This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/FXM0lZ9RW8MVyeNhLRa0gA27Yz8.roa File: FXM0lZ9RW8MVyeNhLRa0gA27Yz8.roa (raw, json) Hash identifier: AOWqH2G8p3eNy+r9FYww+1k4v48/EVkof2UT4jbdqII= Subject key identifier: 15:73:34:95:9F:51:5B:C3:15:C9:E3:61:2D:16:B4:80:0D:BB:63:3F Certificate issuer: /CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819 Certificate serial: 019B76EB00EA349F3CD285F63CA3F07DE997 Authority key identifier: 4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/FXM0lZ9RW8MVyeNhLRa0gA27Yz8.roa Signing time: Thu 01 Jan 2026 00:17:51 +0000 ROA not before: Thu 01 Jan 2026 00:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41622 IP address blocks: 77.245.176.0/20 maxlen: 20 185.244.112.0/22 maxlen: 22 217.194.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:00:ea:34:9f:3c:d2:85:f6:3c:a3:f0:7d:e9:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819 Validity Not Before: Jan 1 00:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=157334959f515bc315c9e3612d16b4800dbb633f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c2:72:80:5e:ae:ba:91:a2:9c:05:3d:30:92: 48:5a:6e:be:ca:4d:d2:4c:e2:d5:04:1f:d9:29:f0: 31:eb:1e:bc:65:91:2f:c4:fa:94:13:bd:96:d7:dd: d3:c7:b9:0f:30:31:7b:39:fc:81:51:b7:82:1a:20: e9:12:47:ab:ca:8e:4a:fc:c4:41:e4:46:99:db:ce: 8f:ad:fa:78:a9:af:09:d9:10:04:e0:2f:76:65:dd: 19:b2:35:86:1b:a5:b2:5b:a4:a5:ea:f5:91:53:c0: c6:f0:6b:09:4f:dd:8b:2f:ff:9e:ec:9c:72:f8:99: 53:c4:2d:83:d1:40:84:ad:54:37:7f:ad:b7:f9:0a: c9:fd:1e:cd:93:ca:b0:c3:2b:ba:dc:19:52:51:70: 51:05:3c:7a:e0:b9:c5:73:7f:58:13:a8:c4:2a:02: 2b:48:3a:15:07:15:9e:25:c9:63:a2:ef:de:07:c8: 9c:7d:f6:22:f1:b6:cf:b8:8a:3d:20:dd:20:e0:d5: 2d:3d:f9:f9:b0:5b:00:87:14:74:12:eb:44:a3:69: 12:0e:12:41:b7:dc:28:3d:02:52:b6:a8:d3:ba:ff: 15:86:8d:9b:6b:7b:2e:6c:01:70:e2:5b:44:88:91: f4:55:c2:ca:b1:90:7b:60:b0:78:0c:76:ba:c1:86: 73:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:73:34:95:9F:51:5B:C3:15:C9:E3:61:2D:16:B4:80:0D:BB:63:3F X509v3 Authority Key Identifier: keyid:4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/FXM0lZ9RW8MVyeNhLRa0gA27Yz8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.245.176.0/20 185.244.112.0/22 217.194.48.0/20 Signature Algorithm: sha256WithRSAEncryption 3e:5a:4e:d4:52:87:74:48:30:8b:55:7e:de:27:02:05:19:21: 75:5a:92:f0:ab:e7:26:9e:96:71:3e:b8:47:3c:2b:f2:bb:62: b7:a2:0a:98:53:ec:ac:e6:57:0c:29:8b:66:15:9e:9b:4d:bb: 3d:58:ae:04:b9:03:f5:87:22:cc:c1:1b:f2:4c:4f:be:82:32: a3:aa:5b:cc:b3:b1:f3:3c:3e:f0:7e:e1:f7:0c:a5:bd:a2:fb: 0c:ca:8e:7d:ed:c9:dc:ad:6a:a8:df:bc:41:a4:62:7d:1c:17: 3c:4b:db:b7:eb:2a:99:53:0f:6b:b4:84:16:62:ce:07:3a:76: e4:77:11:55:90:dd:d7:6c:21:9f:d9:4e:f9:e5:6c:76:0c:e1: 74:ff:71:bb:c4:8b:72:44:50:86:f4:7b:a5:16:8d:3c:fd:66: 38:44:49:84:ac:77:de:17:5b:dd:9d:e4:2b:10:b4:79:1b:e1: 20:d6:94:55:dd:82:53:45:61:7d:f9:3e:eb:e4:66:72:1c:f7: 30:0b:c7:5f:ad:54:71:47:14:ad:69:32:e0:75:fa:94:6e:43: 2c:2e:5a:4c:2d:df:c0:e3:b2:a2:cc:03:7e:00:1a:04:d6:00: 64:f6:e5:93:d0:cf:d1:3a:fe:c2:a2:78:e9:ff:63:2e:4a:59: 7d:16:dc:74 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt26wDqNJ880oX2PKPwfemXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhYzJiYzBlM2U1OTMzMmY0YmUyYzU4ZmYyNWExODYxZjVm ZGU4MTkwHhcNMjYwMTAxMDAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTczMzQ5NTlmNTE1YmMzMTVjOWUzNjEyZDE2YjQ4MDBkYmI2MzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcJygF6uupGinAU9MJJIWm6+yk3S TOLVBB/ZKfAx6x68ZZEvxPqUE72W193Tx7kPMDF7OfyBUbeCGiDpEkeryo5K/MRB 5EaZ286Prfp4qa8J2RAE4C92Zd0ZsjWGG6WyW6Sl6vWRU8DG8GsJT92LL/+e7Jxy +JlTxC2D0UCErVQ3f623+QrJ/R7Nk8qwwyu63BlSUXBRBTx64LnFc39YE6jEKgIr SDoVBxWeJcljou/eB8icffYi8bbPuIo9IN0g4NUtPfn5sFsAhxR0EutEo2kSDhJB t9woPQJStqjTuv8Vho2ba3subAFw4ltEiJH0VcLKsZB7YLB4DHa6wYZzmwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBVzNJWfUVvDFcnjYS0WtIANu2M/MB8GA1UdIwQY MBaAFErCvA4+WTMvS+LFj/JaGGH1/egZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3NLOERqNVpNeTlMNHNXUDhsb1lZZlg5NkJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80OGFmZTAtNWExOC00ZDk5LTkxYjYt ODA3M2RjZTA5NjI4LzEvRlhNMGxaOVJXOE1WeWVOaExSYTBnQTI3WXo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC80OGFmZTAtNWExOC00ZDk5LTkxYjYtODA3M2RjZTA5NjI4 LzEvU3NLOERqNVpNeTlMNHNXUDhsb1lZZlg5NkJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQETfWwAwQC ufRwAwQE2cIwMA0GCSqGSIb3DQEBCwUAA4IBAQA+Wk7UUod0SDCLVX7eJwIFGSF1 WpLwq+cmnpZxPrhHPCvyu2K3ogqYU+ys5lcMKYtmFZ6bTbs9WK4EuQP1hyLMwRvy TE++gjKjqlvMs7HzPD7wfuH3DKW9ovsMyo597cncrWqo37xBpGJ9HBc8S9u36yqZ Uw9rtIQWYs4HOnbkdxFVkN3XbCGf2U755Wx2DOF0/3G7xItyRFCG9HulFo08/WY4 REmErHfeF1vdneQrELR5G+Eg1pRV3YJTRWF9+T7r5GZyHPcwC8dfrVRxRxStaTLg dfqUbkMsLlpMLd/A47KizAN+ABoE1gBk9uWT0M/ROv7Conjp/2MuSll9Ftx0 -----END CERTIFICATE-----Generated at Mon Jan 26 13:46:32 2026 by rpki-client