This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/Fnr8UBCRPeUQhRVFOAHVctCKPfo.roa File: Fnr8UBCRPeUQhRVFOAHVctCKPfo.roa (raw, json) Hash identifier: PgOyYUmMG9zgljOcOgtP5byxd2cN3HfKRRt85MDBTwk= Subject key identifier: 16:7A:FC:50:10:91:3D:E5:10:85:15:45:38:01:D5:72:D0:8A:3D:FA Certificate issuer: /CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef Certificate serial: 019B7C12E7AE4F8AC9162A2AA52C55C9DE90 Authority key identifier: 5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/Fnr8UBCRPeUQhRVFOAHVctCKPfo.roa Signing time: Fri 02 Jan 2026 00:19:32 +0000 ROA not before: Fri 02 Jan 2026 00:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42926 IP address blocks: 185.197.196.0/24 maxlen: 24 185.197.197.0/24 maxlen: 24 185.197.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:e7:ae:4f:8a:c9:16:2a:2a:a5:2c:55:c9:de:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef Validity Not Before: Jan 2 00:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=167afc5010913de5108515453801d572d08a3dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bf:ef:e3:ac:97:69:ca:c0:d9:84:ad:a8:8f: c1:b3:30:10:71:fe:34:ca:64:2f:8f:44:b6:11:08: 5b:6a:41:22:9f:36:cb:47:d0:1c:2c:e5:1f:e5:bb: 0c:a4:12:fe:6f:cb:7b:ef:04:48:1d:a2:d4:b4:8f: 57:4c:97:ec:bd:07:4f:3e:0c:78:3f:1a:99:e5:c5: e7:f6:42:a1:c1:89:79:f2:32:d2:0b:23:69:5a:48: 73:fc:12:d1:15:dc:37:b4:ad:67:d2:1c:41:c9:44: 65:c9:e3:0a:8d:f5:67:0d:c1:aa:b2:da:a0:6c:75: 11:8d:3b:ae:96:db:71:da:51:eb:94:df:ca:de:06: 16:15:2f:cf:af:c3:70:29:0d:af:2e:66:0e:da:cd: e8:72:b2:b8:9e:a6:93:20:2b:d4:25:77:51:4d:86: f5:fa:8d:f1:f9:cb:d1:56:22:84:ec:93:5f:93:50: 35:e2:ba:c8:8f:f9:c2:28:2e:54:f9:8e:9f:e4:f1: 91:95:37:94:52:bc:a8:7d:ac:6e:4e:ed:a0:19:43: 25:c2:b4:f1:c8:98:bf:10:8e:21:b7:49:69:bc:fa: f0:55:fb:d8:45:77:05:34:9a:a6:9b:7e:91:c1:f1: 84:4e:2a:75:6c:60:e2:7b:47:85:d2:c2:27:5e:c8: 00:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:7A:FC:50:10:91:3D:E5:10:85:15:45:38:01:D5:72:D0:8A:3D:FA X509v3 Authority Key Identifier: keyid:5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/Fnr8UBCRPeUQhRVFOAHVctCKPfo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.197.196.0-185.197.198.255 Signature Algorithm: sha256WithRSAEncryption ad:0e:71:eb:56:c0:d0:9d:2e:42:18:0b:2d:8c:9c:a6:8f:43: ac:49:e5:af:81:f0:cf:a8:f4:40:93:ec:55:d2:2d:96:5c:29: 1a:18:8d:04:3e:94:f2:d5:55:6d:aa:27:16:ac:d0:78:c4:07: 05:c2:bf:16:3a:04:87:53:3b:71:c2:43:cb:ab:70:3d:71:bb: 39:99:45:fb:f1:ec:bf:86:fd:9e:fb:74:a7:cd:11:e9:84:69: 01:7e:ff:65:2c:44:13:02:de:9a:55:b9:59:ba:ef:34:2a:f5: 07:33:6e:1e:f4:08:ce:6a:e6:a3:70:f1:6d:8d:07:b4:f9:2c: 18:78:1f:b8:6a:9f:58:80:1a:12:dc:ea:b3:35:c3:e4:bf:6e: cd:94:43:67:96:44:bc:08:ba:1e:05:08:17:ef:9f:ad:f7:b0: b9:9e:e1:96:83:79:cc:e5:89:83:3c:e8:3e:88:7c:b3:bc:d6: c8:d6:87:0c:87:95:91:c2:6e:5e:b7:d3:fe:4f:02:da:ce:d8: 07:b0:fd:fb:3d:40:9f:31:17:da:66:6b:5f:ca:0e:48:3c:02: 09:e3:14:18:29:6b:e3:e8:2a:39:5c:77:68:e0:ec:fa:db:24: 99:2e:19:ab:50:7f:47:9b:ab:eb:96:3f:95:55:04:32:c1:20: f5:f3:8f:08 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8EueuT4rJFioqpSxVyd6QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYmFiMGQzOWZiNjk3OWZlNGQzZDI0ODNhMDFiZGQzYzkz YmVjZWYwHhcNMjYwMTAyMDAxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjdhZmM1MDEwOTEzZGU1MTA4NTE1NDUzODAxZDU3MmQwOGEzZGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor/v46yXacrA2YStqI/BszAQcf40 ymQvj0S2EQhbakEinzbLR9AcLOUf5bsMpBL+b8t77wRIHaLUtI9XTJfsvQdPPgx4 PxqZ5cXn9kKhwYl58jLSCyNpWkhz/BLRFdw3tK1n0hxByURlyeMKjfVnDcGqstqg bHURjTuulttx2lHrlN/K3gYWFS/Pr8NwKQ2vLmYO2s3ocrK4nqaTICvUJXdRTYb1 +o3x+cvRViKE7JNfk1A14rrIj/nCKC5U+Y6f5PGRlTeUUryofaxuTu2gGUMlwrTx yJi/EI4ht0lpvPrwVfvYRXcFNJqmm36RwfGETip1bGDie0eF0sInXsgAnwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFBZ6/FAQkT3lEIUVRTgB1XLQij36MB8GA1UdIwQY MBaAFF+6sNOftpef5NPSSDoBvdPJO+zvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDdxdzA1LTJsNV9rMDlKSU9nRzkwOGs3N084LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zYzUyNGUtMTJiOC00ZGNjLThmMTAt MzBkZjYyNDI5ZGYwLzEvRm5yOFVCQ1JQZVVRaFJWRk9BSFZjdENLUGZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zYzUyNGUtMTJiOC00ZGNjLThmMTAtMzBkZjYyNDI5ZGYw LzEvWDdxdzA1LTJsNV9rMDlKSU9nRzkwOGs3N084LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAK5xcQD BAC5xcYwDQYJKoZIhvcNAQELBQADggEBAK0OcetWwNCdLkIYCy2MnKaPQ6xJ5a+B 8M+o9ECT7FXSLZZcKRoYjQQ+lPLVVW2qJxas0HjEBwXCvxY6BIdTO3HCQ8urcD1x uzmZRfvx7L+G/Z77dKfNEemEaQF+/2UsRBMC3ppVuVm67zQq9Qczbh70CM5q5qNw 8W2NB7T5LBh4H7hqn1iAGhLc6rM1w+S/bs2UQ2eWRLwIuh4FCBfvn633sLme4ZaD eczliYM86D6IfLO81sjWhwyHlZHCbl630/5PAtrO2Aew/fs9QJ8xF9pma1/KDkg8 AgnjFBgpa+PoKjlcd2jg7PrbJJkuGatQf0ebq+uWP5VVBDLBIPXzjwg= -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:53 2026 by rpki-client