This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/FzGpWZvbvQzmHwZ1mYWzl0OhA6A.roa File: FzGpWZvbvQzmHwZ1mYWzl0OhA6A.roa (raw, json) Hash identifier: V5FzneMXIFpEivxgGPkmTl20CGF3hlX/oPutyNatcaM= Subject key identifier: 17:31:A9:59:9B:DB:BD:0C:E6:1F:06:75:99:85:B3:97:43:A1:03:A0 Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Certificate serial: 019B783452953F1A66CE0A7BB3AEA3D036DE Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/FzGpWZvbvQzmHwZ1mYWzl0OhA6A.roa Signing time: Thu 01 Jan 2026 06:17:33 +0000 ROA not before: Thu 01 Jan 2026 06:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200178 IP address blocks: 212.126.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:52:95:3f:1a:66:ce:0a:7b:b3:ae:a3:d0:36:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Validity Not Before: Jan 1 06:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1731a9599bdbbd0ce61f06759985b39743a103a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e8:07:9a:35:ec:be:11:4a:e1:9c:dc:0c:ac: a0:8b:fa:46:a6:c7:64:57:a9:e6:bd:ca:d5:d6:8b: be:b9:d5:94:e0:2f:0a:f6:52:68:87:83:c7:d4:f3: 94:da:8c:55:98:57:6a:d0:88:fd:e0:29:2d:1d:57: 82:bf:6e:83:78:e0:f2:c7:29:c4:4e:1c:00:f5:f5: c2:99:4f:40:5b:f3:cb:be:7a:41:2c:ab:47:e3:54: e5:a8:c1:bb:af:73:8f:2f:4e:9d:9b:38:42:06:a3: 63:ae:7d:f6:31:a0:ae:1d:3f:2a:79:56:5e:18:1d: 7d:ec:79:7b:19:6a:9b:77:c7:a3:ba:b7:f5:b0:8e: 59:22:0e:9d:ab:98:e8:52:89:cc:8c:0e:70:aa:00: ca:bf:c5:b8:97:99:fb:52:6e:86:85:82:e4:c9:e3: 4b:b0:a8:7e:9c:5e:6b:70:a9:94:81:8e:b9:0e:25: 8f:b0:f5:89:ec:bf:bc:16:b9:a4:76:5a:93:a7:af: 6f:c5:e3:3e:34:0d:3d:1a:89:2b:72:30:1d:d4:55: 73:a6:2f:eb:4a:a9:f3:24:4a:1e:22:8f:5c:2f:40: 92:96:9a:16:27:be:09:8a:40:f0:92:47:1f:71:f4: 66:8b:29:c3:8e:ef:ac:3c:2f:c0:d9:2f:d2:24:38: 8d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:31:A9:59:9B:DB:BD:0C:E6:1F:06:75:99:85:B3:97:43:A1:03:A0 X509v3 Authority Key Identifier: keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/FzGpWZvbvQzmHwZ1mYWzl0OhA6A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.126.112.0/24 Signature Algorithm: sha256WithRSAEncryption 49:5e:47:9e:19:4d:45:54:93:71:f5:7e:c7:94:0f:a7:78:20: 63:da:93:55:e1:24:b6:ce:81:8d:44:a8:77:c0:7e:5b:bb:95: 9b:dc:ce:19:1a:bc:b4:6c:df:a5:84:c5:f0:b5:76:5f:92:4a: 38:a9:49:da:f6:54:8b:62:f8:89:dc:89:33:d9:69:1a:a7:65: 10:94:79:bb:e1:93:91:94:fd:73:96:f9:5f:ec:5c:61:96:f0: ea:e7:23:00:42:b9:a7:56:d1:28:b4:6a:bb:8d:db:45:41:fb: dd:6b:97:b8:7f:a8:03:c8:86:a5:63:e0:32:c7:59:74:11:d8: 1e:02:62:2f:b8:2b:cb:78:1e:aa:a3:5c:b0:78:a1:73:98:64: 9a:a8:d4:45:1d:4b:59:a2:dc:a3:f6:f3:81:fa:6f:5d:b9:d9: c1:05:13:ff:24:f3:5a:24:ce:f6:95:48:3a:b9:75:21:14:13: f6:52:e0:80:be:d2:bd:d2:a9:fc:68:9b:c2:2c:a9:f4:b6:4e: 37:a4:32:53:62:3f:8a:2a:2e:a8:64:ec:a8:95:8c:59:d9:af: 39:f6:73:c6:4b:46:ff:b1:39:06:05:89:a9:47:35:98:1a:08: c7:17:90:cc:cd:b7:57:43:b7:2a:0c:9b:0b:88:b7:fb:f2:9f: 2b:e9:e3:54 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt4NFKVPxpmzgp7s66j0DbeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhY2NiYjcyYWE5ODg0YTViZjhkMGU3NTc0MDRhMTdlNWUy MzMyMmMwHhcNMjYwMTAxMDYxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzMxYTk1OTliZGJiZDBjZTYxZjA2NzU5OTg1YjM5NzQzYTEwM2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOgHmjXsvhFK4ZzcDKygi/pGpsdk V6nmvcrV1ou+udWU4C8K9lJoh4PH1POU2oxVmFdq0Ij94CktHVeCv26DeODyxynE ThwA9fXCmU9AW/PLvnpBLKtH41TlqMG7r3OPL06dmzhCBqNjrn32MaCuHT8qeVZe GB197Hl7GWqbd8ejurf1sI5ZIg6dq5joUonMjA5wqgDKv8W4l5n7Um6GhYLkyeNL sKh+nF5rcKmUgY65DiWPsPWJ7L+8FrmkdlqTp69vxeM+NA09GokrcjAd1FVzpi/r SqnzJEoeIo9cL0CSlpoWJ74JikDwkkcfcfRmiynDju+sPC/A2S/SJDiNswIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFBcxqVmb270M5h8GdZmFs5dDoQOgMB8GA1UdIwQY MBaAFPrMu3KqmISlv40OdXQEoX5eIzIsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1zeTdjcXFZaEtXX2pRNTFkQVNoZmw0ak1pdy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvZThjYjQ0LWE5NTQtNDY3Mi1iOWE0 LWE0OWU1YzY2MzNiZC8xL0Z6R3BXWnZidlF6bUh3WjFtWVd6bDBPaEE2QS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTMvZThjYjQ0LWE5NTQtNDY3Mi1iOWE0LWE0OWU1YzY2MzNi ZC8xLzEtc3k3Y3FxWWhLV19qUTUxZEFTaGZsNGpNaXcuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADUfnAw DQYJKoZIhvcNAQELBQADggEBAEleR54ZTUVUk3H1fseUD6d4IGPak1XhJLbOgY1E qHfAflu7lZvczhkavLRs36WExfC1dl+SSjipSdr2VIti+InciTPZaRqnZRCUebvh k5GU/XOW+V/sXGGW8OrnIwBCuadW0Si0aruN20VB+91rl7h/qAPIhqVj4DLHWXQR 2B4CYi+4K8t4HqqjXLB4oXOYZJqo1EUdS1mi3KP284H6b1252cEFE/8k81okzvaV SDq5dSEUE/ZS4IC+0r3Sqfxom8IsqfS2TjekMlNiP4oqLqhk7KiVjFnZrzn2c8ZL Rv+xOQYFialHNZgaCMcXkMzNt1dDtyoMmwuIt/vynyvp41Q= -----END CERTIFICATE-----Generated at Sun Jan 25 16:13:23 2026 by rpki-client