This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/FV-pMv8EGTaMa6CCbtYT2e9XnxQ.roa File: FV-pMv8EGTaMa6CCbtYT2e9XnxQ.roa (raw, json) Hash identifier: oCIb8FIypKIz4AB8jOeyTjsmMStjtBdK3bvDo7a5vjg= Subject key identifier: 15:5F:A9:32:FF:04:19:36:8C:6B:A0:82:6E:D6:13:D9:EF:57:9F:14 Certificate issuer: /CN=8050504f4b1776e80b8ad9f8b356e613b585b35a Certificate serial: 019B7CED47873D35C44C48158B7C41C2A263 Authority key identifier: 80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/FV-pMv8EGTaMa6CCbtYT2e9XnxQ.roa Signing time: Fri 02 Jan 2026 04:18:03 +0000 ROA not before: Fri 02 Jan 2026 04:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207143 IP address blocks: 193.135.56.0/24 maxlen: 24 193.135.58.0/24 maxlen: 24 2001:678:e44::/48 maxlen: 48 2001:67c:3d4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:47:87:3d:35:c4:4c:48:15:8b:7c:41:c2:a2:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8050504f4b1776e80b8ad9f8b356e613b585b35a Validity Not Before: Jan 2 04:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=155fa932ff0419368c6ba0826ed613d9ef579f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:09:cc:9c:e2:6e:98:b5:84:d3:3b:f9:5f:c1: 6c:1e:4f:be:ae:30:e6:36:ba:f9:0d:5c:ff:fa:71: b2:71:1e:25:c8:52:56:b4:b9:17:11:e3:aa:e2:5e: 29:37:2d:0f:21:e0:ff:c3:63:0e:65:a0:b7:b9:15: c2:30:d4:1a:4f:1f:37:ad:a3:5f:89:29:b9:b7:c3: e9:1a:88:2a:a4:c8:9b:3c:8c:e5:61:7b:96:2c:38: 33:3b:9b:55:ce:bd:32:ae:d5:98:89:50:26:2e:49: 07:04:f4:41:3c:60:7d:83:a1:d5:35:86:b3:d5:f9: 0f:db:cf:a1:42:ec:58:25:48:35:d6:6f:e9:d8:37: 8c:9a:1b:51:1a:c7:a3:7f:ba:38:9e:cb:62:dd:e1: 95:4b:52:be:45:d2:84:03:2b:3c:1c:c3:92:35:12: 97:5b:55:09:bb:9b:a3:ad:eb:c5:24:19:b0:0b:97: 23:b6:41:31:b5:56:2c:70:57:d3:72:33:b4:2a:50: 29:ec:d6:90:ab:75:8e:1f:b0:43:84:ce:87:af:bc: 12:44:1b:4b:53:ec:bd:85:6e:77:83:b5:84:ec:35: 7f:e6:9e:a2:87:f6:4d:68:18:d2:75:af:8f:fc:70: dc:70:f5:49:93:6c:a8:13:b2:b9:ad:de:f2:93:66: 82:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5F:A9:32:FF:04:19:36:8C:6B:A0:82:6E:D6:13:D9:EF:57:9F:14 X509v3 Authority Key Identifier: keyid:80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/FV-pMv8EGTaMa6CCbtYT2e9XnxQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.135.56.0/24 193.135.58.0/24 IPv6: 2001:678:e44::/48 2001:67c:3d4::/48 Signature Algorithm: sha256WithRSAEncryption 99:54:ad:f2:ca:63:ad:30:94:33:82:31:b1:57:ec:5f:f6:3a: ec:18:84:8d:dc:2a:08:4d:fb:55:df:e6:40:d8:79:33:d4:b1: a9:bb:ac:4a:37:77:81:c2:46:8a:22:38:de:46:01:95:3b:87: 3b:94:64:41:72:13:00:59:f1:c1:77:4d:5a:76:73:3a:b9:62: 40:08:56:dc:04:c8:e0:6f:eb:df:e8:df:c1:81:71:23:3b:60: f8:e5:48:68:dc:bf:09:3f:aa:18:88:32:4a:a7:fa:4d:9f:91: 97:66:dc:58:e6:18:6d:8d:7b:0c:16:78:52:80:4a:e7:5e:5d: 49:1b:6f:59:0e:61:5f:07:a7:dd:c9:82:e8:e8:43:fc:cf:b3: 5b:11:ff:8c:ff:28:9f:9b:0f:58:1e:df:82:e4:42:9d:aa:8d: 4b:33:77:2c:f0:92:07:d0:27:c0:ac:e8:24:98:89:52:be:94: 4b:bb:7a:1f:3f:01:2d:00:7f:1e:c4:04:0b:2d:70:a9:3a:c6: 45:0f:9c:5a:10:c2:3c:90:87:46:1c:30:8f:04:c9:cc:6d:93: 2c:36:56:07:5a:e5:d7:da:f4:5c:1d:cd:57:86:7e:44:13:91: 81:e5:10:65:04:e8:d9:20:a9:3f:d5:f0:80:9f:df:3d:d5:37: 10:c0:47:9e -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt87UeHPTXETEgVi3xBwqJjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNTA1MDRmNGIxNzc2ZTgwYjhhZDlmOGIzNTZlNjEzYjU4 NWIzNWEwHhcNMjYwMTAyMDQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTVmYTkzMmZmMDQxOTM2OGM2YmEwODI2ZWQ2MTNkOWVmNTc5ZjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgnMnOJumLWE0zv5X8FsHk++rjDm Nrr5DVz/+nGycR4lyFJWtLkXEeOq4l4pNy0PIeD/w2MOZaC3uRXCMNQaTx83raNf iSm5t8PpGogqpMibPIzlYXuWLDgzO5tVzr0yrtWYiVAmLkkHBPRBPGB9g6HVNYaz 1fkP28+hQuxYJUg11m/p2DeMmhtRGsejf7o4nsti3eGVS1K+RdKEAys8HMOSNRKX W1UJu5ujrevFJBmwC5cjtkExtVYscFfTcjO0KlAp7NaQq3WOH7BDhM6Hr7wSRBtL U+y9hW53g7WE7DV/5p6ih/ZNaBjSda+P/HDccPVJk2yoE7K5rd7yk2aCGwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFBVfqTL/BBk2jGuggm7WE9nvV58UMB8GA1UdIwQY MBaAFIBQUE9LF3boC4rZ+LNW5hO1hbNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0ZCUVQwc1hkdWdMaXRuNHMxYm1FN1dGczFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9iNTk3MTUtYjA1YS00YjRhLWE5MjIt MDE0NGEzMjgyYTJlLzEvRlYtcE12OEVHVGFNYTZDQ2J0WVQyZTlYbnhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9iNTk3MTUtYjA1YS00YjRhLWE5MjItMDE0NGEzMjgyYTJl LzEvZ0ZCUVQwc1hkdWdMaXRuNHMxYm1FN1dGczFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAwYc4AwQA wYc6MBgEAgACMBIDBwAgAQZ4DkQDBwAgAQZ8A9QwDQYJKoZIhvcNAQELBQADggEB AJlUrfLKY60wlDOCMbFX7F/2OuwYhI3cKghN+1Xf5kDYeTPUsam7rEo3d4HCRooi ON5GAZU7hzuUZEFyEwBZ8cF3TVp2czq5YkAIVtwEyOBv69/o38GBcSM7YPjlSGjc vwk/qhiIMkqn+k2fkZdm3FjmGG2NewwWeFKASudeXUkbb1kOYV8Hp93JgujoQ/zP s1sR/4z/KJ+bD1ge34LkQp2qjUszdyzwkgfQJ8Cs6CSYiVK+lEu7eh8/AS0Afx7E BAstcKk6xkUPnFoQwjyQh0YcMI8Eycxtkyw2Vgda5dfa9FwdzVeGfkQTkYHlEGUE 6NkgqT/V8ICf3z3VNxDAR54= -----END CERTIFICATE-----Generated at Mon Jan 26 22:07:58 2026 by rpki-client