This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/fL9-5NNFmNXeaEJzQdcv1aJZxaE.roa File: fL9-5NNFmNXeaEJzQdcv1aJZxaE.roa (raw, json) Hash identifier: vgxMoBNi3xBe1kEG9Dep1UcVzUmrFFhkaO0RcMn0W+o= Subject key identifier: 7C:BF:7E:E4:D3:45:98:D5:DE:68:42:73:41:D7:2F:D5:A2:59:C5:A1 Certificate issuer: /CN=845c58752f3336422ff0ee1726474591e7a41e5f Certificate serial: 019B7FF063B001393FC32D463EAF34BD7FB4 Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/fL9-5NNFmNXeaEJzQdcv1aJZxaE.roa Signing time: Fri 02 Jan 2026 18:20:19 +0000 ROA not before: Fri 02 Jan 2026 18:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215547 IP address blocks: 185.91.24.0/22 maxlen: 24 2a00:1932::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f0:63:b0:01:39:3f:c3:2d:46:3e:af:34:bd:7f:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f Validity Not Before: Jan 2 18:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cbf7ee4d34598d5de68427341d72fd5a259c5a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8b:8c:07:c9:66:00:23:32:8c:85:4e:c8:ef: 36:a5:69:b9:a0:b2:87:ee:35:e2:92:3e:dd:22:aa: d3:f0:f7:9f:31:92:62:ec:de:63:bb:a6:55:e2:f9: 38:5d:ab:1d:30:e5:c3:75:fc:75:78:40:41:09:18: 7a:cb:f1:00:b4:4d:ac:a1:55:d0:59:77:7c:da:84: 7c:21:73:1b:02:bc:cd:49:91:4b:08:26:a1:8d:02: b2:6e:73:80:61:3b:69:56:84:4d:20:f1:0f:37:04: 64:f4:90:cf:03:e0:66:3e:2b:0b:87:a0:5c:e1:2b: 34:03:6a:49:7c:3d:a7:6e:f1:25:72:27:61:b0:9e: a1:dc:89:3f:a1:cd:a3:41:d1:37:30:4a:07:46:2c: 81:cf:bb:91:45:3f:e0:e4:30:b3:1e:c1:15:56:c4: 7c:02:19:53:70:52:8e:7e:9c:4d:94:e4:df:d8:74: 00:d5:ab:da:ff:b9:a6:91:3a:17:da:59:2f:6c:85: 7e:01:1d:5d:98:94:0c:a3:3e:cc:f2:ca:d7:dd:a0: b0:b9:6e:69:de:39:5e:f8:dc:ab:df:22:a6:33:11: 1d:c1:c7:0b:c3:f5:cd:54:5f:64:ee:45:96:6f:54: f6:e7:a4:4d:01:1e:e5:10:a4:f3:11:4f:74:8d:50: 1d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:BF:7E:E4:D3:45:98:D5:DE:68:42:73:41:D7:2F:D5:A2:59:C5:A1 X509v3 Authority Key Identifier: keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/fL9-5NNFmNXeaEJzQdcv1aJZxaE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.91.24.0/22 IPv6: 2a00:1932::/32 Signature Algorithm: sha256WithRSAEncryption 06:19:ec:77:e1:43:cf:c0:a9:31:8d:3b:25:01:e1:62:c3:4c: dd:98:e1:3f:ae:1c:c1:4f:7e:a0:38:9f:91:0e:0a:d3:cc:28: 33:a7:ba:09:a0:98:36:53:a9:0e:3d:f5:0c:22:b9:1e:8a:18: fe:2d:57:f0:cb:9e:ea:61:36:f6:4d:4a:7e:8e:b4:94:ff:7d: 0b:9d:43:ae:d5:f7:68:4d:da:86:4c:81:02:cd:d1:3f:e4:b2: 2e:dd:7b:bb:da:bb:34:c0:05:2a:fd:c6:53:38:6d:9c:f2:ae: 57:62:6b:22:18:4e:4d:b8:23:46:37:75:ca:de:04:34:a7:ca: 0b:fa:ab:48:f1:48:98:34:b2:c1:dd:1b:59:24:f0:78:e5:f1: 7b:06:53:d3:d6:0b:e8:a5:22:70:8f:89:09:19:d3:d0:a3:c9: 6e:80:47:44:a0:b1:65:66:ed:7e:53:2f:ce:61:78:02:05:fa: 48:bd:35:52:5d:a4:c2:ff:3c:9d:6a:e2:f7:f4:ad:ce:87:6c: f3:02:bc:b0:f7:05:a9:cd:68:08:cb:e5:6d:f8:60:e9:08:ec: 33:83:1a:78:a7:82:65:a3:e2:1f:32:98:cb:ce:4f:99:cd:a3: 40:5a:5b:fb:0a:f5:0b:b1:14:94:20:ba:11:15:94:f5:3a:c3: fc:0e:1b:2e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/8GOwATk/wy1GPq80vX+0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NWM1ODc1MmYzMzM2NDIyZmYwZWUxNzI2NDc0NTkxZTdh NDFlNWYwHhcNMjYwMTAyMTgyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2JmN2VlNGQzNDU5OGQ1ZGU2ODQyNzM0MWQ3MmZkNWEyNTljNWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIuMB8lmACMyjIVOyO82pWm5oLKH 7jXikj7dIqrT8PefMZJi7N5ju6ZV4vk4XasdMOXDdfx1eEBBCRh6y/EAtE2soVXQ WXd82oR8IXMbArzNSZFLCCahjQKybnOAYTtpVoRNIPEPNwRk9JDPA+BmPisLh6Bc 4Ss0A2pJfD2nbvElcidhsJ6h3Ik/oc2jQdE3MEoHRiyBz7uRRT/g5DCzHsEVVsR8 AhlTcFKOfpxNlOTf2HQA1ava/7mmkToX2lkvbIV+AR1dmJQMoz7M8srX3aCwuW5p 3jle+Nyr3yKmMxEdwccLw/XNVF9k7kWWb1T256RNAR7lEKTzEU90jVAdQQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHy/fuTTRZjV3mhCc0HXL9WiWcWhMB8GA1UdIwQY MBaAFIRcWHUvMzZCL/DuFyZHRZHnpB5fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZ4WWRTOHpOa0l2OE80WEprZEZrZWVrSGw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82NGUzYWItMjI4Yy00YTIzLTkyMTYt ZjEzNGU1MWNjMDViLzEvZkw5LTVOTkZtTlhlYUVKelFkY3YxYUpaeGFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS82NGUzYWItMjI4Yy00YTIzLTkyMTYtZjEzNGU1MWNjMDVi LzEvaEZ4WWRTOHpOa0l2OE80WEprZEZrZWVrSGw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVsYMA0E AgACMAcDBQAqABkyMA0GCSqGSIb3DQEBCwUAA4IBAQAGGex34UPPwKkxjTslAeFi w0zdmOE/rhzBT36gOJ+RDgrTzCgzp7oJoJg2U6kOPfUMIrkeihj+LVfwy57qYTb2 TUp+jrSU/30LnUOu1fdoTdqGTIECzdE/5LIu3Xu72rs0wAUq/cZTOG2c8q5XYmsi GE5NuCNGN3XK3gQ0p8oL+qtI8UiYNLLB3RtZJPB45fF7BlPT1gvopSJwj4kJGdPQ o8lugEdEoLFlZu1+Uy/OYXgCBfpIvTVSXaTC/zydauL39K3Oh2zzAryw9wWpzWgI y+Vt+GDpCOwzgxp4p4Jlo+IfMpjLzk+ZzaNAWlv7CvULsRSUILoRFZT1OsP8Dhsu -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:28 2026 by rpki-client