This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/FMb2DPpUXX8hNoZ84TL7LDdSfws.roa File: FMb2DPpUXX8hNoZ84TL7LDdSfws.roa (raw, json) Hash identifier: aug8+vAEmQzeZkJSA+q/Hd1tLs1kjPG8Zq1qSMTln/Q= Subject key identifier: 14:C6:F6:0C:FA:54:5D:7F:21:36:86:7C:E1:32:FB:2C:37:52:7F:0B Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F84659CCE24D5D6AE1720AD76EDCE67 Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/FMb2DPpUXX8hNoZ84TL7LDdSfws.roa Signing time: Fri 02 Jan 2026 16:22:21 +0000 ROA not before: Fri 02 Jan 2026 16:22:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51703 IP address blocks: 85.153.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:65:9c:ce:24:d5:d6:ae:17:20:ad:76:ed:ce:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14c6f60cfa545d7f2136867ce132fb2c37527f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6c:ce:eb:9e:b8:28:c6:32:c7:15:ff:90:34: de:4a:34:ea:52:41:3e:30:4f:67:61:36:49:3a:43: c4:35:4e:f1:48:ec:e5:52:68:a6:28:e1:b2:32:0e: 5f:cc:4e:e4:f3:a0:38:7a:5d:57:74:ab:47:aa:62: f5:63:0d:3d:56:82:37:0e:1c:72:ba:7d:1d:b9:5a: f1:54:b3:3c:73:e7:22:97:6b:37:55:9e:55:e9:5f: 83:c4:80:c3:00:5d:9a:7c:07:de:6b:b4:64:c0:9b: 4c:e1:3d:1a:cd:1f:59:f7:87:a4:4f:2e:97:41:a6: f4:18:c9:bb:c3:3d:b9:08:36:3d:be:f0:d5:6f:ec: 5e:49:75:30:d8:c6:5b:74:d8:96:19:f5:9a:59:c3: 80:c3:ff:1e:83:80:d9:a6:9c:e1:02:f3:8d:26:7b: 87:17:64:6f:07:53:dd:2f:70:79:17:b0:ee:18:31: b2:ee:e7:2f:a2:20:01:60:08:dc:bc:84:0e:c6:30: c6:44:18:09:9c:ec:81:31:84:e1:4c:7b:1b:b4:b7: cf:2b:12:48:85:09:2b:54:f0:61:ff:d8:b8:bd:dc: 01:75:c3:d9:ef:49:89:8d:8b:f9:c0:fa:f7:2d:95: 5f:9b:fd:c7:1b:18:c3:fc:ba:1b:15:96:69:84:4c: be:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C6:F6:0C:FA:54:5D:7F:21:36:86:7C:E1:32:FB:2C:37:52:7F:0B X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/FMb2DPpUXX8hNoZ84TL7LDdSfws.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.153.131.0/24 Signature Algorithm: sha256WithRSAEncryption 63:e5:0d:3f:f7:93:98:29:00:17:f5:85:a4:31:ef:eb:64:c0: 9c:4c:ac:d1:91:aa:c8:2c:6e:1c:cd:e9:0f:24:23:8a:9a:5d: 51:39:15:e4:82:24:37:bc:20:aa:24:fc:49:38:a2:2f:ba:e2: d5:21:4a:06:02:1d:06:a1:70:57:ed:7c:39:11:35:76:78:40: e1:8c:f0:b3:ef:76:61:45:f4:34:b4:38:c0:04:50:b7:33:b5: 4a:b7:32:90:44:13:c8:88:9e:fb:f4:07:61:73:4b:72:a9:34: fb:a1:40:4d:a5:d8:f9:71:fc:76:89:79:fc:14:c8:3b:1b:c7: 17:b1:d7:00:51:09:ea:6d:d2:ef:00:21:77:2c:83:7e:81:2b: 1c:ea:41:ac:8d:32:43:19:f1:ee:e2:af:ed:42:03:95:26:97: 43:ee:39:88:7c:03:d2:03:08:e2:50:98:d0:72:56:28:02:c3: f8:c3:9b:a9:11:3d:9f:c3:64:c8:71:d2:52:34:a0:98:4b:a3: 3a:18:b0:bf:1b:b3:5c:73:87:b2:99:f0:08:09:41:38:d5:e2: 0d:e7:37:b2:0d:9e:c1:b1:a5:b3:ae:38:32:7a:29:51:5b:f1: df:c9:19:de:2b:7c:47:e3:df:4b:b2:70:47:52:f4:1a:bd:45: 9a:b1:43:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hGWcziTV1q4XIK127c5nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGM2ZjYwY2ZhNTQ1ZDdmMjEzNjg2N2NlMTMyZmIyYzM3NTI3ZjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2zO6564KMYyxxX/kDTeSjTqUkE+ ME9nYTZJOkPENU7xSOzlUmimKOGyMg5fzE7k86A4el1XdKtHqmL1Yw09VoI3Dhxy un0duVrxVLM8c+cil2s3VZ5V6V+DxIDDAF2afAfea7RkwJtM4T0azR9Z94ekTy6X Qab0GMm7wz25CDY9vvDVb+xeSXUw2MZbdNiWGfWaWcOAw/8eg4DZppzhAvONJnuH F2RvB1PdL3B5F7DuGDGy7ucvoiABYAjcvIQOxjDGRBgJnOyBMYThTHsbtLfPKxJI hQkrVPBh/9i4vdwBdcPZ70mJjYv5wPr3LZVfm/3HGxjD/LobFZZphEy+lwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBTG9gz6VF1/ITaGfOEy+yw3Un8LMB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvRk1iMkRQcFVYWDhoTm9aODRUTDdMRGRTZndzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVZmDMA0G CSqGSIb3DQEBCwUAA4IBAQBj5Q0/95OYKQAX9YWkMe/rZMCcTKzRkarILG4czekP JCOKml1RORXkgiQ3vCCqJPxJOKIvuuLVIUoGAh0GoXBX7Xw5ETV2eEDhjPCz73Zh RfQ0tDjABFC3M7VKtzKQRBPIiJ779Adhc0tyqTT7oUBNpdj5cfx2iXn8FMg7G8cX sdcAUQnqbdLvACF3LIN+gSsc6kGsjTJDGfHu4q/tQgOVJpdD7jmIfAPSAwjiUJjQ clYoAsP4w5upET2fw2TIcdJSNKCYS6M6GLC/G7Ncc4eymfAICUE41eIN5zeyDZ7B saWzrjgyeilRW/HfyRneK3xH499LsnBHUvQavUWasUNn -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:32 2026 by rpki-client