This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/FgPm5ePIdB7iyy-qswL10gBrcZU.roa File: FgPm5ePIdB7iyy-qswL10gBrcZU.roa (raw, json) Hash identifier: fBas5dQFDC57PItx0/bJVSQqggK4/99S8Oo+iirl10c= Subject key identifier: 16:03:E6:E5:E3:C8:74:1E:E2:CB:2F:AA:B3:02:F5:D2:00:6B:71:95 Certificate issuer: /CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd Certificate serial: 019B7A5B58D215BFB153AB99DA2F5259510D Authority key identifier: E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/FgPm5ePIdB7iyy-qswL10gBrcZU.roa Signing time: Thu 01 Jan 2026 16:19:25 +0000 ROA not before: Thu 01 Jan 2026 16:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213790 IP address blocks: 185.93.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.crl rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:58:d2:15:bf:b1:53:ab:99:da:2f:52:59:51:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd Validity Not Before: Jan 1 16:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1603e6e5e3c8741ee2cb2faab302f5d2006b7195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:02:91:95:51:3c:5d:a6:09:2c:9b:86:7f:e3: ed:89:fe:19:ba:62:ac:73:95:90:cf:66:73:54:75: 64:8c:bf:50:b5:9c:d4:ed:82:67:1b:95:59:5e:11: 5d:e8:88:1b:ba:5c:d2:d6:ac:92:e3:cc:04:be:2c: 52:66:85:6c:c4:70:9a:71:5a:c6:f9:1b:47:6d:f5: 73:4b:b2:1c:6d:c4:ac:96:51:3d:f9:ab:4f:09:eb: d0:3e:30:0e:a7:12:a5:de:8c:9d:8f:97:e4:a0:d1: 05:a3:46:18:7a:33:b3:17:dc:04:57:e8:93:3f:33: b2:0e:19:17:11:0d:82:e6:bd:fc:36:d0:7c:2f:d2: 8d:e9:b3:10:f3:52:c8:4b:27:f6:66:7e:e9:71:09: fa:ce:05:56:49:8e:45:0a:0b:c5:5f:8e:50:86:1b: ee:10:43:56:2e:5a:06:e1:06:30:2b:4f:e8:23:81: 86:8a:39:b3:35:5e:e8:60:1b:02:47:ee:14:45:a4: 78:eb:28:7c:86:9e:24:26:8d:1a:0a:d5:94:70:55: f5:30:9b:96:e1:c1:68:96:01:93:37:4b:b6:e9:28: 6c:10:e1:99:36:40:fe:3e:91:04:31:6b:12:01:0c: 2e:44:f5:d4:47:95:a1:fd:a2:f7:76:d5:f9:1b:f4: ed:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:03:E6:E5:E3:C8:74:1E:E2:CB:2F:AA:B3:02:F5:D2:00:6B:71:95 X509v3 Authority Key Identifier: keyid:E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/FgPm5ePIdB7iyy-qswL10gBrcZU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.93.89.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:b1:1a:29:1d:95:e2:c2:e2:d7:b8:8f:f4:a0:28:2a:28:5f: bb:0a:8f:75:5c:6f:dc:37:15:7a:83:a0:cc:f1:1d:8b:90:6c: a0:17:a3:b4:67:43:86:4d:cf:87:11:73:27:03:0c:e6:de:1b: f2:4e:83:1e:2e:0c:6f:dd:af:f0:bb:97:06:0a:0a:24:78:0b: 92:8a:a2:a7:d7:fc:56:73:75:6e:ac:57:3d:ff:c9:1b:35:f2: 5e:f5:45:fa:30:5f:01:a6:14:49:b4:1d:08:47:42:a2:9d:c9: ed:95:db:fe:85:3c:59:af:37:f0:94:1a:ed:ca:75:7d:01:f3: 1b:b3:5b:4e:0e:14:29:b4:96:a3:67:18:c1:0b:63:b9:43:81: a5:73:b0:83:73:7b:ce:3f:50:30:c7:68:3b:bf:a2:85:49:89: 21:c8:7c:54:7c:fb:a4:e3:2e:c1:03:f6:35:1a:4e:22:39:a0: 69:7d:4f:13:6c:d7:6f:19:a3:b1:f1:e3:c3:bc:e1:74:e1:d2: 9e:88:8e:53:d0:47:f9:d5:0f:be:96:64:c5:96:c7:95:9e:04: dd:2f:16:a9:eb:bc:ca:d9:b2:cb:ec:76:9c:7c:68:4f:27:a2: dc:51:18:16:8c:85:0a:32:24:d7:55:44:2c:f2:a4:5a:ed:16: 74:30:08:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W1jSFb+xU6uZ2i9SWVENMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDczZmZjM2YzN2M0ZmVjNGJkMzVhZDFjNTk1Y2QwNTZi YWVjZmQwHhcNMjYwMTAxMTYxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjAzZTZlNWUzYzg3NDFlZTJjYjJmYWFiMzAyZjVkMjAwNmI3MTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gKRlVE8XaYJLJuGf+Ptif4ZumKs c5WQz2ZzVHVkjL9QtZzU7YJnG5VZXhFd6IgbulzS1qyS48wEvixSZoVsxHCacVrG +RtHbfVzS7IcbcSsllE9+atPCevQPjAOpxKl3oydj5fkoNEFo0YYejOzF9wEV+iT PzOyDhkXEQ2C5r38NtB8L9KN6bMQ81LISyf2Zn7pcQn6zgVWSY5FCgvFX45Qhhvu EENWLloG4QYwK0/oI4GGijmzNV7oYBsCR+4URaR46yh8hp4kJo0aCtWUcFX1MJuW 4cFolgGTN0u26ShsEOGZNkD+PpEEMWsSAQwuRPXUR5Wh/aL3dtX5G/TtTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBYD5uXjyHQe4ssvqrMC9dIAa3GVMB8GA1UdIwQY MBaAFOLXP/w/N8T+xL01rRxZXNBWuuz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRjX19EODN4UDdFdlRXdEhGbGMwRmE2N1AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9lNWNmMDAtNTViOC00MzU5LWFjMWUt YWEwYzRkYzAzMjIyLzEvRmdQbTVlUElkQjdpeXktcXN3TDEwZ0JyY1pVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9lNWNmMDAtNTViOC00MzU5LWFjMWUtYWEwYzRkYzAzMjIy LzEvNHRjX19EODN4UDdFdlRXdEhGbGMwRmE2N1AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuV1ZMA0G CSqGSIb3DQEBCwUAA4IBAQB/sRopHZXiwuLXuI/0oCgqKF+7Co91XG/cNxV6g6DM 8R2LkGygF6O0Z0OGTc+HEXMnAwzm3hvyToMeLgxv3a/wu5cGCgokeAuSiqKn1/xW c3VurFc9/8kbNfJe9UX6MF8BphRJtB0IR0Kincntldv+hTxZrzfwlBrtynV9AfMb s1tODhQptJajZxjBC2O5Q4Glc7CDc3vOP1Awx2g7v6KFSYkhyHxUfPuk4y7BA/Y1 Gk4iOaBpfU8TbNdvGaOx8ePDvOF04dKeiI5T0Ef51Q++lmTFlseVngTdLxap67zK 2bLL7HacfGhPJ6LcURgWjIUKMiTXVUQs8qRa7RZ0MAji -----END CERTIFICATE-----Generated at Mon Jan 26 00:25:27 2026 by rpki-client