This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/FPBOE7r5OOktznz_3R2UIQrsuM8.roa File: FPBOE7r5OOktznz_3R2UIQrsuM8.roa (raw, json) Hash identifier: 6/NtjVoPaKYVIjf6r5FmS/9bjWk6fdeQYR7Lu+clilk= Subject key identifier: 14:F0:4E:13:BA:F9:38:E9:2D:CE:7C:FF:DD:1D:94:21:0A:EC:B8:CF Certificate issuer: /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3 Certificate serial: 019B7AC90FACBA0D381FF0F2DCBC51B8E0CF Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/FPBOE7r5OOktznz_3R2UIQrsuM8.roa Signing time: Thu 01 Jan 2026 18:19:15 +0000 ROA not before: Thu 01 Jan 2026 18:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200416 IP address blocks: 185.107.198.0/24 maxlen: 24 2a06:45c1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:0f:ac:ba:0d:38:1f:f0:f2:dc:bc:51:b8:e0:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3 Validity Not Before: Jan 1 18:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14f04e13baf938e92dce7cffdd1d94210aecb8cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5e:88:6f:07:c8:5c:09:06:88:cf:2c:79:e1: ab:4f:c3:52:7f:32:d0:32:43:3c:2d:aa:8f:7f:1b: 2f:f2:a0:51:0c:1e:d9:d3:c9:d5:31:32:b9:a8:bd: a9:bf:3f:79:45:03:6a:05:98:eb:e2:0e:ea:11:44: 76:ed:1d:ca:d6:a1:cd:8a:ba:5d:97:a3:4a:73:55: c9:5a:fb:46:b2:23:a8:9d:a0:fd:e1:34:79:22:1a: fb:07:9b:c0:2f:8a:bd:7c:48:ff:3c:de:cb:4e:0c: 03:9a:7d:fa:17:b3:74:28:8a:cd:27:ad:07:08:83: f9:62:3e:29:b9:ca:10:d4:5e:a4:6e:f4:b1:3a:c5: 3b:6d:5f:df:05:19:37:e2:97:01:a1:bc:8b:72:e8: 25:a3:7d:71:98:10:32:f0:63:7e:f2:9d:b2:7a:ed: 78:b0:27:b1:a8:d7:4a:2d:56:16:60:54:43:7f:14: e4:c7:40:b2:c4:32:15:45:72:ad:e5:13:10:82:e9: 81:92:2c:81:80:95:e0:cb:b7:59:7f:02:bd:01:58: 88:9f:bc:18:eb:a8:89:10:1b:81:30:07:be:dd:a9: 08:98:13:da:e9:c4:69:96:d8:81:94:01:c4:8c:af: b7:34:0f:91:05:35:51:e2:8b:07:19:f0:83:18:96: 10:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F0:4E:13:BA:F9:38:E9:2D:CE:7C:FF:DD:1D:94:21:0A:EC:B8:CF X509v3 Authority Key Identifier: keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/FPBOE7r5OOktznz_3R2UIQrsuM8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.107.198.0/24 IPv6: 2a06:45c1::/32 Signature Algorithm: sha256WithRSAEncryption 20:ec:6a:af:ae:8d:15:b7:50:50:e2:6c:a3:c5:67:53:25:24: b7:e7:6b:d1:8e:94:38:a4:82:d2:0d:28:8c:b3:f2:57:08:98: d2:02:70:f8:34:a9:9b:40:38:1e:6f:e2:88:1b:74:f0:a7:ac: ec:13:ba:b0:80:e1:86:42:b2:7a:45:75:e4:0b:7d:ad:c5:3e: 68:a9:e7:96:ef:d2:12:57:de:91:96:5f:ae:85:d9:7d:75:98: 43:31:71:78:d6:ad:a5:70:5c:a9:b0:4e:14:c0:0e:55:ca:86: 8b:66:d3:b3:5c:ed:da:ee:80:aa:e6:1a:c2:71:23:bd:08:c2: a6:1a:72:98:ae:c5:04:90:17:61:2b:b1:05:c8:c4:be:d9:b6: 0b:4c:0a:a6:47:f0:b3:b8:76:77:8b:70:10:e8:1c:1f:90:e4: db:91:13:5f:1a:90:ee:bc:18:59:fd:3d:ff:8f:49:d9:99:5b: bd:e1:1b:f2:6b:c9:95:f2:51:14:62:b2:43:f3:57:aa:7f:95: 7f:af:75:fc:60:32:f7:da:d2:dc:61:25:72:da:03:68:35:e9: 6c:10:1a:df:e6:c0:43:c9:dd:65:2b:f9:e6:80:e1:70:be:19: 66:66:6d:f1:85:e6:e7:2d:a4:b0:94:75:14:26:0f:04:ea:e9: db:f3:3b:bc -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yQ+sug04H/Dy3LxRuODPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiMjM3YzVhZmZlOTM1NDNhZTJmZTZlMWZmZWQxODIzOTZl YjliYjMwHhcNMjYwMTAxMTgxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGYwNGUxM2JhZjkzOGU5MmRjZTdjZmZkZDFkOTQyMTBhZWNiOGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF6IbwfIXAkGiM8seeGrT8NSfzLQ MkM8LaqPfxsv8qBRDB7Z08nVMTK5qL2pvz95RQNqBZjr4g7qEUR27R3K1qHNirpd l6NKc1XJWvtGsiOonaD94TR5Ihr7B5vAL4q9fEj/PN7LTgwDmn36F7N0KIrNJ60H CIP5Yj4pucoQ1F6kbvSxOsU7bV/fBRk34pcBobyLcuglo31xmBAy8GN+8p2yeu14 sCexqNdKLVYWYFRDfxTkx0CyxDIVRXKt5RMQgumBkiyBgJXgy7dZfwK9AViIn7wY 66iJEBuBMAe+3akImBPa6cRpltiBlAHEjK+3NA+RBTVR4osHGfCDGJYQ8QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBTwThO6+TjpLc58/90dlCEK7LjPMB8GA1UdIwQY MBaAFCsjfFr/6TVDri/m4f/tGCOW65uzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3lOOFd2X3BOVU91TC1iaF8tMFlJNWJybTdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi82NGEwNTMtMjZmZi00OGE2LWFlZGEt MTQ3MDJhNGQyNjYwLzEvRlBCT0U3cjVPT2t0em56XzNSMlVJUXJzdU04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi82NGEwNTMtMjZmZi00OGE2LWFlZGEtMTQ3MDJhNGQyNjYw LzEvS3lOOFd2X3BOVU91TC1iaF8tMFlJNWJybTdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuWvGMA0E AgACMAcDBQAqBkXBMA0GCSqGSIb3DQEBCwUAA4IBAQAg7Gqvro0Vt1BQ4myjxWdT JSS352vRjpQ4pILSDSiMs/JXCJjSAnD4NKmbQDgeb+KIG3Twp6zsE7qwgOGGQrJ6 RXXkC32txT5oqeeW79ISV96Rll+uhdl9dZhDMXF41q2lcFypsE4UwA5VyoaLZtOz XO3a7oCq5hrCcSO9CMKmGnKYrsUEkBdhK7EFyMS+2bYLTAqmR/CzuHZ3i3AQ6Bwf kOTbkRNfGpDuvBhZ/T3/j0nZmVu94Rvya8mV8lEUYrJD81eqf5V/r3X8YDL32tLc YSVy2gNoNelsEBrf5sBDyd1lK/nmgOFwvhlmZm3xhebnLaSwlHUUJg8E6unb8zu8 -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:43 2026 by rpki-client