This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FW0z1ONAZ9IwYhhbSQdPi9s0gdA.roa File: FW0z1ONAZ9IwYhhbSQdPi9s0gdA.roa (raw, json) Hash identifier: mtjj9GAr+GLeDGKmZ5p8MFn+07KTPp4+NZ2sLtXzxlc= Subject key identifier: 15:6D:33:D4:E3:40:67:D2:30:62:18:5B:49:07:4F:8B:DB:34:81:D0 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F850CCD86227E12D545BE0773C0EACC Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FW0z1ONAZ9IwYhhbSQdPi9s0gdA.roa Signing time: Fri 02 Jan 2026 16:23:04 +0000 ROA not before: Fri 02 Jan 2026 16:23:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210616 IP address blocks: 93.171.184.0/22 maxlen: 24 146.120.52.0/22 maxlen: 24 146.120.116.0/23 maxlen: 24 146.158.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:0c:cd:86:22:7e:12:d5:45:be:07:73:c0:ea:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=156d33d4e34067d23062185b49074f8bdb3481d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9b:4c:e8:21:b3:7a:d9:b6:33:c4:5b:b4:3b: 90:fa:56:c5:35:9a:b1:07:6b:80:e3:d1:a4:17:43: ab:7f:a1:34:3a:e5:26:fc:0e:4d:a6:13:40:d7:08: 19:de:d7:d0:1d:6b:2e:af:d4:fe:73:d8:84:90:b5: 34:98:ab:c8:8b:bf:27:1d:31:f1:d1:5b:9d:10:13: cf:f5:d5:7b:4b:7f:c4:e7:e1:90:e2:08:25:c3:96: b1:c9:00:eb:ee:a5:6f:ea:b3:16:82:4c:c8:55:67: 32:a7:c6:16:41:f3:0c:c6:fd:16:2a:d8:14:99:3c: 53:f1:74:ab:8a:34:e0:37:3b:68:7f:d0:ec:fe:43: 8b:f7:30:c9:f7:32:0e:cf:47:1b:8e:2d:dd:d0:2c: c4:d9:c5:2c:39:d5:e0:df:e0:fb:30:f5:73:db:91: f1:a3:2f:00:29:34:cb:f4:0c:15:06:7e:e7:f0:8e: 9f:c7:11:56:21:f6:0f:9c:79:ec:fb:10:49:fa:24: 14:02:51:d3:2c:54:fc:25:2f:13:58:e5:8b:ec:16: 53:c4:91:83:8d:ad:56:47:b6:21:1b:96:17:81:25: f8:15:e9:e1:70:f9:ce:df:e5:31:f8:32:4a:21:02: 9a:3e:ae:87:ab:48:7a:e6:59:31:2e:6f:b2:7b:49: 4c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6D:33:D4:E3:40:67:D2:30:62:18:5B:49:07:4F:8B:DB:34:81:D0 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FW0z1ONAZ9IwYhhbSQdPi9s0gdA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.171.184.0/22 146.120.52.0/22 146.120.116.0/23 146.158.96.0/19 Signature Algorithm: sha256WithRSAEncryption 79:b3:11:56:a4:41:fc:6f:6b:58:a2:7f:bb:c5:71:ba:d4:be: d3:96:26:96:78:b7:19:dc:d9:13:49:f3:b0:e0:9a:3a:1b:cf: 8a:d7:6e:51:51:d9:b8:bb:60:ea:d6:b1:01:0a:ea:3d:df:6a: 15:0c:65:e5:ea:a0:f3:d9:26:57:56:93:b3:c6:f6:f3:b1:5c: 96:10:66:ee:2c:6b:8d:f1:0b:32:9c:cc:7f:13:b6:59:e7:8d: 64:85:04:03:10:9c:a2:0a:25:a8:0d:65:32:64:e2:09:44:ad: ce:a9:dc:11:32:5b:d3:f2:1e:be:de:ed:9f:1d:cb:d1:1d:d7: bf:6f:5e:c8:a7:e4:0e:f8:34:0c:dc:e7:bb:eb:3f:03:0b:ba: 15:00:9f:25:31:9d:a1:0f:b9:bb:1c:f8:62:49:62:ae:9d:de: 1b:cf:c7:c0:1d:63:ee:7b:be:4b:73:03:84:e8:44:ce:d6:9c: e7:13:9c:ec:64:0c:ef:a4:9e:93:ce:6f:96:98:34:11:55:83: da:17:92:f1:b3:ec:83:5a:c0:8a:b4:ed:a9:a0:f8:17:30:d0: 8f:95:48:3d:80:fb:7a:98:5c:76:3b:84:b5:9a:1f:41:d3:89: 35:35:4d:93:65:5d:f6:ee:47:5d:86:47:2a:8f:fb:a7:00:c1: ed:2b:23:00 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/hQzNhiJ+EtVFvgdzwOrMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTZkMzNkNGUzNDA2N2QyMzA2MjE4NWI0OTA3NGY4YmRiMzQ4MWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZtM6CGzetm2M8RbtDuQ+lbFNZqx B2uA49GkF0Orf6E0OuUm/A5NphNA1wgZ3tfQHWsur9T+c9iEkLU0mKvIi78nHTHx 0VudEBPP9dV7S3/E5+GQ4gglw5axyQDr7qVv6rMWgkzIVWcyp8YWQfMMxv0WKtgU mTxT8XSrijTgNztof9Ds/kOL9zDJ9zIOz0cbji3d0CzE2cUsOdXg3+D7MPVz25Hx oy8AKTTL9AwVBn7n8I6fxxFWIfYPnHns+xBJ+iQUAlHTLFT8JS8TWOWL7BZTxJGD ja1WR7YhG5YXgSX4FenhcPnO3+Ux+DJKIQKaPq6Hq0h65lkxLm+ye0lM2wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFBVtM9TjQGfSMGIYW0kHT4vbNIHQMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvRlcwejFPTkFaOUl3WWhoYlNRZFBpOXMwZ2RBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCXau4AwQC kng0AwQBknh0AwQFkp5gMA0GCSqGSIb3DQEBCwUAA4IBAQB5sxFWpEH8b2tYon+7 xXG61L7TliaWeLcZ3NkTSfOw4Jo6G8+K125RUdm4u2Dq1rEBCuo932oVDGXl6qDz 2SZXVpOzxvbzsVyWEGbuLGuN8QsynMx/E7ZZ541khQQDEJyiCiWoDWUyZOIJRK3O qdwRMlvT8h6+3u2fHcvRHde/b17Ip+QO+DQM3Oe76z8DC7oVAJ8lMZ2hD7m7HPhi SWKund4bz8fAHWPue75LcwOE6ETO1pznE5zsZAzvpJ6Tzm+WmDQRVYPaF5Lxs+yD WsCKtO2poPgXMNCPlUg9gPt6mFx2O4S1mh9B04k1NU2TZV327kddhkcqj/unAMHt KyMA -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:42 2026 by rpki-client