This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/fl030ykYWSfFMJ3I618xpKaj2Ho.roa File: fl030ykYWSfFMJ3I618xpKaj2Ho.roa (raw, json) Hash identifier: pFEqmv+BjHNl0B+g2h17soeMDVxIGqWF0IhtOC2J1Tg= Subject key identifier: 7E:5D:37:D3:29:18:59:27:C5:30:9D:C8:EB:5F:31:A4:A6:A3:D8:7A Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019B7910F22164DA098402570A85F7C00382 Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/fl030ykYWSfFMJ3I618xpKaj2Ho.roa Signing time: Thu 01 Jan 2026 10:18:32 +0000 ROA not before: Thu 01 Jan 2026 10:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213094 IP address blocks: 89.22.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f2:21:64:da:09:84:02:57:0a:85:f7:c0:03:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Jan 1 10:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e5d37d329185927c5309dc8eb5f31a4a6a3d87a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:59:5e:2d:75:01:8e:f5:8e:39:e7:19:3e:0f: c3:0a:ba:6b:22:c9:36:4a:cd:45:b8:95:fc:7c:5d: a5:8a:90:38:92:72:24:86:f0:e1:1b:0b:77:39:15: c9:4e:aa:86:21:39:b7:aa:90:5c:3a:79:77:a1:15: 4e:d7:b9:6a:07:40:bb:6c:38:e0:36:12:19:a8:3c: e1:53:6f:be:5c:f7:cb:18:66:a2:a5:c9:42:be:97: ae:6c:51:6d:1a:11:48:cc:3c:ad:e6:b1:d2:71:70: a6:f7:9b:fe:1c:6d:f7:c7:5c:9d:fa:d3:a6:8b:1d: d3:93:1a:63:b8:33:fa:6b:42:4e:11:e1:55:49:dd: c4:b4:55:fa:40:bb:6a:33:30:af:d7:88:eb:b7:a5: 1a:24:6d:f5:e1:85:50:da:df:2f:72:0c:fd:64:39: 08:66:12:6f:35:f2:ab:76:c6:e9:bd:ef:b9:86:59: cd:9f:30:94:b4:89:3f:62:65:3a:d6:0e:54:d4:95: 7a:a6:b7:5f:ec:28:ae:02:65:a5:9a:7f:73:b5:be: b6:95:13:93:f6:f8:ed:b9:46:37:dc:5d:fc:04:3a: 40:74:70:a3:c8:5b:ea:5d:9a:de:20:f6:2e:6b:1c: d9:5b:85:9a:9d:c0:14:99:ee:93:2d:29:4d:f0:05: da:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:5D:37:D3:29:18:59:27:C5:30:9D:C8:EB:5F:31:A4:A6:A3:D8:7A X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/fl030ykYWSfFMJ3I618xpKaj2Ho.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.22.196.0/22 Signature Algorithm: sha256WithRSAEncryption 77:87:bf:b5:a8:df:79:a5:66:70:cb:4b:9d:f7:f6:1c:32:eb: c5:27:22:2d:17:2d:23:61:5f:18:63:7f:99:3f:df:f2:dd:de: 81:82:58:4a:d6:72:a7:4c:e0:f9:35:a0:51:b7:eb:44:ce:37: a5:f6:e0:00:25:8f:d0:e4:2b:d8:4c:6c:f3:8f:ee:9c:91:63: a4:76:5a:85:f7:25:8a:ee:0f:2b:47:ce:48:50:52:40:6e:d9: 48:00:87:a8:95:f5:2a:85:78:2d:1c:85:07:1e:82:02:ef:48: ec:95:2a:51:03:2d:9a:d3:d8:28:9e:7a:e8:eb:f6:80:71:ad: d3:9c:ed:61:31:ff:e7:50:c2:cc:39:5f:20:0b:a7:6b:a0:dc: 00:4c:8f:91:80:07:99:6f:e9:ff:01:70:d0:28:5d:47:f1:0d: ff:8f:38:fd:5b:56:47:f0:cd:f1:b5:fa:db:ae:37:a8:af:c1: 27:7b:f8:96:21:89:bf:3f:4f:a8:7f:66:61:82:31:f3:77:60: 58:99:9f:5d:75:23:74:9d:f5:19:ea:7d:20:51:33:1a:c9:91: de:22:ab:52:1b:22:d4:9a:57:ea:0d:5c:68:29:4d:8f:75:aa: b3:70:95:f6:8a:ed:2d:7c:d7:4d:1c:1c:c0:df:7e:ca:94:46: 67:f5:4e:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EPIhZNoJhAJXCoX3wAOCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwMTAxMTAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTVkMzdkMzI5MTg1OTI3YzUzMDlkYzhlYjVmMzFhNGE2YTNkODdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1leLXUBjvWOOecZPg/DCrprIsk2 Ss1FuJX8fF2lipA4knIkhvDhGwt3ORXJTqqGITm3qpBcOnl3oRVO17lqB0C7bDjg NhIZqDzhU2++XPfLGGaipclCvpeubFFtGhFIzDyt5rHScXCm95v+HG33x1yd+tOm ix3TkxpjuDP6a0JOEeFVSd3EtFX6QLtqMzCv14jrt6UaJG314YVQ2t8vcgz9ZDkI ZhJvNfKrdsbpve+5hlnNnzCUtIk/YmU61g5U1JV6prdf7CiuAmWlmn9ztb62lROT 9vjtuUY33F38BDpAdHCjyFvqXZreIPYuaxzZW4WancAUme6TLSlN8AXalwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH5dN9MpGFknxTCdyOtfMaSmo9h6MB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEvZmwwMzB5a1lXU2ZGTUozSTYxOHhwS2FqMkhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWRbEMA0G CSqGSIb3DQEBCwUAA4IBAQB3h7+1qN95pWZwy0ud9/YcMuvFJyItFy0jYV8YY3+Z P9/y3d6BglhK1nKnTOD5NaBRt+tEzjel9uAAJY/Q5CvYTGzzj+6ckWOkdlqF9yWK 7g8rR85IUFJAbtlIAIeolfUqhXgtHIUHHoIC70jslSpRAy2a09gonnro6/aAca3T nO1hMf/nUMLMOV8gC6droNwATI+RgAeZb+n/AXDQKF1H8Q3/jzj9W1ZH8M3xtfrb rjeor8Ene/iWIYm/P0+of2ZhgjHzd2BYmZ9ddSN0nfUZ6n0gUTMayZHeIqtSGyLU mlfqDVxoKU2PdaqzcJX2iu0tfNdNHBzA337KlEZn9U5G -----END CERTIFICATE-----Generated at Sun Jan 25 10:31:28 2026 by rpki-client