This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/FaeUz3uKy-mLZtaPCWtQSmRkAfs.roa File: FaeUz3uKy-mLZtaPCWtQSmRkAfs.roa (raw, json) Hash identifier: GGkJmAABe4TcLrNWBtfMtwloTnLFtsdf5JSihhg5Xfs= Subject key identifier: 15:A7:94:CF:7B:8A:CB:E9:8B:66:D6:8F:09:6B:50:4A:64:64:01:FB Certificate issuer: /CN=706745ad92353da8a80cb2e0d229d68c2ef53db2 Certificate serial: 019B7C80328C9F87CBF69D9BDA8A8EB356A4 Authority key identifier: 70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/FaeUz3uKy-mLZtaPCWtQSmRkAfs.roa Signing time: Fri 02 Jan 2026 02:18:54 +0000 ROA not before: Fri 02 Jan 2026 02:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32043 IP address blocks: 91.219.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:32:8c:9f:87:cb:f6:9d:9b:da:8a:8e:b3:56:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706745ad92353da8a80cb2e0d229d68c2ef53db2 Validity Not Before: Jan 2 02:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15a794cf7b8acbe98b66d68f096b504a646401fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:34:85:d2:57:1a:d2:ca:23:52:8d:07:34:54: 20:fd:58:af:3e:04:73:55:bd:d6:6d:e9:42:6e:1c: 2d:e4:aa:95:7b:76:5f:1e:cb:1b:b4:77:fa:14:ac: 1b:89:10:fd:63:60:eb:e2:0e:43:7c:39:ab:09:30: bc:69:67:7b:d1:b4:5a:29:92:03:c7:15:12:5d:81: 8b:b3:33:68:75:a8:92:1f:23:9d:6e:fd:6f:c7:bb: 7b:d6:1c:30:7b:bc:20:f1:fc:1d:ff:05:fb:db:b0: 64:a4:2b:7f:8f:b2:bf:d4:0d:59:83:2a:c0:67:de: ea:02:56:f9:12:74:9b:34:44:a0:ab:36:42:61:ae: c8:df:71:15:ae:2e:73:49:4d:00:eb:1a:bb:6d:b1: a7:c3:07:7f:b7:28:18:d9:e9:dd:8c:02:ed:c6:4f: 81:2c:1f:1c:89:9d:5b:c9:47:04:db:b5:7b:bf:66: 89:3a:01:c1:6b:72:a6:8e:e5:dc:13:d1:c8:92:7f: 66:03:68:8e:92:3d:eb:95:ca:e5:2c:fe:1c:15:9c: d2:43:91:d0:9f:5c:1d:9e:e9:4b:c3:51:da:1a:13: d5:c9:11:36:ea:45:0c:4e:27:2b:ab:e7:06:03:0c: 05:eb:51:5f:a6:c2:d2:d6:12:82:76:85:10:0b:9c: de:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A7:94:CF:7B:8A:CB:E9:8B:66:D6:8F:09:6B:50:4A:64:64:01:FB X509v3 Authority Key Identifier: keyid:70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/FaeUz3uKy-mLZtaPCWtQSmRkAfs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.219.8.0/22 Signature Algorithm: sha256WithRSAEncryption a3:80:b1:ed:f4:6d:03:ad:4e:55:43:20:8b:f1:70:b3:8f:57: 06:7f:1b:c3:c5:a9:39:39:03:9b:5a:d0:e4:ce:02:ae:9a:36: de:8c:a7:a2:67:9f:9e:0c:cf:10:66:28:c8:fb:e0:67:b8:3b: b1:e8:9f:db:04:4d:ae:b5:40:58:6c:4f:55:ca:e5:75:63:63: 65:e1:ae:82:d9:35:5e:1f:3d:b4:8f:be:b0:4c:0e:26:fd:10: aa:40:85:ad:9d:df:4d:54:a1:ba:b8:31:82:44:0f:27:94:6c: 75:2b:8e:42:74:95:96:a3:78:61:e4:66:7e:0d:1d:0f:b2:33: 4a:de:9b:aa:7a:64:1f:7b:55:06:4b:d1:c8:ed:47:41:9c:d3: 08:89:a2:c4:1c:84:37:28:ca:85:59:be:00:7a:8c:5c:d8:27: 40:54:38:fa:9c:de:e1:9c:ac:56:f5:00:40:0c:a1:60:6e:d7: 35:be:f9:3c:81:ba:61:91:9b:4e:a0:35:45:d6:dc:90:4e:0b: 98:3f:89:ec:7a:b1:1d:42:e6:98:36:ec:07:29:bb:fb:69:0c: b4:e5:31:44:19:86:f5:7d:b7:d6:93:86:43:b1:1d:41:23:d5: 4f:32:d2:da:26:9a:ff:0e:b4:f2:e4:47:87:eb:0f:05:d3:c4: be:f8:05:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gDKMn4fL9p2b2oqOs1akMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNjc0NWFkOTIzNTNkYThhODBjYjJlMGQyMjlkNjhjMmVm NTNkYjIwHhcNMjYwMTAyMDIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWE3OTRjZjdiOGFjYmU5OGI2NmQ2OGYwOTZiNTA0YTY0NjQwMWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszSF0lca0sojUo0HNFQg/VivPgRz Vb3WbelCbhwt5KqVe3ZfHssbtHf6FKwbiRD9Y2Dr4g5DfDmrCTC8aWd70bRaKZID xxUSXYGLszNodaiSHyOdbv1vx7t71hwwe7wg8fwd/wX727BkpCt/j7K/1A1ZgyrA Z97qAlb5EnSbNESgqzZCYa7I33EVri5zSU0A6xq7bbGnwwd/tygY2endjALtxk+B LB8ciZ1byUcE27V7v2aJOgHBa3KmjuXcE9HIkn9mA2iOkj3rlcrlLP4cFZzSQ5HQ n1wdnulLw1HaGhPVyRE26kUMTicrq+cGAwwF61FfpsLS1hKCdoUQC5zeyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBWnlM97isvpi2bWjwlrUEpkZAH7MB8GA1UdIwQY MBaAFHBnRa2SNT2oqAyy4NIp1owu9T2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTkt ZTIxNzYzYzY3MmZhLzEvRmFlVXozdUt5LW1MWnRhUENXdFFTbVJrQWZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTktZTIxNzYzYzY3MmZh LzEvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW9sIMA0G CSqGSIb3DQEBCwUAA4IBAQCjgLHt9G0DrU5VQyCL8XCzj1cGfxvDxak5OQObWtDk zgKumjbejKeiZ5+eDM8QZijI++BnuDux6J/bBE2utUBYbE9VyuV1Y2Nl4a6C2TVe Hz20j76wTA4m/RCqQIWtnd9NVKG6uDGCRA8nlGx1K45CdJWWo3hh5GZ+DR0PsjNK 3puqemQfe1UGS9HI7UdBnNMIiaLEHIQ3KMqFWb4Aeoxc2CdAVDj6nN7hnKxW9QBA DKFgbtc1vvk8gbphkZtOoDVF1tyQTguYP4nserEdQuaYNuwHKbv7aQy05TFEGYb1 fbfWk4ZDsR1BI9VPMtLaJpr/DrTy5EeH6w8F08S++AW7 -----END CERTIFICATE-----Generated at Thu Jan 22 23:32:55 2026 by rpki-client