This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/FWkdYZB50BZtY6MGGDmkndrWg3c.roa File: FWkdYZB50BZtY6MGGDmkndrWg3c.roa (raw, json) Hash identifier: SQCMpUUiMycQSLKgpqFr+kJ+h1QWi8a8jp6nB7Ve8EM= Subject key identifier: 15:69:1D:61:90:79:D0:16:6D:63:A3:06:18:39:A4:9D:DA:D6:83:77 Certificate issuer: /CN=9cce3b1197d0cf9511540572a58fd372dcc07489 Certificate serial: 019B7C111AD20CEAAC49C38DA3E2CC6C20D8 Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/FWkdYZB50BZtY6MGGDmkndrWg3c.roa Signing time: Fri 02 Jan 2026 00:17:34 +0000 ROA not before: Fri 02 Jan 2026 00:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202636 IP address blocks: 217.67.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:1a:d2:0c:ea:ac:49:c3:8d:a3:e2:cc:6c:20:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489 Validity Not Before: Jan 2 00:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15691d619079d0166d63a3061839a49ddad68377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:99:1e:09:18:c1:62:f3:ba:7a:ac:45:e3:c0: 43:59:1b:86:33:2b:c9:f9:a2:37:8c:f9:76:fe:3a: 8f:6a:b6:e0:40:db:d3:40:66:69:a1:29:08:6b:a1: 86:71:16:b3:4b:5f:63:2a:a1:1a:2e:5e:7b:bf:36: 32:ad:c5:2a:d9:f2:0e:47:52:f6:47:c4:99:70:82: c3:b1:aa:ad:62:f1:c5:73:81:14:07:49:a6:99:3f: cf:e4:d8:d6:8f:13:47:8b:54:61:b5:e0:65:15:f2: 4d:9b:8c:4d:83:a5:3e:5d:a0:bd:8c:b6:11:1a:d2: 13:7b:96:63:12:fa:0b:ac:5b:a0:b8:f5:a3:32:6b: ee:0c:dd:87:80:f1:97:fc:72:48:b6:61:bc:d7:82: 1c:5e:36:54:5d:42:3b:c6:c1:41:4b:5b:53:a9:74: 3b:1d:29:d6:6e:a8:95:5b:5b:28:f4:d4:37:cc:da: e8:fa:32:8f:a7:f3:95:30:a0:a5:fd:c2:90:dc:6f: 92:ee:9c:70:b3:8e:c1:09:90:83:62:12:95:69:c0: c9:a7:13:e4:3e:7b:14:18:6a:aa:a8:9b:4a:f4:3e: dd:dd:24:d3:7e:8a:4b:62:d4:ca:cb:8a:bb:01:cd: 1e:5c:88:9b:fc:80:84:79:23:8b:5c:b4:a7:73:2c: 35:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:69:1D:61:90:79:D0:16:6D:63:A3:06:18:39:A4:9D:DA:D6:83:77 X509v3 Authority Key Identifier: keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/FWkdYZB50BZtY6MGGDmkndrWg3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.67.160.0/24 Signature Algorithm: sha256WithRSAEncryption 37:75:9b:fa:ad:cd:de:ac:e6:12:37:cd:a2:38:e6:e3:4d:53: 4b:ed:51:a6:66:30:8f:1c:32:ef:d9:f9:2e:7e:00:0b:29:fe: 91:0c:31:54:df:1b:3d:80:01:bc:ba:26:6e:ea:f3:61:80:2a: 46:4a:60:46:6c:bb:3e:f2:63:40:7d:64:6a:b3:71:9c:fe:38: f1:ed:be:d1:9f:00:fc:51:f4:e3:41:88:f8:fb:dc:81:05:69: aa:3b:50:af:86:fe:76:46:9b:c8:f2:09:85:d7:8b:05:26:1b: 96:6e:ef:32:fc:0b:11:f4:70:f2:a0:11:12:63:55:d2:db:b2: 87:f7:cc:93:74:a2:2a:13:59:ca:9d:a0:63:5d:f3:e9:ba:d4: 5d:05:6e:53:99:ff:5e:29:a3:00:ba:b1:79:4c:7b:bb:d6:6d: 48:41:b7:40:c8:a9:e0:0c:03:bb:4b:b1:b4:80:ab:13:a4:8c: 08:fe:9b:44:62:ed:5d:c7:b4:d8:a3:e7:22:d8:5d:a1:1b:b4: 04:da:db:3e:96:87:5b:61:2b:32:32:65:b3:5e:39:eb:67:b6: e7:1b:74:c3:59:3a:42:11:ef:8d:5f:58:f4:91:66:3f:87:9b: 25:7b:f1:77:5c:9c:77:ca:f1:65:ce:ea:db:95:87:6f:18:df: da:03:3a:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ERrSDOqsScONo+LMbCDYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljY2UzYjExOTdkMGNmOTUxMTU0MDU3MmE1OGZkMzcyZGNj MDc0ODkwHhcNMjYwMTAyMDAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTY5MWQ2MTkwNzlkMDE2NmQ2M2EzMDYxODM5YTQ5ZGRhZDY4Mzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpkeCRjBYvO6eqxF48BDWRuGMyvJ +aI3jPl2/jqParbgQNvTQGZpoSkIa6GGcRazS19jKqEaLl57vzYyrcUq2fIOR1L2 R8SZcILDsaqtYvHFc4EUB0mmmT/P5NjWjxNHi1RhteBlFfJNm4xNg6U+XaC9jLYR GtITe5ZjEvoLrFuguPWjMmvuDN2HgPGX/HJItmG814IcXjZUXUI7xsFBS1tTqXQ7 HSnWbqiVW1so9NQ3zNro+jKPp/OVMKCl/cKQ3G+S7pxws47BCZCDYhKVacDJpxPk PnsUGGqqqJtK9D7d3STTfopLYtTKy4q7Ac0eXIib/ICEeSOLXLSncyw11QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBVpHWGQedAWbWOjBhg5pJ3a1oN3MB8GA1UdIwQY MBaAFJzOOxGX0M+VEVQFcqWP03LcwHSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk00N0VaZlF6NVVSVkFWeXBZX1RjdHpBZElrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80ZjIzNjctNzNmMy00ODE2LWJlYTgt YTA0NWZmOGUyYWMwLzEvRldrZFlaQjUwQlp0WTZNR0dEbWtuZHJXZzNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC80ZjIzNjctNzNmMy00ODE2LWJlYTgtYTA0NWZmOGUyYWMw LzEvbk00N0VaZlF6NVVSVkFWeXBZX1RjdHpBZElrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2UOgMA0G CSqGSIb3DQEBCwUAA4IBAQA3dZv6rc3erOYSN82iOObjTVNL7VGmZjCPHDLv2fku fgALKf6RDDFU3xs9gAG8uiZu6vNhgCpGSmBGbLs+8mNAfWRqs3Gc/jjx7b7RnwD8 UfTjQYj4+9yBBWmqO1Cvhv52RpvI8gmF14sFJhuWbu8y/AsR9HDyoBESY1XS27KH 98yTdKIqE1nKnaBjXfPputRdBW5Tmf9eKaMAurF5THu71m1IQbdAyKngDAO7S7G0 gKsTpIwI/ptEYu1dx7TYo+ci2F2hG7QE2ts+lodbYSsyMmWzXjnrZ7bnG3TDWTpC Ee+NX1j0kWY/h5sle/F3XJx3yvFlzurblYdvGN/aAzrQ -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:48 2026 by rpki-client