This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/fMNCB8rD0Ip8fbF1LvyhEJtg6Gg.roa File: fMNCB8rD0Ip8fbF1LvyhEJtg6Gg.roa (raw, json) Hash identifier: LXNlsf10QtsQkHE8Tm9n4uZsh/ON6f1nhNppQ718O5s= Subject key identifier: 7C:C3:42:07:CA:C3:D0:8A:7C:7D:B1:75:2E:FC:A1:10:9B:60:E8:68 Certificate issuer: /CN=828bbad6f4916842bbe320284fafe10caf59edf0 Certificate serial: 019C31ED2CC9CFD3BADE07FB19DC0AC65EDD Authority key identifier: 82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/fMNCB8rD0Ip8fbF1LvyhEJtg6Gg.roa Signing time: Fri 06 Feb 2026 07:49:12 +0000 ROA not before: Fri 06 Feb 2026 07:49:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41321 IP address blocks: 31.3.150.0/24 maxlen: 24 31.3.151.0/24 maxlen: 24 80.70.171.0/24 maxlen: 24 2a00:d340:ffe0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:31:ed:2c:c9:cf:d3:ba:de:07:fb:19:dc:0a:c6:5e:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=828bbad6f4916842bbe320284fafe10caf59edf0 Validity Not Before: Feb 6 07:49:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cc34207cac3d08a7c7db1752efca1109b60e868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:10:85:39:fd:5a:88:3b:12:28:a4:ba:be:54: 84:8d:e3:d1:ac:b6:cf:36:b3:ea:1a:db:b1:76:42: 0e:7c:61:f9:d5:4d:1c:89:b1:cc:a0:1c:c3:14:0d: 68:53:8a:bd:b6:56:bb:24:59:86:58:94:66:d0:01: 02:8a:b4:24:57:dd:2f:55:0c:5f:6f:2c:3f:8f:be: 55:7d:53:e0:86:0c:a1:10:2f:ec:3d:d8:97:e5:14: 12:0f:6d:d6:bf:a1:9d:a6:4e:86:f0:11:de:18:5c: 07:ab:0d:ca:e2:77:60:5a:cb:3f:8a:06:6e:ba:4a: 36:48:5d:5f:da:ac:f0:92:b6:af:f1:a3:cc:c6:15: 3a:cc:00:db:32:68:54:e4:5e:1d:ba:8a:ee:34:f0: 42:d8:f3:b7:91:56:75:ed:bc:e2:e7:de:69:be:fa: eb:4f:f7:cd:0f:57:cd:88:7a:e6:b0:19:56:75:b1: e7:9d:18:a4:cc:2b:1c:86:ff:f3:7d:d8:e3:f8:ca: 3a:9a:89:8d:be:a9:2e:5e:7e:d2:90:93:a0:2e:0a: 64:27:45:46:ae:f0:8c:85:6e:1e:ac:8f:d9:e8:f1: 87:cf:d7:88:65:46:e2:38:5d:f2:c9:ba:46:9c:8d: 88:f2:9b:ef:53:65:37:cc:85:c6:15:d1:e3:60:c5: 41:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C3:42:07:CA:C3:D0:8A:7C:7D:B1:75:2E:FC:A1:10:9B:60:E8:68 X509v3 Authority Key Identifier: keyid:82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/fMNCB8rD0Ip8fbF1LvyhEJtg6Gg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.3.150.0/23 80.70.171.0/24 IPv6: 2a00:d340:ffe0::/48 Signature Algorithm: sha256WithRSAEncryption 6b:f3:43:4e:36:98:71:d1:29:c1:9d:9e:da:48:e9:9e:04:74: f7:83:d9:22:4e:43:1d:67:16:7d:a7:e0:37:26:e4:c7:8b:17: b7:2d:ed:32:c0:ca:10:b6:bf:f6:86:f3:c3:09:16:dc:22:cf: 87:e1:65:2c:cc:c4:aa:2c:95:e2:cb:10:09:22:3c:4d:c6:0f: 03:4b:21:f2:1f:c4:67:ad:c4:e2:5e:37:01:5c:74:bf:c7:17: 88:f9:6d:e6:d0:62:7e:66:f6:6e:c9:37:0f:48:34:10:79:41: 9a:4f:fb:c9:74:3e:f6:b2:ef:d0:ec:8e:7c:1c:4a:5e:0c:ad: 68:df:73:2d:04:f2:fc:98:f0:00:36:bf:05:df:3c:01:00:fc: 05:45:a2:89:62:11:15:42:ff:0b:ad:29:28:a5:53:63:a9:c3: 4b:d8:4b:97:ee:63:c0:f4:e4:80:a1:81:ca:46:c1:a7:06:4c: 2a:58:b7:03:d7:21:b6:78:8f:4a:ee:6b:0d:f5:de:6a:3f:3b: 5c:05:01:f4:69:0c:9b:c7:5a:2c:0f:3f:ec:72:af:c3:fe:17: 93:c2:73:e1:ce:7c:5f:6b:c9:69:bf:c9:fb:1b:20:82:40:f7: dc:8d:1c:f1:d4:2e:78:d0:4c:06:6b:cd:0d:e0:d8:96:ea:fc: 8b:55:37:e1 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZwx7SzJz9O63gf7GdwKxl7dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyOGJiYWQ2ZjQ5MTY4NDJiYmUzMjAyODRmYWZlMTBjYWY1 OWVkZjAwHhcNMjYwMjA2MDc0OTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2MzNDIwN2NhYzNkMDhhN2M3ZGIxNzUyZWZjYTExMDliNjBlODY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRCFOf1aiDsSKKS6vlSEjePRrLbP NrPqGtuxdkIOfGH51U0cibHMoBzDFA1oU4q9tla7JFmGWJRm0AECirQkV90vVQxf byw/j75VfVPghgyhEC/sPdiX5RQSD23Wv6Gdpk6G8BHeGFwHqw3K4ndgWss/igZu uko2SF1f2qzwkrav8aPMxhU6zADbMmhU5F4duoruNPBC2PO3kVZ17bzi595pvvrr T/fND1fNiHrmsBlWdbHnnRikzCschv/zfdjj+Mo6momNvqkuXn7SkJOgLgpkJ0VG rvCMhW4erI/Z6PGHz9eIZUbiOF3yybpGnI2I8pvvU2U3zIXGFdHjYMVBPwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFHzDQgfKw9CKfH2xdS78oRCbYOhoMB8GA1UdIwQY MBaAFIKLutb0kWhCu+MgKE+v4QyvWe3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ291NjF2U1JhRUs3NHlBb1Q2X2hESzlaN2ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84M2Y5NzctODJiOC00Njk1LTljMDgt MTg5NjU1NWEyZjBlLzEvZk1OQ0I4ckQwSXA4ZmJGMUx2eWhFSnRnNkdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC84M2Y5NzctODJiOC00Njk1LTljMDgtMTg5NjU1NWEyZjBl LzEvZ291NjF2U1JhRUs3NHlBb1Q2X2hESzlaN2ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBHwOWAwQA UEarMA8EAgACMAkDBwAqANNA/+AwDQYJKoZIhvcNAQELBQADggEBAGvzQ042mHHR KcGdntpI6Z4EdPeD2SJOQx1nFn2n4Dcm5MeLF7ct7TLAyhC2v/aG88MJFtwiz4fh ZSzMxKosleLLEAkiPE3GDwNLIfIfxGetxOJeNwFcdL/HF4j5bebQYn5m9m7JNw9I NBB5QZpP+8l0Pvay79DsjnwcSl4MrWjfcy0E8vyY8AA2vwXfPAEA/AVFooliERVC /wutKSilU2Opw0vYS5fuY8D05IChgcpGwacGTCpYtwPXIbZ4j0ruaw313mo/O1wF AfRpDJvHWiwPP+xyr8P+F5PCc+HOfF9ryWm/yfsbIIJA99yNHPHULnjQTAZrzQ3g 2Jbq/ItVN+E= -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:30 2026 by rpki-client