This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/flcRh-4VxN340graxmO8KmmKqyg.roa File: flcRh-4VxN340graxmO8KmmKqyg.roa (raw, json) Hash identifier: BwILGufZjRQurCTdyUr+KPH+3YEe8QgKDiG0m2qyZ9E= Subject key identifier: 7E:57:11:87:EE:15:C4:DD:F8:D2:0A:DA:C6:63:BC:2A:69:8A:AB:28 Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e Certificate serial: 019B7A5B7A942960F6B253D67B74EB592730 Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/flcRh-4VxN340graxmO8KmmKqyg.roa Signing time: Thu 01 Jan 2026 16:19:34 +0000 ROA not before: Thu 01 Jan 2026 16:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57241 IP address blocks: 5.160.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:7a:94:29:60:f6:b2:53:d6:7b:74:eb:59:27:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e Validity Not Before: Jan 1 16:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e571187ee15c4ddf8d20adac663bc2a698aab28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a8:14:51:4d:5d:3c:fb:55:0a:51:53:5d:32: 23:ab:5d:51:49:45:44:3c:97:9d:5b:fb:db:4e:74: ca:be:da:0a:56:3c:b9:48:23:76:4f:62:b9:36:4e: 00:85:09:45:51:f0:46:73:43:e3:01:82:7b:70:39: 24:22:c2:09:87:cf:f9:40:1d:01:07:1d:b9:80:3a: 06:16:c7:e9:27:0a:df:e6:17:dd:8d:69:0e:7b:7c: 75:99:65:23:8d:05:7b:0b:c5:ea:66:7d:39:36:77: 3f:59:71:85:34:08:50:4d:bf:f0:12:77:d6:f0:66: c5:07:07:e7:d7:92:04:e6:9c:90:3a:2a:3f:dd:bb: f0:94:b1:6d:d3:eb:e7:66:45:2f:93:05:c8:a9:b3: 8a:a4:96:ba:6b:97:b1:3b:11:8b:18:dd:0e:7d:c5: 44:ba:7a:bf:0f:58:10:5c:c7:4a:cb:46:9d:ea:99: 5c:6f:e1:d6:23:85:dc:4b:14:98:ac:3e:d1:a1:52: 6a:05:71:62:8c:ff:44:30:da:84:a0:a5:dd:4f:3d: 6b:79:45:b3:7b:c9:f4:4c:24:b7:ea:e9:d3:09:6d: cc:ba:cd:36:6c:eb:9d:c6:ec:d0:b1:da:89:5a:91: e8:86:0b:38:5d:a4:aa:75:1f:3d:f2:09:6c:b9:9a: b6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:57:11:87:EE:15:C4:DD:F8:D2:0A:DA:C6:63:BC:2A:69:8A:AB:28 X509v3 Authority Key Identifier: keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/flcRh-4VxN340graxmO8KmmKqyg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.160.18.0/24 Signature Algorithm: sha256WithRSAEncryption 34:02:85:10:6c:94:96:f2:8b:a6:1b:eb:a9:8b:61:56:7b:c0: 07:8f:96:6e:8d:44:dd:86:1d:a3:b8:e4:55:83:41:10:fe:9f: ed:d3:61:0f:9b:85:21:5f:d1:b4:38:7f:70:f8:3d:7b:c4:5f: 45:98:41:ae:39:aa:f1:53:03:f3:78:21:d9:e0:47:1d:80:1c: fb:14:1d:7f:6e:9f:93:5f:d4:03:ad:14:fc:50:e5:47:8d:99: 96:bc:44:1f:d2:64:be:77:55:5d:4a:6f:a8:f8:16:73:5d:b9: 41:ab:b7:d3:fe:5f:e0:f7:5a:40:a7:7b:c2:61:22:84:9d:71: 0a:aa:6e:08:69:ed:9d:eb:df:ae:6e:ad:02:73:95:81:98:a3: b0:5e:1a:28:39:f5:51:2a:63:5e:58:c7:2d:4c:96:28:94:ba: e1:8b:c0:aa:e8:29:76:df:80:d7:af:e0:0b:82:66:af:aa:43: df:3f:1f:af:28:6c:2f:83:58:17:1e:14:49:51:14:aa:e9:ab: b3:f9:36:07:13:75:f4:1d:3e:5e:d9:dd:e6:fb:94:93:cc:fd: 7f:e4:ec:a1:d5:9f:a0:e0:28:2a:73:72:59:22:08:d7:d2:86: aa:d9:eb:b1:9e:e8:02:d5:53:09:eb:49:8b:d7:e8:2d:b3:07: 79:2f:e2:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W3qUKWD2slPWe3TrWScwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzczNTcxYzkwMjQ5YmYyYWE5NDhlNzhiZWQxM2UwODUy OGI4N2UwHhcNMjYwMTAxMTYxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTU3MTE4N2VlMTVjNGRkZjhkMjBhZGFjNjYzYmMyYTY5OGFhYjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkagUUU1dPPtVClFTXTIjq11RSUVE PJedW/vbTnTKvtoKVjy5SCN2T2K5Nk4AhQlFUfBGc0PjAYJ7cDkkIsIJh8/5QB0B Bx25gDoGFsfpJwrf5hfdjWkOe3x1mWUjjQV7C8XqZn05Nnc/WXGFNAhQTb/wEnfW 8GbFBwfn15IE5pyQOio/3bvwlLFt0+vnZkUvkwXIqbOKpJa6a5exOxGLGN0OfcVE unq/D1gQXMdKy0ad6plcb+HWI4XcSxSYrD7RoVJqBXFijP9EMNqEoKXdTz1reUWz e8n0TCS36unTCW3Mus02bOudxuzQsdqJWpHohgs4XaSqdR898glsuZq2BQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH5XEYfuFcTd+NIK2sZjvCppiqsoMB8GA1UdIwQY MBaAFCI3NXHJAkm/KqlI54vtE+CFKLh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEt YjQ1NDBjNzRjOTRiLzEvZmxjUmgtNFZ4TjM0MGdyYXhtTzhLbW1LcXlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEtYjQ1NDBjNzRjOTRi LzEvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABaASMA0G CSqGSIb3DQEBCwUAA4IBAQA0AoUQbJSW8oumG+upi2FWe8AHj5ZujUTdhh2juORV g0EQ/p/t02EPm4UhX9G0OH9w+D17xF9FmEGuOarxUwPzeCHZ4EcdgBz7FB1/bp+T X9QDrRT8UOVHjZmWvEQf0mS+d1VdSm+o+BZzXblBq7fT/l/g91pAp3vCYSKEnXEK qm4Iae2d69+ubq0Cc5WBmKOwXhooOfVRKmNeWMctTJYolLrhi8Cq6Cl234DXr+AL gmavqkPfPx+vKGwvg1gXHhRJURSq6auz+TYHE3X0HT5e2d3m+5STzP1/5Oyh1Z+g 4Cgqc3JZIgjX0oaq2euxnugC1VMJ60mL1+gtswd5L+Kv -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:52 2026 by rpki-client