This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/fv_FIWsQ6j6A0tVez5uEd3louso.roa File: fv_FIWsQ6j6A0tVez5uEd3louso.roa (raw, json) Hash identifier: 2YyDYTFacwqXQWkGL6XcsPB1oMsulqFc48OJziLkM3k= Subject key identifier: 7E:FF:C5:21:6B:10:EA:3E:80:D2:D5:5E:CF:9B:84:77:79:68:BA:CA Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B7F84DB0F7DC71B127866856D9AB51497 Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/fv_FIWsQ6j6A0tVez5uEd3louso.roa Signing time: Fri 02 Jan 2026 16:22:51 +0000 ROA not before: Fri 02 Jan 2026 16:22:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8881 IP address blocks: 88.209.211.0/24 maxlen: 24 88.209.224.0/24 maxlen: 24 88.209.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:db:0f:7d:c7:1b:12:78:66:85:6d:9a:b5:14:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jan 2 16:22:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7effc5216b10ea3e80d2d55ecf9b84777968baca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:49:87:c1:ff:aa:2f:ef:8e:b1:33:d1:0f:6e: be:11:82:f1:cc:30:24:6b:bc:a8:c8:d6:d1:61:7f: 25:d0:9a:30:ba:9e:0f:82:c0:67:48:5e:21:c8:3c: dc:71:ca:f7:39:04:6a:d4:5e:6d:84:3f:ce:d3:0f: 53:b2:84:8d:77:81:59:89:2b:52:f9:a5:f1:9b:07: 37:7c:42:48:4c:da:e8:22:4a:bd:8f:c7:f1:87:ba: dd:cb:13:40:4b:42:84:47:68:b3:07:92:1e:c0:ed: 84:49:90:c8:6c:88:5a:b4:dc:7c:5a:74:dc:d3:f0: d4:52:df:fb:2b:54:7c:ad:3b:f9:c7:f9:82:16:21: c5:92:57:d9:ad:f0:b2:22:7b:08:06:a7:8e:65:74: d2:00:da:56:65:cf:22:06:1e:73:2c:24:b8:60:c9: 19:17:f8:d3:78:e0:59:3b:aa:5b:ee:60:3c:f1:24: 09:30:9c:64:3f:c8:55:19:22:52:43:5a:c3:d6:56: 1d:09:98:27:78:98:d8:25:49:00:62:ba:ea:57:a8: c6:a3:4c:9b:64:b2:25:69:4d:81:bf:e9:94:c0:bf: 5f:97:00:a1:d1:e4:d5:b1:61:0f:4c:8b:a3:4d:7d: 53:3f:51:b5:a6:44:63:a1:b3:18:0f:c6:9a:7d:f2: ab:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:FF:C5:21:6B:10:EA:3E:80:D2:D5:5E:CF:9B:84:77:79:68:BA:CA X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/fv_FIWsQ6j6A0tVez5uEd3louso.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.209.211.0/24 88.209.224.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:58:0d:62:94:d1:e0:6e:4d:db:bb:d3:8e:37:91:48:f8:01: 46:40:8a:b6:1e:b8:26:6d:d1:4c:c4:70:84:c6:35:25:6b:d7: ef:56:89:5a:36:66:59:f3:3f:79:26:72:d4:1b:1b:b6:10:3c: 79:05:39:57:1f:44:28:98:75:c2:52:c6:89:42:fd:7c:e4:fa: 0c:3c:ff:89:d8:89:b7:35:ee:d8:64:f4:19:9b:2d:ae:09:a6: ef:3e:f6:00:f9:0a:5d:96:27:28:05:85:cb:99:0f:44:c8:73: 0e:67:9b:5a:65:a2:54:c7:a6:3c:da:2b:77:13:a9:53:0e:9d: d6:98:33:b5:8b:8f:9a:da:bc:bb:03:e0:d5:5a:cc:22:16:45: 04:d6:3e:9a:7f:61:02:26:63:e5:10:e5:b7:a0:05:67:3a:a7: 8d:6f:61:68:b1:45:1a:c3:30:28:1a:d6:46:48:d7:44:72:1c: 08:81:66:d0:79:de:37:5a:be:50:13:af:9c:dc:53:ab:e5:a9: ee:17:59:ec:02:9d:2a:22:b4:49:f3:ff:68:37:a0:86:7f:c6: ef:2e:fd:58:a7:21:8f:23:08:7b:cf:8b:f3:2b:93:18:bd:c0: 7f:4b:42:8d:2f:1d:7e:7d:b7:92:57:71:a1:dc:f7:36:9a:67: c0:69:40:35 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hNsPfccbEnhmhW2atRSXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMTAyMTYyMjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWZmYzUyMTZiMTBlYTNlODBkMmQ1NWVjZjliODQ3Nzc5NjhiYWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40mHwf+qL++OsTPRD26+EYLxzDAk a7yoyNbRYX8l0Jowup4PgsBnSF4hyDzcccr3OQRq1F5thD/O0w9TsoSNd4FZiStS +aXxmwc3fEJITNroIkq9j8fxh7rdyxNAS0KER2izB5IewO2ESZDIbIhatNx8WnTc 0/DUUt/7K1R8rTv5x/mCFiHFklfZrfCyInsIBqeOZXTSANpWZc8iBh5zLCS4YMkZ F/jTeOBZO6pb7mA88SQJMJxkP8hVGSJSQ1rD1lYdCZgneJjYJUkAYrrqV6jGo0yb ZLIlaU2Bv+mUwL9flwCh0eTVsWEPTIujTX1TP1G1pkRjobMYD8aaffKrpwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFH7/xSFrEOo+gNLVXs+bhHd5aLrKMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvZnZfRklXc1E2ajZBMHRWZXo1dUVkM2xvdXNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWNHTAwQB WNHgMA0GCSqGSIb3DQEBCwUAA4IBAQAsWA1ilNHgbk3bu9OON5FI+AFGQIq2Hrgm bdFMxHCExjUla9fvVolaNmZZ8z95JnLUGxu2EDx5BTlXH0QomHXCUsaJQv185PoM PP+J2Im3Ne7YZPQZmy2uCabvPvYA+QpdlicoBYXLmQ9EyHMOZ5taZaJUx6Y82it3 E6lTDp3WmDO1i4+a2ry7A+DVWswiFkUE1j6af2ECJmPlEOW3oAVnOqeNb2FosUUa wzAoGtZGSNdEchwIgWbQed43Wr5QE6+c3FOr5anuF1nsAp0qIrRJ8/9oN6CGf8bv Lv1YpyGPIwh7z4vzK5MYvcB/S0KNLx1+fbeSV3Gh3Pc2mmfAaUA1 -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:04 2026 by rpki-client