This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/FUAG3jq8oW-DG-4OVip2j9_K6zM.roa File: FUAG3jq8oW-DG-4OVip2j9_K6zM.roa (raw, json) Hash identifier: X1mjWztgnVQSSGLyPzOsDPZqwti1AiSyexfKdPbUPdM= Subject key identifier: 15:40:06:DE:3A:BC:A1:6F:83:1B:EE:0E:56:2A:76:8F:DF:CA:EB:33 Certificate issuer: /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14 Certificate serial: 019B7BA3D0E9FF0890DD682336ED78158D90 Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/FUAG3jq8oW-DG-4OVip2j9_K6zM.roa Signing time: Thu 01 Jan 2026 22:18:11 +0000 ROA not before: Thu 01 Jan 2026 22:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203217 IP address blocks: 93.180.216.0/21 maxlen: 24 93.180.217.0/24 maxlen: 24 93.180.219.0/24 maxlen: 24 93.180.221.0/24 maxlen: 24 138.124.156.0/22 maxlen: 24 144.86.228.0/22 maxlen: 24 144.86.228.0/24 maxlen: 24 185.20.196.0/22 maxlen: 24 185.20.196.0/23 maxlen: 23 185.138.120.0/22 maxlen: 24 185.254.12.0/22 maxlen: 24 195.133.220.0/22 maxlen: 24 195.133.222.0/24 maxlen: 24 195.133.223.0/24 maxlen: 24 199.74.188.0/22 maxlen: 24 199.74.188.0/23 maxlen: 23 199.74.190.0/23 maxlen: 23 199.74.190.0/24 maxlen: 24 199.74.191.0/24 maxlen: 24 2a0b:1880::/29 maxlen: 64 2a0b:1880:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d0:e9:ff:08:90:dd:68:23:36:ed:78:15:8d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14 Validity Not Before: Jan 1 22:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=154006de3abca16f831bee0e562a768fdfcaeb33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e3:36:5e:ed:7f:e3:c5:33:c7:fa:ff:88:e9: b1:bc:7c:2e:e5:c3:c5:8d:6a:31:ef:e2:83:59:97: 88:45:45:e0:4e:d1:a3:3e:64:24:c6:36:18:60:d9: f6:80:ba:b9:bb:c5:b4:1f:84:cd:46:72:77:13:86: cd:81:ce:82:9b:21:76:91:d8:ea:4a:c4:8b:65:b8: d5:46:f1:93:87:af:40:1e:26:2d:90:e3:38:5c:dd: b7:9a:b7:05:d1:8a:ff:99:0f:d4:e3:8a:58:c0:e7: 62:38:cb:a0:0f:6a:6b:c5:7d:1b:55:77:af:b9:75: fb:81:29:f2:97:91:7b:5c:33:26:83:f5:c0:0a:5d: d0:79:40:f7:be:1e:6f:9e:b1:56:4d:58:dd:51:85: e4:31:96:5f:e3:fb:8d:b8:51:4a:ee:0f:3b:90:bd: a4:07:a6:a9:c8:6d:c8:06:e3:08:ef:fd:3f:70:12: 6d:da:50:c2:e6:78:9d:db:3d:d0:57:13:c6:a6:c6: c1:72:e3:55:5d:9f:bd:0e:2b:e2:d0:07:1e:ce:a0: 38:49:e3:7d:0e:28:f8:38:69:3d:9f:15:dd:de:a3: 2f:fa:c4:6f:b2:6a:11:ea:ae:dc:e1:12:ac:e0:ef: 9e:22:32:8f:2e:dc:45:7d:e6:72:4d:bc:89:09:f6: 12:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:40:06:DE:3A:BC:A1:6F:83:1B:EE:0E:56:2A:76:8F:DF:CA:EB:33 X509v3 Authority Key Identifier: keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/FUAG3jq8oW-DG-4OVip2j9_K6zM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.180.216.0/21 138.124.156.0/22 144.86.228.0/22 185.20.196.0/22 185.138.120.0/22 185.254.12.0/22 195.133.220.0/22 199.74.188.0/22 IPv6: 2a0b:1880::/29 Signature Algorithm: sha256WithRSAEncryption 84:ee:19:bc:e2:33:1e:98:01:42:3c:4e:4c:33:9b:1b:90:f7: 67:92:b0:a0:1c:a0:22:20:69:bf:48:aa:f0:c1:c9:11:3a:04: e4:45:bc:3e:64:e6:cd:72:33:47:f9:7e:97:fa:e1:4e:f2:98: 81:e1:b0:70:17:cc:96:77:e4:7f:7e:8a:53:30:72:e4:2a:1b: f9:02:c4:cc:05:6c:c0:2d:b5:d3:7a:a8:4c:44:ad:be:70:53: 7c:b5:de:25:08:5e:fe:c3:5e:c6:fc:87:64:a0:73:6c:e6:04: af:6e:fd:13:49:55:60:35:4a:db:f4:b1:01:30:6c:cf:b4:4b: 3c:a8:21:6c:76:bd:b6:3b:0c:7e:cc:8d:ca:27:4c:97:0a:3e: d0:12:2d:05:1c:13:1b:70:ad:2d:a3:c0:53:56:ce:63:8d:e2: 4c:8f:86:b9:4f:b8:93:4d:01:35:81:ea:6a:81:d0:97:4a:57: 1c:98:3f:37:f2:5b:67:2a:d5:70:cb:f9:be:99:43:74:02:80: 20:c4:a0:ec:01:74:9c:e2:67:76:bd:1a:c7:99:f1:a9:30:11: 80:28:ab:77:72:14:83:b7:52:46:dd:f4:22:e1:6e:f3:db:b6: ff:55:f8:e0:df:f3:1c:5b:e7:b0:5c:83:8d:c0:9d:a5:a8:7a: 9b:df:70:59 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt7o9Dp/wiQ3WgjNu14FY2QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTRkOWU0MWVhNWUyZDE2MWI3YzRjZGIyZTQ3MDJjNGYy NDhlMTQwHhcNMjYwMTAxMjIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTQwMDZkZTNhYmNhMTZmODMxYmVlMGU1NjJhNzY4ZmRmY2FlYjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+M2Xu1/48Uzx/r/iOmxvHwu5cPF jWox7+KDWZeIRUXgTtGjPmQkxjYYYNn2gLq5u8W0H4TNRnJ3E4bNgc6CmyF2kdjq SsSLZbjVRvGTh69AHiYtkOM4XN23mrcF0Yr/mQ/U44pYwOdiOMugD2prxX0bVXev uXX7gSnyl5F7XDMmg/XACl3QeUD3vh5vnrFWTVjdUYXkMZZf4/uNuFFK7g87kL2k B6apyG3IBuMI7/0/cBJt2lDC5nid2z3QVxPGpsbBcuNVXZ+9Divi0AcezqA4SeN9 Dij4OGk9nxXd3qMv+sRvsmoR6q7c4RKs4O+eIjKPLtxFfeZyTbyJCfYSxQIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFBVABt46vKFvgxvuDlYqdo/fyuszMB8GA1UdIwQY MBaAFO9U2eQepeLRYbfEzbLkcCxPJI4UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzIt ZmJjNmZjYjVlN2E2LzEvRlVBRzNqcThvVy1ERy00T1ZpcDJqOV9LNnpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzItZmJjNmZjYjVlN2E2 LzEvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQDXbTYAwQC inycAwQCkFbkAwQCuRTEAwQCuYp4AwQCuf4MAwQCw4XcAwQCx0q8MA0EAgACMAcD BQMqCxiAMA0GCSqGSIb3DQEBCwUAA4IBAQCE7hm84jMemAFCPE5MM5sbkPdnkrCg HKAiIGm/SKrwwckROgTkRbw+ZObNcjNH+X6X+uFO8piB4bBwF8yWd+R/fopTMHLk Khv5AsTMBWzALbXTeqhMRK2+cFN8td4lCF7+w17G/IdkoHNs5gSvbv0TSVVgNUrb 9LEBMGzPtEs8qCFsdr22Owx+zI3KJ0yXCj7QEi0FHBMbcK0to8BTVs5jjeJMj4a5 T7iTTQE1gepqgdCXSlccmD838ltnKtVwy/m+mUN0AoAgxKDsAXSc4md2vRrHmfGp MBGAKKt3chSDt1JG3fQi4W7z27b/Vfjg3/McW+ewXIONwJ2lqHqb33BZ -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:53 2026 by rpki-client