This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/FjGQAKaRuurGzgr9VoWPMOR41vI.roa File: FjGQAKaRuurGzgr9VoWPMOR41vI.roa (raw, json) Hash identifier: CClkHlOvUuNWyulHXfrmg5I7poGO6yyoM1J+FMMaPIc= Subject key identifier: 16:31:90:00:A6:91:BA:EA:C6:CE:0A:FD:56:85:8F:30:E4:78:D6:F2 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F3C236AA9A83EF092ADB9EFC09425 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/FjGQAKaRuurGzgr9VoWPMOR41vI.roa Signing time: Thu 01 Jan 2026 12:19:00 +0000 ROA not before: Thu 01 Jan 2026 12:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209813 IP address blocks: 91.192.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:3c:23:6a:a9:a8:3e:f0:92:ad:b9:ef:c0:94:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16319000a691baeac6ce0afd56858f30e478d6f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2d:5d:ef:4e:29:81:9f:6b:1b:8c:6a:cb:8a: a0:e5:79:5b:5b:5b:4d:00:3a:6d:94:97:1f:9b:28: 89:73:17:b2:c3:81:c1:06:f2:f2:55:6b:22:a3:ce: 71:58:f7:89:8d:cc:b2:0f:86:fb:df:4b:fc:81:29: 3b:25:8a:37:f3:d7:9c:fe:bd:40:02:e0:21:43:29: 8b:e3:c2:97:5a:35:e2:47:f9:44:ce:d8:fb:9a:9a: 32:eb:7a:83:2b:8d:1a:19:c4:4f:d8:90:2e:53:3d: 06:92:47:d4:39:4a:7f:1e:bd:27:a5:b2:6e:5c:c0: 53:9f:4f:6e:77:ab:ef:87:16:7d:1a:c7:8f:c0:e5: c0:43:d7:ff:b0:a9:f3:18:28:83:75:d9:74:3d:25: 3b:0b:10:05:62:d8:2f:fd:f5:ed:70:dd:50:60:a5: 10:d2:c2:22:f2:ec:d9:29:0f:89:e1:f3:7a:d2:5b: b3:8e:03:0f:88:f8:3f:4a:b3:84:5f:70:ab:fb:ae: 8f:96:92:8f:1f:af:2a:02:c2:83:45:e4:c7:aa:10: fd:54:9f:f3:81:a0:21:14:e5:56:2b:15:a1:fe:a4: 42:62:9b:5a:06:2d:6a:ee:e3:5c:71:9f:04:85:88: b5:02:04:31:1a:5c:90:65:5d:66:bb:1e:e1:1e:09: 31:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:31:90:00:A6:91:BA:EA:C6:CE:0A:FD:56:85:8F:30:E4:78:D6:F2 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/FjGQAKaRuurGzgr9VoWPMOR41vI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.95.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:6e:0a:d2:b8:08:92:36:79:22:57:4a:75:7d:ed:03:c1:26: 0c:a9:72:8a:2e:81:a0:89:47:aa:40:10:f4:5a:e3:3d:3b:1b: d0:09:65:b4:c8:30:62:a2:18:94:99:7f:a1:6a:84:4e:1b:ec: cc:c1:a4:2f:6f:5f:2e:0a:9e:f8:27:57:fa:f8:54:13:48:9e: ce:5f:fb:76:30:5a:84:89:5e:ad:dc:41:5d:58:63:70:79:e8: 6f:65:09:a0:98:a2:2d:da:a9:f8:6c:b0:38:80:36:d5:4a:00: 1f:d9:30:07:20:43:93:1a:56:a2:59:c1:6e:15:ef:d5:16:52: 8e:9c:60:c5:4e:94:51:83:2a:4b:2a:b6:e8:a8:ec:2e:c7:e1: e1:a3:df:28:6d:85:c6:f7:86:3d:eb:a8:4e:5a:b3:29:b8:c7: 85:c8:ca:78:8c:93:a1:2e:f2:30:e0:b1:7f:2c:47:0f:7a:d9: 5e:14:15:83:5c:56:ea:92:8a:4d:84:1a:ca:20:d0:d8:15:86: c0:9e:ad:59:a1:ff:9e:8e:4e:01:a1:c9:b5:95:8d:b8:f3:da: 2c:0f:d6:69:c0:0e:08:d2:9b:54:55:20:56:25:15:9a:cb:f0: 18:44:c8:19:f6:08:5f:8c:b0:b9:df:ca:1d:9b:bf:4e:4f:e1: 25:da:11:5a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fzwjaqmoPvCSrbnvwJQlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjMxOTAwMGE2OTFiYWVhYzZjZTBhZmQ1Njg1OGYzMGU0NzhkNmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC1d704pgZ9rG4xqy4qg5XlbW1tN ADptlJcfmyiJcxeyw4HBBvLyVWsio85xWPeJjcyyD4b730v8gSk7JYo389ec/r1A AuAhQymL48KXWjXiR/lEztj7mpoy63qDK40aGcRP2JAuUz0GkkfUOUp/Hr0npbJu XMBTn09ud6vvhxZ9GsePwOXAQ9f/sKnzGCiDddl0PSU7CxAFYtgv/fXtcN1QYKUQ 0sIi8uzZKQ+J4fN60luzjgMPiPg/SrOEX3Cr+66PlpKPH68qAsKDReTHqhD9VJ/z gaAhFOVWKxWh/qRCYptaBi1q7uNccZ8EhYi1AgQxGlyQZV1mux7hHgkxYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBYxkACmkbrqxs4K/VaFjzDkeNbyMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvRmpHUUFLYVJ1dXJHemdyOVZvV1BNT1I0MXZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8BfMA0G CSqGSIb3DQEBCwUAA4IBAQBNbgrSuAiSNnkiV0p1fe0DwSYMqXKKLoGgiUeqQBD0 WuM9OxvQCWW0yDBiohiUmX+haoROG+zMwaQvb18uCp74J1f6+FQTSJ7OX/t2MFqE iV6t3EFdWGNweehvZQmgmKIt2qn4bLA4gDbVSgAf2TAHIEOTGlaiWcFuFe/VFlKO nGDFTpRRgypLKrboqOwux+Hho98obYXG94Y966hOWrMpuMeFyMp4jJOhLvIw4LF/ LEcPetleFBWDXFbqkopNhBrKINDYFYbAnq1Zof+ejk4Bocm1lY2489osD9ZpwA4I 0ptUVSBWJRWay/AYRMgZ9ghfjLC538odm79OT+El2hFa -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:12 2026 by rpki-client