This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/FsKLRcGjm9bbdj3zzhOsbPHB2hQ.roa File: FsKLRcGjm9bbdj3zzhOsbPHB2hQ.roa (raw, json) Hash identifier: cK6XeGopFBU42xQOw3pXSfyyWEVVyNojCMYqWc1ytZU= Subject key identifier: 16:C2:8B:45:C1:A3:9B:D6:DB:76:3D:F3:CE:13:AC:6C:F1:C1:DA:14 Certificate issuer: /CN=595512069e65c590802ece5bf7bd87e66b8f35d3 Certificate serial: 019B76EB6DA9DA77FAE01787398AF10C6328 Authority key identifier: 59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/FsKLRcGjm9bbdj3zzhOsbPHB2hQ.roa Signing time: Thu 01 Jan 2026 00:18:19 +0000 ROA not before: Thu 01 Jan 2026 00:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213094 IP address blocks: 84.18.224.0/22 maxlen: 22 84.18.240.0/22 maxlen: 22 94.103.240.0/22 maxlen: 22 193.3.34.0/24 maxlen: 24 2a0b:cc80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:6d:a9:da:77:fa:e0:17:87:39:8a:f1:0c:63:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=595512069e65c590802ece5bf7bd87e66b8f35d3 Validity Not Before: Jan 1 00:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16c28b45c1a39bd6db763df3ce13ac6cf1c1da14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:73:32:73:9a:7d:49:30:eb:79:95:10:11:fc: d8:40:cf:19:73:45:cc:cf:c2:ba:35:0f:9e:42:24: ee:03:bd:92:b4:6b:4e:6d:50:76:2f:3c:1b:33:8e: a4:c4:d8:5d:b1:95:99:c4:a3:ab:5d:d1:1b:3b:7a: 71:34:98:66:14:f8:12:4f:3e:50:d0:13:02:aa:1d: c4:f4:4b:a8:ec:ba:02:84:80:39:8b:4a:9a:58:9e: d5:09:7a:1b:8d:52:c4:6e:db:1e:1d:4d:e8:e0:ed: 80:a3:7b:4c:1c:b3:31:45:58:06:ca:9d:f7:52:c3: 21:b4:b2:8f:92:33:b0:69:81:45:55:a6:39:9b:3d: c1:2e:0c:e9:28:32:bb:43:b3:ee:78:8c:c2:c5:ee: e8:11:87:79:3f:0f:09:4c:ca:3e:28:3a:c2:94:66: 74:6d:e3:05:63:e8:51:1d:2c:30:ac:75:aa:1d:fc: 3c:f0:5c:4a:00:94:34:58:33:6f:e0:dd:71:8c:d6: c2:0e:5c:28:33:0e:5c:b1:53:74:d4:07:41:1b:97: ee:fc:f6:a8:4e:78:44:5b:bb:cf:cb:e0:aa:6d:f2: d5:f3:e2:28:bc:0f:28:86:ab:c8:28:04:5b:f9:56: d0:c1:a5:63:50:5e:a0:9d:74:14:ba:b4:be:b5:e0: 2d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C2:8B:45:C1:A3:9B:D6:DB:76:3D:F3:CE:13:AC:6C:F1:C1:DA:14 X509v3 Authority Key Identifier: keyid:59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/FsKLRcGjm9bbdj3zzhOsbPHB2hQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.18.224.0/22 84.18.240.0/22 94.103.240.0/22 193.3.34.0/24 IPv6: 2a0b:cc80::/29 Signature Algorithm: sha256WithRSAEncryption 84:4e:b3:e0:af:a5:32:97:43:ef:cb:9e:7e:5b:a6:fa:b9:1c: 48:15:33:52:1c:d8:17:e4:14:c1:72:d1:84:4a:3f:87:1d:e1: b8:24:c7:e0:c3:5e:fe:71:4f:d0:3a:66:91:5b:56:b9:05:53: 20:53:1a:d5:ba:5e:44:1c:87:e3:5c:89:f2:6f:f1:cd:86:dd: 54:5b:db:9f:bd:83:11:6a:06:c9:15:76:2e:ef:a2:34:cf:20: d3:fe:3b:bf:62:29:b4:89:6b:85:c7:2b:50:de:53:78:1e:62: b7:2e:bf:b6:2a:d8:aa:e3:51:46:8d:cd:d2:40:b2:94:9f:ac: d0:0e:30:d6:ae:4c:b8:94:52:9e:bf:3a:98:34:90:f4:94:95: 7a:52:d8:26:a7:63:ce:2e:d0:76:61:c1:10:21:8e:26:24:3e: 26:c5:32:fb:4e:e6:ce:10:3f:3a:b0:e8:e8:f2:dc:6c:60:7e: 20:f2:54:a6:e3:10:fa:c2:8c:2d:d3:c5:06:4d:55:00:d3:0a: 34:6f:a7:8a:12:66:87:7d:e1:5e:33:93:58:ac:3a:1c:8f:ee: cf:d7:14:84:a8:4a:e1:66:90:6d:70:7b:94:93:2c:4a:32:cf: da:84:08:54:c7:94:94:e1:2e:53:76:4d:8c:f4:59:c4:2c:6c: 7a:07:55:ae -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt2622p2nf64BeHOYrxDGMoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NTUxMjA2OWU2NWM1OTA4MDJlY2U1YmY3YmQ4N2U2NmI4 ZjM1ZDMwHhcNMjYwMTAxMDAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmMyOGI0NWMxYTM5YmQ2ZGI3NjNkZjNjZTEzYWM2Y2YxYzFkYTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXMyc5p9STDreZUQEfzYQM8Zc0XM z8K6NQ+eQiTuA72StGtObVB2LzwbM46kxNhdsZWZxKOrXdEbO3pxNJhmFPgSTz5Q 0BMCqh3E9Euo7LoChIA5i0qaWJ7VCXobjVLEbtseHU3o4O2Ao3tMHLMxRVgGyp33 UsMhtLKPkjOwaYFFVaY5mz3BLgzpKDK7Q7PueIzCxe7oEYd5Pw8JTMo+KDrClGZ0 beMFY+hRHSwwrHWqHfw88FxKAJQ0WDNv4N1xjNbCDlwoMw5csVN01AdBG5fu/Pao TnhEW7vPy+CqbfLV8+IovA8ohqvIKARb+VbQwaVjUF6gnXQUurS+teAtZQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFBbCi0XBo5vW23Y9884TrGzxwdoUMB8GA1UdIwQY MBaAFFlVEgaeZcWQgC7OW/e9h+ZrjzXTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1ZVU0JwNWx4WkNBTHM1Yjk3Mkg1bXVQTmRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8xYmVkMTctNWUzMy00M2ExLWJiOGYt NDNhNDNkYTkyODlhLzEvRnNLTFJjR2ptOWJiZGozenpoT3NiUEhCMmhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8xYmVkMTctNWUzMy00M2ExLWJiOGYtNDNhNDNkYTkyODlh LzEvV1ZVU0JwNWx4WkNBTHM1Yjk3Mkg1bXVQTmRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCVBLgAwQC VBLwAwQCXmfwAwQAwQMiMA0EAgACMAcDBQMqC8yAMA0GCSqGSIb3DQEBCwUAA4IB AQCETrPgr6Uyl0Pvy55+W6b6uRxIFTNSHNgX5BTBctGESj+HHeG4JMfgw17+cU/Q OmaRW1a5BVMgUxrVul5EHIfjXInyb/HNht1UW9ufvYMRagbJFXYu76I0zyDT/ju/ Yim0iWuFxytQ3lN4HmK3Lr+2Ktiq41FGjc3SQLKUn6zQDjDWrky4lFKevzqYNJD0 lJV6Utgmp2POLtB2YcEQIY4mJD4mxTL7TubOED86sOjo8txsYH4g8lSm4xD6wowt 08UGTVUA0wo0b6eKEmaHfeFeM5NYrDocj+7P1xSEqErhZpBtcHuUkyxKMs/ahAhU x5SU4S5Tdk2M9FnELGx6B1Wu -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:17 2026 by rpki-client