This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/iFHV-4_PQZAPSbyP-_eKAC5sXQc.roa File: iFHV-4_PQZAPSbyP-_eKAC5sXQc.roa (raw, json) Hash identifier: YPZedpyXjCCm6shSV1jcGheCVvP+CziI5XLPjJa9XgY= Subject key identifier: 88:51:D5:FB:8F:CF:41:90:0F:49:BC:8F:FB:F7:8A:00:2E:6C:5D:07 Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Certificate serial: 019BA77F93534CB9EC5B46C39EB5DA91F6B2 Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/iFHV-4_PQZAPSbyP-_eKAC5sXQc.roa Signing time: Sat 10 Jan 2026 10:41:54 +0000 ROA not before: Sat 10 Jan 2026 10:41:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202736 IP address blocks: 213.145.66.0/24 maxlen: 24 213.145.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a7:7f:93:53:4c:b9:ec:5b:46:c3:9e:b5:da:91:f6:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Validity Not Before: Jan 10 10:41:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8851d5fb8fcf41900f49bc8ffbf78a002e6c5d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8f:4e:e2:e7:99:7c:86:a0:c2:a1:62:58:04: ed:eb:a9:04:29:8e:27:bc:bc:69:e6:f8:eb:39:19: 04:54:35:34:9c:d5:c8:3e:8e:02:a2:c6:02:2c:f0: 70:92:f9:d1:28:58:c5:fc:39:1b:c5:04:b1:50:18: 06:d0:a2:de:31:fe:1c:c5:57:c1:dc:12:ec:9f:9f: 2f:81:0b:7b:8d:06:03:eb:e9:d3:29:5d:c9:b4:ce: 67:f5:bd:87:86:0e:40:33:2a:0b:b7:15:f0:e3:4f: a9:5c:5e:c1:5b:d3:ef:e8:52:c2:62:f8:22:2c:bd: 38:02:9f:f7:e5:5e:21:c1:76:4a:19:9d:92:98:c8: 88:85:57:02:a5:cd:98:e3:29:7c:5f:c9:23:9a:15: 03:ca:a5:72:ce:51:8c:ce:f0:68:88:7b:71:cf:62: ce:eb:29:15:5c:14:3d:75:8f:43:9f:98:85:0f:86: 6e:04:4a:25:7c:63:cf:62:3b:48:75:d5:8b:c8:ca: a7:48:bd:c0:9e:a7:48:b0:09:70:4b:8d:cc:a2:66: ab:2d:17:4c:cd:67:79:57:d0:6f:0f:82:fa:04:04: 22:55:1e:36:6c:c5:d0:28:96:ff:4d:bd:25:88:d3: 88:3e:5a:48:db:9a:a8:0e:8d:59:3f:54:07:57:28: 22:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:51:D5:FB:8F:CF:41:90:0F:49:BC:8F:FB:F7:8A:00:2E:6C:5D:07 X509v3 Authority Key Identifier: keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/iFHV-4_PQZAPSbyP-_eKAC5sXQc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.145.66.0/24 213.145.89.0/24 Signature Algorithm: sha256WithRSAEncryption 54:d3:93:0b:4b:09:93:26:b7:28:6d:88:89:3e:a1:af:18:79: ad:04:ed:07:82:3c:94:97:a8:1a:f9:c8:83:6f:bf:f6:e5:3e: 0f:50:5e:f4:c3:c7:8d:f6:cc:90:15:e8:9a:4d:1b:50:e7:ca: 94:e3:ac:02:75:b8:3d:ed:16:7b:df:34:45:f8:2a:d5:c3:fd: b4:6d:c5:e4:88:d7:d8:3e:ff:90:57:6d:e7:37:3c:77:ce:b2: f5:7e:29:4f:94:28:7c:9e:06:25:38:64:44:fb:11:05:5c:73: 02:54:4c:de:5e:46:43:06:31:f5:81:ed:c6:42:10:77:54:c1: ef:0b:3a:a0:24:a1:6a:e8:eb:e6:01:5e:4e:1e:bf:19:ce:ee: e9:e9:52:4e:96:62:07:1d:6d:31:c8:6c:50:cc:69:c5:2e:de: 75:68:f4:e6:f4:44:5d:8c:34:ce:f3:4f:e8:da:2d:cb:38:b1: e2:96:54:ac:80:4d:99:cf:e2:88:53:44:83:14:69:27:01:e2: 87:b6:00:0a:cf:2d:a3:bd:b1:56:87:b8:10:df:5b:94:00:81: a1:3d:e9:75:20:3b:52:04:8b:30:48:20:23:df:c7:87:94:8d: b6:8e:b7:ea:fd:f2:cc:37:bf:99:db:c0:f9:70:5a:99:20:f1: e9:7a:08:2c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZunf5NTTLnsW0bDnrXakfayMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx ZDA3MjIwHhcNMjYwMTEwMTA0MTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODUxZDVmYjhmY2Y0MTkwMGY0OWJjOGZmYmY3OGEwMDJlNmM1ZDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi49O4ueZfIagwqFiWATt66kEKY4n vLxp5vjrORkEVDU0nNXIPo4CosYCLPBwkvnRKFjF/DkbxQSxUBgG0KLeMf4cxVfB 3BLsn58vgQt7jQYD6+nTKV3JtM5n9b2Hhg5AMyoLtxXw40+pXF7BW9Pv6FLCYvgi LL04Ap/35V4hwXZKGZ2SmMiIhVcCpc2Y4yl8X8kjmhUDyqVyzlGMzvBoiHtxz2LO 6ykVXBQ9dY9Dn5iFD4ZuBEolfGPPYjtIddWLyMqnSL3AnqdIsAlwS43MomarLRdM zWd5V9BvD4L6BAQiVR42bMXQKJb/Tb0liNOIPlpI25qoDo1ZP1QHVygipQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIhR1fuPz0GQD0m8j/v3igAubF0HMB8GA1UdIwQY MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt ZDI0MmI2ZjNhOGExLzEvaUZIVi00X1BRWkFQU2J5UC1fZUtBQzVzWFFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1ZFCAwQA 1ZFZMA0GCSqGSIb3DQEBCwUAA4IBAQBU05MLSwmTJrcobYiJPqGvGHmtBO0HgjyU l6ga+ciDb7/25T4PUF70w8eN9syQFeiaTRtQ58qU46wCdbg97RZ73zRF+CrVw/20 bcXkiNfYPv+QV23nNzx3zrL1filPlCh8ngYlOGRE+xEFXHMCVEzeXkZDBjH1ge3G QhB3VMHvCzqgJKFq6OvmAV5OHr8Zzu7p6VJOlmIHHW0xyGxQzGnFLt51aPTm9ERd jDTO80/o2i3LOLHillSsgE2Zz+KIU0SDFGknAeKHtgAKzy2jvbFWh7gQ31uUAIGh Pel1IDtSBIswSCAj38eHlI22jrfq/fLMN7+Z28D5cFqZIPHpeggs -----END CERTIFICATE-----Generated at Sun Jan 11 07:31:11 2026 by rpki-client