This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/FKqbBbCatHDV91uCIV2iSLiR4J4.roa File: FKqbBbCatHDV91uCIV2iSLiR4J4.roa (raw, json) Hash identifier: OiRQx3xEWtooKV7KslWbkFM1gAMKnnIL8/Yhr2gA9Io= Subject key identifier: 14:AA:9B:05:B0:9A:B4:70:D5:F7:5B:82:21:5D:A2:48:B8:91:E0:9E Certificate issuer: /CN=03ebb001528281734bf5c94bc4bef6f6e99a377e Certificate serial: 019B797F050D6B3798B96885508543AB321E Authority key identifier: 03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/FKqbBbCatHDV91uCIV2iSLiR4J4.roa Signing time: Thu 01 Jan 2026 12:18:46 +0000 ROA not before: Thu 01 Jan 2026 12:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42878 IP address blocks: 91.193.200.0/22 maxlen: 22 91.193.200.0/24 maxlen: 24 91.193.201.0/24 maxlen: 24 91.193.202.0/24 maxlen: 24 91.193.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:05:0d:6b:37:98:b9:68:85:50:85:43:ab:32:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03ebb001528281734bf5c94bc4bef6f6e99a377e Validity Not Before: Jan 1 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14aa9b05b09ab470d5f75b82215da248b891e09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:49:10:65:e8:14:7d:0e:96:2f:ce:7b:f9:e8: f5:b6:75:6e:5b:91:b7:08:ee:89:c2:c3:c1:67:6e: 9f:10:f5:57:8e:cf:c9:69:2f:af:53:c5:e2:77:ae: 95:f6:ed:aa:99:b5:c6:ee:db:54:fb:40:03:22:0f: d7:de:fc:41:47:20:05:eb:91:3c:9f:79:84:bd:51: 83:11:47:7b:ba:c6:bb:09:29:bc:34:1e:8e:00:38: 9d:ac:48:bd:72:cb:66:79:11:55:e0:9d:2c:eb:b9: a4:c3:f1:51:2e:9b:d1:33:f5:27:cd:82:f5:55:dc: ac:06:f6:1c:17:42:1c:9b:9a:00:21:f2:ba:a5:45: b6:74:e6:75:5c:79:c8:a8:24:4c:9e:cc:3e:f6:94: ff:c4:bf:fa:25:6b:ab:bf:50:26:c5:d7:52:da:84: 27:24:35:c9:d1:e5:7e:cb:37:73:ad:8f:ad:ce:3c: 67:f9:f0:b7:33:3c:84:48:8e:4b:31:0c:f4:3b:7f: 3f:5d:d3:38:53:d3:f9:32:7b:7b:ba:a9:ac:9f:b3: e4:ec:fa:53:b0:15:f1:46:69:5d:7b:1f:e0:e6:66: ea:de:f2:7c:d5:d0:e5:70:a5:60:01:47:d4:23:62: a7:88:a7:31:cb:51:57:a9:9b:c3:62:b3:5f:f6:c8: ca:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AA:9B:05:B0:9A:B4:70:D5:F7:5B:82:21:5D:A2:48:B8:91:E0:9E X509v3 Authority Key Identifier: keyid:03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/FKqbBbCatHDV91uCIV2iSLiR4J4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.193.200.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:25:7a:9c:a4:de:c5:82:82:b0:4f:32:fa:65:44:21:bf:57: b4:ef:29:c7:8a:e0:6c:69:5b:9b:f8:23:0f:ce:98:ae:e0:73: 1c:75:0d:04:de:81:70:63:5f:81:65:96:02:69:4b:57:02:e9: d9:9c:e2:ad:90:34:ab:82:0d:96:98:4b:e9:50:74:5d:01:38: ab:60:1c:d8:f5:33:35:5c:8e:10:02:a9:ba:ca:2e:a5:9e:27: 8a:0d:09:5e:71:26:49:9d:9f:13:93:65:be:07:5f:fe:bf:d5: d3:62:4a:51:d8:98:0a:0e:c8:73:07:27:e5:2e:fd:78:c5:39: fe:9e:17:0b:72:00:37:b1:bc:07:10:d7:9a:8c:71:0c:83:8a: 1d:5b:6a:bd:94:2a:e8:12:1c:fa:62:30:4e:1b:77:66:0f:5c: a4:3d:97:75:6d:9c:40:38:c5:c0:fd:45:67:ac:46:4a:cb:43: 2b:35:53:bf:d8:ba:82:1b:6c:e4:5b:c3:cb:75:7c:b6:d3:cd: 7a:66:71:42:71:11:74:28:64:e6:8f:58:9e:d4:ff:3a:a8:75: cb:85:a1:b4:60:58:0c:db:86:1c:27:1e:fc:02:08:6b:98:46: 82:ef:31:dd:5e:42:b6:b0:cf:ad:13:20:03:a4:54:da:0a:22: 0a:8f:a3:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fwUNazeYuWiFUIVDqzIeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZWJiMDAxNTI4MjgxNzM0YmY1Yzk0YmM0YmVmNmY2ZTk5 YTM3N2UwHhcNMjYwMTAxMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGFhOWIwNWIwOWFiNDcwZDVmNzViODIyMTVkYTI0OGI4OTFlMDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUkQZegUfQ6WL857+ej1tnVuW5G3 CO6JwsPBZ26fEPVXjs/JaS+vU8Xid66V9u2qmbXG7ttU+0ADIg/X3vxBRyAF65E8 n3mEvVGDEUd7usa7CSm8NB6OADidrEi9cstmeRFV4J0s67mkw/FRLpvRM/UnzYL1 VdysBvYcF0Icm5oAIfK6pUW2dOZ1XHnIqCRMnsw+9pT/xL/6JWurv1AmxddS2oQn JDXJ0eV+yzdzrY+tzjxn+fC3MzyESI5LMQz0O38/XdM4U9P5Mnt7uqmsn7Pk7PpT sBXxRmldex/g5mbq3vJ81dDlcKVgAUfUI2KniKcxy1FXqZvDYrNf9sjKEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBSqmwWwmrRw1fdbgiFdoki4keCeMB8GA1UdIwQY MBaAFAPrsAFSgoFzS/XJS8S+9vbpmjd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQS11d0FWS0NnWE5MOWNsTHhMNzI5dW1hTjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wZDNmNTEtYWY3My00MDQ1LWEwZjEt ZWFiODI4ZWNhNDViLzEvRktxYkJiQ2F0SERWOTF1Q0lWMmlTTGlSNEo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8wZDNmNTEtYWY3My00MDQ1LWEwZjEtZWFiODI4ZWNhNDVi LzEvQS11d0FWS0NnWE5MOWNsTHhMNzI5dW1hTjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8HIMA0G CSqGSIb3DQEBCwUAA4IBAQAaJXqcpN7FgoKwTzL6ZUQhv1e07ynHiuBsaVub+CMP zpiu4HMcdQ0E3oFwY1+BZZYCaUtXAunZnOKtkDSrgg2WmEvpUHRdATirYBzY9TM1 XI4QAqm6yi6lnieKDQlecSZJnZ8Tk2W+B1/+v9XTYkpR2JgKDshzByflLv14xTn+ nhcLcgA3sbwHENeajHEMg4odW2q9lCroEhz6YjBOG3dmD1ykPZd1bZxAOMXA/UVn rEZKy0MrNVO/2LqCG2zkW8PLdXy20816ZnFCcRF0KGTmj1ie1P86qHXLhaG0YFgM 24YcJx78AghrmEaC7zHdXkK2sM+tEyADpFTaCiIKj6P7 -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:25 2026 by rpki-client