This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/FfmG2YSQtCzDZf7LGo-eF1wiE1s.roa File: FfmG2YSQtCzDZf7LGo-eF1wiE1s.roa (raw, json) Hash identifier: qrm8Hvv6ZY4XD/rO0TyVVz8/PmIjDcXusRWAzudBFPw= Subject key identifier: 15:F9:86:D9:84:90:B4:2C:C3:65:FE:CB:1A:8F:9E:17:5C:22:13:5B Certificate issuer: /CN=798e0da4f91007b224768acb4d131f12517d2b7a Certificate serial: 019B775926998E2D13D493D569956A5AB12F Authority key identifier: 79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/FfmG2YSQtCzDZf7LGo-eF1wiE1s.roa Signing time: Thu 01 Jan 2026 02:18:09 +0000 ROA not before: Thu 01 Jan 2026 02:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 91.202.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 08:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:26:99:8e:2d:13:d4:93:d5:69:95:6a:5a:b1:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798e0da4f91007b224768acb4d131f12517d2b7a Validity Not Before: Jan 1 02:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15f986d98490b42cc365fecb1a8f9e175c22135b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0b:f1:2e:aa:6c:28:4a:bd:68:9e:52:89:06: 82:80:d8:0c:11:fb:dd:73:7c:5c:ba:61:6b:53:c9: 25:5f:6e:ab:0f:21:13:ab:61:b1:21:c7:42:2c:8e: 28:52:09:ac:f9:34:b0:2b:45:aa:8a:75:b2:cf:ed: 4c:49:96:61:22:dc:56:74:b4:e5:45:bf:ec:35:a3: bd:2c:0a:98:11:e1:07:db:58:b1:17:4f:28:ce:53: 29:6d:e4:f9:23:78:97:41:e7:16:26:34:32:c6:7b: 63:a5:ee:70:27:09:f4:7b:24:3a:9c:1d:26:88:f3: 2a:4a:9b:72:aa:9a:55:cf:4e:a6:93:95:db:31:41: fd:87:73:3c:0a:e9:3c:d4:30:7f:af:a1:5e:84:f0: c4:9a:40:64:42:be:ee:29:9d:ea:61:58:b0:ce:2a: 82:98:69:5e:f3:df:4e:62:c1:df:a9:e3:3b:a9:08: 1a:79:f8:2a:4a:b0:bf:70:e8:db:59:f0:cc:eb:1b: be:38:cf:83:fb:1a:0e:6f:7e:e5:f9:f4:84:96:d5: 18:72:98:9c:64:fb:83:da:80:af:b8:34:a7:3f:b0: 59:62:3b:ff:30:ae:12:a4:ba:95:cb:29:36:b7:9a: 97:88:32:7e:da:d7:c8:c6:e5:d3:1d:c9:31:10:a9: 1b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F9:86:D9:84:90:B4:2C:C3:65:FE:CB:1A:8F:9E:17:5C:22:13:5B X509v3 Authority Key Identifier: keyid:79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/FfmG2YSQtCzDZf7LGo-eF1wiE1s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.202.103.0/24 Signature Algorithm: sha256WithRSAEncryption 54:b2:12:63:90:06:25:49:3c:0d:09:67:41:44:37:cd:b9:77: ae:6e:b4:ad:9f:79:63:9c:86:ea:4f:f2:05:43:8a:d0:4d:ca: 8e:82:bf:34:33:0d:52:4c:50:6c:96:b7:ae:d8:82:cc:95:c1: 5e:84:21:ef:9a:f9:8c:9f:35:8c:0d:d8:1b:20:64:ac:bc:22: 9f:5a:e4:b4:13:84:57:c6:b8:8c:d4:55:4c:12:ab:1e:db:bf: ee:ce:fb:6b:5c:57:ae:bf:06:02:e4:31:aa:41:58:16:f5:47: e7:ea:11:58:69:8a:c8:2d:16:71:54:25:17:62:38:e5:5b:31: 04:71:99:ac:fa:ea:f9:6f:a1:9c:c9:8b:50:3d:9e:7c:35:60: 97:1d:ee:f6:0e:31:85:53:39:81:2d:32:3d:0e:3e:e6:09:01: 3d:07:ad:c0:77:a0:6c:a3:31:73:e8:3e:9c:c2:c9:08:0a:db: ee:48:8f:0b:fa:00:37:ff:37:a8:59:8e:d3:13:b2:ed:3c:70: a0:22:dc:72:d0:02:27:cb:67:57:d7:9a:1d:fe:56:d9:91:2a: c7:fb:f5:b1:81:f8:68:57:cc:dc:a6:9b:5b:a8:5a:55:15:f1: de:f7:a8:6a:2e:9b:f1:3d:41:f6:6c:a4:fd:f7:6b:08:1a:de: 76:ee:d2:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WSaZji0T1JPVaZVqWrEvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5OGUwZGE0ZjkxMDA3YjIyNDc2OGFjYjRkMTMxZjEyNTE3 ZDJiN2EwHhcNMjYwMTAxMDIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWY5ODZkOTg0OTBiNDJjYzM2NWZlY2IxYThmOWUxNzVjMjIxMzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQvxLqpsKEq9aJ5SiQaCgNgMEfvd c3xcumFrU8klX26rDyETq2GxIcdCLI4oUgms+TSwK0WqinWyz+1MSZZhItxWdLTl Rb/sNaO9LAqYEeEH21ixF08ozlMpbeT5I3iXQecWJjQyxntjpe5wJwn0eyQ6nB0m iPMqSptyqppVz06mk5XbMUH9h3M8Cuk81DB/r6FehPDEmkBkQr7uKZ3qYViwziqC mGle899OYsHfqeM7qQgaefgqSrC/cOjbWfDM6xu+OM+D+xoOb37l+fSEltUYcpic ZPuD2oCvuDSnP7BZYjv/MK4SpLqVyyk2t5qXiDJ+2tfIxuXTHckxEKkb1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBX5htmEkLQsw2X+yxqPnhdcIhNbMB8GA1UdIwQY MBaAFHmODaT5EAeyJHaKy00THxJRfSt6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVk0TnBQa1FCN0lrZG9yTFRSTWZFbEY5SzNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MDRlNjQtZjk4MS00NWI1LTljYWUt NGZiNGVmOTFhODJmLzEvRmZtRzJZU1F0Q3pEWmY3TEdvLWVGMXdpRTFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80MDRlNjQtZjk4MS00NWI1LTljYWUtNGZiNGVmOTFhODJm LzEvZVk0TnBQa1FCN0lrZG9yTFRSTWZFbEY5SzNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8pnMA0G CSqGSIb3DQEBCwUAA4IBAQBUshJjkAYlSTwNCWdBRDfNuXeubrStn3ljnIbqT/IF Q4rQTcqOgr80Mw1STFBslreu2ILMlcFehCHvmvmMnzWMDdgbIGSsvCKfWuS0E4RX xriM1FVMEqse27/uzvtrXFeuvwYC5DGqQVgW9Ufn6hFYaYrILRZxVCUXYjjlWzEE cZms+ur5b6GcyYtQPZ58NWCXHe72DjGFUzmBLTI9Dj7mCQE9B63Ad6BsozFz6D6c wskICtvuSI8L+gA3/zeoWY7TE7LtPHCgItxy0AIny2dX15od/lbZkSrH+/Wxgfho V8zcpptbqFpVFfHe96hqLpvxPUH2bKT992sIGt527tIx -----END CERTIFICATE-----Generated at Sun Jan 18 16:37:47 2026 by rpki-client