This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/fvrmT3BDya5vUxums74XuzYqty0.roa File: fvrmT3BDya5vUxums74XuzYqty0.roa (raw, json) Hash identifier: q+hIuLuMabVUkBWiWW3pA8MFsL2LuFbfABq1AZhRA2Q= Subject key identifier: 7E:FA:E6:4F:70:43:C9:AE:6F:53:1B:A6:B3:BE:17:BB:36:2A:B7:2D Certificate issuer: /CN=13e19aef683969eb982f2ddb219b4652af26b96d Certificate serial: 019B79106B9D7501A2A2B6A17344DE803F68 Authority key identifier: 13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/fvrmT3BDya5vUxums74XuzYqty0.roa Signing time: Thu 01 Jan 2026 10:17:57 +0000 ROA not before: Thu 01 Jan 2026 10:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 185.196.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6b:9d:75:01:a2:a2:b6:a1:73:44:de:80:3f:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13e19aef683969eb982f2ddb219b4652af26b96d Validity Not Before: Jan 1 10:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7efae64f7043c9ae6f531ba6b3be17bb362ab72d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:11:ff:6b:77:90:7c:5e:73:db:8d:31:e8:68: c7:6d:c6:a6:08:cf:37:b9:5d:0a:57:d7:1b:04:e4: 9b:67:43:7a:8d:02:f5:a5:1f:06:27:ca:81:66:b7: 81:74:fe:ef:76:2a:36:7d:d4:dd:2c:a6:86:3b:a2: c0:9d:69:e6:e6:5b:6e:ca:90:d8:23:4a:f5:50:06: b9:de:13:4e:43:1c:46:86:59:8b:65:ca:3a:94:c1: aa:fb:a9:60:bb:ed:a8:34:63:75:81:24:15:f2:82: 2d:83:80:9e:75:f5:ee:89:f5:67:9d:f6:df:59:a6: f7:3a:b3:95:05:9f:e0:80:db:d0:c9:dc:04:7e:25: 26:e1:83:41:2f:77:0f:71:50:b5:bb:d4:4d:7b:71: fc:1f:2c:c0:12:d1:70:64:b3:66:ee:0c:a4:1b:56: 6d:46:5c:00:11:af:e5:f4:ec:2d:cc:88:f3:fa:dc: 9c:99:fa:fd:07:56:ea:48:a2:e1:4b:fd:cf:96:59: f9:e1:12:7a:81:76:5d:03:12:74:f0:1a:b3:95:6b: 76:3a:37:98:9c:9a:d6:84:46:27:3e:6d:27:67:5e: d6:10:0c:7e:f2:75:71:29:49:77:84:3a:38:48:ce: 04:43:3d:06:7d:e6:6a:f2:79:4d:d2:b8:d7:70:a0: e2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:FA:E6:4F:70:43:C9:AE:6F:53:1B:A6:B3:BE:17:BB:36:2A:B7:2D X509v3 Authority Key Identifier: keyid:13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/fvrmT3BDya5vUxums74XuzYqty0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.196.97.0/24 Signature Algorithm: sha256WithRSAEncryption 59:19:af:a5:17:8f:4a:6f:55:9f:e7:6d:e7:96:a8:0a:75:e8: 0a:25:08:13:db:7b:26:58:12:19:ae:18:1b:4f:7a:03:63:58: 21:f0:1b:06:a3:f5:e3:fe:8c:4d:56:f0:2b:92:11:54:67:42: 40:fa:ec:18:43:91:68:7f:52:25:98:85:d8:38:81:2e:5c:24: a4:0f:58:11:9b:17:61:84:c9:34:73:ef:ae:9a:7a:05:92:5f: 5b:0f:1d:8d:ce:42:82:2b:d1:29:0d:95:a6:30:9a:c2:a8:df: b9:0e:31:a0:d9:cb:02:2f:25:8b:1c:90:08:c3:0f:45:72:14: b4:e3:5c:c9:21:6f:da:ca:dc:6a:db:1a:82:6b:ac:e9:a0:5b: 42:3d:14:34:93:3a:7d:b7:34:04:59:51:0f:ff:a3:50:73:7b: 99:3b:52:1c:fb:68:d3:c2:73:f0:91:e0:ea:60:01:56:62:4f: da:c8:8e:8c:c6:a4:8d:fb:22:dc:a0:81:a1:cf:fc:a8:6b:b6: ed:1d:f2:12:5a:c6:e6:f6:eb:f0:c8:32:34:fc:42:01:d7:a8: 30:49:0e:84:f1:cb:fd:1e:42:52:d9:7e:24:7b:07:32:1b:e5: d4:9f:25:83:75:fb:70:71:15:3a:a3:ec:62:96:d6:95:d1:c0: 5e:40:a8:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EGuddQGiorahc0TegD9oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZTE5YWVmNjgzOTY5ZWI5ODJmMmRkYjIxOWI0NjUyYWYy NmI5NmQwHhcNMjYwMTAxMTAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWZhZTY0ZjcwNDNjOWFlNmY1MzFiYTZiM2JlMTdiYjM2MmFiNzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxH/a3eQfF5z240x6GjHbcamCM83 uV0KV9cbBOSbZ0N6jQL1pR8GJ8qBZreBdP7vdio2fdTdLKaGO6LAnWnm5ltuypDY I0r1UAa53hNOQxxGhlmLZco6lMGq+6lgu+2oNGN1gSQV8oItg4CedfXuifVnnfbf Wab3OrOVBZ/ggNvQydwEfiUm4YNBL3cPcVC1u9RNe3H8HyzAEtFwZLNm7gykG1Zt RlwAEa/l9OwtzIjz+tycmfr9B1bqSKLhS/3Plln54RJ6gXZdAxJ08BqzlWt2OjeY nJrWhEYnPm0nZ17WEAx+8nVxKUl3hDo4SM4EQz0GfeZq8nlN0rjXcKDiWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH765k9wQ8mub1MbprO+F7s2KrctMB8GA1UdIwQY MBaAFBPhmu9oOWnrmC8t2yGbRlKvJrltMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRS1HYTcyZzVhZXVZTHkzYkladEdVcThtdVcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8yMzZhYmEtZThmMi00ZTA2LWEwNjQt ZmY5NjkyOGE2ZGY0LzEvZnZybVQzQkR5YTV2VXh1bXM3NFh1ellxdHkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8yMzZhYmEtZThmMi00ZTA2LWEwNjQtZmY5NjkyOGE2ZGY0 LzEvRS1HYTcyZzVhZXVZTHkzYkladEdVcThtdVcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucRhMA0G CSqGSIb3DQEBCwUAA4IBAQBZGa+lF49Kb1Wf523nlqgKdegKJQgT23smWBIZrhgb T3oDY1gh8BsGo/Xj/oxNVvArkhFUZ0JA+uwYQ5Fof1IlmIXYOIEuXCSkD1gRmxdh hMk0c++umnoFkl9bDx2NzkKCK9EpDZWmMJrCqN+5DjGg2csCLyWLHJAIww9FchS0 41zJIW/aytxq2xqCa6zpoFtCPRQ0kzp9tzQEWVEP/6NQc3uZO1Ic+2jTwnPwkeDq YAFWYk/ayI6MxqSN+yLcoIGhz/yoa7btHfISWsbm9uvwyDI0/EIB16gwSQ6E8cv9 HkJS2X4kewcyG+XUnyWDdftwcRU6o+xiltaV0cBeQKiy -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:34 2026 by rpki-client