This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/FpwLO5eh5uZND9Rc9a0NJsEJMlE.roa File: FpwLO5eh5uZND9Rc9a0NJsEJMlE.roa (raw, json) Hash identifier: ZBw82sV7JoPLg3uztht/b0Wxlmt7VXvzqOWzOlA1JpA= Subject key identifier: 16:9C:0B:3B:97:A1:E6:E6:4D:0F:D4:5C:F5:AD:0D:26:C1:09:32:51 Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba Certificate serial: 019B7EA6661E28C69F4903C96A808165774A Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/FpwLO5eh5uZND9Rc9a0NJsEJMlE.roa Signing time: Fri 02 Jan 2026 12:19:52 +0000 ROA not before: Fri 02 Jan 2026 12:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41318 IP address blocks: 195.168.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:66:1e:28:c6:9f:49:03:c9:6a:80:81:65:77:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba Validity Not Before: Jan 2 12:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=169c0b3b97a1e6e64d0fd45cf5ad0d26c1093251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:23:4c:b8:a5:73:af:7b:0c:aa:45:4e:61:71: 83:18:99:47:d5:69:48:91:92:dd:f4:29:96:a9:9c: 71:d8:4a:f1:d4:d2:e0:ca:e9:fe:97:5c:5f:d4:61: 18:1e:73:a8:a0:26:89:5d:5e:e9:86:24:38:8d:18: 18:01:2d:a2:f6:4a:02:5b:d2:34:5f:a4:ea:f0:eb: cd:37:fe:b0:84:62:d6:93:24:77:02:15:3f:4e:36: 07:20:f7:b7:86:79:a3:25:cf:6a:47:0b:c8:4f:9d: c4:92:b2:74:37:84:9f:54:d0:72:0e:77:67:d9:ce: da:ca:e5:a0:12:56:6a:41:a8:5c:ed:1d:03:87:63: 0c:56:3c:c0:49:f6:5c:50:68:fd:03:3b:48:3c:89: 4a:d5:94:0c:93:a3:25:ee:96:17:15:a1:35:84:19: 5c:02:a1:eb:f9:28:dc:56:d4:27:c2:d5:29:52:2a: 67:45:3e:35:ad:7b:1e:09:33:f1:3a:92:bb:1f:56: c3:de:d7:45:43:c0:b1:08:60:cc:1b:df:75:ff:2b: 2e:74:13:30:92:79:59:6f:7f:64:69:22:fa:8d:8a: ae:68:0c:e8:b7:07:5b:54:25:1c:fc:5b:ac:e6:ea: ff:14:7d:fc:43:8b:e6:b4:79:fd:48:1f:25:6e:3f: 84:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9C:0B:3B:97:A1:E6:E6:4D:0F:D4:5C:F5:AD:0D:26:C1:09:32:51 X509v3 Authority Key Identifier: keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/FpwLO5eh5uZND9Rc9a0NJsEJMlE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.168.208.0/24 Signature Algorithm: sha256WithRSAEncryption 55:c6:17:06:ff:45:87:73:c5:ce:49:17:3e:77:c2:25:ba:82: 2e:56:a8:13:34:12:a3:2c:3d:58:6f:6e:59:ed:19:de:50:6a: ec:fb:02:c3:5f:19:8c:78:60:d4:e7:b2:64:da:52:3c:80:88: ac:7f:64:68:bc:60:1d:73:a5:cf:dd:9d:0f:6c:80:cd:ff:dc: 1f:3f:38:78:0f:7b:85:1d:e9:fa:7f:81:72:cf:37:8e:cd:91: 90:dc:77:ac:ac:ea:92:33:14:e9:ea:ac:7a:77:0e:3f:f2:e9: ef:a5:5c:33:d3:2e:c6:64:c5:8b:38:38:01:54:12:1f:a6:df: c6:82:1c:83:76:34:10:1a:68:97:d8:ee:2f:8d:25:5c:c9:85: 9e:9e:be:da:b3:30:c3:a8:8a:2a:8a:b3:3a:2c:dc:50:ce:1b: b3:a8:87:2f:7c:b3:0c:5a:df:3a:89:2d:f7:69:fa:b3:ee:1c: 43:58:7c:6f:c4:1d:db:b3:02:4b:50:46:ce:f8:a0:e4:2c:0a: 1d:b2:f5:2b:15:cc:d2:fe:58:2d:bb:b5:4a:c4:45:6a:ac:57: ce:bd:6f:59:71:c3:42:84:cc:24:6b:eb:7f:15:e3:ac:45:a3: 43:da:a4:26:c5:e3:4b:6e:df:a8:97:05:ab:fd:6e:93:84:46: c3:b5:03:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pmYeKMafSQPJaoCBZXdKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Zjg4MTQwMWFiYWNjODhjOTQxZmRmNzQwZjFhYjE1MzZm MDVkYmEwHhcNMjYwMTAyMTIxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjljMGIzYjk3YTFlNmU2NGQwZmQ0NWNmNWFkMGQyNmMxMDkzMjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyNMuKVzr3sMqkVOYXGDGJlH1WlI kZLd9CmWqZxx2Erx1NLgyun+l1xf1GEYHnOooCaJXV7phiQ4jRgYAS2i9koCW9I0 X6Tq8OvNN/6whGLWkyR3AhU/TjYHIPe3hnmjJc9qRwvIT53EkrJ0N4SfVNByDndn 2c7ayuWgElZqQahc7R0Dh2MMVjzASfZcUGj9AztIPIlK1ZQMk6Ml7pYXFaE1hBlc AqHr+SjcVtQnwtUpUipnRT41rXseCTPxOpK7H1bD3tdFQ8CxCGDMG991/ysudBMw knlZb39kaSL6jYquaAzotwdbVCUc/Fus5ur/FH38Q4vmtHn9SB8lbj+EgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBacCzuXoebmTQ/UXPWtDSbBCTJRMB8GA1UdIwQY MBaAFOf4gUAausyIyUH990DxqxU28F26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmIt ZTJmYmMzYTY4ODAwLzEvRnB3TE81ZWg1dVpORDlSYzlhME5Kc0VKTWxFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmItZTJmYmMzYTY4ODAw LzEvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw6jQMA0G CSqGSIb3DQEBCwUAA4IBAQBVxhcG/0WHc8XOSRc+d8IluoIuVqgTNBKjLD1Yb25Z 7RneUGrs+wLDXxmMeGDU57Jk2lI8gIisf2RovGAdc6XP3Z0PbIDN/9wfPzh4D3uF Hen6f4FyzzeOzZGQ3HesrOqSMxTp6qx6dw4/8unvpVwz0y7GZMWLODgBVBIfpt/G ghyDdjQQGmiX2O4vjSVcyYWenr7aszDDqIoqirM6LNxQzhuzqIcvfLMMWt86iS33 afqz7hxDWHxvxB3bswJLUEbO+KDkLAodsvUrFczS/lgtu7VKxEVqrFfOvW9ZccNC hMwka+t/FeOsRaND2qQmxeNLbt+olwWr/W6ThEbDtQOv -----END CERTIFICATE-----Generated at Mon Jan 26 12:18:52 2026 by rpki-client