This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/FHIyxMNqXpJ39wGwkA-4nrLvTkc.roa File: FHIyxMNqXpJ39wGwkA-4nrLvTkc.roa (raw, json) Hash identifier: ly+kVhxO/3fVLln2oSG/sFbuci0ZnP8XN3ql69hgFNU= Subject key identifier: 14:72:32:C4:C3:6A:5E:92:77:F7:01:B0:90:0F:B8:9E:B2:EF:4E:47 Certificate issuer: /CN=5fdd1e8c2394d18e876c2d57016e7ed89805a667 Certificate serial: 019B78A214AD1D7A4795F313C2026E0A0E06 Authority key identifier: 5F:DD:1E:8C:23:94:D1:8E:87:6C:2D:57:01:6E:7E:D8:98:05:A6:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/FHIyxMNqXpJ39wGwkA-4nrLvTkc.roa Signing time: Thu 01 Jan 2026 08:17:26 +0000 ROA not before: Thu 01 Jan 2026 08:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205295 IP address blocks: 91.196.208.0/22 maxlen: 22 91.196.208.0/23 maxlen: 23 91.196.210.0/23 maxlen: 23 185.219.24.0/22 maxlen: 22 185.219.24.0/23 maxlen: 23 185.219.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:14:ad:1d:7a:47:95:f3:13:c2:02:6e:0a:0e:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fdd1e8c2394d18e876c2d57016e7ed89805a667 Validity Not Before: Jan 1 08:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=147232c4c36a5e9277f701b0900fb89eb2ef4e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f4:d6:ec:10:36:9b:8a:84:dd:3e:49:ab:0b: 1f:22:61:06:66:80:38:51:41:74:87:a1:25:cc:13: 74:9c:c3:e5:4c:60:90:38:dc:83:13:a6:0b:7d:8d: c5:35:5e:5d:07:ef:39:27:d3:26:eb:38:ca:69:77: 09:47:37:09:94:82:75:e9:ac:31:d8:ac:35:e2:05: 88:b0:55:37:d8:fc:0a:d0:b0:84:2b:38:7e:6e:8a: 34:5f:a1:2e:11:8d:7b:3e:2c:bf:d8:0f:7e:e6:b2: 7d:52:58:a1:34:f7:f7:d7:72:14:0e:bf:84:15:6c: 6e:ad:61:93:34:b0:6f:8e:c3:93:06:f4:80:54:16: f3:c1:85:87:4d:b6:a9:2c:f0:71:1e:14:61:28:b7: bf:4e:a0:4f:7a:56:bd:51:98:8e:43:18:18:31:16: 69:2e:da:db:73:fd:cf:e2:0e:f9:38:5a:14:96:00: e8:82:2f:71:34:0d:57:1d:ab:ec:55:47:13:d1:b0: e8:74:71:ab:52:f9:43:a7:e9:13:3d:c2:d6:65:c2: 22:48:01:fa:e6:5e:82:32:ef:89:00:ae:9b:a4:37: 10:f6:f5:b3:69:0a:bf:5b:84:b0:0d:d3:97:28:f9: 9e:39:e5:96:fb:89:df:22:68:7a:57:30:af:1e:9e: 74:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:72:32:C4:C3:6A:5E:92:77:F7:01:B0:90:0F:B8:9E:B2:EF:4E:47 X509v3 Authority Key Identifier: keyid:5F:DD:1E:8C:23:94:D1:8E:87:6C:2D:57:01:6E:7E:D8:98:05:A6:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/FHIyxMNqXpJ39wGwkA-4nrLvTkc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.196.208.0/22 185.219.24.0/22 Signature Algorithm: sha256WithRSAEncryption cf:2f:e6:f4:77:23:86:54:f0:ec:5d:4b:4d:ca:55:9d:36:ff: 5f:cf:ab:aa:24:c7:2c:bb:76:86:63:04:86:7f:07:5d:dd:f6: fb:b7:84:ec:fc:1e:ba:9c:58:8b:0f:bf:a0:30:89:79:50:a6: 61:36:b8:bf:e7:d0:05:08:e7:bc:38:4f:71:17:39:b7:e1:95: 92:11:af:33:76:14:b1:84:bc:e6:11:68:1f:18:f2:dc:97:ef: ea:3a:4e:dc:4e:bd:f7:a3:77:e7:89:d6:d0:1d:0f:f5:fc:4e: 6b:2e:fd:56:08:15:83:65:12:86:84:eb:a3:49:b9:66:95:7b: 0d:bb:e1:e2:ad:e5:78:92:9d:04:d5:75:f0:10:39:9b:11:8f: e3:28:ec:85:57:7f:00:c3:ad:37:c1:0c:67:d6:02:a0:bf:eb: 20:75:e8:07:75:15:d2:ff:91:b4:23:7d:2f:ca:c5:82:ad:cd: 37:a3:d0:63:8e:ea:29:86:1b:2d:d2:44:91:1f:2c:a5:fc:cf: 2d:13:a0:9f:af:f3:2c:dd:41:63:0f:9e:3f:79:17:2a:7b:41: e0:ef:e6:58:87:c5:8b:e1:b0:66:e5:a2:fc:66:e2:d4:5a:0a: 6a:5e:d1:e7:88:d0:d3:d6:7e:17:f7:69:b6:02:7e:be:50:de: 40:09:ec:24 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ohStHXpHlfMTwgJuCg4GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmZGQxZThjMjM5NGQxOGU4NzZjMmQ1NzAxNmU3ZWQ4OTgw NWE2NjcwHhcNMjYwMTAxMDgxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDcyMzJjNGMzNmE1ZTkyNzdmNzAxYjA5MDBmYjg5ZWIyZWY0ZTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfTW7BA2m4qE3T5JqwsfImEGZoA4 UUF0h6ElzBN0nMPlTGCQONyDE6YLfY3FNV5dB+85J9Mm6zjKaXcJRzcJlIJ16awx 2Kw14gWIsFU32PwK0LCEKzh+boo0X6EuEY17Piy/2A9+5rJ9UlihNPf313IUDr+E FWxurWGTNLBvjsOTBvSAVBbzwYWHTbapLPBxHhRhKLe/TqBPela9UZiOQxgYMRZp Ltrbc/3P4g75OFoUlgDogi9xNA1XHavsVUcT0bDodHGrUvlDp+kTPcLWZcIiSAH6 5l6CMu+JAK6bpDcQ9vWzaQq/W4SwDdOXKPmeOeWW+4nfImh6VzCvHp50lQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBRyMsTDal6Sd/cBsJAPuJ6y705HMB8GA1UdIwQY MBaAFF/dHowjlNGOh2wtVwFuftiYBaZnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDkwZWpDT1UwWTZIYkMxWEFXNS0ySmdGcG1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9hNmQ0MmMtY2ZkNy00ZWQ1LTlmODMt NWFlOTNlYzhmYjExLzEvRkhJeXhNTnFYcEozOXdHd2tBLTRuckx2VGtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9hNmQ0MmMtY2ZkNy00ZWQ1LTlmODMtNWFlOTNlYzhmYjEx LzEvWDkwZWpDT1UwWTZIYkMxWEFXNS0ySmdGcG1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8TQAwQC udsYMA0GCSqGSIb3DQEBCwUAA4IBAQDPL+b0dyOGVPDsXUtNylWdNv9fz6uqJMcs u3aGYwSGfwdd3fb7t4Ts/B66nFiLD7+gMIl5UKZhNri/59AFCOe8OE9xFzm34ZWS Ea8zdhSxhLzmEWgfGPLcl+/qOk7cTr33o3fnidbQHQ/1/E5rLv1WCBWDZRKGhOuj SblmlXsNu+HireV4kp0E1XXwEDmbEY/jKOyFV38Aw603wQxn1gKgv+sgdegHdRXS /5G0I30vysWCrc03o9Bjjuophhst0kSRHyyl/M8tE6Cfr/Ms3UFjD54/eRcqe0Hg 7+ZYh8WL4bBm5aL8ZuLUWgpqXtHniNDT1n4X92m2An6+UN5ACewk -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:39 2026 by rpki-client