This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/FsWz95bjpsQz09qkc-hQos-M0m8.roa File: FsWz95bjpsQz09qkc-hQos-M0m8.roa (raw, json) Hash identifier: 3XsppK5S7iL8gQ3L3NeC1DD01cY/1dPaUa81kDoWAKE= Subject key identifier: 16:C5:B3:F7:96:E3:A6:C4:33:D3:DA:A4:73:E8:50:A2:CF:8C:D2:6F Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019C5B0EA82B81D6801C2F4D3A4ED2EE44D5 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/FsWz95bjpsQz09qkc-hQos-M0m8.roa Signing time: Sat 14 Feb 2026 07:30:13 +0000 ROA not before: Sat 14 Feb 2026 07:30:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210705 IP address blocks: 212.23.214.0/24 maxlen: 24 217.18.90.0/24 maxlen: 24 2a05:9080:3::/48 maxlen: 48 2a05:9080:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 08:51:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:5b:0e:a8:2b:81:d6:80:1c:2f:4d:3a:4e:d2:ee:44:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Feb 14 07:30:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16c5b3f796e3a6c433d3daa473e850a2cf8cd26f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:20:1d:9b:27:74:96:d5:11:13:78:5d:1f:21: 1c:95:04:b2:db:04:92:3b:76:c4:71:11:e8:e0:14: f4:d0:66:9e:4b:23:3d:83:7b:03:93:f4:d9:a4:46: 49:6c:e8:4c:2b:87:cb:ca:cd:ed:6e:cc:7b:73:fb: 94:47:04:ff:2b:22:5b:6d:14:47:4c:55:ee:a9:6a: 0e:c4:80:30:a7:15:e8:95:f8:6a:6a:dd:ce:87:ec: ad:7f:e2:8c:d6:81:6b:87:5b:8c:5b:be:09:17:53: 80:73:27:a8:39:a6:87:94:71:75:fb:86:ca:fc:9e: 02:16:14:8e:02:81:9f:3f:81:fd:57:d5:41:59:17: c9:8b:2f:4e:70:a3:b9:90:35:03:78:96:51:4d:7c: 55:b3:b1:4c:a0:e3:46:7a:24:96:bc:06:55:40:f2: ca:f1:6d:2c:fa:67:57:31:17:cc:a8:99:6c:1f:30: 11:b7:e1:c6:ed:25:b6:84:9e:eb:59:96:47:b7:79: 68:7a:b5:07:0d:0f:11:b2:ad:1d:4c:35:47:34:4f: 9c:38:11:eb:2c:e9:b7:e6:5f:53:6b:3d:38:29:6a: 9e:9b:af:53:57:d0:5b:2e:a5:26:37:7a:7e:74:c0: 60:eb:68:75:a3:71:a6:15:00:e3:22:47:fa:2e:63: 9f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C5:B3:F7:96:E3:A6:C4:33:D3:DA:A4:73:E8:50:A2:CF:8C:D2:6F X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/FsWz95bjpsQz09qkc-hQos-M0m8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.23.214.0/24 217.18.90.0/24 IPv6: 2a05:9080:3::/48 2a05:9080:11::/48 Signature Algorithm: sha256WithRSAEncryption 34:2a:62:63:65:29:d7:dd:87:8c:c2:67:21:9d:3f:e6:57:9c: 61:f4:a9:bb:11:b8:72:fe:6e:4c:26:86:25:27:15:2b:c8:35: f8:95:28:a8:8c:b7:e4:da:96:4a:61:eb:b8:51:e4:ca:32:e8: 0a:73:ce:6a:2f:47:96:a1:e8:dd:b8:de:01:36:de:7e:09:79: 41:f8:f7:ef:7b:6b:1a:0d:f0:30:89:55:2b:e2:2e:85:df:d6: 36:27:fc:87:72:0f:56:38:25:3d:3e:d2:c7:da:12:85:ff:d2: cd:f5:c3:53:42:96:b8:46:80:bb:ff:76:2b:26:b8:11:40:2d: 21:f6:0f:04:2c:a1:ff:cb:a8:ed:b9:b8:7c:84:a5:15:0f:d7: a7:0b:02:fa:c6:cc:47:38:96:68:a7:52:72:16:2f:33:93:01: 93:31:1e:b0:05:52:9b:a4:37:5c:1a:7c:6f:5a:32:a4:fd:7c: 88:05:ac:d5:99:b2:d6:c1:bc:88:fa:91:57:99:b4:3d:6d:c1: ec:d4:9f:de:34:3a:da:6d:6c:a7:11:6a:c6:a2:de:3e:e3:27: 2f:ca:3b:3b:f4:b0:12:83:7d:7e:e2:bd:7b:7e:e4:4f:ba:38: 99:76:e1:29:b6:36:b3:61:52:48:94:30:2c:a5:28:09:23:bf: 00:23:cf:83 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZxbDqgrgdaAHC9NOk7S7kTVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwMjE0MDczMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmM1YjNmNzk2ZTNhNmM0MzNkM2RhYTQ3M2U4NTBhMmNmOGNkMjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyAdmyd0ltURE3hdHyEclQSy2wSS O3bEcRHo4BT00GaeSyM9g3sDk/TZpEZJbOhMK4fLys3tbsx7c/uURwT/KyJbbRRH TFXuqWoOxIAwpxXolfhqat3Oh+ytf+KM1oFrh1uMW74JF1OAcyeoOaaHlHF1+4bK /J4CFhSOAoGfP4H9V9VBWRfJiy9OcKO5kDUDeJZRTXxVs7FMoONGeiSWvAZVQPLK 8W0s+mdXMRfMqJlsHzARt+HG7SW2hJ7rWZZHt3loerUHDQ8Rsq0dTDVHNE+cOBHr LOm35l9Taz04KWqem69TV9BbLqUmN3p+dMBg62h1o3GmFQDjIkf6LmOf6wIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFBbFs/eW46bEM9PapHPoUKLPjNJvMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvRnNXejk1Ympwc1F6MDlxa2MtaFFvcy1NMG04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQA1BfWAwQA 2RJaMBgEAgACMBIDBwAqBZCAAAMDBwAqBZCAABEwDQYJKoZIhvcNAQELBQADggEB ADQqYmNlKdfdh4zCZyGdP+ZXnGH0qbsRuHL+bkwmhiUnFSvINfiVKKiMt+Talkph 67hR5Moy6ApzzmovR5ah6N243gE23n4JeUH49+97axoN8DCJVSviLoXf1jYn/Idy D1Y4JT0+0sfaEoX/0s31w1NClrhGgLv/dismuBFALSH2DwQsof/LqO25uHyEpRUP 16cLAvrGzEc4lminUnIWLzOTAZMxHrAFUpukN1wafG9aMqT9fIgFrNWZstbBvIj6 kVeZtD1twezUn940OtptbKcRasai3j7jJy/KOzv0sBKDfX7ivXt+5E+6OJl24Sm2 NrNhUkiUMCylKAkjvwAjz4M= -----END CERTIFICATE-----Generated at Sat Feb 14 17:23:50 2026 by rpki-client