This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/FO34XpplAW7QlRa_nhaWh0bzK1M.roa File: FO34XpplAW7QlRa_nhaWh0bzK1M.roa (raw, json) Hash identifier: OY8jMW/Q0/vSfJsf4E0K4jOzUbbQOka6dbLisQTbUTM= Subject key identifier: 14:ED:F8:5E:9A:65:01:6E:D0:95:16:BF:9E:16:96:87:46:F3:2B:53 Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02 Certificate serial: 019B7F83B8E299D2F53B202D2F85DAE884C9 Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/FO34XpplAW7QlRa_nhaWh0bzK1M.roa Signing time: Fri 02 Jan 2026 16:21:37 +0000 ROA not before: Fri 02 Jan 2026 16:21:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216050 IP address blocks: 195.222.124.0/24 maxlen: 24 195.222.125.0/24 maxlen: 24 195.222.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:b8:e2:99:d2:f5:3b:20:2d:2f:85:da:e8:84:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02 Validity Not Before: Jan 2 16:21:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14edf85e9a65016ed09516bf9e16968746f32b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c0:7d:bb:5e:74:00:d5:88:78:1b:f4:0a:49: 20:b6:7f:d8:dd:6a:d8:74:af:af:b8:fb:f8:5c:f6: 05:90:0a:e3:f3:00:20:f8:8a:b7:29:ae:12:0b:c1: 31:3e:78:92:96:85:e5:ed:dc:ff:31:21:6d:f9:66: e5:2d:0d:b8:3c:33:0d:42:b6:92:d6:88:9a:4e:1a: e7:87:e8:05:af:6c:8d:a0:19:33:94:f8:ee:fd:67: 7d:56:99:69:0d:ef:38:f8:24:95:1a:ef:a8:fe:fd: 90:00:70:41:be:65:fd:b9:7d:fd:bb:6d:aa:e7:a0: 90:1e:05:1c:ce:b1:ac:5a:63:36:f0:92:05:0b:1b: d4:53:f5:d1:d4:cb:12:45:9a:87:49:cb:8d:d3:61: 1d:d3:ad:29:b5:88:c7:3a:2b:1a:75:92:bc:a8:af: 73:00:3b:5e:ad:90:c3:dc:58:17:1c:bf:ee:22:6f: da:02:27:9b:c5:5b:4e:c1:18:9e:3d:9f:dc:d9:46: f8:eb:db:5a:fc:97:63:c0:3b:58:3c:09:8b:0a:69: 58:8c:b1:d6:2b:e4:5b:bc:a1:c1:dc:56:49:09:e9: e0:58:92:01:40:fb:ff:fe:7b:3d:44:84:26:24:67: 49:e9:85:46:60:1a:7b:9c:d0:48:75:75:9d:63:86: 1b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:ED:F8:5E:9A:65:01:6E:D0:95:16:BF:9E:16:96:87:46:F3:2B:53 X509v3 Authority Key Identifier: keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/FO34XpplAW7QlRa_nhaWh0bzK1M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.222.124.0-195.222.126.255 Signature Algorithm: sha256WithRSAEncryption 00:4b:28:50:fc:ff:da:61:d7:7e:3b:d0:9c:76:f5:a4:a9:da: 83:11:07:bd:1a:f5:ec:5a:22:31:07:80:0b:01:0f:3f:f4:ba: 22:db:96:0c:49:b7:a8:8a:92:57:da:81:33:d2:9e:43:6a:e4: 1e:dd:fd:2b:1b:db:6e:49:ea:52:a7:ef:ed:a7:37:4c:f8:ef: 37:e2:ac:4d:d3:56:4b:9f:e8:e1:6d:0d:da:50:d8:38:93:12: 04:81:8c:4f:60:82:56:24:ef:76:1c:50:ff:92:8f:aa:e6:40: 5d:96:0f:4c:f8:53:99:d6:a6:17:65:da:f7:34:15:c8:8b:79: b2:e8:05:d8:be:1f:53:ad:2e:1a:2c:d7:ff:39:c7:10:bf:16: b3:35:54:e8:59:25:4f:7f:38:80:67:64:f8:6b:5b:c2:d7:c0: dc:c7:79:69:76:8d:84:dc:80:68:11:f7:a7:5f:fc:b1:ac:f6: a2:79:62:fb:c5:86:93:1c:83:eb:e4:35:09:f4:03:de:ad:f2: b7:19:cd:58:8c:4b:03:0b:c2:a1:a7:08:f8:33:69:53:21:36: dd:77:4a:aa:1e:0f:69:96:0c:0e:75:77:93:4d:d2:b9:5b:9b: 36:4a:df:34:89:a5:dc:ba:98:74:db:b0:82:75:81:0d:8c:5c: 65:f8:00:3e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/g7jimdL1OyAtL4Xa6ITJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZGY3NmM1NGI5ZTY5MzVjMzBhOWI0YzliYTkzMDlhYzQ3 MGVjMDIwHhcNMjYwMTAyMTYyMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGVkZjg1ZTlhNjUwMTZlZDA5NTE2YmY5ZTE2OTY4NzQ2ZjMyYjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMB9u150ANWIeBv0Ckkgtn/Y3WrY dK+vuPv4XPYFkArj8wAg+Iq3Ka4SC8ExPniSloXl7dz/MSFt+WblLQ24PDMNQraS 1oiaThrnh+gFr2yNoBkzlPju/Wd9VplpDe84+CSVGu+o/v2QAHBBvmX9uX39u22q 56CQHgUczrGsWmM28JIFCxvUU/XR1MsSRZqHScuN02Ed060ptYjHOisadZK8qK9z ADterZDD3FgXHL/uIm/aAiebxVtOwRiePZ/c2Ub469ta/JdjwDtYPAmLCmlYjLHW K+RbvKHB3FZJCengWJIBQPv//ns9RIQmJGdJ6YVGYBp7nNBIdXWdY4YbawIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFBTt+F6aZQFu0JUWv54WlodG8ytTMB8GA1UdIwQY MBaAFIvfdsVLnmk1wwqbTJupMJrEcOwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgt OGQyMTg2NjUwMjdkLzEvRk8zNFhwcGxBVzdRbFJhX25oYVdoMGJ6SzFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgtOGQyMTg2NjUwMjdk LzEvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALD3nwD BADD3n4wDQYJKoZIhvcNAQELBQADggEBAABLKFD8/9ph13470Jx29aSp2oMRB70a 9exaIjEHgAsBDz/0uiLblgxJt6iKklfagTPSnkNq5B7d/Ssb225J6lKn7+2nN0z4 7zfirE3TVkuf6OFtDdpQ2DiTEgSBjE9gglYk73YcUP+Sj6rmQF2WD0z4U5nWphdl 2vc0FciLebLoBdi+H1OtLhos1/85xxC/FrM1VOhZJU9/OIBnZPhrW8LXwNzHeWl2 jYTcgGgR96df/LGs9qJ5YvvFhpMcg+vkNQn0A96t8rcZzViMSwMLwqGnCPgzaVMh Nt13SqoeD2mWDA51d5NN0rlbmzZK3zSJpdy6mHTbsIJ1gQ2MXGX4AD4= -----END CERTIFICATE-----Generated at Wed Jan 21 11:24:43 2026 by rpki-client