This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/RzhwJ3g4O2jriznGS1cnePL9_FI.roa File: RzhwJ3g4O2jriznGS1cnePL9_FI.roa (raw, json) Hash identifier: SoM1BvGJwbSsSWVNydRJHc+qJc9sNKoCfkVgPWfSV30= Subject key identifier: 47:38:70:27:78:38:3B:68:EB:8B:39:C6:4B:57:27:78:F2:FD:FC:52 Certificate issuer: /CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd Certificate serial: 019B78A22662D38A99BF7E067794D7E4816D Authority key identifier: 57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/RzhwJ3g4O2jriznGS1cnePL9_FI.roa Signing time: Thu 01 Jan 2026 08:17:31 +0000 ROA not before: Thu 01 Jan 2026 08:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198422 IP address blocks: 194.147.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.crl rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.mft rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:26:62:d3:8a:99:bf:7e:06:77:94:d7:e4:81:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd Validity Not Before: Jan 1 08:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4738702778383b68eb8b39c64b572778f2fdfc52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:98:62:c2:cc:ac:2e:7c:08:8c:3e:8b:99:e5: 23:77:35:a8:b6:52:42:5e:62:f9:b7:85:5f:cd:5e: bb:38:fc:22:41:38:5d:9f:53:d6:1c:91:d3:54:8c: bc:ea:c4:43:ef:81:9f:ab:dd:28:dc:21:a6:55:99: 44:f6:f8:d3:c1:d9:c7:8a:07:07:8a:3c:6f:98:52: bf:ab:b0:cf:b6:5a:36:ec:d1:19:17:fe:4d:20:97: f8:60:ba:54:51:26:dc:73:ab:78:4f:9f:4f:a3:b7: 4b:8a:16:19:84:8c:47:43:f1:de:50:38:3f:f7:71: 1f:65:f0:73:05:01:19:4c:5a:36:7c:69:33:38:25: 31:7c:41:e1:3d:cd:d6:f8:e0:4b:d3:cb:27:e8:2e: 46:a5:d9:01:3c:46:15:40:a3:ba:8f:28:89:51:b7: 6b:f3:37:e2:8d:64:f3:16:4c:d0:0d:17:5b:c2:fb: a6:6f:a4:ed:e3:81:ea:4c:a8:bf:be:1a:19:09:7c: b9:af:3e:1a:e8:d4:32:cd:50:57:df:2d:38:69:ba: 9f:f7:a8:08:9e:40:14:38:bd:7a:d2:0a:7a:6d:23: 96:e4:d2:41:4a:75:a7:da:91:53:44:1d:ca:2c:3e: 3a:e5:89:fe:11:52:53:cd:5b:cc:88:ae:f4:b4:0f: d9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:38:70:27:78:38:3B:68:EB:8B:39:C6:4B:57:27:78:F2:FD:FC:52 X509v3 Authority Key Identifier: keyid:57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/RzhwJ3g4O2jriznGS1cnePL9_FI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.147.75.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:6f:ba:4f:5a:c0:a6:c9:fd:e6:1f:71:c5:38:5f:5b:4d:f8: 0b:83:2c:5c:91:9b:f7:25:1e:91:bf:f2:f6:7b:40:53:a6:e7: 2d:cf:2d:e7:2b:f9:b6:14:5c:28:fe:95:ca:1c:8f:ce:e8:4b: 4f:0a:36:76:8d:5c:4e:36:66:02:af:ee:d0:05:b2:6e:37:29: 57:d3:5b:4a:b0:5a:91:db:94:6c:0a:cd:c4:f5:c1:8e:ae:91: a3:63:bd:25:08:a6:c6:ec:cb:06:b7:ec:4a:19:22:9e:35:2d: 93:be:dd:5b:d1:29:7e:e3:e2:17:ee:98:6b:40:b0:ae:02:3a: a4:72:cd:ce:bd:47:51:bd:63:0e:9a:fa:71:52:6b:bd:f0:2f: 48:14:65:f1:b3:2b:b0:bc:62:df:2e:f0:b3:7a:7e:5d:94:a2: 64:31:ec:f1:64:30:13:78:49:b4:ce:d9:c8:45:90:29:99:9e: 4d:2a:17:7e:b2:15:d0:17:1a:f7:a9:7b:b0:f7:39:04:a2:94: 93:2e:f7:70:7c:2f:b9:0e:52:ef:d3:46:c4:fa:99:1a:a9:45: 84:04:a5:c9:b8:05:56:da:af:f7:29:d6:be:74:42:54:09:d4: 2a:ff:6d:64:19:d3:d6:c9:4e:db:0f:e8:a1:5f:db:16:13:54: 08:1a:72:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oiZi04qZv34Gd5TX5IFtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3OWFkZTlmZWFlZGM0MDZkZjVlMTFiY2VmMDM5M2NkNWU5 ZmQwZGQwHhcNMjYwMTAxMDgxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzM4NzAyNzc4MzgzYjY4ZWI4YjM5YzY0YjU3Mjc3OGYyZmRmYzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJhiwsysLnwIjD6LmeUjdzWotlJC XmL5t4VfzV67OPwiQThdn1PWHJHTVIy86sRD74Gfq90o3CGmVZlE9vjTwdnHigcH ijxvmFK/q7DPtlo27NEZF/5NIJf4YLpUUSbcc6t4T59Po7dLihYZhIxHQ/HeUDg/ 93EfZfBzBQEZTFo2fGkzOCUxfEHhPc3W+OBL08sn6C5GpdkBPEYVQKO6jyiJUbdr 8zfijWTzFkzQDRdbwvumb6Tt44HqTKi/vhoZCXy5rz4a6NQyzVBX3y04abqf96gI nkAUOL160gp6bSOW5NJBSnWn2pFTRB3KLD465Yn+EVJTzVvMiK70tA/ZnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEc4cCd4ODto64s5xktXJ3jy/fxSMB8GA1UdIwQY MBaAFFea3p/q7cQG314RvO8Dk81en9DdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjVyZW4tcnR4QWJmWGhHODd3T1R6VjZmME4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yMjBlZDctOGRjMi00YzAxLTkyYmIt MjA4ZWYzMmMwMjAyLzEvUnpod0ozZzRPMmpyaXpuR1MxY25lUEw5X0ZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8yMjBlZDctOGRjMi00YzAxLTkyYmItMjA4ZWYzMmMwMjAy LzEvVjVyZW4tcnR4QWJmWGhHODd3T1R6VjZmME4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpNLMA0G CSqGSIb3DQEBCwUAA4IBAQAcb7pPWsCmyf3mH3HFOF9bTfgLgyxckZv3JR6Rv/L2 e0BTpuctzy3nK/m2FFwo/pXKHI/O6EtPCjZ2jVxONmYCr+7QBbJuNylX01tKsFqR 25RsCs3E9cGOrpGjY70lCKbG7MsGt+xKGSKeNS2Tvt1b0Sl+4+IX7phrQLCuAjqk cs3OvUdRvWMOmvpxUmu98C9IFGXxsyuwvGLfLvCzen5dlKJkMezxZDATeEm0ztnI RZApmZ5NKhd+shXQFxr3qXuw9zkEopSTLvdwfC+5DlLv00bE+pkaqUWEBKXJuAVW 2q/3Kda+dEJUCdQq/21kGdPWyU7bD+ihX9sWE1QIGnLv -----END CERTIFICATE-----Generated at Tue Feb 10 08:37:17 2026 by rpki-client