This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/FjqNBhyOvc--Gk1Rgu5YI5cRsWU.roa File: FjqNBhyOvc--Gk1Rgu5YI5cRsWU.roa (raw, json) Hash identifier: YX0wEIroArcfrMK0kLF5yqvQRyMMkmkLMUF5gri9v8k= Subject key identifier: 16:3A:8D:06:1C:8E:BD:CF:BE:1A:4D:51:82:EE:58:23:97:11:B1:65 Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 019B79ED1E4260D8F6A26F42C0058ECC32A4 Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/FjqNBhyOvc--Gk1Rgu5YI5cRsWU.roa Signing time: Thu 01 Jan 2026 14:19:01 +0000 ROA not before: Thu 01 Jan 2026 14:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202122 IP address blocks: 92.61.224.0/23 maxlen: 23 92.61.224.0/24 maxlen: 24 92.61.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:1e:42:60:d8:f6:a2:6f:42:c0:05:8e:cc:32:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Jan 1 14:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=163a8d061c8ebdcfbe1a4d5182ee58239711b165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ec:d9:26:2e:09:19:5c:f2:46:77:bc:ed:d2: 4e:1d:a3:57:f7:00:e8:d2:dd:d3:44:85:ac:2f:e6: e2:88:62:07:bd:62:58:a5:d6:94:2d:c2:27:32:ad: 97:06:b5:17:ed:54:bb:93:c5:b7:36:8e:aa:bd:44: b4:5e:f8:5b:ee:fb:72:df:2d:11:90:e9:8d:f4:42: fc:09:93:a6:89:7a:29:af:86:e6:17:c1:55:46:68: 60:8f:ad:de:e1:0b:57:86:59:6d:8c:c3:a8:7b:e0: 30:37:09:c6:de:31:c9:d9:c2:c3:8c:6f:73:26:6f: f5:34:4a:4e:85:30:59:ee:c6:13:ad:b8:96:b0:f7: d2:e6:dd:33:98:90:db:0a:92:96:82:26:ac:a6:66: 32:17:6f:aa:26:60:d5:a9:c4:fe:63:4b:bb:1d:fc: 1b:d2:18:c7:67:95:d9:25:7a:b4:11:6d:fa:08:6a: 3e:84:65:1f:c7:af:95:8a:8a:ed:95:7f:3c:05:3a: d6:1d:b4:a4:51:ef:76:20:be:9a:1c:8b:1a:a8:a6: 27:e3:8c:22:a6:1b:40:21:91:fc:f9:1e:85:d8:03: 86:be:e6:91:ec:9f:84:91:c9:6a:6d:a3:4b:b8:48: b9:36:5e:a7:0d:18:ab:00:0c:73:21:16:4f:3b:d3: 21:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:3A:8D:06:1C:8E:BD:CF:BE:1A:4D:51:82:EE:58:23:97:11:B1:65 X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/FjqNBhyOvc--Gk1Rgu5YI5cRsWU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.61.224.0/23 Signature Algorithm: sha256WithRSAEncryption b2:94:6e:11:f3:85:70:b0:7a:3a:48:c2:d3:a4:aa:fd:0b:4b: bd:3f:f2:22:98:21:16:1d:f0:85:c6:d1:b8:29:33:6b:71:cc: 1d:22:73:9e:6e:fd:dc:d2:d3:91:7f:01:91:e4:40:35:37:04: 54:10:a1:8a:f2:6c:7d:21:c5:8a:03:31:b9:08:8d:a2:e9:e8: 4e:42:ad:4e:df:f2:58:77:d3:cb:c6:da:85:65:77:5e:fa:b2: dc:24:f1:40:ed:df:4c:af:65:de:93:0d:c0:be:6f:17:40:3c: f6:f2:63:e2:a3:e7:17:80:b1:45:fa:b8:45:e7:5f:bd:2b:8d: 5c:9e:fb:2e:7b:f8:2b:e4:b0:89:fa:2e:d3:a7:e2:15:eb:b6: 25:4d:3d:80:e1:78:9c:5e:6a:e3:92:da:f3:83:01:fb:f3:f1: 3e:48:ee:72:e8:ea:2d:db:ca:53:86:a6:3a:d8:a0:6c:fe:01: 1d:2a:25:87:d0:2b:2d:4d:1a:ec:dd:0c:74:19:4b:69:28:3e: 83:42:cc:8f:16:7a:26:5b:19:34:8a:18:cb:eb:fe:3e:ff:2e: 21:75:dc:6d:99:6e:f9:99:44:41:ca:72:3b:ca:1e:c6:e1:10: 3e:11:da:43:33:c0:35:54:67:21:cd:ce:ce:42:e3:02:e2:e3: cc:22:8e:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57R5CYNj2om9CwAWOzDKkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjYwMTAxMTQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjNhOGQwNjFjOGViZGNmYmUxYTRkNTE4MmVlNTgyMzk3MTFiMTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOzZJi4JGVzyRne87dJOHaNX9wDo 0t3TRIWsL+biiGIHvWJYpdaULcInMq2XBrUX7VS7k8W3No6qvUS0Xvhb7vty3y0R kOmN9EL8CZOmiXopr4bmF8FVRmhgj63e4QtXhlltjMOoe+AwNwnG3jHJ2cLDjG9z Jm/1NEpOhTBZ7sYTrbiWsPfS5t0zmJDbCpKWgiaspmYyF2+qJmDVqcT+Y0u7Hfwb 0hjHZ5XZJXq0EW36CGo+hGUfx6+ViortlX88BTrWHbSkUe92IL6aHIsaqKYn44wi phtAIZH8+R6F2AOGvuaR7J+EkclqbaNLuEi5Nl6nDRirAAxzIRZPO9Mh+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBY6jQYcjr3PvhpNUYLuWCOXEbFlMB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvRmpxTkJoeU92Yy0tR2sxUmd1NVlJNWNSc1dVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXD3gMA0G CSqGSIb3DQEBCwUAA4IBAQCylG4R84VwsHo6SMLTpKr9C0u9P/IimCEWHfCFxtG4 KTNrccwdInOebv3c0tORfwGR5EA1NwRUEKGK8mx9IcWKAzG5CI2i6ehOQq1O3/JY d9PLxtqFZXde+rLcJPFA7d9Mr2Xekw3Avm8XQDz28mPio+cXgLFF+rhF51+9K41c nvsue/gr5LCJ+i7Tp+IV67YlTT2A4XicXmrjktrzgwH78/E+SO5y6Oot28pThqY6 2KBs/gEdKiWH0CstTRrs3Qx0GUtpKD6DQsyPFnomWxk0ihjL6/4+/y4hddxtmW75 mURBynI7yh7G4RA+EdpDM8A1VGchzc7OQuMC4uPMIo4U -----END CERTIFICATE-----Generated at Sun Jan 25 11:45:11 2026 by rpki-client