This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/pRFsySqGl0tFAUw52aDZNnq-uD0.roa File: pRFsySqGl0tFAUw52aDZNnq-uD0.roa (raw, json) Hash identifier: w8jNvizOVr/p52jNZpTu/WC6lPFW3XL5WSYxYnBEKj4= Subject key identifier: A5:11:6C:C9:2A:86:97:4B:45:01:4C:39:D9:A0:D9:36:7A:BE:B8:3D Certificate issuer: /CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57 Certificate serial: 019B7FF12352153C28F2C978758E5478280C Authority key identifier: F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/pRFsySqGl0tFAUw52aDZNnq-uD0.roa Signing time: Fri 02 Jan 2026 18:21:08 +0000 ROA not before: Fri 02 Jan 2026 18:21:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213358 IP address blocks: 91.208.68.0/24 maxlen: 24 94.124.100.0/22 maxlen: 24 194.113.22.0/23 maxlen: 24 2a06:a900::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:23:52:15:3c:28:f2:c9:78:75:8e:54:78:28:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57 Validity Not Before: Jan 2 18:21:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5116cc92a86974b45014c39d9a0d9367abeb83d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bd:41:ba:74:2b:6b:0e:92:e1:85:25:75:6e: 83:5c:84:e8:e5:f5:44:92:fd:11:81:f1:e6:1d:fd: d4:c9:64:4f:91:5e:5d:da:79:d2:3b:82:d9:50:fe: f0:c6:68:35:46:27:0a:53:fd:02:02:68:d0:92:cf: ac:a5:c0:a7:37:4c:6d:74:c4:87:d0:fa:3b:07:8d: a5:94:07:70:5e:ac:a9:8f:62:02:6a:ea:79:16:ce: 79:ea:e1:f0:1c:d7:da:2c:7f:7d:9b:72:e5:1d:f3: 55:96:f3:82:d1:c7:22:4d:85:46:4f:25:1f:3a:52: a5:7a:53:5d:24:63:63:94:cc:f1:5d:08:03:27:59: ee:39:d1:24:e5:3b:8a:7c:04:2e:29:72:95:81:83: a6:b5:bf:c4:7d:f1:db:0b:c7:d0:5c:89:4f:ad:fe: de:e1:4e:7a:37:b9:e9:2c:fd:0b:44:3e:9a:92:7a: 61:01:a4:73:29:e4:78:b1:e6:5d:8b:c7:e8:0b:2c: 04:04:83:52:d9:14:dd:d6:11:94:d9:fe:96:fe:11: 7e:3c:68:fa:75:b2:64:40:39:36:bf:97:a5:46:8e: 18:26:2c:10:3c:35:fc:97:9f:0f:73:5a:8f:72:be: c2:3f:2c:95:61:12:fd:c6:17:10:e2:1b:b4:bd:95: 4e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:11:6C:C9:2A:86:97:4B:45:01:4C:39:D9:A0:D9:36:7A:BE:B8:3D X509v3 Authority Key Identifier: keyid:F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/pRFsySqGl0tFAUw52aDZNnq-uD0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.68.0/24 94.124.100.0/22 194.113.22.0/23 IPv6: 2a06:a900::/29 Signature Algorithm: sha256WithRSAEncryption 6b:d6:d9:6f:7b:b5:f4:fa:17:7a:68:a7:71:a8:41:8c:4f:9d: be:8c:6e:cb:06:24:e1:65:7d:eb:22:ba:ae:49:4b:15:d6:5a: 1b:75:9d:05:3e:9c:98:e9:39:9f:f5:9a:3d:7a:11:c3:98:96: 61:be:b3:34:32:97:d6:07:ce:8b:b7:49:17:4f:c6:29:77:a5: 6a:1a:c6:70:9c:9d:cc:ad:9a:b9:ae:01:18:2a:ae:a6:34:64: ac:73:a8:39:b1:62:70:75:93:07:25:8e:2c:47:90:f5:be:f8: f3:2b:78:16:8c:58:1a:68:88:3d:59:cc:a9:ee:7d:36:11:bd: 37:e2:df:a6:ec:7e:9b:8c:3e:62:73:92:fd:9e:f3:b3:64:87: 0e:1d:38:1b:0b:b8:2c:3a:53:07:ad:51:b8:bf:14:67:db:58: 96:80:64:73:d4:60:08:e2:34:85:e9:b2:5d:0a:cb:cd:63:78: d5:cd:17:c7:2c:e6:55:77:1f:c8:a2:50:d8:64:eb:16:ab:3d: 0f:72:eb:44:1d:61:79:f1:f7:ec:4a:c0:24:17:5c:81:73:4c: 8b:6a:e7:3b:45:b5:95:ac:8d:9e:02:1c:54:73:f4:a5:58:08: 6b:47:76:6d:53:f3:da:b1:ac:bb:bb:ef:52:7b:37:95:23:18: 37:10:8e:9f -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/8SNSFTwo8sl4dY5UeCgMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NGFkNDVkMjJiNWYzY2YyZTcxY2UwYWMwMTA3NGI3Y2Qy MWFjNTcwHhcNMjYwMTAyMTgyMTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTExNmNjOTJhODY5NzRiNDUwMTRjMzlkOWEwZDkzNjdhYmViODNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlL1BunQraw6S4YUldW6DXITo5fVE kv0RgfHmHf3UyWRPkV5d2nnSO4LZUP7wxmg1RicKU/0CAmjQks+spcCnN0xtdMSH 0Po7B42llAdwXqypj2ICaup5Fs556uHwHNfaLH99m3LlHfNVlvOC0cciTYVGTyUf OlKlelNdJGNjlMzxXQgDJ1nuOdEk5TuKfAQuKXKVgYOmtb/EffHbC8fQXIlPrf7e 4U56N7npLP0LRD6aknphAaRzKeR4seZdi8foCywEBINS2RTd1hGU2f6W/hF+PGj6 dbJkQDk2v5elRo4YJiwQPDX8l58Pc1qPcr7CPyyVYRL9xhcQ4hu0vZVORQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFKURbMkqhpdLRQFMOdmg2TZ6vrg9MB8GA1UdIwQY MBaAFPZK1F0itfPPLnHOCsAQdLfNIaxXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWtyVVhTSzE4ODh1Y2M0S3dCQjB0ODBockZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9lZTNiODQtMjdkNy00ZGM3LThmM2Qt Njk5YjIzNGZjNzhjLzEvcFJGc3lTcUdsMHRGQVV3NTJhRFpObnEtdUQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9lZTNiODQtMjdkNy00ZGM3LThmM2QtNjk5YjIzNGZjNzhj LzEvOWtyVVhTSzE4ODh1Y2M0S3dCQjB0ODBockZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAW9BEAwQC XnxkAwQBwnEWMA0EAgACMAcDBQMqBqkAMA0GCSqGSIb3DQEBCwUAA4IBAQBr1tlv e7X0+hd6aKdxqEGMT52+jG7LBiThZX3rIrquSUsV1lobdZ0FPpyY6Tmf9Zo9ehHD mJZhvrM0MpfWB86Lt0kXT8Ypd6VqGsZwnJ3MrZq5rgEYKq6mNGSsc6g5sWJwdZMH JY4sR5D1vvjzK3gWjFgaaIg9Wcyp7n02Eb034t+m7H6bjD5ic5L9nvOzZIcOHTgb C7gsOlMHrVG4vxRn21iWgGRz1GAI4jSF6bJdCsvNY3jVzRfHLOZVdx/IolDYZOsW qz0PcutEHWF58ffsSsAkF1yBc0yLauc7RbWVrI2eAhxUc/SlWAhrR3ZtU/Pasay7 u+9SezeVIxg3EI6f -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:03 2026 by rpki-client