This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/fjBLPKVRL2N3R-A_WZpV7UMJS-E.roa File: fjBLPKVRL2N3R-A_WZpV7UMJS-E.roa (raw, json) Hash identifier: g43UU/wrTcddspCCnr8Ra6+FoKvZBu/4AB1pQY+Nmvo= Subject key identifier: 7E:30:4B:3C:A5:51:2F:63:77:47:E0:3F:59:9A:55:ED:43:09:4B:E1 Certificate issuer: /CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6 Certificate serial: 019B77C6B3A50B5CD098F8CEF1FAAD8DE0E0 Authority key identifier: 56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/fjBLPKVRL2N3R-A_WZpV7UMJS-E.roa Signing time: Thu 01 Jan 2026 04:17:49 +0000 ROA not before: Thu 01 Jan 2026 04:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8697 IP address blocks: 37.202.64.0/18 maxlen: 24 46.185.128.0/17 maxlen: 24 79.173.192.0/18 maxlen: 24 86.108.0.0/17 maxlen: 24 92.253.0.0/17 maxlen: 24 94.249.0.0/17 maxlen: 24 149.200.128.0/17 maxlen: 24 149.200.136.0/24 maxlen: 24 185.98.220.0/22 maxlen: 24 194.165.128.0/19 maxlen: 24 213.186.160.0/19 maxlen: 24 217.23.32.0/20 maxlen: 24 2a01:9700::/29 maxlen: 48 2a01:9700::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b3:a5:0b:5c:d0:98:f8:ce:f1:fa:ad:8d:e0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6 Validity Not Before: Jan 1 04:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e304b3ca5512f637747e03f599a55ed43094be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1a:9f:04:b4:1e:28:bf:1b:14:9b:4c:9e:0a: 0b:b1:ce:f8:07:06:5a:a9:ea:4b:da:dd:c9:20:db: 5b:7b:c4:5d:a7:01:01:21:23:fc:a6:a1:b2:ed:bf: e3:f1:fd:81:e9:c0:cf:b0:19:f7:91:d4:bf:b2:fe: e8:dd:6c:c7:30:a5:75:6e:c0:98:23:33:f6:72:a3: 04:5b:2c:1f:4c:e7:21:06:06:d1:81:52:57:7a:35: 69:c3:62:db:2d:d8:a4:4f:e4:8f:0f:89:fe:35:3f: ce:2c:10:9b:80:d8:53:f3:53:bd:7b:8b:4d:41:84: c3:28:b4:d9:39:1c:4a:2e:7c:57:f5:7a:b1:1b:44: 50:23:5e:92:51:ca:d8:a7:99:75:12:1a:ea:fb:fb: 94:57:26:89:95:73:01:dc:dc:65:aa:88:53:5e:08: d7:b4:3f:31:06:9d:70:9d:45:7a:2a:4d:aa:f1:a3: 6f:2a:f0:8d:b6:e6:7f:a1:85:49:b0:b6:14:e7:d7: 48:9a:4b:18:7e:5a:b6:07:2a:f1:91:6b:b3:2b:18: f8:ea:48:bf:36:a0:69:78:ec:9b:d8:df:c9:0f:f6: 9f:1e:84:9d:72:b5:a1:83:cf:cb:41:ed:ae:3f:75: 55:a6:a8:56:fd:f8:60:12:52:63:94:42:ac:ec:8a: f1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:30:4B:3C:A5:51:2F:63:77:47:E0:3F:59:9A:55:ED:43:09:4B:E1 X509v3 Authority Key Identifier: keyid:56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/fjBLPKVRL2N3R-A_WZpV7UMJS-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.64.0/18 46.185.128.0/17 79.173.192.0/18 86.108.0.0/17 92.253.0.0/17 94.249.0.0/17 149.200.128.0/17 185.98.220.0/22 194.165.128.0/19 213.186.160.0/19 217.23.32.0/20 IPv6: 2a01:9700::/29 Signature Algorithm: sha256WithRSAEncryption 2d:44:02:ee:45:27:08:9e:46:d1:5e:bf:12:c7:44:d5:8c:b9: 79:96:4c:86:9e:fd:8d:79:62:ce:c8:66:92:53:70:2d:e8:b0: 6f:be:01:ce:25:07:3c:e2:3c:c4:59:8f:5f:a4:fa:12:07:f7: 82:c5:52:1b:79:6e:af:6a:62:2c:13:31:9e:82:12:47:36:06: c7:17:b2:84:16:73:1e:2b:8d:e8:a9:18:80:f6:fe:d1:b8:d4: 00:18:58:22:6f:5b:35:8a:a7:b8:59:12:3e:3e:e2:b1:82:5d: 6b:f9:16:ed:6a:03:b7:9f:d7:d6:e5:14:0d:f5:7d:cd:a3:4c: 4e:b7:76:e3:8d:cf:a7:3c:e2:44:c9:91:ad:89:7c:53:56:cf: 2d:00:14:f5:b1:c9:f2:ce:6f:ad:1a:21:20:fa:a0:b4:12:f8: 3c:79:ab:bc:2a:3c:8d:d2:d2:91:0b:db:92:e9:37:3d:86:02: 6b:d4:6f:e0:7a:76:35:6c:24:e5:83:b9:80:68:88:e7:53:2c: 4b:42:53:76:ea:0a:df:f4:60:3a:5f:c6:0a:16:51:bf:ef:f4: 02:cd:0c:c1:82:d5:9a:90:d4:14:b6:f0:e7:79:45:26:e7:61: e1:42:62:0e:3a:cb:db:53:88:41:f8:9e:48:1f:25:92:b1:72: 1c:67:57:e8 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgISAZt3xrOlC1zQmPjO8fqtjeDgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2ZDBlM2IyOGYyYmUzM2VjNWE5ZDJjYTAwYWM2NDE1NTUz NmNiYzYwHhcNMjYwMTAxMDQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTMwNGIzY2E1NTEyZjYzNzc0N2UwM2Y1OTlhNTVlZDQzMDk0YmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xqfBLQeKL8bFJtMngoLsc74BwZa qepL2t3JINtbe8RdpwEBISP8pqGy7b/j8f2B6cDPsBn3kdS/sv7o3WzHMKV1bsCY IzP2cqMEWywfTOchBgbRgVJXejVpw2LbLdikT+SPD4n+NT/OLBCbgNhT81O9e4tN QYTDKLTZORxKLnxX9XqxG0RQI16SUcrYp5l1Ehrq+/uUVyaJlXMB3NxlqohTXgjX tD8xBp1wnUV6Kk2q8aNvKvCNtuZ/oYVJsLYU59dImksYflq2ByrxkWuzKxj46ki/ NqBpeOyb2N/JD/afHoSdcrWhg8/LQe2uP3VVpqhW/fhgElJjlEKs7IrxaQIDAQAB o4ICVDCCAlAwHQYDVR0OBBYEFH4wSzylUS9jd0fgP1maVe1DCUvhMB8GA1UdIwQY MBaAFFbQ47KPK+M+xanSygCsZBVVNsvGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnREanNvOHI0ejdGcWRMS0FLeGtGVlUyeThZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9mZmJmNmEtNzJmMC00MDFmLWIyYzMt OGI4ZDcyMTcyMDkwLzEvZmpCTFBLVlJMMk4zUi1BX1dacFY3VU1KUy1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9mZmJmNmEtNzJmMC00MDFmLWIyYzMtOGI4ZDcyMTcyMDkw LzEvVnREanNvOHI0ejdGcWRMS0FLeGtGVlUyeThZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBIBAIAATBCAwQGJcpAAwQH LrmAAwQGT63AAwQHVmwAAwQHXP0AAwQHXvkAAwQHlciAAwQCuWLcAwQFwqWAAwQF 1bqgAwQE2RcgMA0EAgACMAcDBQMqAZcAMA0GCSqGSIb3DQEBCwUAA4IBAQAtRALu RScInkbRXr8Sx0TVjLl5lkyGnv2NeWLOyGaSU3At6LBvvgHOJQc84jzEWY9fpPoS B/eCxVIbeW6vamIsEzGeghJHNgbHF7KEFnMeK43oqRiA9v7RuNQAGFgib1s1iqe4 WRI+PuKxgl1r+RbtagO3n9fW5RQN9X3No0xOt3bjjc+nPOJEyZGtiXxTVs8tABT1 scnyzm+tGiEg+qC0Evg8eau8KjyN0tKRC9uS6Tc9hgJr1G/genY1bCTlg7mAaIjn UyxLQlN26grf9GA6X8YKFlG/7/QCzQzBgtWakNQUtvDneUUm52HhQmIOOsvbU4hB +J5IHyWSsXIcZ1fo -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:18 2026 by rpki-client