This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/fmk12XAjixK4ydvA-uHC3Nd-HXA.roa File: fmk12XAjixK4ydvA-uHC3Nd-HXA.roa (raw, json) Hash identifier: V8WR3uqu+EJZvisPVRoiAC+MR0oSKaCJPL8TILpliqM= Subject key identifier: 7E:69:35:D9:70:23:8B:12:B8:C9:DB:C0:FA:E1:C2:DC:D7:7E:1D:70 Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Certificate serial: 019B7D5D0EEE7D347C8ABDB6F6D5EE77F914 Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/fmk12XAjixK4ydvA-uHC3Nd-HXA.roa Signing time: Fri 02 Jan 2026 06:20:09 +0000 ROA not before: Fri 02 Jan 2026 06:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206937 IP address blocks: 157.25.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:0e:ee:7d:34:7c:8a:bd:b6:f6:d5:ee:77:f9:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Validity Not Before: Jan 2 06:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e6935d970238b12b8c9dbc0fae1c2dcd77e1d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a4:45:b8:0a:44:b0:68:d5:4b:c2:30:ef:38: de:27:10:6a:ef:a2:09:2b:f3:68:5d:f3:68:85:8d: 35:73:f3:b1:25:90:87:88:5b:40:7a:d3:a1:37:49: c5:5f:e9:34:fd:9c:3a:1e:08:39:dc:0e:b9:61:e7: 34:8c:32:7b:8b:08:6a:f9:b8:19:5d:df:a4:aa:c8: 66:be:cb:2c:71:e8:16:ce:ea:2c:93:85:08:bf:63: 07:9a:fb:4d:76:26:7b:82:1e:cb:88:1a:cb:5f:47: e5:e0:5f:7c:0d:23:a2:4e:3e:98:d7:9a:b1:58:94: c9:08:15:2c:1f:10:26:90:2d:3a:f9:e4:18:78:0c: 62:30:6f:57:b8:5a:9e:b2:43:2b:00:77:a5:db:4e: d3:a8:f4:ea:43:ae:54:b6:67:3d:f6:df:b6:e6:7d: 27:62:3f:f8:88:d4:72:f9:9e:33:19:cd:54:3b:b3: cb:31:53:58:f1:8c:d8:9d:85:34:8e:4e:e0:12:d2: 9d:1c:69:bd:a8:6a:9c:a3:f5:3a:28:b2:c3:72:d4: 5a:07:47:ad:98:b4:81:11:8d:1c:09:a8:bc:17:16: 7e:90:63:51:28:1d:e2:3d:b7:4b:c4:01:63:42:c4: b5:55:9c:7d:37:db:1a:74:5d:cb:44:2b:57:97:dc: 3f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:69:35:D9:70:23:8B:12:B8:C9:DB:C0:FA:E1:C2:DC:D7:7E:1D:70 X509v3 Authority Key Identifier: keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/fmk12XAjixK4ydvA-uHC3Nd-HXA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.25.150.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:5b:01:5c:e2:e9:76:35:2a:11:8d:26:28:02:d4:8a:de:8d: 51:c4:a3:a6:38:8a:b3:7b:9a:a5:35:fe:c6:b4:e5:73:f3:a0: 61:42:d5:ed:88:11:d4:b4:cd:42:9e:49:c7:91:72:0c:24:b0: 1c:83:52:fa:3f:0f:ca:6d:83:a8:5b:9b:78:18:72:b7:74:f4: 18:88:f5:b4:0f:b9:05:7f:00:4b:f3:e0:96:28:14:50:50:1e: 4e:ba:20:d0:16:36:d2:6d:5d:bb:61:42:33:55:c4:90:76:fc: 38:5d:bc:99:57:fc:72:7d:d5:78:8c:f4:3a:3b:aa:9a:42:bc: 67:58:d7:0d:04:ac:b5:da:b3:39:25:5c:12:ea:93:f5:bf:d9: 4a:82:c5:95:eb:28:4f:28:40:c9:65:62:9f:62:cc:b7:ae:62: a4:2b:47:b8:8b:2e:ee:6c:a2:b7:7f:80:f4:62:f4:91:4f:de: 0e:5a:a1:4e:04:fe:54:ec:0f:60:9b:ba:dc:c1:6c:3a:2a:f7: 00:00:98:64:ba:3e:0c:e5:c1:10:5b:8f:44:62:21:4b:35:41: b9:49:3f:e9:43:dc:54:fb:e3:1d:73:25:e1:e2:8c:29:59:0c: 15:87:cb:eb:f2:ac:c1:82:cf:45:cd:1f:0e:26:db:17:55:65: 00:c2:59:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XQ7ufTR8ir229tXud/kUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj ZWY5MzMwHhcNMjYwMTAyMDYyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTY5MzVkOTcwMjM4YjEyYjhjOWRiYzBmYWUxYzJkY2Q3N2UxZDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqRFuApEsGjVS8Iw7zjeJxBq76IJ K/NoXfNohY01c/OxJZCHiFtAetOhN0nFX+k0/Zw6Hgg53A65Yec0jDJ7iwhq+bgZ Xd+kqshmvssscegWzuosk4UIv2MHmvtNdiZ7gh7LiBrLX0fl4F98DSOiTj6Y15qx WJTJCBUsHxAmkC06+eQYeAxiMG9XuFqeskMrAHel207TqPTqQ65Utmc99t+25n0n Yj/4iNRy+Z4zGc1UO7PLMVNY8YzYnYU0jk7gEtKdHGm9qGqco/U6KLLDctRaB0et mLSBEY0cCai8FxZ+kGNRKB3iPbdLxAFjQsS1VZx9N9sadF3LRCtXl9w/FwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH5pNdlwI4sSuMnbwPrhwtzXfh1wMB8GA1UdIwQY MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt OTFlMzE4NGJiMGFiLzEvZm1rMTJYQWppeEs0eWR2QS11SEMzTmQtSFhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRmWMA0G CSqGSIb3DQEBCwUAA4IBAQCMWwFc4ul2NSoRjSYoAtSK3o1RxKOmOIqze5qlNf7G tOVz86BhQtXtiBHUtM1CnknHkXIMJLAcg1L6Pw/KbYOoW5t4GHK3dPQYiPW0D7kF fwBL8+CWKBRQUB5OuiDQFjbSbV27YUIzVcSQdvw4XbyZV/xyfdV4jPQ6O6qaQrxn WNcNBKy12rM5JVwS6pP1v9lKgsWV6yhPKEDJZWKfYsy3rmKkK0e4iy7ubKK3f4D0 YvSRT94OWqFOBP5U7A9gm7rcwWw6KvcAAJhkuj4M5cEQW49EYiFLNUG5ST/pQ9xU ++MdcyXh4owpWQwVh8vr8qzBgs9FzR8OJtsXVWUAwllb -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:55 2026 by rpki-client