This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/FJy0GIfk9vV1h7loWKolSJZXo6Y.roa File: FJy0GIfk9vV1h7loWKolSJZXo6Y.roa (raw, json) Hash identifier: IuQnK7CmGBa5gJ1tL38YDwQ/LuHmRuUUuO8hQ4PDMgU= Subject key identifier: 14:9C:B4:18:87:E4:F6:F5:75:87:B9:68:58:AA:25:48:96:57:A3:A6 Certificate issuer: /CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872 Certificate serial: 019B7F15F92DE9875CB1057D72FDA58C11D3 Authority key identifier: 99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/FJy0GIfk9vV1h7loWKolSJZXo6Y.roa Signing time: Fri 02 Jan 2026 14:21:45 +0000 ROA not before: Fri 02 Jan 2026 14:21:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206352 IP address blocks: 185.188.253.0/24 maxlen: 24 185.188.254.0/23 maxlen: 23 185.217.48.0/23 maxlen: 23 185.217.50.0/23 maxlen: 23 185.248.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.crl rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.mft rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f9:2d:e9:87:5c:b1:05:7d:72:fd:a5:8c:11:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872 Validity Not Before: Jan 2 14:21:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=149cb41887e4f6f57587b96858aa25489657a3a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7d:dd:85:66:4d:2a:79:fb:bd:60:fd:1c:5e: 76:96:63:40:48:01:9a:fe:51:38:71:f3:f9:f3:f4: c9:b5:ae:e7:d6:97:a5:28:a1:bd:fe:5a:7e:df:59: 61:dd:d4:8f:1a:1b:2e:51:e8:3e:a3:e8:f9:56:69: 9d:30:5d:8b:37:64:d5:a6:19:04:b4:09:be:a7:66: c4:20:f3:ac:cd:df:a4:26:20:e0:fd:4b:75:d6:39: b2:3c:8e:75:d3:64:ca:18:d4:ae:df:48:4f:e0:af: 0f:f6:03:6c:bd:7e:3b:49:f2:31:fe:53:42:35:2d: 77:8d:c7:d1:c3:bb:4c:54:00:c5:14:73:dd:31:3f: ec:e0:40:96:3f:0d:e5:56:c4:5a:ef:4f:78:ba:d4: b9:84:3b:ef:8a:e2:67:ba:67:9b:89:c5:1c:a8:90: d0:71:d7:a1:e9:a8:d6:a0:79:28:16:41:fc:7a:56: f3:8b:96:a2:58:65:83:6d:84:77:7d:90:19:96:59: 4c:df:cd:81:36:f0:fd:9d:64:8f:12:aa:03:9f:11: 5c:43:1f:c8:53:41:28:3a:41:79:90:02:e4:7a:8a: ad:41:63:a4:0d:5d:de:3b:45:a7:cf:34:b4:06:47: e8:9a:73:e2:b3:5d:a2:bb:26:cb:d4:fb:d0:48:39: e4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9C:B4:18:87:E4:F6:F5:75:87:B9:68:58:AA:25:48:96:57:A3:A6 X509v3 Authority Key Identifier: keyid:99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/FJy0GIfk9vV1h7loWKolSJZXo6Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.188.253.0-185.188.255.255 185.217.48.0/22 185.248.2.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:0e:0d:9d:b6:9c:3a:07:e3:2b:d5:e7:1f:79:b8:11:c6:83: 55:3c:10:5b:68:3b:d2:b0:10:7f:03:bb:64:e4:7c:98:aa:4d: 11:2d:3d:f0:f8:29:6a:3d:86:8a:1a:87:79:db:bb:29:26:fd: 0e:2e:e1:2a:dd:e1:55:ec:27:03:ec:30:41:d3:24:90:3a:2f: a2:a1:ae:fd:8d:47:27:b1:ae:f5:10:a5:fd:a3:1e:3e:8c:b4: 23:0d:e9:12:68:57:4c:f6:6a:b3:9f:2d:04:6a:0e:39:ad:cb: ac:00:b5:6d:d2:75:0e:94:a2:71:f1:0e:32:f8:6a:a1:3f:3c: 82:98:38:b2:ca:59:52:11:cf:e0:49:16:83:f6:f6:1b:ec:f9: 64:77:64:d1:df:5c:4c:61:ce:0b:bf:d3:68:5c:41:81:c2:b4: 40:8d:ca:35:4b:2b:3f:44:bf:61:ff:89:99:a0:f5:e4:ae:53: ca:cc:cb:d6:ba:f3:27:3c:79:a5:6c:81:17:8c:67:5b:d0:87: 72:e7:72:32:12:c4:c9:01:1d:d4:cc:b1:e5:1f:55:0b:bf:93: c6:f7:49:4d:3c:4e:bb:b4:ea:ee:a9:51:8f:7b:5b:cd:e0:58: 06:4a:7e:75:81:46:68:4c:7b:f7:f5:eb:65:5b:85:27:05:60: 48:9e:89:64 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZt/Ffkt6YdcsQV9cv2ljBHTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZGNiZGYwNjMyYTEwMTYxM2E4ZjZjOTQ0OWIyOWVkNDVj MWE4NzIwHhcNMjYwMTAyMTQyMTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDljYjQxODg3ZTRmNmY1NzU4N2I5Njg1OGFhMjU0ODk2NTdhM2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn3dhWZNKnn7vWD9HF52lmNASAGa /lE4cfP58/TJta7n1pelKKG9/lp+31lh3dSPGhsuUeg+o+j5VmmdMF2LN2TVphkE tAm+p2bEIPOszd+kJiDg/Ut11jmyPI5102TKGNSu30hP4K8P9gNsvX47SfIx/lNC NS13jcfRw7tMVADFFHPdMT/s4ECWPw3lVsRa7094utS5hDvviuJnumebicUcqJDQ cdeh6ajWoHkoFkH8elbzi5aiWGWDbYR3fZAZlllM382BNvD9nWSPEqoDnxFcQx/I U0EoOkF5kALkeoqtQWOkDV3eO0WnzzS0BkfomnPis12iuybL1PvQSDnkEwIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFBSctBiH5Pb1dYe5aFiqJUiWV6OmMB8GA1UdIwQY MBaAFJncvfBjKhAWE6j2yUSbKe1FwahyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWR5OThHTXFFQllUcVBiSlJKc3A3VVhCcUhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My80ZjNkMWItODM2MS00MTFlLWExNDgt ODg1OGE1NTlmMjUxLzEvRkp5MEdJZms5dlYxaDdsb1dLb2xTSlpYbzZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My80ZjNkMWItODM2MS00MTFlLWExNDgtODg1OGE1NTlmMjUx LzEvbWR5OThHTXFFQllUcVBiSlJKc3A3VVhCcUhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAfBAIAATAZMAsDBAC5vP0D AwC5vAMEArnZMAMEAbn4AjANBgkqhkiG9w0BAQsFAAOCAQEAHw4NnbacOgfjK9Xn H3m4EcaDVTwQW2g70rAQfwO7ZOR8mKpNES098Pgpaj2GihqHedu7KSb9Di7hKt3h VewnA+wwQdMkkDovoqGu/Y1HJ7Gu9RCl/aMePoy0Iw3pEmhXTPZqs58tBGoOOa3L rAC1bdJ1DpSicfEOMvhqoT88gpg4sspZUhHP4EkWg/b2G+z5ZHdk0d9cTGHOC7/T aFxBgcK0QI3KNUsrP0S/Yf+JmaD15K5TyszL1rrzJzx5pWyBF4xnW9CHcudyMhLE yQEd1Myx5R9VC7+TxvdJTTxOu7Tq7qlRj3tbzeBYBkp+dYFGaEx79/XrZVuFJwVg SJ6JZA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:18:59 2026 by rpki-client