This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/Fv879_Am10jrA5ouJAPoLdH70T0.roa File: Fv879_Am10jrA5ouJAPoLdH70T0.roa (raw, json) Hash identifier: KPAB1vwqjlRwv1SDULu1bkWVJKlKimcArRb9moMnmKg= Subject key identifier: 16:FF:3B:F7:F0:26:D7:48:EB:03:9A:2E:24:03:E8:2D:D1:FB:D1:3D Certificate issuer: /CN=9bd6c860342cc799c28074f699768a8ecbdaa52e Certificate serial: 019B7E383F0F997AA160C139B10D2C456D2A Authority key identifier: 9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/Fv879_Am10jrA5ouJAPoLdH70T0.roa Signing time: Fri 02 Jan 2026 10:19:33 +0000 ROA not before: Fri 02 Jan 2026 10:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56642 IP address blocks: 92.118.152.0/23 maxlen: 23 92.118.154.0/23 maxlen: 23 185.155.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:3f:0f:99:7a:a1:60:c1:39:b1:0d:2c:45:6d:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd6c860342cc799c28074f699768a8ecbdaa52e Validity Not Before: Jan 2 10:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16ff3bf7f026d748eb039a2e2403e82dd1fbd13d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f1:99:38:e0:27:45:d4:9e:f9:1a:ce:a5:89: 7b:4c:d3:b9:be:a2:cb:cf:37:9b:c9:5f:17:41:a6: ce:a1:f9:3d:b0:29:e9:45:32:31:72:ef:a1:df:16: c9:1e:11:6f:e2:9e:d9:19:3a:7a:a5:6a:2b:81:4b: e4:c5:24:b3:16:bf:c4:16:f5:f8:1c:9c:84:8b:13: db:c1:61:1c:0b:7c:b4:bb:63:dc:db:d0:72:14:b0: 49:97:ed:39:b4:f6:da:b3:1b:53:32:ba:e4:66:26: e9:81:0b:34:18:be:5a:8a:e8:44:66:95:bf:03:98: 15:81:92:dc:68:68:52:5b:3f:56:6b:80:49:74:15: 4d:98:f6:93:15:fa:ea:5d:e0:3b:30:9d:bd:69:85: a4:91:1e:b8:ea:02:30:93:a5:59:0f:b5:c5:cf:ac: 40:09:42:e8:23:4f:df:8f:ba:09:df:d3:26:00:13: 35:a7:56:08:28:38:57:9c:b8:50:06:fb:79:8e:f6: 11:a8:9c:c0:e9:89:85:a3:a4:df:3a:f7:aa:1e:a1: 0e:c7:35:cb:36:3e:3a:b9:33:09:79:47:cf:cf:89: eb:8a:74:1a:ec:be:c6:8c:fa:26:95:5e:ec:08:9f: 8e:89:c5:28:58:9b:55:b9:b5:06:69:d4:0a:6f:15: 71:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:FF:3B:F7:F0:26:D7:48:EB:03:9A:2E:24:03:E8:2D:D1:FB:D1:3D X509v3 Authority Key Identifier: keyid:9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/Fv879_Am10jrA5ouJAPoLdH70T0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.118.152.0/22 185.155.248.0/22 Signature Algorithm: sha256WithRSAEncryption 76:d3:5d:69:23:40:03:66:c0:aa:cc:f0:4b:4d:92:ad:cc:5b: e8:c3:66:bb:c2:d6:2f:e4:fc:0f:1f:78:06:13:f3:f4:d3:85: 22:04:b3:0a:3d:0e:d9:98:a8:c0:1a:f6:37:ca:c7:fc:a4:7b: 84:44:e6:f3:0a:bb:46:df:2b:23:4e:5b:71:e9:85:04:c6:a0: 52:7d:61:cd:b2:69:b8:90:09:e2:db:66:2d:d5:27:af:67:94: be:b6:51:8e:ad:73:dd:94:9c:8f:23:e3:8a:d8:01:dd:af:17: 9f:f5:ae:91:38:8f:68:8e:06:03:6c:4e:c0:80:91:60:a1:4f: 06:87:6c:d8:01:89:c4:43:c8:13:1d:54:8e:dc:d7:a7:8d:f7: 37:85:0e:81:00:6a:6a:f1:48:e2:77:c9:62:4c:f7:cc:af:94: 29:b4:16:3c:55:9a:c0:d2:4a:41:56:53:75:19:a5:c3:60:c5: 30:b7:2f:35:9f:fd:1b:26:7e:20:bb:43:5b:82:f0:35:21:b4: 23:c2:a2:32:10:03:47:0c:a3:37:44:2b:1c:a9:fa:bc:fb:bf: 42:c5:23:9b:32:ac:0d:04:31:95:52:5a:72:98:95:64:99:17: da:86:9c:36:91:92:d8:2f:88:02:a7:e7:9e:a1:c9:9b:8c:a0: 78:48:11:78 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OD8PmXqhYME5sQ0sRW0qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZDZjODYwMzQyY2M3OTljMjgwNzRmNjk5NzY4YThlY2Jk YWE1MmUwHhcNMjYwMTAyMTAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmZmM2JmN2YwMjZkNzQ4ZWIwMzlhMmUyNDAzZTgyZGQxZmJkMTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPGZOOAnRdSe+RrOpYl7TNO5vqLL zzebyV8XQabOofk9sCnpRTIxcu+h3xbJHhFv4p7ZGTp6pWorgUvkxSSzFr/EFvX4 HJyEixPbwWEcC3y0u2Pc29ByFLBJl+05tPbasxtTMrrkZibpgQs0GL5aiuhEZpW/ A5gVgZLcaGhSWz9Wa4BJdBVNmPaTFfrqXeA7MJ29aYWkkR646gIwk6VZD7XFz6xA CULoI0/fj7oJ39MmABM1p1YIKDhXnLhQBvt5jvYRqJzA6YmFo6TfOveqHqEOxzXL Nj46uTMJeUfPz4nrinQa7L7GjPomlV7sCJ+OicUoWJtVubUGadQKbxVx7wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBb/O/fwJtdI6wOaLiQD6C3R+9E9MB8GA1UdIwQY MBaAFJvWyGA0LMeZwoB09pl2io7L2qUuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTliSVlEUXN4NW5DZ0hUMm1YYUtqc3ZhcFM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hZmE2OWQtZTE0My00YmY3LWI3NDMt NDJlM2VmNGY4YjkxLzEvRnY4NzlfQW0xMGpyQTVvdUpBUG9MZEg3MFQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9hZmE2OWQtZTE0My00YmY3LWI3NDMtNDJlM2VmNGY4Yjkx LzEvbTliSVlEUXN4NW5DZ0hUMm1YYUtqc3ZhcFM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCXHaYAwQC uZv4MA0GCSqGSIb3DQEBCwUAA4IBAQB2011pI0ADZsCqzPBLTZKtzFvow2a7wtYv 5PwPH3gGE/P004UiBLMKPQ7ZmKjAGvY3ysf8pHuERObzCrtG3ysjTltx6YUExqBS fWHNsmm4kAni22Yt1SevZ5S+tlGOrXPdlJyPI+OK2AHdrxef9a6ROI9ojgYDbE7A gJFgoU8Gh2zYAYnEQ8gTHVSO3Nenjfc3hQ6BAGpq8Ujid8liTPfMr5QptBY8VZrA 0kpBVlN1GaXDYMUwty81n/0bJn4gu0NbgvA1IbQjwqIyEANHDKM3RCscqfq8+79C xSObMqwNBDGVUlpymJVkmRfahpw2kZLYL4gCp+eeocmbjKB4SBF4 -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:51 2026 by rpki-client