This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/Fg4rHW1_FlNII_ioYNijYnqmMqY.roa File: Fg4rHW1_FlNII_ioYNijYnqmMqY.roa (raw, json) Hash identifier: fG/yspbJeL7KGcwUQD3gQTj48zf549RUV9KM9TsNIo4= Subject key identifier: 16:0E:2B:1D:6D:7F:16:53:48:23:F8:A8:60:D8:A3:62:7A:A6:32:A6 Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff Certificate serial: 019B7F8338B6DEB09B15EAAE5FBBBF39995C Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/Fg4rHW1_FlNII_ioYNijYnqmMqY.roa Signing time: Fri 02 Jan 2026 16:21:04 +0000 ROA not before: Fri 02 Jan 2026 16:21:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200176 IP address blocks: 88.199.44.0/24 maxlen: 24 88.199.53.0/24 maxlen: 24 88.199.54.0/23 maxlen: 23 88.199.128.0/23 maxlen: 23 88.199.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:38:b6:de:b0:9b:15:ea:ae:5f:bb:bf:39:99:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff Validity Not Before: Jan 2 16:21:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=160e2b1d6d7f16534823f8a860d8a3627aa632a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d2:d1:ad:56:46:c7:22:ca:17:3f:d0:f4:38: 87:ab:28:09:8d:86:75:1c:a7:76:10:88:ed:8a:2b: f2:44:b6:ea:d4:18:25:6b:66:93:0f:bc:6a:88:4a: bc:fe:60:37:b9:e8:a2:66:0c:1b:a2:ab:70:e3:01: f7:64:4f:a2:6e:e7:ff:ab:53:d2:be:b7:24:3a:33: a0:58:a1:1b:2c:a9:a5:01:b8:0f:7d:7f:d9:95:90: 0a:1e:33:91:93:95:18:a7:37:fc:f1:42:7e:ae:04: 9e:35:20:7f:7e:16:e3:89:d8:18:c2:f6:c8:6a:0a: b6:27:3f:4a:72:f8:6e:10:10:ac:8d:d7:00:97:2f: b0:35:0e:92:18:28:fd:ec:21:e6:00:b0:d4:47:2e: 33:ab:f4:00:ca:ba:95:24:e6:55:26:a8:5d:90:ed: f7:b9:e0:8e:c1:6f:50:59:a8:56:f6:de:3a:15:7e: da:44:52:42:6f:db:a5:0c:65:54:72:8a:29:b3:fc: 3a:09:7d:bd:96:a1:d3:9c:fb:04:cb:2b:c4:2f:c5: d0:19:dc:7f:c9:e4:52:11:1a:8f:73:59:1e:2c:4f: 61:16:5c:8d:17:d3:2e:ee:6b:37:34:7a:dd:32:59: ad:5f:89:73:f5:5b:9b:fb:c6:b3:fe:c2:d6:28:e2: 44:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:0E:2B:1D:6D:7F:16:53:48:23:F8:A8:60:D8:A3:62:7A:A6:32:A6 X509v3 Authority Key Identifier: keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/Fg4rHW1_FlNII_ioYNijYnqmMqY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.199.44.0/24 88.199.53.0-88.199.55.255 88.199.128.0-88.199.130.255 Signature Algorithm: sha256WithRSAEncryption 26:c6:46:0e:cd:1f:0d:e4:12:65:77:10:f7:87:79:55:67:a8: c3:b4:b5:6f:7c:0c:6c:5e:fe:14:a6:88:45:58:0a:d8:ea:dc: 58:c7:25:50:44:fa:04:20:5a:b4:5e:84:f1:92:2c:22:39:08: 12:32:11:74:1d:0a:c0:14:85:74:41:1f:e0:4b:b8:45:35:f2: 50:71:53:62:35:ea:9b:e3:49:a1:55:a5:bb:42:28:62:6a:1e: 12:36:d7:11:4c:c2:79:d8:50:06:5e:a0:47:88:6a:86:2d:db: 3e:a8:83:75:9c:e3:4e:f9:9a:97:b7:1a:1a:00:a3:2c:dc:83: 28:70:b6:8c:e8:d8:27:0e:a8:58:2f:55:3c:7d:52:20:cd:22: 9c:75:06:f9:ae:3d:f7:92:d1:1d:2d:9f:43:e0:ca:48:f4:d4: b6:85:3c:6d:62:b5:1a:73:dc:31:2b:30:40:f8:58:3c:3b:c3: ec:96:fd:ea:d3:43:10:73:5b:04:ce:4a:84:61:e6:f8:8e:01: b7:0a:c2:39:7c:5c:c5:e3:a2:f3:4b:66:54:03:06:2e:b6:a5: a6:c8:c5:fc:82:60:28:6e:76:73:20:15:85:86:47:c6:79:1c: 5c:f3:72:31:8f:df:57:ed:c3:3a:5d:1e:71:44:b8:6d:71:f5: b5:38:5b:2e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt/gzi23rCbFequX7u/OZlcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OTMwMWRjYzdmYWU0ZjdjZTAxZTQ5ODdhNzdjYjgyYTMz NmFiZmYwHhcNMjYwMTAyMTYyMTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjBlMmIxZDZkN2YxNjUzNDgyM2Y4YTg2MGQ4YTM2MjdhYTYzMmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9LRrVZGxyLKFz/Q9DiHqygJjYZ1 HKd2EIjtiivyRLbq1Bgla2aTD7xqiEq8/mA3ueiiZgwboqtw4wH3ZE+ibuf/q1PS vrckOjOgWKEbLKmlAbgPfX/ZlZAKHjORk5UYpzf88UJ+rgSeNSB/fhbjidgYwvbI agq2Jz9KcvhuEBCsjdcAly+wNQ6SGCj97CHmALDURy4zq/QAyrqVJOZVJqhdkO33 ueCOwW9QWahW9t46FX7aRFJCb9ulDGVUcoops/w6CX29lqHTnPsEyyvEL8XQGdx/ yeRSERqPc1keLE9hFlyNF9Mu7ms3NHrdMlmtX4lz9Vub+8az/sLWKOJE+QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBYOKx1tfxZTSCP4qGDYo2J6pjKmMB8GA1UdIwQY MBaAFBeTAdzH+uT3zgHkmHp3y4KjNqv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjVNQjNNZjY1UGZPQWVTWWVuZkxncU0ycV84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9lZDc5NjMtNzJlYS00YzFkLWFkZGQt YWZmOTJjMTZkOGUzLzEvRmc0ckhXMV9GbE5JSV9pb1lOaWpZbnFtTXFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9lZDc5NjMtNzJlYS00YzFkLWFkZGQtYWZmOTJjMTZkOGUz LzEvRjVNQjNNZjY1UGZPQWVTWWVuZkxncU0ycV84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQAWMcsMAwD BABYxzUDBANYxzAwDAMEB1jHgAMEAFjHgjANBgkqhkiG9w0BAQsFAAOCAQEAJsZG Ds0fDeQSZXcQ94d5VWeow7S1b3wMbF7+FKaIRVgK2OrcWMclUET6BCBatF6E8ZIs IjkIEjIRdB0KwBSFdEEf4Eu4RTXyUHFTYjXqm+NJoVWlu0IoYmoeEjbXEUzCedhQ Bl6gR4hqhi3bPqiDdZzjTvmal7caGgCjLNyDKHC2jOjYJw6oWC9VPH1SIM0inHUG +a4995LRHS2fQ+DKSPTUtoU8bWK1GnPcMSswQPhYPDvD7Jb96tNDEHNbBM5KhGHm +I4BtwrCOXxcxeOi80tmVAMGLralpsjF/IJgKG52cyAVhYZHxnkcXPNyMY/fV+3D Ol0ecUS4bXH1tThbLg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:05:12 2026 by rpki-client