This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/FiKj8ScLx1ATx_rGZ7SGgclIc6s.roa File: FiKj8ScLx1ATx_rGZ7SGgclIc6s.roa (raw, json) Hash identifier: xRch7fJVmZ0aIJvLTTrTe6WF/gV2dip1dza26YmqWck= Subject key identifier: 16:22:A3:F1:27:0B:C7:50:13:C7:FA:C6:67:B4:86:81:C9:48:73:AB Certificate issuer: /CN=dc899c28664ee8194a64048e46c60c6e5f190c53 Certificate serial: 019B7835114D12F5B2143D3B5AEDF30050D0 Authority key identifier: DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/FiKj8ScLx1ATx_rGZ7SGgclIc6s.roa Signing time: Thu 01 Jan 2026 06:18:22 +0000 ROA not before: Thu 01 Jan 2026 06:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8680 IP address blocks: 185.70.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:11:4d:12:f5:b2:14:3d:3b:5a:ed:f3:00:50:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc899c28664ee8194a64048e46c60c6e5f190c53 Validity Not Before: Jan 1 06:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1622a3f1270bc75013c7fac667b48681c94873ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3b:c7:0d:ba:2e:9f:19:c5:33:0c:b2:c6:8b: 5b:7c:d1:36:65:b2:6c:f5:2a:60:13:05:5c:9e:2a: 71:9a:c1:a4:83:a9:60:7d:e8:9d:92:5c:48:04:2f: 58:d5:52:7c:cf:a7:db:0b:20:ab:e2:25:7a:8e:84: ac:0c:c8:0f:40:48:10:76:49:5a:f9:5c:be:bc:0b: fd:58:d7:ff:0f:a7:39:e4:5c:93:74:53:be:40:74: 57:99:d6:6e:a8:94:49:ce:a1:1a:ce:f0:67:2a:1a: 99:4e:47:44:4c:b6:0a:b5:37:6a:c0:60:6c:08:61: 1d:35:64:8c:9c:b8:02:fa:01:37:88:10:6f:0e:76: f0:99:1e:be:f5:d1:c6:5b:a5:67:8f:b3:82:63:4f: e8:4b:aa:75:f1:f7:fe:c5:01:ae:b6:7e:51:d2:66: bd:af:48:15:5a:2d:71:a7:66:29:70:45:10:ff:44: a9:13:0b:30:63:71:f8:4e:54:8d:d1:b8:22:13:6a: 32:f1:f1:88:5c:fa:03:88:06:f6:c3:df:4e:c1:9b: c6:5b:de:f2:c2:c0:12:3a:93:a3:a6:6b:65:44:3e: f0:89:cf:c1:b1:6f:b1:78:c6:06:e8:38:90:83:2c: 03:49:9a:cc:51:45:b7:d6:dc:8b:7e:3f:b0:d0:3e: a9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:22:A3:F1:27:0B:C7:50:13:C7:FA:C6:67:B4:86:81:C9:48:73:AB X509v3 Authority Key Identifier: keyid:DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/FiKj8ScLx1ATx_rGZ7SGgclIc6s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.70.158.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:fb:35:5a:2f:92:eb:b1:24:07:dd:5b:4c:0e:63:d5:9b:0c: 95:1b:e1:01:e0:b8:ba:21:1e:33:b3:42:fb:87:f9:26:f5:4d: 8f:f8:94:a4:43:3a:61:be:38:49:1f:08:36:8c:7e:c0:16:06: c9:51:d1:86:1d:b2:7b:78:3c:f9:7f:e4:7d:ab:bb:ef:fa:05: ed:5c:50:7d:bf:14:ad:19:24:03:f2:b6:31:fe:69:76:c2:c1: 08:fb:71:25:52:9e:2a:60:c0:d9:25:7e:7f:1c:cb:70:3f:13: c1:bb:68:af:b6:d3:0b:0d:e5:d7:a6:5b:2d:d1:24:ac:c2:c4: 57:11:02:fa:96:6b:1d:6e:ef:af:8f:8d:20:a4:8e:04:9b:51: 8b:d1:39:31:0a:c1:cf:60:df:ed:ff:33:50:47:ff:a4:9f:1c: 37:86:62:1f:08:6f:a0:b4:dd:1b:ef:83:b3:0a:0a:4c:b6:5a: ec:04:c1:70:15:e8:4b:17:1b:85:2f:98:79:21:df:29:0f:f4: dd:50:2c:a1:13:36:3a:00:65:47:a2:16:dc:0a:02:43:9e:ff: 33:f1:25:b9:8f:aa:2c:76:48:c2:2e:d3:b5:94:06:3d:5c:2d: ce:5e:a0:08:e8:ca:c1:fc:4b:7e:25:74:d2:51:d5:d4:3a:0a: 46:f7:6e:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NRFNEvWyFD07Wu3zAFDQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjODk5YzI4NjY0ZWU4MTk0YTY0MDQ4ZTQ2YzYwYzZlNWYx OTBjNTMwHhcNMjYwMTAxMDYxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjIyYTNmMTI3MGJjNzUwMTNjN2ZhYzY2N2I0ODY4MWM5NDg3M2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDvHDbounxnFMwyyxotbfNE2ZbJs 9SpgEwVcnipxmsGkg6lgfeidklxIBC9Y1VJ8z6fbCyCr4iV6joSsDMgPQEgQdkla +Vy+vAv9WNf/D6c55FyTdFO+QHRXmdZuqJRJzqEazvBnKhqZTkdETLYKtTdqwGBs CGEdNWSMnLgC+gE3iBBvDnbwmR6+9dHGW6Vnj7OCY0/oS6p18ff+xQGutn5R0ma9 r0gVWi1xp2YpcEUQ/0SpEwswY3H4TlSN0bgiE2oy8fGIXPoDiAb2w99OwZvGW97y wsASOpOjpmtlRD7wic/BsW+xeMYG6DiQgywDSZrMUUW31tyLfj+w0D6p2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBYio/EnC8dQE8f6xme0hoHJSHOrMB8GA1UdIwQY MBaAFNyJnChmTugZSmQEjkbGDG5fGQxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81NmQ2YTgtMDc1Mi00Y2JkLTg4NDUt NTJmZTEwNTEzMTI5LzEvRmlLajhTY0x4MUFUeF9yR1o3U0dnY2xJYzZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny81NmQ2YTgtMDc1Mi00Y2JkLTg4NDUtNTJmZTEwNTEzMTI5 LzEvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuUaeMA0G CSqGSIb3DQEBCwUAA4IBAQAc+zVaL5LrsSQH3VtMDmPVmwyVG+EB4Li6IR4zs0L7 h/km9U2P+JSkQzphvjhJHwg2jH7AFgbJUdGGHbJ7eDz5f+R9q7vv+gXtXFB9vxSt GSQD8rYx/ml2wsEI+3ElUp4qYMDZJX5/HMtwPxPBu2ivttMLDeXXplst0SSswsRX EQL6lmsdbu+vj40gpI4Em1GL0TkxCsHPYN/t/zNQR/+knxw3hmIfCG+gtN0b74Oz CgpMtlrsBMFwFehLFxuFL5h5Id8pD/TdUCyhEzY6AGVHohbcCgJDnv8z8SW5j6os dkjCLtO1lAY9XC3OXqAI6MrB/Et+JXTSUdXUOgpG926d -----END CERTIFICATE-----Generated at Mon Jan 26 06:28:38 2026 by rpki-client