This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/FFLikyFmH-Abpg8kwz_BXxHfNCU.roa File: FFLikyFmH-Abpg8kwz_BXxHfNCU.roa (raw, json) Hash identifier: cMgG0SrLZjSK1IoPjyUitd4xe4z4i4cE22ZF/9OmiC0= Subject key identifier: 14:52:E2:93:21:66:1F:E0:1B:A6:0F:24:C3:3F:C1:5F:11:DF:34:25 Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Certificate serial: 019B76EB51CA2675F3ECE5061412FF79E113 Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/FFLikyFmH-Abpg8kwz_BXxHfNCU.roa Signing time: Thu 01 Jan 2026 00:18:11 +0000 ROA not before: Thu 01 Jan 2026 00:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56616 IP address blocks: 2.188.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:51:ca:26:75:f3:ec:e5:06:14:12:ff:79:e1:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Validity Not Before: Jan 1 00:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1452e29321661fe01ba60f24c33fc15f11df3425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ea:97:cd:4c:36:58:ee:55:f3:26:73:a4:9b: f3:f1:cc:00:ec:c1:0b:2a:27:03:f8:a4:04:82:ce: 94:f5:0a:cc:80:22:72:aa:3f:d5:df:c0:e1:fe:1a: a2:95:a5:52:92:d8:f5:9a:18:d3:60:57:8c:67:18: ef:c4:13:1a:16:9c:7d:63:cd:e0:21:a0:1c:df:4e: 2f:89:7d:2c:a0:b3:71:af:31:a0:25:d9:09:ef:df: a3:27:27:7c:45:97:b2:69:b6:81:26:85:59:4e:53: 5c:46:f6:ba:fd:dc:4f:50:bb:3d:c4:59:30:2e:e5: c4:ea:ab:0f:20:2c:01:eb:76:0e:7d:fc:5d:4b:47: d1:53:24:7f:13:a5:ef:d9:ba:1b:ab:9a:d2:e1:83: d1:1a:99:4d:9d:2d:c3:0f:47:f9:b5:99:d3:80:9b: 6e:88:dc:da:57:b9:07:5d:26:e9:67:54:3d:74:65: 90:9b:b5:f4:5a:1b:68:da:02:1a:4a:32:c7:da:5a: 7b:41:63:87:e7:58:82:91:62:f5:56:13:f9:96:61: 9f:fd:60:ea:37:5b:a9:4e:f3:af:28:b6:c9:c8:ed: 9b:96:e1:60:bc:a2:81:d8:5b:b9:12:32:4a:bb:51: 38:95:ec:25:b1:26:41:d5:7c:b6:ba:6e:bd:71:2a: e1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:52:E2:93:21:66:1F:E0:1B:A6:0F:24:C3:3F:C1:5F:11:DF:34:25 X509v3 Authority Key Identifier: keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/FFLikyFmH-Abpg8kwz_BXxHfNCU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.188.168.0/21 Signature Algorithm: sha256WithRSAEncryption 63:2b:0d:a2:4f:0b:14:81:28:f7:1f:c9:3c:77:4e:d3:a7:25: 1f:a7:77:eb:48:eb:44:76:2a:19:dc:d0:05:b5:e3:90:31:bd: 8d:e0:25:21:fe:70:c2:4f:17:12:1f:4b:63:26:b7:8e:29:4c: 5e:ed:18:bb:e0:05:2a:e4:8b:3e:ac:f5:6a:c9:5e:80:a0:c5: 16:71:bc:75:4c:a0:3e:e5:94:43:8a:28:f8:27:67:ed:e7:14: 9b:83:91:ee:fe:3e:41:e8:7d:84:7f:3a:97:68:bd:9a:9b:ae: 68:27:f1:5e:07:e3:69:ae:c2:fc:93:4c:d7:0d:4a:f5:52:a9: 63:a2:3c:64:24:4f:0a:6b:7d:62:31:d1:7b:7d:6e:9a:6c:42: c3:7e:e3:0d:f6:11:72:45:aa:83:dd:b7:8a:62:b0:84:a8:4c: c7:bf:f7:f5:16:df:01:64:23:79:1e:d8:d7:d8:e6:6f:0c:8e: a9:f8:bb:11:33:29:3c:e1:a7:33:62:a3:9e:63:d9:6d:71:9c: 82:bb:74:5b:91:fd:43:c3:ed:54:30:29:14:ad:74:04:19:a6: 5e:e1:89:21:ea:70:66:5b:86:38:b7:55:3e:d5:aa:85:19:4f: 28:55:07:76:7d:a0:88:2b:fb:7c:11:04:96:f2:06:0d:70:9c: 1a:a0:dd:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt261HKJnXz7OUGFBL/eeETMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy NjBhZTUwHhcNMjYwMTAxMDAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDUyZTI5MzIxNjYxZmUwMWJhNjBmMjRjMzNmYzE1ZjExZGYzNDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruqXzUw2WO5V8yZzpJvz8cwA7MEL KicD+KQEgs6U9QrMgCJyqj/V38Dh/hqilaVSktj1mhjTYFeMZxjvxBMaFpx9Y83g IaAc304viX0soLNxrzGgJdkJ79+jJyd8RZeyabaBJoVZTlNcRva6/dxPULs9xFkw LuXE6qsPICwB63YOffxdS0fRUyR/E6Xv2bobq5rS4YPRGplNnS3DD0f5tZnTgJtu iNzaV7kHXSbpZ1Q9dGWQm7X0Whto2gIaSjLH2lp7QWOH51iCkWL1VhP5lmGf/WDq N1upTvOvKLbJyO2bluFgvKKB2Fu5EjJKu1E4lewlsSZB1Xy2um69cSrhEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBRS4pMhZh/gG6YPJMM/wV8R3zQlMB8GA1UdIwQY MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt Zjc0ZDk1MTg1NzZjLzEvRkZMaWt5Rm1ILUFicGc4a3d6X0JYeEhmTkNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDAryoMA0G CSqGSIb3DQEBCwUAA4IBAQBjKw2iTwsUgSj3H8k8d07TpyUfp3frSOtEdioZ3NAF teOQMb2N4CUh/nDCTxcSH0tjJreOKUxe7Ri74AUq5Is+rPVqyV6AoMUWcbx1TKA+ 5ZRDiij4J2ft5xSbg5Hu/j5B6H2EfzqXaL2am65oJ/FeB+NprsL8k0zXDUr1Uqlj ojxkJE8Ka31iMdF7fW6abELDfuMN9hFyRaqD3beKYrCEqEzHv/f1Ft8BZCN5HtjX 2OZvDI6p+LsRMyk84aczYqOeY9ltcZyCu3Rbkf1Dw+1UMCkUrXQEGaZe4Ykh6nBm W4Y4t1U+1aqFGU8oVQd2faCIK/t8EQSW8gYNcJwaoN27 -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:45 2026 by rpki-client