This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/FLyGvBKQojenrUgcHw5F_vXoR5M.roa File: FLyGvBKQojenrUgcHw5F_vXoR5M.roa (raw, json) Hash identifier: wWH4rrqtCAvj0ZmKjpwrUD3i4tjfNtIEnQMtH9GGPpk= Subject key identifier: 14:BC:86:BC:12:90:A2:37:A7:AD:48:1C:1F:0E:45:FE:F5:E8:47:93 Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 019B79ED25E19415E221A81A6A9554073736 Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/FLyGvBKQojenrUgcHw5F_vXoR5M.roa Signing time: Thu 01 Jan 2026 14:19:03 +0000 ROA not before: Thu 01 Jan 2026 14:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216156 IP address blocks: 94.188.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:25:e1:94:15:e2:21:a8:1a:6a:95:54:07:37:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Jan 1 14:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14bc86bc1290a237a7ad481c1f0e45fef5e84793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:05:fc:60:e8:17:f2:c8:1b:32:e3:29:39:6c: 91:a5:eb:73:d9:8c:a8:2b:a3:e8:01:94:26:f0:e5: 8d:6e:09:5f:be:5f:72:9b:30:1d:6a:bf:01:12:79: f9:6e:7c:8f:67:64:80:34:ec:3a:2a:9e:ba:6f:4d: 64:da:9a:5c:10:75:9d:31:43:f3:cd:f2:1b:b3:86: 79:4b:2f:8c:9a:ee:01:c3:aa:b1:b0:13:59:ea:b4: c7:f8:02:f2:e5:24:d5:2a:80:a1:6d:3c:94:79:5f: 69:b0:34:7c:36:5d:e3:ab:11:a1:02:e2:f5:dd:4a: e8:af:3c:03:65:ea:b4:88:66:fd:c2:68:f1:80:48: 1c:35:aa:80:7c:42:2d:c7:0e:9f:f3:1a:6b:cd:b7: 9e:f3:2e:86:1b:38:e7:19:da:a5:62:f4:44:62:a2: 88:04:6f:af:eb:20:22:2a:6e:74:4f:93:55:9f:6a: 6d:01:b8:a6:8a:f3:af:18:af:34:29:70:7a:2e:2a: 20:e2:66:4f:fc:25:f9:a2:dd:ab:5e:53:5e:40:ae: 27:b0:8b:ec:f4:42:3c:30:6e:d0:07:ed:d7:34:5e: 0b:ed:bf:81:fe:ab:75:54:f2:2b:93:6a:a5:76:69: d4:ad:4a:b3:d0:41:d3:6d:0f:51:42:c1:0f:35:24: 90:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:BC:86:BC:12:90:A2:37:A7:AD:48:1C:1F:0E:45:FE:F5:E8:47:93 X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/FLyGvBKQojenrUgcHw5F_vXoR5M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.188.132.0/24 Signature Algorithm: sha256WithRSAEncryption 31:b7:fc:25:00:72:31:c6:29:ad:bb:73:a7:3e:db:4d:14:45: a7:e8:6f:99:37:8b:fb:26:a6:fc:1f:ca:a8:9d:a0:9a:53:b5: 65:f1:52:5f:0a:50:50:91:61:4b:93:ac:a7:3f:d0:48:d4:01: ad:19:e1:04:a1:8c:c5:e8:28:f0:c9:5f:f1:64:65:fa:8f:5b: 68:a9:e4:11:16:d4:22:7b:01:34:07:74:b2:b7:00:7c:99:8a: ac:65:ff:1b:cc:33:9a:0b:cf:53:d3:5e:20:63:6f:bd:c5:55: 3a:fe:e9:46:b9:7d:7c:cb:37:8e:63:69:68:a6:d3:06:b5:fa: 7c:6f:71:46:70:a5:33:af:c9:4c:cb:b2:bb:37:cc:2d:19:71: 53:55:7c:cf:3f:ba:9e:35:66:7a:b3:ca:e8:47:bf:ae:ac:df: fc:02:4e:91:96:07:15:4c:23:e6:bb:5b:45:bd:79:9c:b2:79: 7b:b8:a2:b0:21:31:5e:52:94:8d:9c:16:d2:37:e8:2a:84:8c: 04:95:6c:d5:c2:7b:2c:00:b2:90:c7:4e:49:20:57:4c:f3:05: ce:fa:53:bd:de:a1:9f:75:63:db:71:5d:ab:68:fa:de:de:5b: 98:7e:69:c6:3e:24:13:8b:20:21:45:73:eb:85:ef:47:01:de: 78:86:33:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57SXhlBXiIagaapVUBzc2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjYwMTAxMTQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGJjODZiYzEyOTBhMjM3YTdhZDQ4MWMxZjBlNDVmZWY1ZTg0NzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AX8YOgX8sgbMuMpOWyRpetz2Yyo K6PoAZQm8OWNbglfvl9ymzAdar8BEnn5bnyPZ2SANOw6Kp66b01k2ppcEHWdMUPz zfIbs4Z5Sy+Mmu4Bw6qxsBNZ6rTH+ALy5STVKoChbTyUeV9psDR8Nl3jqxGhAuL1 3UrorzwDZeq0iGb9wmjxgEgcNaqAfEItxw6f8xprzbee8y6GGzjnGdqlYvREYqKI BG+v6yAiKm50T5NVn2ptAbimivOvGK80KXB6Liog4mZP/CX5ot2rXlNeQK4nsIvs 9EI8MG7QB+3XNF4L7b+B/qt1VPIrk2qldmnUrUqz0EHTbQ9RQsEPNSSQtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBS8hrwSkKI3p61IHB8ORf716EeTMB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvRkx5R3ZCS1FvamVuclVnY0h3NUZfdlhvUjVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXryEMA0G CSqGSIb3DQEBCwUAA4IBAQAxt/wlAHIxximtu3OnPttNFEWn6G+ZN4v7Jqb8H8qo naCaU7Vl8VJfClBQkWFLk6ynP9BI1AGtGeEEoYzF6CjwyV/xZGX6j1toqeQRFtQi ewE0B3SytwB8mYqsZf8bzDOaC89T014gY2+9xVU6/ulGuX18yzeOY2loptMGtfp8 b3FGcKUzr8lMy7K7N8wtGXFTVXzPP7qeNWZ6s8roR7+urN/8Ak6RlgcVTCPmu1tF vXmcsnl7uKKwITFeUpSNnBbSN+gqhIwElWzVwnssALKQx05JIFdM8wXO+lO93qGf dWPbcV2raPre3luYfmnGPiQTiyAhRXPrhe9HAd54hjOv -----END CERTIFICATE-----Generated at Sun Jan 25 10:10:00 2026 by rpki-client