This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/FOg3Av7qAneoLCl9RE4sk42f7HM.roa File: FOg3Av7qAneoLCl9RE4sk42f7HM.roa (raw, json) Hash identifier: s+X5qOD9V08ETG17KaGYFEzqR9Vxxzzwy/ShTxoaD6o= Subject key identifier: 14:E8:37:02:FE:EA:02:77:A8:2C:29:7D:44:4E:2C:93:8D:9F:EC:73 Certificate issuer: /CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b Certificate serial: 019B7CED8D2E56980453D3F03EEA51298C17 Authority key identifier: 52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/FOg3Av7qAneoLCl9RE4sk42f7HM.roa Signing time: Fri 02 Jan 2026 04:18:21 +0000 ROA not before: Fri 02 Jan 2026 04:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200645 IP address blocks: 185.100.44.0/22 maxlen: 22 185.117.136.0/22 maxlen: 22 185.174.200.0/22 maxlen: 22 185.177.156.0/22 maxlen: 22 185.179.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:8d:2e:56:98:04:53:d3:f0:3e:ea:51:29:8c:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b Validity Not Before: Jan 2 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14e83702feea0277a82c297d444e2c938d9fec73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c9:0e:0a:e1:55:95:27:80:85:e4:30:0a:eb: 84:50:8c:16:a0:95:b8:9b:10:52:82:7a:a9:43:58: 03:7b:3d:8e:09:72:b8:e9:20:e9:a0:dd:93:ca:17: c2:63:1b:8d:b4:2e:af:fb:a4:4c:b4:14:96:c4:1c: 9e:b2:70:a1:dd:fa:15:bd:d5:1f:27:1f:53:59:44: 03:52:a1:c3:17:ac:36:39:92:0a:ab:8f:80:1a:0d: dc:93:fe:7a:e6:f0:60:06:36:e1:8e:53:1e:c9:24: 4b:2c:e1:06:14:41:77:c1:10:a7:07:ff:16:8b:7e: 9d:65:ba:2d:e0:5f:68:52:11:8d:dc:22:2b:38:24: d1:3b:7a:23:a0:09:0b:7e:1c:52:bd:e5:a4:b7:fc: c7:51:52:6f:ad:ed:fa:ce:18:6c:71:16:30:f7:d6: 9e:f0:81:75:29:f0:62:a9:58:24:ac:af:20:d2:68: 50:92:9a:72:d5:fb:9d:6e:68:8a:cd:56:4e:12:6a: 5e:5b:17:59:af:9f:4a:5c:f7:5a:bd:2a:a9:b0:5b: 57:ee:fa:8e:9f:c2:d3:8f:aa:49:f6:14:9f:17:f2: 50:8b:c4:c3:2f:36:c7:14:06:61:9d:64:5f:74:9d: c0:49:f5:04:ef:f0:cf:62:3b:df:ff:19:ba:bc:fa: d5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E8:37:02:FE:EA:02:77:A8:2C:29:7D:44:4E:2C:93:8D:9F:EC:73 X509v3 Authority Key Identifier: keyid:52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/FOg3Av7qAneoLCl9RE4sk42f7HM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.100.44.0/22 185.117.136.0/22 185.174.200.0/22 185.177.156.0/22 185.179.220.0/22 Signature Algorithm: sha256WithRSAEncryption 83:96:fa:f4:9e:82:11:d3:21:df:00:b0:59:59:d5:e6:6b:88: 47:e8:86:b3:de:89:f3:f8:9a:28:4c:01:04:75:31:c0:55:5f: 3e:df:87:36:fb:6b:97:97:65:3f:cf:b7:92:0e:86:c9:a3:0f: 4e:42:47:b4:7e:dc:62:19:5c:52:f6:4b:7d:79:96:07:dc:15: 54:e7:5d:9d:cc:89:b0:02:3c:aa:20:bc:98:a9:af:d5:66:0a: 45:bc:63:70:fe:84:bf:27:c9:b6:bd:84:91:9f:22:70:c8:a7: 03:25:03:d6:91:20:d3:6e:73:49:9b:95:7a:a3:9a:ee:af:42: 50:ce:44:58:ca:90:55:84:d3:e8:e4:10:ab:86:67:ed:74:bc: 55:30:ad:d0:b5:b1:84:2c:c7:73:7a:30:96:c4:c8:52:bd:72: c1:7a:68:ae:d9:6d:e0:12:c9:8a:69:66:7d:70:97:32:e1:24: 6a:fd:28:b7:2b:e6:d9:fb:6e:e1:d3:f4:9d:29:4d:d8:af:79: fe:77:22:7e:e0:08:4c:98:e1:38:b3:c5:05:d6:df:ae:d4:f0: 3d:4f:72:be:0e:bb:56:03:26:58:17:9c:29:8d:4f:c7:f2:8c: 5a:f0:76:51:33:e4:0f:72:9c:2c:41:c9:3a:08:6c:6b:f0:f4: 60:d9:85:9c -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt87Y0uVpgEU9PwPupRKYwXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMjEwN2VkMDdiNWFjMGQ4MjY5ZDcyMjlkOWZkMmNhMGUz MjY1OGIwHhcNMjYwMTAyMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGU4MzcwMmZlZWEwMjc3YTgyYzI5N2Q0NDRlMmM5MzhkOWZlYzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsckOCuFVlSeAheQwCuuEUIwWoJW4 mxBSgnqpQ1gDez2OCXK46SDpoN2TyhfCYxuNtC6v+6RMtBSWxByesnCh3foVvdUf Jx9TWUQDUqHDF6w2OZIKq4+AGg3ck/565vBgBjbhjlMeySRLLOEGFEF3wRCnB/8W i36dZbot4F9oUhGN3CIrOCTRO3ojoAkLfhxSveWkt/zHUVJvre36zhhscRYw99ae 8IF1KfBiqVgkrK8g0mhQkppy1fudbmiKzVZOEmpeWxdZr59KXPdavSqpsFtX7vqO n8LTj6pJ9hSfF/JQi8TDLzbHFAZhnWRfdJ3ASfUE7/DPYjvf/xm6vPrVpQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFBToNwL+6gJ3qCwpfUROLJONn+xzMB8GA1UdIwQY MBaAFFIhB+0HtawNgmnXIp2f0soOMmWLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWlFSDdRZTFyQTJDYWRjaW5aX1N5ZzR5WllzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8wMmM1NjgtOTFlZS00ODVkLTk5YTIt NTliY2UzMTljMWNiLzEvRk9nM0F2N3FBbmVvTENsOVJFNHNrNDJmN0hNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8wMmM1NjgtOTFlZS00ODVkLTk5YTItNTliY2UzMTljMWNi LzEvVWlFSDdRZTFyQTJDYWRjaW5aX1N5ZzR5WllzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCuWQsAwQC uXWIAwQCua7IAwQCubGcAwQCubPcMA0GCSqGSIb3DQEBCwUAA4IBAQCDlvr0noIR 0yHfALBZWdXma4hH6Iaz3onz+JooTAEEdTHAVV8+34c2+2uXl2U/z7eSDobJow9O Qke0ftxiGVxS9kt9eZYH3BVU512dzImwAjyqILyYqa/VZgpFvGNw/oS/J8m2vYSR nyJwyKcDJQPWkSDTbnNJm5V6o5rur0JQzkRYypBVhNPo5BCrhmftdLxVMK3QtbGE LMdzejCWxMhSvXLBemiu2W3gEsmKaWZ9cJcy4SRq/Si3K+bZ+27h0/SdKU3Yr3n+ dyJ+4AhMmOE4s8UF1t+u1PA9T3K+DrtWAyZYF5wpjU/H8oxa8HZRM+QPcpwsQck6 CGxr8PRg2YWc -----END CERTIFICATE-----Generated at Mon Jan 26 07:08:31 2026 by rpki-client