This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/fJuTGRvozfm4_e0aUam0wS-AlPw.roa File: fJuTGRvozfm4_e0aUam0wS-AlPw.roa (raw, json) Hash identifier: Z1Mjes1iDe2mLSTG+5DMRvvdh4aNMNzB1Vnh815bgHo= Subject key identifier: 7C:9B:93:19:1B:E8:CD:F9:B8:FD:ED:1A:51:A9:B4:C1:2F:80:94:FC Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7 Certificate serial: 019B77C706896B1BB8DAB842710E6AC3B237 Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/fJuTGRvozfm4_e0aUam0wS-AlPw.roa Signing time: Thu 01 Jan 2026 04:18:10 +0000 ROA not before: Thu 01 Jan 2026 04:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43260 IP address blocks: 86.104.199.0/24 maxlen: 24 89.35.14.0/24 maxlen: 24 93.117.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:06:89:6b:1b:b8:da:b8:42:71:0e:6a:c3:b2:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7 Validity Not Before: Jan 1 04:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c9b93191be8cdf9b8fded1a51a9b4c12f8094fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:47:4a:9a:85:93:2c:6f:fe:85:9f:03:5c:a0: e3:04:ef:7c:2a:f6:cb:81:1e:ef:cc:52:e0:06:b5: 61:f9:43:62:06:79:e1:af:66:e2:26:1c:12:fd:90: 4e:58:aa:13:0e:52:df:a1:d9:30:3e:b1:1b:82:00: 9a:5d:48:86:bb:a1:0d:45:fd:b1:1b:2c:5e:3b:bb: 6d:ed:dd:f1:49:f1:c3:71:30:46:aa:d8:8f:40:71: 4f:e5:9e:ce:89:c5:3f:42:d3:cb:d4:2c:37:cd:03: d7:b8:8c:06:78:d6:34:bf:83:10:45:ca:df:11:8d: 97:9d:9a:a1:cd:f7:5b:0a:05:e0:12:9c:fd:5b:02: 52:9b:9d:fb:ad:24:92:f2:b5:0b:ea:75:20:e0:d2: b3:b9:ee:14:62:16:49:cf:9c:90:20:0d:39:8a:17: b6:87:ad:1b:04:ee:70:c4:0e:1e:ee:c2:54:fc:36: ad:14:c8:f0:6f:76:45:06:b8:22:74:fe:19:1c:48: d0:88:f3:c3:10:13:2e:c9:b2:ae:c5:07:40:c6:39: a4:68:59:74:cf:54:e5:1b:81:4d:c4:df:94:fa:25: 1f:93:9c:f9:9a:eb:d6:80:6f:55:2b:9a:4a:fb:15: 1d:01:d0:3f:12:e9:e1:c8:c3:c4:c7:4d:ad:c8:15: b3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:9B:93:19:1B:E8:CD:F9:B8:FD:ED:1A:51:A9:B4:C1:2F:80:94:FC X509v3 Authority Key Identifier: keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/fJuTGRvozfm4_e0aUam0wS-AlPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.104.199.0/24 89.35.14.0/24 93.117.131.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:81:db:e0:35:0c:be:60:c0:5a:70:35:97:2a:24:8d:b9:1a: 89:57:dc:43:f5:3c:63:ae:55:65:5e:af:b9:fd:ae:16:c1:73: 59:ad:14:80:5d:78:ae:03:cd:3c:86:01:b2:ad:83:83:9e:c9: ca:2e:da:4d:70:e9:59:5b:53:e1:21:8b:ee:e2:79:37:b0:1c: 97:10:d6:1d:7f:56:3d:96:45:2f:b3:c7:a8:ff:13:e0:ca:e2: 49:bf:45:d7:84:3e:b7:f2:24:0f:44:c8:4c:44:b7:a5:49:92: 68:01:5c:c0:1e:54:38:7c:53:f4:46:d4:52:f0:ea:fd:e5:e0: 9a:8a:3e:ef:86:6c:56:5a:06:6a:2f:40:2c:26:d5:d3:79:92: 3b:d4:b2:44:9a:7d:a1:d2:09:dc:67:21:12:c6:76:22:08:7b: 37:ec:ed:5f:9a:30:22:a6:64:59:f6:97:c1:02:bf:cb:1b:35: 32:33:20:37:c2:0b:dd:71:1d:06:50:7c:e3:77:ab:3d:a5:fa: f8:4c:a7:7d:f5:32:ed:aa:2e:08:25:cd:4b:03:81:6d:e6:99: 2f:12:dc:47:b9:15:f6:bf:74:1b:18:f1:34:4f:4c:af:70:6d: a9:43:db:a1:d3:e8:71:ff:12:3c:cd:a3:fc:c7:5b:51:8d:0e: 62:34:c8:8f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xwaJaxu42rhCcQ5qw7I3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk OGIyZjcwHhcNMjYwMTAxMDQxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzliOTMxOTFiZThjZGY5YjhmZGVkMWE1MWE5YjRjMTJmODA5NGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UdKmoWTLG/+hZ8DXKDjBO98KvbL gR7vzFLgBrVh+UNiBnnhr2biJhwS/ZBOWKoTDlLfodkwPrEbggCaXUiGu6ENRf2x GyxeO7tt7d3xSfHDcTBGqtiPQHFP5Z7OicU/QtPL1Cw3zQPXuIwGeNY0v4MQRcrf EY2XnZqhzfdbCgXgEpz9WwJSm537rSSS8rUL6nUg4NKzue4UYhZJz5yQIA05ihe2 h60bBO5wxA4e7sJU/DatFMjwb3ZFBrgidP4ZHEjQiPPDEBMuybKuxQdAxjmkaFl0 z1TlG4FNxN+U+iUfk5z5muvWgG9VK5pK+xUdAdA/EunhyMPEx02tyBWzRwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHybkxkb6M35uP3tGlGptMEvgJT8MB8GA1UdIwQY MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct YmJlYTI5MThlMTAyLzEvZkp1VEdSdm96Zm00X2UwYVVhbTB3Uy1BbFB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVmjHAwQA WSMOAwQAXXWDMA0GCSqGSIb3DQEBCwUAA4IBAQBPgdvgNQy+YMBacDWXKiSNuRqJ V9xD9TxjrlVlXq+5/a4WwXNZrRSAXXiuA808hgGyrYODnsnKLtpNcOlZW1PhIYvu 4nk3sByXENYdf1Y9lkUvs8eo/xPgyuJJv0XXhD638iQPRMhMRLelSZJoAVzAHlQ4 fFP0RtRS8Or95eCaij7vhmxWWgZqL0AsJtXTeZI71LJEmn2h0gncZyESxnYiCHs3 7O1fmjAipmRZ9pfBAr/LGzUyMyA3wgvdcR0GUHzjd6s9pfr4TKd99TLtqi4IJc1L A4Ft5pkvEtxHuRX2v3QbGPE0T0yvcG2pQ9uh0+hx/xI8zaP8x1tRjQ5iNMiP -----END CERTIFICATE-----Generated at Mon Jan 19 16:52:01 2026 by rpki-client