This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/fFmupf3ZOulomw7RbTfFJI9HA-I.roa File: fFmupf3ZOulomw7RbTfFJI9HA-I.roa (raw, json) Hash identifier: T13v7SVdmP/WoBkNmWlki+xwBbJ6Z16koZYacLEH9hQ= Subject key identifier: 7C:59:AE:A5:FD:D9:3A:E9:68:9B:0E:D1:6D:37:C5:24:8F:47:03:E2 Certificate issuer: /CN=8624f3f661f24be5fef641dc722e5cf5ac87389e Certificate serial: 019B7B36651803904D1D0851281410309805 Authority key identifier: 86:24:F3:F6:61:F2:4B:E5:FE:F6:41:DC:72:2E:5C:F5:AC:87:38:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hiTz9mHyS-X-9kHcci5c9ayHOJ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/fFmupf3ZOulomw7RbTfFJI9HA-I.roa Signing time: Thu 01 Jan 2026 20:18:40 +0000 ROA not before: Thu 01 Jan 2026 20:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8784 IP address blocks: 83.169.64.0/18 maxlen: 18 83.169.64.0/23 maxlen: 23 83.169.66.0/24 maxlen: 24 83.169.67.0/24 maxlen: 24 83.169.69.0/24 maxlen: 24 83.169.70.0/23 maxlen: 23 83.169.70.0/24 maxlen: 24 83.169.71.0/24 maxlen: 24 83.169.72.0/24 maxlen: 24 83.169.73.0/24 maxlen: 24 83.169.74.0/24 maxlen: 24 83.169.80.0/24 maxlen: 24 83.169.81.0/24 maxlen: 24 83.169.83.0/24 maxlen: 24 83.169.84.0/24 maxlen: 24 83.169.85.0/24 maxlen: 24 83.169.89.0/24 maxlen: 24 83.169.92.0/24 maxlen: 24 83.169.99.0/24 maxlen: 24 83.169.100.0/22 maxlen: 22 83.169.100.0/24 maxlen: 24 83.169.102.0/24 maxlen: 24 83.169.103.0/24 maxlen: 24 83.169.114.0/23 maxlen: 23 83.169.114.0/24 maxlen: 24 83.169.115.0/24 maxlen: 24 83.169.116.0/22 maxlen: 22 83.169.116.0/24 maxlen: 24 83.169.117.0/24 maxlen: 24 83.169.118.0/24 maxlen: 24 83.169.119.0/24 maxlen: 24 83.169.120.0/22 maxlen: 22 83.169.120.0/24 maxlen: 24 83.169.121.0/24 maxlen: 24 83.169.122.0/24 maxlen: 24 83.169.123.0/24 maxlen: 24 83.169.124.0/24 maxlen: 24 83.169.125.0/24 maxlen: 24 178.22.152.0/21 maxlen: 21 194.117.208.0/20 maxlen: 20 194.117.208.0/24 maxlen: 24 194.117.211.0/24 maxlen: 24 194.117.216.0/24 maxlen: 24 194.117.219.0/24 maxlen: 24 194.153.214.0/24 maxlen: 24 195.46.192.0/19 maxlen: 19 195.46.193.0/24 maxlen: 24 195.46.195.0/24 maxlen: 24 195.46.198.0/24 maxlen: 24 195.46.199.0/24 maxlen: 24 195.46.204.0/24 maxlen: 24 195.46.209.0/24 maxlen: 24 195.46.210.0/24 maxlen: 24 195.46.213.0/24 maxlen: 24 195.46.214.0/24 maxlen: 24 195.46.216.0/24 maxlen: 24 195.46.219.0/24 maxlen: 24 195.46.223.0/24 maxlen: 24 212.37.192.0/19 maxlen: 19 213.139.96.0/19 maxlen: 19 213.139.111.0/24 maxlen: 24 213.139.112.0/24 maxlen: 24 213.139.117.0/24 maxlen: 24 213.139.123.0/24 maxlen: 24 2001:4b90::/32 maxlen: 32 2a02:d50::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft rsync://rpki.ripe.net/repository/DEFAULT/hiTz9mHyS-X-9kHcci5c9ayHOJ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:65:18:03:90:4d:1d:08:51:28:14:10:30:98:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8624f3f661f24be5fef641dc722e5cf5ac87389e Validity Not Before: Jan 1 20:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c59aea5fdd93ae9689b0ed16d37c5248f4703e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:62:e0:2f:a3:c3:04:67:c7:8d:54:45:db:fd: 75:05:bd:d4:e5:d9:39:3c:bb:5a:2a:d4:e6:bc:91: 8e:18:a9:aa:53:40:22:96:99:d7:32:08:1d:75:b1: 97:10:ed:f6:5c:84:61:a2:f2:1d:0c:b0:0c:9d:26: 0d:5b:e1:da:4e:18:45:d4:d8:f5:72:1f:1d:66:b6: 2d:9b:1a:3c:ad:6f:86:a5:46:f9:48:ce:bd:aa:fb: 51:07:d6:23:5c:77:98:26:bc:ec:15:33:e0:1d:3e: 7c:d8:58:62:36:59:8c:c9:76:ac:c1:82:7d:15:be: fd:3f:69:e1:42:f2:64:85:fd:80:2d:d5:00:15:28: 5c:71:42:24:40:00:01:05:d2:96:c8:b2:63:e9:fa: 05:f8:58:cb:5a:50:4e:74:11:78:3e:7d:c0:28:5d: b0:31:98:3c:5c:6e:4f:09:51:b6:a8:ea:32:2b:b9: 2f:06:16:79:14:77:9e:12:94:ef:7c:d1:ae:cc:42: 8e:59:5f:a3:a7:c8:cc:f8:08:2b:83:a5:34:d7:ab: ff:65:2b:3a:f3:44:94:b7:c6:96:aa:43:b5:3f:00: 21:9e:75:56:ea:5b:f8:bf:63:8d:f0:5c:a4:4f:ce: f7:4d:ba:ba:e0:c3:e5:e2:dc:de:d1:a8:e2:53:f6: 2c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:59:AE:A5:FD:D9:3A:E9:68:9B:0E:D1:6D:37:C5:24:8F:47:03:E2 X509v3 Authority Key Identifier: keyid:86:24:F3:F6:61:F2:4B:E5:FE:F6:41:DC:72:2E:5C:F5:AC:87:38:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiTz9mHyS-X-9kHcci5c9ayHOJ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/fFmupf3ZOulomw7RbTfFJI9HA-I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.169.64.0/18 178.22.152.0/21 194.117.208.0/20 194.153.214.0/24 195.46.192.0/19 212.37.192.0/19 213.139.96.0/19 IPv6: 2001:4b90::/32 2a02:d50::/32 Signature Algorithm: sha256WithRSAEncryption 71:0d:d9:a0:e7:65:59:0d:c5:ce:14:1a:27:0b:83:35:34:b3: d5:3f:8d:c3:41:bf:28:2b:d7:5d:0c:c6:fa:2a:ed:d7:bd:88: f0:fd:89:40:cc:81:0e:1b:6c:c2:cc:5c:9e:4f:df:49:87:1e: 74:18:28:0b:15:3e:fe:e4:9c:62:52:4a:c2:ae:a9:62:61:6a: 17:64:3e:4a:4d:56:92:a1:c5:75:cf:44:51:ee:e8:26:a6:24: a2:5d:67:c6:3d:69:55:a6:00:c7:04:42:fe:a7:e6:59:66:9b: d6:7f:df:2d:45:cb:2c:36:a7:07:92:fa:aa:f5:af:4d:98:b0: 73:0e:27:1c:0a:7e:bd:6f:ba:07:57:1c:09:b5:c3:18:2e:0a: 21:a7:55:da:1d:d2:0b:65:fd:1a:6a:fc:2f:2f:11:06:24:7e: e7:b7:f3:52:8d:47:56:d9:f3:44:f6:11:3b:ea:a0:93:04:59: fc:74:2d:83:39:c8:e2:d0:33:66:eb:e7:88:75:9b:c3:97:2c: 7d:76:cb:80:b6:9e:70:5c:01:ef:19:fe:58:59:4a:57:63:3b: 51:0e:28:fd:77:5d:87:b7:6a:9f:dc:f2:7e:c3:36:0d:0c:1b: fa:16:e3:fa:6c:18:df:00:1f:ee:fd:16:f2:9e:cb:34:62:ea: 0b:72:c6:99 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZt7NmUYA5BNHQhRKBQQMJgFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MjRmM2Y2NjFmMjRiZTVmZWY2NDFkYzcyMmU1Y2Y1YWM4 NzM4OWUwHhcNMjYwMTAxMjAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzU5YWVhNWZkZDkzYWU5Njg5YjBlZDE2ZDM3YzUyNDhmNDcwM2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWLgL6PDBGfHjVRF2/11Bb3U5dk5 PLtaKtTmvJGOGKmqU0AilpnXMggddbGXEO32XIRhovIdDLAMnSYNW+HaThhF1Nj1 ch8dZrYtmxo8rW+GpUb5SM69qvtRB9YjXHeYJrzsFTPgHT582FhiNlmMyXaswYJ9 Fb79P2nhQvJkhf2ALdUAFShccUIkQAABBdKWyLJj6foF+FjLWlBOdBF4Pn3AKF2w MZg8XG5PCVG2qOoyK7kvBhZ5FHeeEpTvfNGuzEKOWV+jp8jM+Agrg6U016v/ZSs6 80SUt8aWqkO1PwAhnnVW6lv4v2ON8FykT873Tbq64MPl4tze0ajiU/YsIQIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFHxZrqX92TrpaJsO0W03xSSPRwPiMB8GA1UdIwQY MBaAFIYk8/Zh8kvl/vZB3HIuXPWshzieMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGlUejltSHlTLVgtOWtIY2NpNWM5YXlIT0o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yZDk1OGMtODg3OC00MzIzLWJlZGMt MjVlNTM1YzhhNWI5LzEvZkZtdXBmM1pPdWxvbXc3UmJUZkZKSTlIQS1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8yZDk1OGMtODg3OC00MzIzLWJlZGMtMjVlNTM1YzhhNWI5 LzEvaGlUejltSHlTLVgtOWtIY2NpNWM5YXlIT0o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAwBAIAATAqAwQGU6lAAwQD shaYAwQEwnXQAwQAwpnWAwQFwy7AAwQF1CXAAwQF1YtgMBQEAgACMA4DBQAgAUuQ AwUAKgINUDANBgkqhkiG9w0BAQsFAAOCAQEAcQ3ZoOdlWQ3FzhQaJwuDNTSz1T+N w0G/KCvXXQzG+irt172I8P2JQMyBDhtswsxcnk/fSYcedBgoCxU+/uScYlJKwq6p YmFqF2Q+Sk1WkqHFdc9EUe7oJqYkol1nxj1pVaYAxwRC/qfmWWab1n/fLUXLLDan B5L6qvWvTZiwcw4nHAp+vW+6B1ccCbXDGC4KIadV2h3SC2X9Gmr8Ly8RBiR+57fz Uo1HVtnzRPYRO+qgkwRZ/HQtgznI4tAzZuvniHWbw5csfXbLgLaecFwB7xn+WFlK V2M7UQ4o/Xddh7dqn9zyfsM2DQwb+hbj+mwY3wAf7v0W8p7LNGLqC3LGmQ== -----END CERTIFICATE-----Generated at Tue Feb 10 00:01:56 2026 by rpki-client