This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/Fu5kT9TxojjMx5c9WVqjL4KHnHY.roa File: Fu5kT9TxojjMx5c9WVqjL4KHnHY.roa (raw, json) Hash identifier: OkWCwFJEccvJXScWm+KM/QkYp8L4OehLKl/qIjl3hPk= Subject key identifier: 16:EE:64:4F:D4:F1:A2:38:CC:C7:97:3D:59:5A:A3:2F:82:87:9C:76 Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1 Certificate serial: 019B7B3626725F29D5BCF71B9AFD29405CBA Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/Fu5kT9TxojjMx5c9WVqjL4KHnHY.roa Signing time: Thu 01 Jan 2026 20:18:24 +0000 ROA not before: Thu 01 Jan 2026 20:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216361 IP address blocks: 185.217.39.0/24 maxlen: 24 194.36.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:26:72:5f:29:d5:bc:f7:1b:9a:fd:29:40:5c:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1 Validity Not Before: Jan 1 20:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16ee644fd4f1a238ccc7973d595aa32f82879c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6d:d6:ca:cf:bd:10:ee:b0:9e:ae:f4:e0:2c: ad:1d:e5:8b:b0:18:65:f7:42:94:84:9a:c6:3d:3f: ad:82:3f:4b:4a:3c:86:5c:a4:dc:ab:6d:60:8e:4c: 1b:51:53:e2:65:50:0b:a8:77:ea:53:7f:23:43:8d: a7:91:c3:1b:26:58:bd:b8:09:b4:77:24:65:96:43: b0:37:29:28:63:27:07:75:ce:67:1c:b0:4f:ad:11: 7a:f8:1c:b3:6c:35:07:e1:63:1e:77:8b:a8:94:19: 2f:65:8f:6f:4b:ea:34:ff:c4:2e:23:ff:13:41:01: 86:83:03:1c:9e:32:e7:b0:53:9b:ee:91:92:7e:51: f2:b8:eb:f9:46:59:aa:73:a4:c9:95:0c:29:b2:df: cc:2d:a5:12:ac:05:9f:65:a4:0a:1d:a2:df:c7:05: f1:47:e8:97:bc:d1:6f:2c:3e:db:04:c0:03:d6:45: d6:23:2b:d6:fb:ef:44:2c:3f:e1:6b:99:7d:1d:34: a3:51:7f:f2:b8:a1:b5:6f:bc:f0:44:90:b3:9f:07: 8e:26:3b:be:e4:d3:ab:f1:89:18:48:55:38:bc:38: 01:88:76:c2:08:fb:a5:ce:38:d7:75:b7:b6:9c:d4: b9:92:28:b3:50:cf:2e:bc:b4:6e:67:0b:e4:82:88: d8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:EE:64:4F:D4:F1:A2:38:CC:C7:97:3D:59:5A:A3:2F:82:87:9C:76 X509v3 Authority Key Identifier: keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/Fu5kT9TxojjMx5c9WVqjL4KHnHY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.217.39.0/24 194.36.173.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:29:b1:60:79:57:bc:fd:27:51:95:6f:87:52:5c:f4:ae:c1: 8a:dd:a7:3b:f3:42:ff:92:9e:e3:df:e6:68:09:1c:ba:e3:08: 67:52:8c:0f:6f:e7:62:31:bf:bb:b1:65:8f:bf:04:b2:84:82: 59:10:7c:5b:1c:0a:e9:c2:82:64:1c:90:9e:3d:2d:8d:4e:13: 5a:1e:2d:37:a1:e6:b4:70:82:60:e2:c1:a6:6c:ae:76:8b:c3: 0d:73:88:f4:f4:f6:e2:79:d2:76:42:c5:e2:6b:aa:4e:f3:3f: 4f:4d:5f:6a:6e:bc:6a:4a:c4:36:22:19:bc:5a:3c:89:b5:20: 07:74:0b:f8:a7:bd:f0:32:56:7a:8f:45:09:e0:27:0b:a3:eb: 8b:e6:f5:24:69:53:26:f9:e6:08:20:b6:dd:69:5c:a1:c0:00: 5d:61:1b:1e:02:d8:45:38:5a:d9:41:1a:b4:df:78:9b:01:27: e8:ab:55:92:e9:ca:cf:c3:33:24:9d:8e:00:ea:19:c8:25:12: ef:11:31:b6:62:1c:c1:83:d8:90:b8:78:db:dd:ab:61:13:4c: 06:3c:e1:af:f7:31:6f:26:9e:ab:70:9e:7f:8c:ba:bf:6d:f2: ab:96:e1:23:be:a6:27:88:8d:6d:cc:83:43:3a:f3:f1:4c:de: 2d:90:be:c1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NiZyXynVvPcbmv0pQFy6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx ZjZhZDEwHhcNMjYwMTAxMjAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmVlNjQ0ZmQ0ZjFhMjM4Y2NjNzk3M2Q1OTVhYTMyZjgyODc5Yzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG3Wys+9EO6wnq704CytHeWLsBhl 90KUhJrGPT+tgj9LSjyGXKTcq21gjkwbUVPiZVALqHfqU38jQ42nkcMbJli9uAm0 dyRllkOwNykoYycHdc5nHLBPrRF6+ByzbDUH4WMed4uolBkvZY9vS+o0/8QuI/8T QQGGgwMcnjLnsFOb7pGSflHyuOv5Rlmqc6TJlQwpst/MLaUSrAWfZaQKHaLfxwXx R+iXvNFvLD7bBMAD1kXWIyvW++9ELD/ha5l9HTSjUX/yuKG1b7zwRJCznweOJju+ 5NOr8YkYSFU4vDgBiHbCCPulzjjXdbe2nNS5kiizUM8uvLRuZwvkgojY2QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBbuZE/U8aI4zMeXPVlaoy+Ch5x2MB8GA1UdIwQY MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt NGIzYjFiNjNiNmFiLzEvRnU1a1Q5VHhvampNeDVjOVdWcWpMNEtIbkhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAudknAwQA wiStMA0GCSqGSIb3DQEBCwUAA4IBAQAaKbFgeVe8/SdRlW+HUlz0rsGK3ac780L/ kp7j3+ZoCRy64whnUowPb+diMb+7sWWPvwSyhIJZEHxbHArpwoJkHJCePS2NThNa Hi03oea0cIJg4sGmbK52i8MNc4j09PbiedJ2QsXia6pO8z9PTV9qbrxqSsQ2Ihm8 WjyJtSAHdAv4p73wMlZ6j0UJ4CcLo+uL5vUkaVMm+eYIILbdaVyhwABdYRseAthF OFrZQRq033ibASfoq1WS6crPwzMknY4A6hnIJRLvETG2YhzBg9iQuHjb3athE0wG POGv9zFvJp6rcJ5/jLq/bfKrluEjvqYniI1tzINDOvPxTN4tkL7B -----END CERTIFICATE-----Generated at Sun Jan 25 17:49:13 2026 by rpki-client