This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/FD9UserVnd9g-B97_3OHBh6hGow.roa File: FD9UserVnd9g-B97_3OHBh6hGow.roa (raw, json) Hash identifier: alF7jO0INJ/TLd2wbZJoqP534uCICHCvkQ7BKchM5M0= Subject key identifier: 14:3F:54:B1:EA:D5:9D:DF:60:F8:1F:7B:FF:73:87:06:1E:A1:1A:8C Certificate issuer: /CN=a088b0547f09fe9224050d70a523da5bedbe0738 Certificate serial: 019C3A71F5EABE686623E2260755BFC9BC32 Authority key identifier: A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/FD9UserVnd9g-B97_3OHBh6hGow.roa Signing time: Sat 07 Feb 2026 23:31:12 +0000 ROA not before: Sat 07 Feb 2026 23:31:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201002 IP address blocks: 45.85.61.0/24 maxlen: 24 2a10:e781::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:3a:71:f5:ea:be:68:66:23:e2:26:07:55:bf:c9:bc:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a088b0547f09fe9224050d70a523da5bedbe0738 Validity Not Before: Feb 7 23:31:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=143f54b1ead59ddf60f81f7bff7387061ea11a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:93:73:8f:0d:b6:52:73:0a:0c:7b:95:d5:9b: 37:2b:9c:1b:33:f8:75:75:0e:5c:17:fe:dd:c3:2a: 3b:71:25:64:b7:65:9c:f3:53:37:43:25:f5:da:c1: cc:a6:37:11:ac:cc:87:4f:e3:40:fc:c0:5e:1a:ce: fd:d0:86:ec:17:67:1e:82:f3:4e:8e:ad:23:ae:fd: da:51:cb:59:ad:b3:47:95:ca:05:8f:0b:61:d7:6d: b5:df:80:52:da:90:cb:ed:84:6c:8f:a0:62:7b:0a: 1d:eb:34:94:dc:b4:52:7b:f3:0c:9f:3f:c4:e8:62: f3:89:6f:18:18:1a:2b:9f:28:50:80:88:8d:58:07: 9f:b9:bc:4c:cd:ef:f5:6e:f3:23:1d:c6:85:0b:e6: 77:eb:26:cf:7c:28:27:eb:23:c8:80:7e:5e:7e:93: d5:9c:7f:6b:20:a3:8e:fc:02:17:d1:68:ec:96:d2: 5c:23:b5:a1:c7:10:e3:7f:9a:e3:b5:1d:7e:e5:46: 78:0b:aa:30:9b:a6:85:87:87:95:3a:ca:26:8c:71: bf:d6:e7:45:d7:2b:2f:cf:7a:1c:4b:e0:67:51:50: c5:62:4e:fd:a1:12:e8:1d:b4:1b:39:54:b2:3d:48: c0:b7:9c:f2:0f:91:05:93:32:2e:78:52:24:2f:ae: 8b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:3F:54:B1:EA:D5:9D:DF:60:F8:1F:7B:FF:73:87:06:1E:A1:1A:8C X509v3 Authority Key Identifier: keyid:A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/FD9UserVnd9g-B97_3OHBh6hGow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.61.0/24 IPv6: 2a10:e781::/40 Signature Algorithm: sha256WithRSAEncryption 6e:97:86:4e:79:9a:09:ae:c0:ed:cb:be:7b:b9:c0:4f:68:e2: 13:75:bb:16:96:6d:60:5c:2e:78:fc:ec:69:2f:ad:ae:bd:1e: fd:a6:f9:47:57:2f:10:b5:22:f7:75:e5:a3:e0:40:7c:17:d2: dd:76:ff:08:98:f7:44:a6:ec:11:78:f8:2b:6f:79:f3:01:1d: e7:06:40:b4:39:4f:12:55:5f:6d:5b:94:af:72:79:9d:56:8a: 93:24:ad:7c:a7:dc:dd:2d:c3:8d:35:39:1a:ac:41:4c:58:40: 17:92:85:09:f9:cd:d4:3d:0e:fd:a6:7d:2a:fa:00:3b:80:af: 4d:a5:f3:7b:9c:38:67:44:25:69:a6:59:1a:20:31:ed:9b:e2: 7a:e3:d6:91:49:a7:b4:69:51:c9:98:80:b5:28:67:7a:59:e9: 8b:a0:34:ae:3d:45:2d:df:9c:66:97:09:ee:c6:a8:ac:a4:d2: 24:57:a4:a4:ed:71:63:71:2f:7c:25:a2:f6:0a:cf:57:44:f1: 7c:7f:56:29:b6:9f:b4:b1:f9:f8:76:38:63:66:4e:70:17:db: 57:2b:b0:c7:b8:b8:d5:80:15:5d:e1:cd:ad:cc:a7:75:75:e2: 48:73:55:63:ec:a3:d6:d4:8c:1d:fe:bd:8e:44:5c:4f:3a:f4: 3c:58:8c:14 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZw6cfXqvmhmI+ImB1W/ybwyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwODhiMDU0N2YwOWZlOTIyNDA1MGQ3MGE1MjNkYTViZWRi ZTA3MzgwHhcNMjYwMjA3MjMzMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDNmNTRiMWVhZDU5ZGRmNjBmODFmN2JmZjczODcwNjFlYTExYThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZNzjw22UnMKDHuV1Zs3K5wbM/h1 dQ5cF/7dwyo7cSVkt2Wc81M3QyX12sHMpjcRrMyHT+NA/MBeGs790IbsF2cegvNO jq0jrv3aUctZrbNHlcoFjwth122134BS2pDL7YRsj6Biewod6zSU3LRSe/MMnz/E 6GLziW8YGBornyhQgIiNWAefubxMze/1bvMjHcaFC+Z36ybPfCgn6yPIgH5efpPV nH9rIKOO/AIX0WjsltJcI7WhxxDjf5rjtR1+5UZ4C6owm6aFh4eVOsomjHG/1udF 1ysvz3ocS+BnUVDFYk79oRLoHbQbOVSyPUjAt5zyD5EFkzIueFIkL66LtQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFBQ/VLHq1Z3fYPgfe/9zhwYeoRqMMB8GA1UdIwQY MBaAFKCIsFR/Cf6SJAUNcKUj2lvtvgc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kOTA2MzUtYjI4Mi00ZTg2LTllNTMt ZGY4MmZhODk3MzI2LzEvRkQ5VXNlclZuZDlnLUI5N18zT0hCaDZoR293LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9kOTA2MzUtYjI4Mi00ZTg2LTllNTMtZGY4MmZhODk3MzI2 LzEvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQALVU9MA4E AgACMAgDBgAqEOeBADANBgkqhkiG9w0BAQsFAAOCAQEAbpeGTnmaCa7A7cu+e7nA T2jiE3W7FpZtYFwuePzsaS+trr0e/ab5R1cvELUi93Xlo+BAfBfS3Xb/CJj3RKbs EXj4K2958wEd5wZAtDlPElVfbVuUr3J5nVaKkyStfKfc3S3DjTU5GqxBTFhAF5KF CfnN1D0O/aZ9KvoAO4CvTaXze5w4Z0QlaaZZGiAx7ZvieuPWkUmntGlRyZiAtShn elnpi6A0rj1FLd+cZpcJ7saorKTSJFekpO1xY3EvfCWi9grPV0TxfH9WKbaftLH5 +HY4Y2ZOcBfbVyuwx7i41YAVXeHNrcyndXXiSHNVY+yj1tSMHf69jkRcTzr0PFiM FA== -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:10 2026 by rpki-client