWbY7u2osxZAMUKWt+AbSUsaMv2No X+Gr0V1M3wQndyrpe89JIiuihgmqLQumWsVQhXQdq8vDsb5GkfUTsef0/IA5qgkb iGyL/PVe3PhK65ZY3nlupRoJzbryHl52trhY+81na+ugYPTr40OVVj76s4bMVo9e 4A+Q+X98t12DTmA= -----END CERTIFICATE-----Generated at Mon Feb 9 18:45:01 2026 by rpki-client