This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/Fyhcvg0fPg6HNZeGx-fuI9q3TG4.roa File: Fyhcvg0fPg6HNZeGx-fuI9q3TG4.roa (raw, json) Hash identifier: s3i5jOLFeKaJCCjPZix9kmPk1E24LFggTy6p8YPrOME= Subject key identifier: 17:28:5C:BE:0D:1F:3E:0E:87:35:97:86:C7:E7:EE:23:DA:B7:4C:6E Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Certificate serial: 019B7EA6BE069412FE87AFEA22176D4D1CC4 Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/Fyhcvg0fPg6HNZeGx-fuI9q3TG4.roa Signing time: Fri 02 Jan 2026 12:20:15 +0000 ROA not before: Fri 02 Jan 2026 12:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215405 IP address blocks: 195.60.80.0/26 maxlen: 26 2001:7f8:116::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:be:06:94:12:fe:87:af:ea:22:17:6d:4d:1c:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Validity Not Before: Jan 2 12:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17285cbe0d1f3e0e87359786c7e7ee23dab74c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3f:35:ee:09:2e:71:b2:1c:17:df:2d:ba:60: f2:ba:5c:c1:c6:4b:72:cb:06:0a:41:c5:9e:c4:69: 4e:f7:d2:17:38:63:06:70:c3:b4:24:77:ab:d0:eb: 12:55:bb:b4:88:d3:2e:e5:03:d9:ff:2b:c4:15:52: e5:1c:fe:21:1b:55:d4:ab:e4:20:61:02:14:21:5f: e9:49:b0:45:a1:f5:49:fd:3f:3a:92:34:b7:fa:6b: 18:58:65:06:92:24:c2:fb:9f:98:1e:93:08:79:30: 0b:e7:c3:02:90:ec:a4:74:d6:8a:08:69:49:8a:eb: 31:6b:d1:3f:ff:1b:a7:a0:2d:19:fe:15:cb:a1:06: 13:14:f3:fc:57:94:a0:cf:c1:d3:09:b3:26:1c:42: 7d:16:43:85:3f:69:39:de:aa:c0:b1:04:0d:9c:58: bb:ec:a9:0a:ea:0b:28:c3:fe:80:f8:17:cb:7a:db: 01:d0:7d:c7:03:dd:b5:49:90:28:d8:36:19:cc:ba: 76:5d:6d:9d:09:25:fc:2d:63:b7:22:21:8d:49:b6: 4a:2c:58:16:6a:1f:7d:a9:1b:98:e5:9e:4d:a3:7f: 04:9a:ba:e9:f4:e2:c5:1e:e8:b4:2c:82:53:8e:07: b4:f9:a9:92:4e:e1:20:38:5b:e9:50:bb:4e:18:8e: 0b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:28:5C:BE:0D:1F:3E:0E:87:35:97:86:C7:E7:EE:23:DA:B7:4C:6E X509v3 Authority Key Identifier: keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/Fyhcvg0fPg6HNZeGx-fuI9q3TG4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.60.80.0/26 IPv6: 2001:7f8:116::/48 Signature Algorithm: sha256WithRSAEncryption 64:c9:93:03:ca:22:20:5b:b8:6e:23:2d:02:be:1b:dd:1b:8f: 15:40:49:e8:c1:5d:aa:89:e9:11:65:d9:27:98:9d:c7:0c:04: a0:47:f0:3a:c9:aa:da:20:b3:d7:03:10:5b:db:74:b7:78:a7: 9a:79:39:d6:32:85:28:df:90:f1:29:ea:90:53:2a:13:43:9d: 57:10:7a:c2:de:12:8b:ee:84:93:8e:c4:96:13:4c:54:70:8e: 57:5e:72:90:71:d7:58:94:2c:b7:5d:b7:ce:2b:05:f2:78:d0: 48:fc:aa:f2:5e:cd:fe:09:68:d9:04:7a:8e:72:d3:d0:34:00: 25:cb:3a:98:e4:0b:51:d7:82:56:90:77:85:95:ef:60:9a:88: a9:95:de:8e:84:90:5e:fc:77:9a:40:a8:11:fe:0a:ac:02:2e: 3f:3c:4a:c3:91:59:f3:81:f3:db:7f:60:70:27:2b:58:38:1c: e9:39:ee:01:cb:14:0f:c7:3b:55:11:80:f2:1c:b7:35:30:83: 2d:16:ef:d8:2c:ec:bd:85:ed:f3:27:bf:ff:93:e5:d1:51:dc: db:69:6d:11:b1:d6:3b:64:6b:db:22:f0:a9:9e:51:34:95:05: 6b:55:bf:0d:29:19:e9:4e:ec:94:1e:e7:55:0c:f3:89:75:9f: d5:ac:d2:06 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+pr4GlBL+h6/qIhdtTRzEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODNhNTQ4N2IzNWMxZDFlMWYxNTdjMTkxMzEyYjNkZjRi YzE3YWIwHhcNMjYwMTAyMTIyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzI4NWNiZTBkMWYzZTBlODczNTk3ODZjN2U3ZWUyM2RhYjc0YzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT817gkucbIcF98tumDyulzBxkty ywYKQcWexGlO99IXOGMGcMO0JHer0OsSVbu0iNMu5QPZ/yvEFVLlHP4hG1XUq+Qg YQIUIV/pSbBFofVJ/T86kjS3+msYWGUGkiTC+5+YHpMIeTAL58MCkOykdNaKCGlJ iusxa9E//xunoC0Z/hXLoQYTFPP8V5Sgz8HTCbMmHEJ9FkOFP2k53qrAsQQNnFi7 7KkK6gsow/6A+BfLetsB0H3HA921SZAo2DYZzLp2XW2dCSX8LWO3IiGNSbZKLFgW ah99qRuY5Z5No38Emrrp9OLFHui0LIJTjge0+amSTuEgOFvpULtOGI4LLQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFBcoXL4NHz4OhzWXhsfn7iPat0xuMB8GA1UdIwQY MBaAFJeDpUh7NcHR4fFXwZExKz30vBerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEt NjkxNTJlOWEwOGMzLzEvRnloY3ZnMGZQZzZITlplR3gtZnVJOXEzVEc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEtNjkxNTJlOWEwOGMz LzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDANBAIAATAHAwUGwzxQADAP BAIAAjAJAwcAIAEH+AEWMA0GCSqGSIb3DQEBCwUAA4IBAQBkyZMDyiIgW7huIy0C vhvdG48VQEnowV2qiekRZdknmJ3HDASgR/A6yaraILPXAxBb23S3eKeaeTnWMoUo 35DxKeqQUyoTQ51XEHrC3hKL7oSTjsSWE0xUcI5XXnKQcddYlCy3XbfOKwXyeNBI /KryXs3+CWjZBHqOctPQNAAlyzqY5AtR14JWkHeFle9gmoipld6OhJBe/HeaQKgR /gqsAi4/PErDkVnzgfPbf2BwJytYOBzpOe4ByxQPxztVEYDyHLc1MIMtFu/YLOy9 he3zJ7//k+XRUdzbaW0RsdY7ZGvbIvCpnlE0lQVrVb8NKRnpTuyUHudVDPOJdZ/V rNIG -----END CERTIFICATE-----Generated at Sat Jan 10 22:32:31 2026 by rpki-client