This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/FkUOcOmFinHJxRHK0kkPCet3yUQ.roa File: FkUOcOmFinHJxRHK0kkPCet3yUQ.roa (raw, json) Hash identifier: kZTXr/bQZUwW97u4NQGxNgrknELXazrkScyoTfkNCEU= Subject key identifier: 16:45:0E:70:E9:85:8A:71:C9:C5:11:CA:D2:49:0F:09:EB:77:C9:44 Certificate issuer: /CN=4c18a44d54a47a5ea97dedfd5ed8379d7eea02d0 Certificate serial: 019B77C709C629DD9669981E212943140EF8 Authority key identifier: 4C:18:A4:4D:54:A4:7A:5E:A9:7D:ED:FD:5E:D8:37:9D:7E:EA:02:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/FkUOcOmFinHJxRHK0kkPCet3yUQ.roa Signing time: Thu 01 Jan 2026 04:18:11 +0000 ROA not before: Thu 01 Jan 2026 04:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20874 IP address blocks: 185.111.160.0/24 maxlen: 24 185.111.161.0/24 maxlen: 24 185.111.162.0/24 maxlen: 24 185.111.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.crl rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.mft rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:09:c6:29:dd:96:69:98:1e:21:29:43:14:0e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c18a44d54a47a5ea97dedfd5ed8379d7eea02d0 Validity Not Before: Jan 1 04:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16450e70e9858a71c9c511cad2490f09eb77c944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f9:c0:06:eb:8f:cb:54:e5:02:77:61:a5:27: 86:4a:7f:26:4d:2e:ee:26:f1:56:27:cb:4b:72:f2: c9:18:47:b5:d1:c6:80:07:d0:5c:b9:f9:d2:9a:c9: 56:40:75:fa:79:8f:3b:66:0a:18:0c:6e:a9:71:8c: 35:b0:b1:f8:6b:bf:ca:36:71:04:35:e6:ba:97:17: da:cf:17:df:35:d9:23:0d:8c:40:1f:27:4e:b4:a7: 45:e9:59:b5:93:e8:5d:e8:29:94:de:fc:82:cf:25: f6:27:83:a0:65:45:0d:84:1b:bc:66:18:b5:0b:4c: 1b:ad:f0:34:61:c9:f2:ec:cc:63:f8:e1:d0:d6:5d: 4a:82:6d:c7:21:ee:1f:be:55:2c:b4:78:3f:08:9b: cc:a6:a8:23:ad:0a:54:e0:aa:9b:24:64:1c:11:8d: 1a:e1:50:91:5a:66:79:b0:5e:fb:2f:72:45:f5:0e: 87:1a:79:ee:fa:68:a2:c4:e7:99:3a:9a:de:4e:5e: d9:2e:60:cb:94:9c:15:36:f2:70:9c:21:4f:b9:02: 1f:4d:eb:f3:47:9f:43:f3:6e:27:d0:bc:7c:7b:26: f2:c7:65:b1:fd:95:fb:19:06:45:41:46:16:ef:ee: 15:14:39:1f:86:5a:83:dc:81:7d:ef:fe:3d:9d:4b: bf:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:45:0E:70:E9:85:8A:71:C9:C5:11:CA:D2:49:0F:09:EB:77:C9:44 X509v3 Authority Key Identifier: keyid:4C:18:A4:4D:54:A4:7A:5E:A9:7D:ED:FD:5E:D8:37:9D:7E:EA:02:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/FkUOcOmFinHJxRHK0kkPCet3yUQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.111.160.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:04:91:33:5c:bb:25:04:38:52:1f:12:c1:a3:e4:b2:d3:1a: d2:28:d6:93:c3:0d:9d:25:47:eb:21:b5:ce:c8:4a:5f:6b:e8: dd:d5:69:86:80:9b:a4:52:28:f5:60:ca:49:42:25:3a:6c:32: f6:a8:f0:d9:31:68:93:c7:d4:3d:3d:98:17:31:f5:69:27:07: 48:6c:d6:01:72:59:05:bd:65:df:dc:cf:8e:63:67:c0:e8:20: 5a:ea:38:42:aa:d2:fb:cd:22:41:7a:64:61:f7:12:31:a1:0b: 52:a1:b2:10:36:6a:33:25:30:2f:a0:30:66:8f:95:cc:3d:86: 80:c1:a1:5f:2e:3a:d3:36:3a:e6:9c:60:94:2c:93:d9:05:c9: 6f:36:20:c7:a5:bc:a6:9b:e9:ac:55:6c:ab:e5:e1:92:1a:7d: 95:66:65:6f:5a:39:25:9f:62:88:3d:81:59:74:d0:1a:25:e3: 45:dd:cf:d9:c6:50:0f:90:e3:d5:2a:c9:22:49:b6:34:10:02: 1f:4d:d2:a2:27:e0:00:e0:f4:1b:46:d8:87:aa:a9:88:34:aa: bc:02:88:5c:7d:03:e7:1b:5c:60:da:b2:a4:fe:4e:f2:c2:75: f9:1c:a0:c3:43:23:88:43:df:e3:a5:64:1b:2a:b5:f3:52:59: df:04:48:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xwnGKd2WaZgeISlDFA74MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMThhNDRkNTRhNDdhNWVhOTdkZWRmZDVlZDgzNzlkN2Vl YTAyZDAwHhcNMjYwMTAxMDQxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjQ1MGU3MGU5ODU4YTcxYzljNTExY2FkMjQ5MGYwOWViNzdjOTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/nABuuPy1TlAndhpSeGSn8mTS7u JvFWJ8tLcvLJGEe10caAB9BcufnSmslWQHX6eY87ZgoYDG6pcYw1sLH4a7/KNnEE Nea6lxfazxffNdkjDYxAHydOtKdF6Vm1k+hd6CmU3vyCzyX2J4OgZUUNhBu8Zhi1 C0wbrfA0Ycny7Mxj+OHQ1l1Kgm3HIe4fvlUstHg/CJvMpqgjrQpU4KqbJGQcEY0a 4VCRWmZ5sF77L3JF9Q6HGnnu+miixOeZOpreTl7ZLmDLlJwVNvJwnCFPuQIfTevz R59D824n0Lx8eybyx2Wx/ZX7GQZFQUYW7+4VFDkfhlqD3IF97/49nUu/CQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBZFDnDphYpxycURytJJDwnrd8lEMB8GA1UdIwQY MBaAFEwYpE1UpHpeqX3t/V7YN51+6gLQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEJpa1RWU2tlbDZwZmUzOVh0ZzNuWDdxQXRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hYmU2YzAtZTc5ZC00Y2RkLTkyYWQt ZjIxMzYzMDcxNTkxLzEvRmtVT2NPbUZpbkhKeFJISzBra1BDZXQzeVVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9hYmU2YzAtZTc5ZC00Y2RkLTkyYWQtZjIxMzYzMDcxNTkx LzEvVEJpa1RWU2tlbDZwZmUzOVh0ZzNuWDdxQXRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuW+gMA0G CSqGSIb3DQEBCwUAA4IBAQAsBJEzXLslBDhSHxLBo+Sy0xrSKNaTww2dJUfrIbXO yEpfa+jd1WmGgJukUij1YMpJQiU6bDL2qPDZMWiTx9Q9PZgXMfVpJwdIbNYBclkF vWXf3M+OY2fA6CBa6jhCqtL7zSJBemRh9xIxoQtSobIQNmozJTAvoDBmj5XMPYaA waFfLjrTNjrmnGCULJPZBclvNiDHpbymm+msVWyr5eGSGn2VZmVvWjkln2KIPYFZ dNAaJeNF3c/ZxlAPkOPVKskiSbY0EAIfTdKiJ+AA4PQbRtiHqqmINKq8AohcfQPn G1xg2rKk/k7ywnX5HKDDQyOIQ9/jpWQbKrXzUlnfBEhT -----END CERTIFICATE-----Generated at Sun Jan 25 21:24:36 2026 by rpki-client