This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/_fFHluteB5aYpSrt5zAnfawBLdE.roa File: _fFHluteB5aYpSrt5zAnfawBLdE.roa (raw, json) Hash identifier: EeR8KZELGbbgEkegmnhlrAdS7lppXQ4MZh3aU7YBvVQ= Subject key identifier: FD:F1:47:96:EB:5E:07:96:98:A5:2A:ED:E7:30:27:7D:AC:01:2D:D1 Certificate issuer: /CN=56ad9b2c227b413c505813294faadb6dbbc2dd66 Certificate serial: 019B797F4E60A4FD99E8B6998E0E3F48075F Authority key identifier: 56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/_fFHluteB5aYpSrt5zAnfawBLdE.roa Signing time: Thu 01 Jan 2026 12:19:04 +0000 ROA not before: Thu 01 Jan 2026 12:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 89.150.63.0/24 maxlen: 24 194.176.117.0/24 maxlen: 24 195.5.104.0/24 maxlen: 24 2a13:14c0::/32 maxlen: 48 2a13:14c1::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:4e:60:a4:fd:99:e8:b6:99:8e:0e:3f:48:07:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56ad9b2c227b413c505813294faadb6dbbc2dd66 Validity Not Before: Jan 1 12:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fdf14796eb5e079698a52aede730277dac012dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:95:4b:43:a7:bd:7f:ec:1c:83:01:b2:f7:2a: d3:59:37:64:3f:28:75:a4:97:52:6e:fa:4e:18:61: 41:bf:05:c0:07:f2:14:a1:5e:1f:46:0a:d1:cb:1e: 94:1c:0d:5f:0d:25:2a:d2:e4:f7:9c:36:45:40:2a: d2:ed:cf:e4:08:c2:27:c3:bd:a3:7c:66:a7:cc:a6: 01:b9:b0:45:d7:98:c0:05:60:c3:f0:f3:1f:92:7e: 3e:66:3d:67:8b:37:2c:88:1e:94:16:36:33:50:ce: 9d:a5:72:28:9d:20:0f:17:11:68:d9:3f:af:63:5b: 4f:37:a1:3e:b7:40:1b:22:0f:67:d6:6c:f8:f5:b8: b3:ae:15:bf:8e:11:24:75:16:f7:37:5f:e4:02:af: 3a:59:0e:e9:bb:95:c6:a9:76:50:00:c7:28:cb:e2: e0:57:17:46:15:12:bd:99:02:65:07:c1:52:07:ac: fb:fa:73:03:fc:be:88:69:79:46:b9:f1:5a:24:ae: 26:4b:43:1c:80:41:fa:bf:0f:1e:8a:76:04:f1:89: 82:f9:ab:d9:02:24:97:f0:8e:73:06:66:f7:25:93: 7a:dd:6e:1f:3d:53:cf:03:7a:8d:47:e6:47:c8:da: 88:91:45:fa:e1:c7:87:67:04:c9:76:f6:41:5c:5d: 43:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F1:47:96:EB:5E:07:96:98:A5:2A:ED:E7:30:27:7D:AC:01:2D:D1 X509v3 Authority Key Identifier: keyid:56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/_fFHluteB5aYpSrt5zAnfawBLdE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.150.63.0/24 194.176.117.0/24 195.5.104.0/24 IPv6: 2a13:14c0::/31 Signature Algorithm: sha256WithRSAEncryption 04:4a:1f:aa:5b:7c:79:9c:06:38:ef:a7:81:23:2d:6c:eb:6b: 4a:97:81:8a:5f:8a:83:fa:34:36:32:14:2e:10:bd:1e:8e:a6: 05:ab:c6:6f:92:49:6e:94:d4:a8:db:be:6b:55:e9:b4:5c:c4: eb:48:32:e6:c8:b6:62:46:47:79:1f:48:02:ec:7d:76:bb:a9: a8:d6:f7:e7:3f:81:f3:d3:5c:12:18:c0:4d:3e:41:bc:d1:69: 43:43:6f:9c:b4:e2:58:1e:1d:ac:8b:99:d3:c5:46:93:1d:62: 0f:c1:17:08:0e:43:aa:dd:97:be:c5:50:e6:bf:1f:44:3d:9d: f7:97:53:c4:ab:2c:49:d4:62:b8:79:00:be:40:8e:3a:e7:cc: 8a:2b:2e:f5:9b:be:70:2a:b5:db:69:1f:49:3a:c9:b7:8f:0f: 6f:11:6f:97:ac:5b:83:cd:a0:5c:c5:8c:ad:50:5e:1d:e9:57: 79:76:7b:2a:90:fd:65:36:7c:51:63:c1:42:6e:76:37:82:b7: be:93:f8:3f:fe:5f:1b:d1:18:3f:ea:9d:e7:59:c1:d0:d9:43: 48:ae:59:55:36:43:5e:6e:3a:e8:b9:a4:20:a1:59:61:e9:b7: 21:e4:14:e6:3d:1f:75:cd:fb:19:84:26:05:ec:78:1d:39:4b: 59:88:b3:07 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5f05gpP2Z6LaZjg4/SAdfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2YWQ5YjJjMjI3YjQxM2M1MDU4MTMyOTRmYWFkYjZkYmJj MmRkNjYwHhcNMjYwMTAxMTIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGYxNDc5NmViNWUwNzk2OThhNTJhZWRlNzMwMjc3ZGFjMDEyZGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpVLQ6e9f+wcgwGy9yrTWTdkPyh1 pJdSbvpOGGFBvwXAB/IUoV4fRgrRyx6UHA1fDSUq0uT3nDZFQCrS7c/kCMInw72j fGanzKYBubBF15jABWDD8PMfkn4+Zj1nizcsiB6UFjYzUM6dpXIonSAPFxFo2T+v Y1tPN6E+t0AbIg9n1mz49bizrhW/jhEkdRb3N1/kAq86WQ7pu5XGqXZQAMcoy+Lg VxdGFRK9mQJlB8FSB6z7+nMD/L6IaXlGufFaJK4mS0McgEH6vw8einYE8YmC+avZ AiSX8I5zBmb3JZN63W4fPVPPA3qNR+ZHyNqIkUX64ceHZwTJdvZBXF1DFwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFP3xR5brXgeWmKUq7ecwJ32sAS3RMB8GA1UdIwQY MBaAFFatmywie0E8UFgTKU+q2227wt1mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnEyYkxDSjdRVHhRV0JNcFQ2cmJiYnZDM1dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mZGZmZTMtMDEwZi00YzZhLWJkOTYt NzE4YjhjN2M5MzM1LzEvX2ZGSGx1dGVCNWFZcFNydDV6QW5mYXdCTGRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9mZGZmZTMtMDEwZi00YzZhLWJkOTYtNzE4YjhjN2M5MzM1 LzEvVnEyYkxDSjdRVHhRV0JNcFQ2cmJiYnZDM1dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAWZY/AwQA wrB1AwQAwwVoMA0EAgACMAcDBQEqExTAMA0GCSqGSIb3DQEBCwUAA4IBAQAESh+q W3x5nAY476eBIy1s62tKl4GKX4qD+jQ2MhQuEL0ejqYFq8ZvkklulNSo275rVem0 XMTrSDLmyLZiRkd5H0gC7H12u6mo1vfnP4Hz01wSGMBNPkG80WlDQ2+ctOJYHh2s i5nTxUaTHWIPwRcIDkOq3Ze+xVDmvx9EPZ33l1PEqyxJ1GK4eQC+QI4658yKKy71 m75wKrXbaR9JOsm3jw9vEW+XrFuDzaBcxYytUF4d6Vd5dnsqkP1lNnxRY8FCbnY3 gre+k/g//l8b0Rg/6p3nWcHQ2UNIrllVNkNebjrouaQgoVlh6bch5BTmPR91zfsZ hCYF7HgdOUtZiLMH -----END CERTIFICATE-----Generated at Fri Jan 2 13:02:05 2026 by rpki-client