This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/7fwFotLEQHdJWGzsI9E3uv_kDSI.roa File: 7fwFotLEQHdJWGzsI9E3uv_kDSI.roa (raw, json) Hash identifier: 84Fm9PCPXM8NFDP3Raox3dv53czMLCLj+wQeuu2bYvg= Subject key identifier: ED:FC:05:A2:D2:C4:40:77:49:58:6C:EC:23:D1:37:BA:FF:E4:0D:22 Certificate issuer: /CN=56ad9b2c227b413c505813294faadb6dbbc2dd66 Certificate serial: 019B797F4EB27FB3A7ECC482AB1D05279B24 Authority key identifier: 56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/7fwFotLEQHdJWGzsI9E3uv_kDSI.roa Signing time: Thu 01 Jan 2026 12:19:04 +0000 ROA not before: Thu 01 Jan 2026 12:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 89.150.63.0/24 maxlen: 24 194.176.117.0/24 maxlen: 24 195.5.104.0/24 maxlen: 24 2a13:14c0::/32 maxlen: 48 2a13:14c1::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:4e:b2:7f:b3:a7:ec:c4:82:ab:1d:05:27:9b:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56ad9b2c227b413c505813294faadb6dbbc2dd66 Validity Not Before: Jan 1 12:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edfc05a2d2c4407749586cec23d137baffe40d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e7:ba:d4:90:5e:62:c6:d0:50:cc:51:98:cb: 3e:c3:30:50:87:df:22:64:e0:fd:77:59:c8:07:d7: f2:60:e4:bf:82:c7:9f:20:42:e4:9f:1e:c9:66:64: fc:6e:cd:6f:29:63:81:fe:8c:06:a3:6c:26:58:93: a7:ff:82:76:84:da:51:c3:db:a8:63:16:14:e8:84: ac:19:87:22:e9:04:40:4f:1b:89:91:8a:b5:0c:24: 7b:eb:0c:41:9d:b0:87:66:8a:dc:38:b6:52:b1:e7: 0f:8b:28:71:aa:44:a5:e3:43:bc:8c:5a:8b:80:f1: 51:7a:bb:5f:c1:e7:80:c6:5c:2e:57:db:23:bf:69: 74:e5:24:a5:cd:69:6b:bc:fe:f4:5e:29:5a:a8:5f: c4:2e:a9:14:ab:21:b9:d5:63:2c:76:00:0b:d6:56: 89:59:37:c0:0c:8e:23:16:bc:fc:12:eb:15:44:46: c2:1b:9d:44:44:a9:ff:54:18:bb:cc:9f:08:ff:a1: 6c:f2:45:d8:d3:99:54:f7:38:51:b0:ef:ca:93:1a: 31:71:9d:29:53:1f:a8:91:a4:c9:5a:22:6f:3c:d2: 34:17:04:52:40:fa:b3:ad:16:3b:4e:ea:7a:41:93: 30:80:59:fc:90:1c:ff:57:98:74:6e:d6:c7:b7:d7: 11:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:FC:05:A2:D2:C4:40:77:49:58:6C:EC:23:D1:37:BA:FF:E4:0D:22 X509v3 Authority Key Identifier: keyid:56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/7fwFotLEQHdJWGzsI9E3uv_kDSI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.150.63.0/24 194.176.117.0/24 195.5.104.0/24 IPv6: 2a13:14c0::/31 Signature Algorithm: sha256WithRSAEncryption 3e:8b:9c:f2:15:45:12:df:a5:e4:df:9d:b7:c9:9a:98:eb:ee: f3:e0:ba:d5:1c:e0:dd:e7:83:c9:de:a2:f6:4e:8a:fd:1e:05: d0:0f:0f:b8:e2:40:a0:ff:d8:cb:c4:dc:2e:23:0d:09:13:7c: b9:93:81:20:59:b9:fe:71:2e:23:d4:e0:fa:90:cc:3b:a5:f4: 03:f4:f6:c2:a1:9d:bd:6c:ac:34:d8:64:8a:80:d1:10:93:ef: a3:e2:7c:de:31:f5:19:f9:55:b3:bd:68:b2:bb:35:13:28:6c: 3f:aa:d9:16:30:78:ac:68:5c:7e:87:5e:89:a9:c0:54:b4:ea: cb:48:6c:92:21:e4:b3:04:f4:bc:e4:26:67:c6:7d:ad:ef:8c: 9d:0b:3a:db:fc:63:6f:e8:85:47:0d:9a:3a:e9:0a:63:e2:ae: 28:63:f5:96:a4:d3:a5:c2:48:9d:68:db:d6:bd:da:3c:c1:7f: a1:49:f0:da:a1:96:f6:c0:69:40:34:bb:18:9c:11:3b:a5:fe: 80:88:3b:5e:d5:e6:70:7c:9f:c0:7b:8f:6a:d1:3e:e5:63:df: b0:ca:21:ab:fc:7d:2a:77:df:0e:67:90:0a:2f:74:7f:ff:27: f3:15:7a:d0:f6:52:b9:86:c0:46:f9:38:a1:e5:ec:0e:c2:77: d9:81:4c:fa -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5f06yf7On7MSCqx0FJ5skMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2YWQ5YjJjMjI3YjQxM2M1MDU4MTMyOTRmYWFkYjZkYmJj MmRkNjYwHhcNMjYwMTAxMTIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGZjMDVhMmQyYzQ0MDc3NDk1ODZjZWMyM2QxMzdiYWZmZTQwZDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+e61JBeYsbQUMxRmMs+wzBQh98i ZOD9d1nIB9fyYOS/gsefIELknx7JZmT8bs1vKWOB/owGo2wmWJOn/4J2hNpRw9uo YxYU6ISsGYci6QRATxuJkYq1DCR76wxBnbCHZorcOLZSsecPiyhxqkSl40O8jFqL gPFRertfweeAxlwuV9sjv2l05SSlzWlrvP70XilaqF/ELqkUqyG51WMsdgAL1laJ WTfADI4jFrz8EusVREbCG51ERKn/VBi7zJ8I/6Fs8kXY05lU9zhRsO/KkxoxcZ0p Ux+okaTJWiJvPNI0FwRSQPqzrRY7Tup6QZMwgFn8kBz/V5h0btbHt9cR4QIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFO38BaLSxEB3SVhs7CPRN7r/5A0iMB8GA1UdIwQY MBaAFFatmywie0E8UFgTKU+q2227wt1mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnEyYkxDSjdRVHhRV0JNcFQ2cmJiYnZDM1dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mZGZmZTMtMDEwZi00YzZhLWJkOTYt NzE4YjhjN2M5MzM1LzEvN2Z3Rm90TEVRSGRKV0d6c0k5RTN1dl9rRFNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9mZGZmZTMtMDEwZi00YzZhLWJkOTYtNzE4YjhjN2M5MzM1 LzEvVnEyYkxDSjdRVHhRV0JNcFQ2cmJiYnZDM1dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAWZY/AwQA wrB1AwQAwwVoMA0EAgACMAcDBQEqExTAMA0GCSqGSIb3DQEBCwUAA4IBAQA+i5zy FUUS36Xk3523yZqY6+7z4LrVHODd54PJ3qL2Tor9HgXQDw+44kCg/9jLxNwuIw0J E3y5k4EgWbn+cS4j1OD6kMw7pfQD9PbCoZ29bKw02GSKgNEQk++j4nzeMfUZ+VWz vWiyuzUTKGw/qtkWMHisaFx+h16JqcBUtOrLSGySIeSzBPS85CZnxn2t74ydCzrb /GNv6IVHDZo66Qpj4q4oY/WWpNOlwkidaNvWvdo8wX+hSfDaoZb2wGlANLsYnBE7 pf6AiDte1eZwfJ/Ae49q0T7lY9+wyiGr/H0qd98OZ5AKL3R//yfzFXrQ9lK5hsBG +Tih5ewOwnfZgUz6 -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:41 2026 by rpki-client