This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/FmqdkGuPwkHtcktyjB7p6qiaaA0.roa File: FmqdkGuPwkHtcktyjB7p6qiaaA0.roa (raw, json) Hash identifier: N+eixnx0ef9WfVBXPd6Nijvy/VigzdNIgybnerIGWxw= Subject key identifier: 16:6A:9D:90:6B:8F:C2:41:ED:72:4B:72:8C:1E:E9:EA:A8:9A:68:0D Certificate issuer: /CN=a86580e18ad6ff8dc942be883c16de8b731f9605 Certificate serial: 019B77C6FC645B99B7600D8238719C073ABD Authority key identifier: A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/FmqdkGuPwkHtcktyjB7p6qiaaA0.roa Signing time: Thu 01 Jan 2026 04:18:07 +0000 ROA not before: Thu 01 Jan 2026 04:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41887 IP address blocks: 90.145.56.0/24 maxlen: 24 2a02:120:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:fc:64:5b:99:b7:60:0d:82:38:71:9c:07:3a:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a86580e18ad6ff8dc942be883c16de8b731f9605 Validity Not Before: Jan 1 04:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=166a9d906b8fc241ed724b728c1ee9eaa89a680d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e5:3d:41:17:bc:8e:1f:25:37:68:44:53:d2: cf:4c:b9:d4:fa:c1:4c:a0:29:e3:0d:ec:a7:95:1e: e5:23:b2:3a:59:15:36:82:88:5e:52:3e:de:08:65: bd:0f:7f:ff:3c:76:73:19:8c:13:8b:2c:cb:21:72: 58:3d:95:eb:47:c5:50:4b:22:9f:d0:25:1e:67:56: 17:f7:c2:82:b2:e4:74:27:4c:d8:ba:97:40:5e:dc: 05:04:24:4e:e2:04:e1:2e:22:8d:71:ae:fe:1a:69: c5:6c:66:6c:a9:b9:cb:dc:16:39:2a:bd:81:11:a2: 60:45:f0:32:65:56:bc:a0:42:86:7c:f0:af:f2:58: 44:34:6b:d7:bb:44:57:97:18:01:37:6a:fd:5b:30: d9:e3:51:0a:6e:be:6f:78:4b:62:8a:77:6d:c8:16: cb:75:bd:c5:ce:9e:14:00:bf:7e:cc:33:f5:72:f0: 67:92:d7:ec:4e:13:51:3f:1b:7b:6f:4b:4c:bf:59: e1:8e:59:9c:97:df:4d:dc:6f:05:84:88:36:6a:dc: 39:ff:bf:69:d8:fe:4d:4d:ca:fd:1f:c3:7a:24:ba: 6c:a6:63:a4:78:d3:f7:1e:1f:3c:44:3c:a1:c6:7f: 61:66:10:66:cb:6f:2c:3d:25:2c:27:36:ae:f9:0a: c0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:6A:9D:90:6B:8F:C2:41:ED:72:4B:72:8C:1E:E9:EA:A8:9A:68:0D X509v3 Authority Key Identifier: keyid:A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/FmqdkGuPwkHtcktyjB7p6qiaaA0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 90.145.56.0/24 IPv6: 2a02:120:2::/48 Signature Algorithm: sha256WithRSAEncryption 19:7b:83:28:4a:f8:93:db:95:e7:af:75:c5:48:13:1c:4b:fb: 8e:f7:5f:4e:4c:83:95:58:38:94:b3:de:4b:e1:d7:e3:10:51: b0:cc:46:0c:55:4f:a1:2c:0c:3e:45:33:58:a8:cf:b6:3e:3a: 60:16:39:e9:a1:6e:55:88:99:50:f9:f4:37:37:68:d3:73:83: e6:75:9a:04:2b:df:40:31:e2:be:cc:20:08:c3:3d:9a:07:88: 0f:2b:9f:ac:1d:b3:2b:7d:84:24:bb:0f:24:b0:67:de:ff:96: 9b:d0:a7:e4:cd:ae:1a:dd:d0:d7:4b:b7:c7:da:4e:5c:ac:05: cc:3e:f8:76:3c:a3:80:dd:75:d1:ef:d8:fb:bf:31:ab:43:8c: 43:aa:93:b0:56:47:28:64:b8:b6:b7:75:e9:20:27:24:f0:36: fc:c7:38:a0:91:24:b5:d0:3c:c7:58:9c:f2:74:a3:d8:bc:fc: 25:5a:aa:ca:24:2f:fc:61:c1:2a:53:02:59:ad:2f:02:e0:aa: ef:26:e3:4e:c8:e4:d2:83:f7:52:e7:f7:66:57:d4:9e:fd:e2: f2:54:c1:a0:89:d0:43:82:ab:77:d7:54:6a:8e:24:9a:f2:2d: ac:ef:d3:12:66:1f:e1:16:ed:07:50:e9:33:89:8d:88:c1:5d: 04:05:c1:37 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3xvxkW5m3YA2COHGcBzq9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NjU4MGUxOGFkNmZmOGRjOTQyYmU4ODNjMTZkZThiNzMx Zjk2MDUwHhcNMjYwMTAxMDQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjZhOWQ5MDZiOGZjMjQxZWQ3MjRiNzI4YzFlZTllYWE4OWE2ODBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuU9QRe8jh8lN2hEU9LPTLnU+sFM oCnjDeynlR7lI7I6WRU2goheUj7eCGW9D3//PHZzGYwTiyzLIXJYPZXrR8VQSyKf 0CUeZ1YX98KCsuR0J0zYupdAXtwFBCRO4gThLiKNca7+GmnFbGZsqbnL3BY5Kr2B EaJgRfAyZVa8oEKGfPCv8lhENGvXu0RXlxgBN2r9WzDZ41EKbr5veEtiindtyBbL db3Fzp4UAL9+zDP1cvBnktfsThNRPxt7b0tMv1nhjlmcl99N3G8FhIg2atw5/79p 2P5NTcr9H8N6JLpspmOkeNP3Hh88RDyhxn9hZhBmy28sPSUsJzau+QrA7QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBZqnZBrj8JB7XJLcowe6eqommgNMB8GA1UdIwQY MBaAFKhlgOGK1v+NyUK+iDwW3otzH5YFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUdXQTRZcldfNDNKUXI2SVBCYmVpM01mbGdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lMjlkY2UtYTE3NC00Yjc3LTg5YWEt MjM2ZTkyZmM2YTU5LzEvRm1xZGtHdVB3a0h0Y2t0eWpCN3A2cWlhYUEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9lMjlkY2UtYTE3NC00Yjc3LTg5YWEtMjM2ZTkyZmM2YTU5 LzEvcUdXQTRZcldfNDNKUXI2SVBCYmVpM01mbGdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAWpE4MA8E AgACMAkDBwAqAgEgAAIwDQYJKoZIhvcNAQELBQADggEBABl7gyhK+JPbleevdcVI ExxL+473X05Mg5VYOJSz3kvh1+MQUbDMRgxVT6EsDD5FM1ioz7Y+OmAWOemhblWI mVD59Dc3aNNzg+Z1mgQr30Ax4r7MIAjDPZoHiA8rn6wdsyt9hCS7DySwZ97/lpvQ p+TNrhrd0NdLt8faTlysBcw++HY8o4DdddHv2Pu/MatDjEOqk7BWRyhkuLa3dekg JyTwNvzHOKCRJLXQPMdYnPJ0o9i8/CVaqsokL/xhwSpTAlmtLwLgqu8m407I5NKD 91Ln92ZX1J794vJUwaCJ0EOCq3fXVGqOJJryLazv0xJmH+EW7QdQ6TOJjYjBXQQF wTc= -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:21 2026 by rpki-client