This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/Fi1IL191MwjF0uM0fhIUPlVEg8w.roa File: Fi1IL191MwjF0uM0fhIUPlVEg8w.roa (raw, json) Hash identifier: i72yfWesdd9h7w8CX+H4BGBsgb7kiryYQ8GxW04bDw0= Subject key identifier: 16:2D:48:2F:5F:75:33:08:C5:D2:E3:34:7E:12:14:3E:55:44:83:CC Certificate issuer: /CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c Certificate serial: 019B7BA5203B5D82CDBA29559B6F0F13092B Authority key identifier: 3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/Fi1IL191MwjF0uM0fhIUPlVEg8w.roa Signing time: Thu 01 Jan 2026 22:19:37 +0000 ROA not before: Thu 01 Jan 2026 22:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39153 IP address blocks: 80.248.80.0/20 maxlen: 20 80.253.16.0/20 maxlen: 20 109.71.192.0/21 maxlen: 21 2a00:5d00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 22:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:20:3b:5d:82:cd:ba:29:55:9b:6f:0f:13:09:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c Validity Not Before: Jan 1 22:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=162d482f5f753308c5d2e3347e12143e554483cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:02:cb:d6:cb:7a:6e:d6:27:52:46:e6:1a:fc: fa:fc:ca:25:ca:eb:c3:08:53:ea:d0:a3:11:bb:34: b4:b6:06:e2:50:23:0c:c7:5d:c8:19:18:eb:84:29: bb:67:e5:37:f6:94:0b:7c:9e:ac:a7:37:33:40:59: b2:99:55:d7:12:47:7c:b6:10:ef:d2:60:b0:34:c3: 34:dd:1a:b5:66:11:01:cd:f7:3c:e0:d4:2f:a4:b2: e9:a7:fa:b2:d2:fd:06:95:aa:66:87:5d:d0:0d:48: 2a:7f:ca:1f:b2:95:ea:cf:8c:8c:80:35:bf:95:a3: 63:64:b1:ee:8e:31:cd:a2:b6:0e:7d:63:f9:81:ef: 4b:2a:80:e3:73:08:75:1c:f1:a0:c6:48:dd:93:4c: 88:7f:a6:4e:1a:26:03:8a:a0:0e:0e:cf:f0:09:d2: 9e:11:5a:02:9a:37:fa:9f:cc:3e:30:78:ab:db:12: 16:ae:fa:54:0d:87:71:02:64:51:d5:6e:7d:7c:da: 42:58:4f:fe:2a:2e:59:42:aa:4a:49:7c:05:a8:35: a0:26:cd:09:07:47:26:e1:dc:9c:08:90:f1:c8:ac: ec:96:04:8e:38:49:ef:6b:f4:dc:67:77:2e:28:94: 00:29:89:25:fc:02:33:c2:e2:3d:c9:c7:a2:85:d7: c6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2D:48:2F:5F:75:33:08:C5:D2:E3:34:7E:12:14:3E:55:44:83:CC X509v3 Authority Key Identifier: keyid:3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/Fi1IL191MwjF0uM0fhIUPlVEg8w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.248.80.0/20 80.253.16.0/20 109.71.192.0/21 IPv6: 2a00:5d00::/32 Signature Algorithm: sha256WithRSAEncryption 99:07:e6:ac:33:62:3f:38:12:dc:db:6f:a1:d5:e0:b8:e0:50: 4c:54:df:af:a6:c5:b8:57:1a:e1:e6:ff:c6:3e:82:49:b0:7d: 54:50:cc:27:4e:5f:25:6c:78:55:b2:da:94:48:32:d6:35:2d: b9:90:5c:ff:20:9e:72:c4:f1:f2:e8:0d:96:eb:27:89:5b:45: 72:03:50:f2:37:7c:07:c4:eb:df:8f:89:3b:91:0b:64:91:86: 97:28:80:4a:8c:76:76:d6:65:dd:b4:2c:76:1e:8b:f7:05:ee: f1:a6:0d:c8:42:14:9e:4e:b4:7b:89:1e:dc:c4:17:76:14:96: 39:7c:14:72:ff:2a:dc:7f:6d:59:55:fd:89:a4:03:57:76:10: c0:7a:a7:3d:ae:0e:23:5a:73:8e:05:bf:e6:1b:7d:af:87:80: 20:a5:5f:6c:61:93:16:1b:b9:bb:d3:c8:0d:92:b1:9c:e7:78: c0:43:4e:40:66:06:ed:98:74:b0:d7:84:28:0f:c5:8f:f1:18: 7b:44:5b:a6:42:99:f2:69:16:82:20:fc:45:e6:bc:75:91:c2: ec:94:4c:a3:3f:a7:fb:b3:6c:53:5d:f9:5f:ad:ac:90:ea:cd: 78:17:32:59:99:c9:6d:82:b9:24:8a:6d:cb:c1:75:df:05:11: 10:a2:e2:b2 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt7pSA7XYLNuilVm28PEwkrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOWZiZTE1YzNjZGI1ZTAzNDM1ZTI0Y2Y2MmYxNmZiNmM2 MjM5NmMwHhcNMjYwMTAxMjIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjJkNDgyZjVmNzUzMzA4YzVkMmUzMzQ3ZTEyMTQzZTU1NDQ4M2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ALL1st6btYnUkbmGvz6/MolyuvD CFPq0KMRuzS0tgbiUCMMx13IGRjrhCm7Z+U39pQLfJ6spzczQFmymVXXEkd8thDv 0mCwNMM03Rq1ZhEBzfc84NQvpLLpp/qy0v0Glapmh13QDUgqf8ofspXqz4yMgDW/ laNjZLHujjHNorYOfWP5ge9LKoDjcwh1HPGgxkjdk0yIf6ZOGiYDiqAODs/wCdKe EVoCmjf6n8w+MHir2xIWrvpUDYdxAmRR1W59fNpCWE/+Ki5ZQqpKSXwFqDWgJs0J B0cm4dycCJDxyKzslgSOOEnva/TcZ3cuKJQAKYkl/AIzwuI9yceihdfGnQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFBYtSC9fdTMIxdLjNH4SFD5VRIPMMB8GA1UdIwQY MBaAFD2fvhXDzbXgNDXiTPYvFvtsYjlsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFotLUZjUE50ZUEwTmVKTTlpOFctMnhpT1d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9lODNiYjktYTVjMi00Nzc0LTllYmIt YWUzMjdkYmU0NWM5LzEvRmkxSUwxOTFNd2pGMHVNMGZoSVVQbFZFZzh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9lODNiYjktYTVjMi00Nzc0LTllYmItYWUzMjdkYmU0NWM5 LzEvUFotLUZjUE50ZUEwTmVKTTlpOFctMnhpT1d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEUPhQAwQE UP0QAwQDbUfAMA0EAgACMAcDBQAqAF0AMA0GCSqGSIb3DQEBCwUAA4IBAQCZB+as M2I/OBLc22+h1eC44FBMVN+vpsW4Vxrh5v/GPoJJsH1UUMwnTl8lbHhVstqUSDLW NS25kFz/IJ5yxPHy6A2W6yeJW0VyA1DyN3wHxOvfj4k7kQtkkYaXKIBKjHZ21mXd tCx2Hov3Be7xpg3IQhSeTrR7iR7cxBd2FJY5fBRy/yrcf21ZVf2JpANXdhDAeqc9 rg4jWnOOBb/mG32vh4AgpV9sYZMWG7m708gNkrGc53jAQ05AZgbtmHSw14QoD8WP 8Rh7RFumQpnyaRaCIPxF5rx1kcLslEyjP6f7s2xTXflfrayQ6s14FzJZmcltgrkk im3LwXXfBREQouKy -----END CERTIFICATE-----Generated at Tue Jan 20 07:30:31 2026 by rpki-client