This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/7fDVFx_W8cXxkevRfIg2i3GdYio.roa File: 7fDVFx_W8cXxkevRfIg2i3GdYio.roa (raw, json) Hash identifier: Fsf0L/tikLEgDCmVChLeIt5Pn4gsSm28h3gpWcwkAMM= Subject key identifier: ED:F0:D5:17:1F:D6:F1:C5:F1:91:EB:D1:7C:88:36:8B:71:9D:62:2A Certificate issuer: /CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7 Certificate serial: 019B7AC7AF4A56BD73DA6B6DC94EF9263505 Authority key identifier: 16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/7fDVFx_W8cXxkevRfIg2i3GdYio.roa Signing time: Thu 01 Jan 2026 18:17:45 +0000 ROA not before: Thu 01 Jan 2026 18:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48637 IP address blocks: 91.209.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:af:4a:56:bd:73:da:6b:6d:c9:4e:f9:26:35:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7 Validity Not Before: Jan 1 18:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edf0d5171fd6f1c5f191ebd17c88368b719d622a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e3:1f:ca:52:2f:45:b8:ee:73:11:65:80:9f: c6:98:76:91:76:94:cc:fd:55:43:71:d6:4d:6b:41: 2f:b4:d9:89:f4:79:33:03:c2:1a:e8:f9:0f:f0:97: bf:b3:11:70:3f:02:9a:8b:0a:cd:3c:99:3a:15:f1: ba:c5:05:8f:b0:cc:3f:71:a3:df:f6:5b:c1:9d:62: 6a:7c:81:e4:e9:e6:09:76:d2:e3:79:d4:3b:fd:bf: 4e:ab:6a:76:44:97:30:e9:30:67:06:ad:7a:34:3c: 76:5e:c1:ff:26:27:7c:da:b4:d4:78:ea:20:e4:1d: 66:96:a8:b1:bf:56:88:36:c2:e8:1a:1f:21:0d:dc: f8:ce:93:81:07:53:5c:bf:0b:a7:21:8d:46:ba:51: 77:a6:ed:c9:69:73:03:ca:da:68:9b:00:3e:23:ac: 3f:e8:41:fb:76:b3:64:06:9f:58:9e:ff:77:29:2f: 33:63:99:4c:ab:2d:eb:64:92:da:14:79:ea:00:1f: fc:99:9b:16:0f:c0:42:ec:eb:0c:c3:2f:7e:dd:e8: 5b:5b:08:76:a2:88:41:23:5c:1f:d0:2d:4f:88:56: 62:d0:01:3d:1a:e6:bc:00:d1:4b:be:1e:4e:19:0f: 66:83:b8:4c:75:75:6e:ca:1b:16:cf:b0:6a:b9:bd: 98:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F0:D5:17:1F:D6:F1:C5:F1:91:EB:D1:7C:88:36:8B:71:9D:62:2A X509v3 Authority Key Identifier: keyid:16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/7fDVFx_W8cXxkevRfIg2i3GdYio.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.214.0/24 Signature Algorithm: sha256WithRSAEncryption 31:71:45:53:ad:2a:c7:5e:5b:71:9d:49:77:7c:48:7d:13:13: 79:53:3c:f8:2f:dd:d0:f0:8e:3f:e4:e1:c7:e6:cf:b6:13:95: b5:d1:ae:ab:2f:da:a4:78:32:00:7f:e7:e6:86:e9:30:3d:7d: f5:0b:01:ea:6a:58:63:eb:5d:f7:5b:82:5f:13:af:01:47:b9: 1e:2c:39:e1:37:69:2d:1c:6d:b6:62:83:85:8e:58:25:fd:bb: 18:33:a9:b9:60:a0:a7:89:27:01:4e:c0:a6:f5:f1:e4:85:37: 28:41:fd:6a:ee:44:f0:a8:0c:6a:79:df:84:80:52:5e:b5:b8: 5b:b2:f9:97:15:d4:ea:88:e3:1a:d5:66:6f:c7:ed:e9:b9:00: b7:b1:97:0f:4d:30:b9:dd:bc:f2:a2:33:16:d9:f6:79:9b:e2: ce:15:8f:89:70:68:53:d4:29:07:bc:45:3a:eb:26:9b:95:9d: bf:7a:93:b4:f3:5a:6e:95:81:c6:03:19:8c:ec:ac:6d:2c:8c: cb:49:c2:7b:56:2e:8c:e1:59:3b:fd:f6:30:4c:6d:5e:f6:3c: 20:bd:c4:a4:02:a4:d6:1d:fa:64:bb:1e:ee:3b:78:d1:3a:3e: f9:04:6f:21:2b:fc:a8:8f:1a:cc:04:fd:fe:bb:18:ad:2e:8e: bb:6b:bd:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x69KVr1z2mttyU75JjUFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2M2QyNTcyMTgwZjRiNzg0ZmI0ZjJhNWVkNTBlOWZlNWU2 YmU2YTcwHhcNMjYwMTAxMTgxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGYwZDUxNzFmZDZmMWM1ZjE5MWViZDE3Yzg4MzY4YjcxOWQ2MjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuMfylIvRbjucxFlgJ/GmHaRdpTM /VVDcdZNa0EvtNmJ9HkzA8Ia6PkP8Je/sxFwPwKaiwrNPJk6FfG6xQWPsMw/caPf 9lvBnWJqfIHk6eYJdtLjedQ7/b9Oq2p2RJcw6TBnBq16NDx2XsH/Jid82rTUeOog 5B1mlqixv1aINsLoGh8hDdz4zpOBB1NcvwunIY1GulF3pu3JaXMDytpomwA+I6w/ 6EH7drNkBp9Ynv93KS8zY5lMqy3rZJLaFHnqAB/8mZsWD8BC7OsMwy9+3ehbWwh2 oohBI1wf0C1PiFZi0AE9Gua8ANFLvh5OGQ9mg7hMdXVuyhsWz7Bqub2YGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO3w1Rcf1vHF8ZHr0XyINotxnWIqMB8GA1UdIwQY MBaAFBY9JXIYD0t4T7Type1Q6f5ea+anMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmowbGNoZ1BTM2hQdFBLbDdWRHBfbDVyNXFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9lOWEwYTEtMTEzNS00OTVjLTg2OWEt NzBiYmM3YzBhOWE1LzEvN2ZEVkZ4X1c4Y1h4a2V2UmZJZzJpM0dkWWlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9lOWEwYTEtMTEzNS00OTVjLTg2OWEtNzBiYmM3YzBhOWE1 LzEvRmowbGNoZ1BTM2hQdFBLbDdWRHBfbDVyNXFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9HWMA0G CSqGSIb3DQEBCwUAA4IBAQAxcUVTrSrHXltxnUl3fEh9ExN5Uzz4L93Q8I4/5OHH 5s+2E5W10a6rL9qkeDIAf+fmhukwPX31CwHqalhj6133W4JfE68BR7keLDnhN2kt HG22YoOFjlgl/bsYM6m5YKCniScBTsCm9fHkhTcoQf1q7kTwqAxqed+EgFJetbhb svmXFdTqiOMa1WZvx+3puQC3sZcPTTC53bzyojMW2fZ5m+LOFY+JcGhT1CkHvEU6 6yablZ2/epO081pulYHGAxmM7KxtLIzLScJ7Vi6M4Vk7/fYwTG1e9jwgvcSkAqTW Hfpkux7uO3jROj75BG8hK/yojxrMBP3+uxitLo67a72I -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:29 2026 by rpki-client