This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/FyvKrQlLQZ08OBN_anf4pBjOJb4.roa File: FyvKrQlLQZ08OBN_anf4pBjOJb4.roa (raw, json) Hash identifier: +pZffx5xsLckndXmwboiF/Rz+edr9+ScKLx8uBSEPfQ= Subject key identifier: 17:2B:CA:AD:09:4B:41:9D:3C:38:13:7F:6A:77:F8:A4:18:CE:25:BE Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c Certificate serial: 019B7E387CF3F262C45575C9618854AEDAC9 Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/FyvKrQlLQZ08OBN_anf4pBjOJb4.roa Signing time: Fri 02 Jan 2026 10:19:49 +0000 ROA not before: Fri 02 Jan 2026 10:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201942 IP address blocks: 91.126.64.0/22 maxlen: 22 91.126.80.0/21 maxlen: 21 91.126.152.0/21 maxlen: 21 91.126.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:7c:f3:f2:62:c4:55:75:c9:61:88:54:ae:da:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c Validity Not Before: Jan 2 10:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=172bcaad094b419d3c38137f6a77f8a418ce25be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:eb:5f:21:03:b5:c5:c6:e0:15:59:e1:06:24: 25:2c:e0:28:ac:6d:c8:c6:c4:7a:80:4a:ea:d1:4a: 5f:a2:fc:73:d3:cd:c8:e8:89:e3:6b:5c:3e:c9:7c: 62:a3:1e:e2:9a:76:0b:8a:e3:6f:24:a1:92:20:fe: cf:44:d6:0e:ae:0a:d7:e7:41:45:24:3e:4b:64:f4: ca:c7:40:ce:40:d3:00:13:08:31:6f:c5:f2:30:ed: b6:9d:fd:13:56:83:74:48:1d:0c:9a:e2:9b:eb:03: a2:aa:46:da:05:c6:db:08:35:92:14:03:88:a7:73: 9e:b0:93:3a:32:df:2b:2f:cb:e6:3e:97:f9:4c:8f: f2:52:d1:6a:8f:a6:df:5d:4d:dd:fb:73:8b:a4:68: 74:f0:f2:9f:d0:9c:13:4b:a4:4d:3d:49:33:eb:d2: f7:fb:38:39:d6:cc:d7:df:e8:8f:0a:69:43:77:8b: 4a:02:f2:3a:26:6b:d2:83:50:37:e5:20:59:e2:08: 67:90:77:dc:58:97:57:15:61:6c:9c:62:70:ae:5c: bc:e7:ba:6b:de:ff:b4:57:df:65:2d:19:4f:4b:56: a4:7e:69:6b:fc:17:78:03:6b:6b:a7:32:b1:b2:ec: 04:1f:23:81:61:61:f1:02:2c:82:50:d9:c0:fe:52: 38:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:2B:CA:AD:09:4B:41:9D:3C:38:13:7F:6A:77:F8:A4:18:CE:25:BE X509v3 Authority Key Identifier: keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/FyvKrQlLQZ08OBN_anf4pBjOJb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.126.64.0/22 91.126.80.0/21 91.126.152.0-91.126.175.255 Signature Algorithm: sha256WithRSAEncryption 17:a4:a2:65:5b:74:0a:e0:55:03:78:be:00:11:1c:97:10:b2: 8b:99:82:55:9d:00:4e:00:4e:58:86:be:2e:49:72:8a:09:bf: ad:93:12:a3:6a:38:56:a6:6d:41:6c:0c:e9:a7:7f:aa:62:0c: 97:2e:b4:a4:e9:07:f9:81:cb:8b:5f:9d:0d:53:62:e9:76:f7: 04:54:7d:75:a6:4f:28:fc:0f:37:d5:89:44:68:1a:a5:d6:b8: 9a:a0:10:36:a1:1e:8e:c7:4d:30:ec:43:ce:32:ef:3a:42:57: a7:da:0a:22:01:d5:9e:05:6f:f5:7e:9e:58:dd:a5:aa:e5:34: 96:79:f0:d2:7e:7c:d6:d2:20:b4:ab:7f:3b:2c:45:32:99:8e: df:c5:6b:03:19:c7:a4:86:2b:85:2d:15:ec:b8:c8:dd:5d:bb: 21:b0:79:27:8d:6f:3d:7b:17:af:1b:9d:57:af:7a:0e:8d:d1: 0b:c0:29:ec:21:a7:c4:9b:72:74:69:2c:ee:86:b6:4d:1f:e8: 97:21:91:b9:36:4e:69:ea:0e:7f:6b:35:b5:c1:23:95:f8:4e: f8:bc:0a:4d:7c:a2:c7:41:f5:7e:45:ae:cc:58:58:bc:64:b6: fd:1f:5b:22:66:23:9a:ed:d1:77:70:ce:88:ae:56:67:fa:91: bd:df:16:c7 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt+OHzz8mLEVXXJYYhUrtrJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNzBhMTY5YjZjZDQxMTAyMjI3OWU5ZmY5OTdmMTM0ZmY1 NGFiMWMwHhcNMjYwMTAyMTAxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzJiY2FhZDA5NGI0MTlkM2MzODEzN2Y2YTc3ZjhhNDE4Y2UyNWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOtfIQO1xcbgFVnhBiQlLOAorG3I xsR6gErq0Upfovxz083I6Inja1w+yXxiox7imnYLiuNvJKGSIP7PRNYOrgrX50FF JD5LZPTKx0DOQNMAEwgxb8XyMO22nf0TVoN0SB0MmuKb6wOiqkbaBcbbCDWSFAOI p3OesJM6Mt8rL8vmPpf5TI/yUtFqj6bfXU3d+3OLpGh08PKf0JwTS6RNPUkz69L3 +zg51szX3+iPCmlDd4tKAvI6JmvSg1A35SBZ4ghnkHfcWJdXFWFsnGJwrly857pr 3v+0V99lLRlPS1akfmlr/Bd4A2trpzKxsuwEHyOBYWHxAiyCUNnA/lI4BQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFBcryq0JS0GdPDgTf2p3+KQYziW+MB8GA1UdIwQY MBaAFAFwoWm2zUEQIieen/mX8TT/VKscMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVhDaGFiYk5RUkFpSjU2Zi1aZnhOUDlVcXh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xZTc3N2YtOTg2Yi00ZTM0LThkODEt N2Q0YmIyMzgwNDg3LzEvRnl2S3JRbExRWjA4T0JOX2FuZjRwQmpPSmI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8xZTc3N2YtOTg2Yi00ZTM0LThkODEtN2Q0YmIyMzgwNDg3 LzEvQVhDaGFiYk5RUkFpSjU2Zi1aZnhOUDlVcXh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCW35AAwQD W35QMAwDBANbfpgDBARbfqAwDQYJKoZIhvcNAQELBQADggEBABekomVbdArgVQN4 vgARHJcQsouZglWdAE4ATliGvi5JcooJv62TEqNqOFambUFsDOmnf6piDJcutKTp B/mBy4tfnQ1TYul29wRUfXWmTyj8DzfViURoGqXWuJqgEDahHo7HTTDsQ84y7zpC V6faCiIB1Z4Fb/V+nljdparlNJZ58NJ+fNbSILSrfzssRTKZjt/FawMZx6SGK4Ut Fey4yN1duyGweSeNbz17F68bnVeveg6N0QvAKewhp8SbcnRpLO6Gtk0f6Jchkbk2 TmnqDn9rNbXBI5X4Tvi8Ck18osdB9X5FrsxYWLxktv0fWyJmI5rt0XdwzoiuVmf6 kb3fFsc= -----END CERTIFICATE-----Generated at Mon Jan 26 19:54:50 2026 by rpki-client