This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/fvj1rgHErI2aFJuKQaHbwafyj4o.roa File: fvj1rgHErI2aFJuKQaHbwafyj4o.roa (raw, json) Hash identifier: HpFKXv47JsX+QVCXeuYq5JD76A44bQhzPgfYQDdjXAM= Subject key identifier: 7E:F8:F5:AE:01:C4:AC:8D:9A:14:9B:8A:41:A1:DB:C1:A7:F2:8F:8A Certificate issuer: /CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8 Certificate serial: 019B7BA3FD91D8A3BA4B51807B4C820C3A1F Authority key identifier: 9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/fvj1rgHErI2aFJuKQaHbwafyj4o.roa Signing time: Thu 01 Jan 2026 22:18:23 +0000 ROA not before: Thu 01 Jan 2026 22:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12693 IP address blocks: 82.193.224.0/19 maxlen: 24 82.193.255.0/24 maxlen: 24 85.199.64.0/18 maxlen: 24 85.199.74.0/24 maxlen: 24 85.199.96.0/20 maxlen: 24 92.42.224.0/21 maxlen: 21 149.249.48.0/21 maxlen: 21 153.92.72.0/21 maxlen: 24 156.67.224.0/21 maxlen: 21 185.90.156.0/22 maxlen: 24 212.204.32.0/19 maxlen: 24 2a01:a380::/32 maxlen: 32 2a01:a380::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:fd:91:d8:a3:ba:4b:51:80:7b:4c:82:0c:3a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8 Validity Not Before: Jan 1 22:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ef8f5ae01c4ac8d9a149b8a41a1dbc1a7f28f8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b7:57:9e:fb:e0:d1:ed:ee:e7:5e:79:67:f2: 6c:6c:1c:b5:ea:bc:ec:fb:a1:ad:d4:db:28:dd:9a: 1a:9e:6a:93:f3:0a:f3:d7:e9:46:ef:a1:7e:1b:32: 0d:31:be:db:49:19:ce:00:a3:5c:ec:08:5f:45:a9: d3:5a:87:44:09:a4:9d:57:ab:4a:aa:c6:d5:45:b2: 41:0b:04:6f:aa:37:81:02:2a:b3:8e:e8:05:f9:51: 58:40:a1:18:26:10:2c:c8:db:e2:25:29:10:bd:9e: 7c:5c:44:8c:23:6d:8d:23:10:46:f8:39:e0:ba:6d: e8:48:8a:34:c0:bb:d2:35:4c:62:25:83:f1:e7:ba: bb:c4:23:da:a2:07:87:bb:cd:5f:14:d3:06:88:1d: 39:73:a8:09:66:4b:28:b4:ed:3a:b5:d8:e7:51:58: 87:99:68:5e:0e:59:58:3d:bf:fc:58:58:f6:9d:d6: 7e:90:1a:c4:fb:fb:cb:1d:86:d8:fb:91:29:58:01: 69:64:9f:6a:88:a0:89:52:6f:1a:04:c0:f7:34:b7: 58:55:cb:3e:e9:ac:d2:6a:b4:9c:a8:d6:16:24:b5: 47:9b:f9:0a:ac:88:6a:2c:51:c0:ac:00:0d:8e:f6: b0:a1:f1:c5:a0:1a:f1:41:8d:54:5b:e3:1b:f4:ac: 40:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F8:F5:AE:01:C4:AC:8D:9A:14:9B:8A:41:A1:DB:C1:A7:F2:8F:8A X509v3 Authority Key Identifier: keyid:9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/fvj1rgHErI2aFJuKQaHbwafyj4o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.193.224.0/19 85.199.64.0/18 92.42.224.0/21 149.249.48.0/21 153.92.72.0/21 156.67.224.0/21 185.90.156.0/22 212.204.32.0/19 IPv6: 2a01:a380::/32 Signature Algorithm: sha256WithRSAEncryption 3c:af:a3:34:44:60:f4:c9:07:c4:bb:16:f1:3e:74:56:da:fe: 1c:8e:8a:ab:ed:90:21:06:7c:10:7a:5b:20:3e:80:b5:5f:30: 1b:2f:30:fa:eb:14:85:a1:13:ac:b1:b8:87:fb:fb:bd:8b:2e: 5a:92:49:d0:78:47:05:b4:f8:55:47:8c:c4:fa:0f:ee:27:d9: f6:2a:d0:c6:2a:c8:07:b7:c4:bc:b9:76:d9:bb:d6:f1:57:ba: fe:a1:35:8b:c5:ea:4a:2a:36:e4:ef:0e:a4:ab:b4:36:6b:b2: 3b:36:72:cd:12:da:aa:a4:ce:99:e0:69:94:61:4d:e3:c8:cc: 48:96:bc:81:3c:d8:18:70:27:21:36:22:ea:05:8d:45:c2:57: a9:94:67:4b:b8:74:01:44:e1:7b:97:16:1e:a9:51:c4:96:7e: b5:d0:5f:e7:cb:f0:57:30:20:02:11:8e:82:f9:34:04:e7:21: 9c:b5:a6:96:d4:d7:04:57:4b:2b:e7:91:cc:ce:02:37:60:b6: 6c:2f:da:03:e6:52:be:18:94:f7:1a:01:bf:85:2e:d6:de:85: e0:f9:91:8b:fc:cc:7f:02:29:ef:c3:a6:48:aa:5d:ec:23:31: 60:16:ba:f0:1a:69:64:8f:a5:ff:47:fb:e9:7d:86:c1:3c:ff: 87:7f:a3:c0 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt7o/2R2KO6S1GAe0yCDDofMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMWFjMzY5Yzk0NTY5MTRhMTJlMDJkZmZjOGRkNzk5NzRl YjFlZjgwHhcNMjYwMTAxMjIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWY4ZjVhZTAxYzRhYzhkOWExNDliOGE0MWExZGJjMWE3ZjI4ZjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbdXnvvg0e3u5155Z/JsbBy16rzs +6Gt1Nso3ZoanmqT8wrz1+lG76F+GzINMb7bSRnOAKNc7AhfRanTWodECaSdV6tK qsbVRbJBCwRvqjeBAiqzjugF+VFYQKEYJhAsyNviJSkQvZ58XESMI22NIxBG+Dng um3oSIo0wLvSNUxiJYPx57q7xCPaogeHu81fFNMGiB05c6gJZksotO06tdjnUViH mWheDllYPb/8WFj2ndZ+kBrE+/vLHYbY+5EpWAFpZJ9qiKCJUm8aBMD3NLdYVcs+ 6azSarScqNYWJLVHm/kKrIhqLFHArAANjvawofHFoBrxQY1UW+Mb9KxAtQIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFH749a4BxKyNmhSbikGh28Gn8o+KMB8GA1UdIwQY MBaAFJ4aw2nJRWkUoS4C3/yN15l06x74MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmhyRGFjbEZhUlNoTGdMZl9JM1htWFRySHZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wOTFiZDAtMmY2Ny00N2NlLWFlMTct ZDY4YzU3ZGI0Y2FlLzEvZnZqMXJnSEVySTJhRkp1S1FhSGJ3YWZ5ajRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8wOTFiZDAtMmY2Ny00N2NlLWFlMTctZDY4YzU3ZGI0Y2Fl LzEvbmhyRGFjbEZhUlNoTGdMZl9JM1htWFRySHZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQFUsHgAwQG VcdAAwQDXCrgAwQDlfkwAwQDmVxIAwQDnEPgAwQCuVqcAwQF1MwgMA0EAgACMAcD BQAqAaOAMA0GCSqGSIb3DQEBCwUAA4IBAQA8r6M0RGD0yQfEuxbxPnRW2v4cjoqr 7ZAhBnwQelsgPoC1XzAbLzD66xSFoROssbiH+/u9iy5akknQeEcFtPhVR4zE+g/u J9n2KtDGKsgHt8S8uXbZu9bxV7r+oTWLxepKKjbk7w6kq7Q2a7I7NnLNEtqqpM6Z 4GmUYU3jyMxIlryBPNgYcCchNiLqBY1FwleplGdLuHQBROF7lxYeqVHEln610F/n y/BXMCACEY6C+TQE5yGctaaW1NcEV0sr55HMzgI3YLZsL9oD5lK+GJT3GgG/hS7W 3oXg+ZGL/Mx/Ainvw6ZIql3sIzFgFrrwGmlkj6X/R/vpfYbBPP+Hf6PA -----END CERTIFICATE-----Generated at Mon Feb 9 22:59:37 2026 by rpki-client