This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/FlHMbNs80F0IuT4Av0zk4nnd58w.roa File: FlHMbNs80F0IuT4Av0zk4nnd58w.roa (raw, json) Hash identifier: uOKcbHsW+r2mNq3fiimqbh7cRriRbTOrF8Meua/Wzbk= Subject key identifier: 16:51:CC:6C:DB:3C:D0:5D:08:B9:3E:00:BF:4C:E4:E2:79:DD:E7:CC Certificate issuer: /CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d Certificate serial: 019B7DC993BE41F7F8D47ABF999B17051985 Authority key identifier: 60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/FlHMbNs80F0IuT4Av0zk4nnd58w.roa Signing time: Fri 02 Jan 2026 08:18:41 +0000 ROA not before: Fri 02 Jan 2026 08:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57133 IP address blocks: 185.130.136.0/24 maxlen: 24 185.130.137.0/24 maxlen: 24 185.130.138.0/24 maxlen: 24 185.130.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:93:be:41:f7:f8:d4:7a:bf:99:9b:17:05:19:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d Validity Not Before: Jan 2 08:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1651cc6cdb3cd05d08b93e00bf4ce4e279dde7cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ec:e2:1d:7a:df:b4:dd:06:14:a6:8a:46:70: 28:b8:5e:60:07:57:20:49:5f:76:ca:a6:5c:45:4b: 46:1f:c0:24:dc:6f:c0:1f:35:38:1e:cc:3f:9d:20: d5:6a:ad:ab:19:82:83:04:f8:1b:97:75:32:8f:12: 5c:7a:80:34:dd:ab:90:64:05:35:5d:e0:3b:a3:c9: 17:ff:21:f8:22:58:a9:ca:20:39:ee:d9:70:96:ab: 8f:28:a6:a8:bd:84:4a:7f:3f:dc:62:26:fe:a6:7e: c6:a9:9e:eb:f0:d4:39:b1:a5:57:c2:1f:33:f6:64: 89:db:d5:ea:4c:0a:74:95:10:ad:ae:01:d8:ce:cc: 15:87:2b:88:49:db:53:a4:ee:0b:ef:fb:b6:86:d7: 53:fc:95:f6:ed:6a:85:e2:93:69:80:5b:45:99:00: ec:fb:20:f4:ee:4b:06:3b:1f:fe:88:d6:5e:dc:37: 0b:ee:fd:7d:e9:db:9e:1a:e1:0a:83:fa:70:3d:ce: bf:85:ac:ca:7f:50:17:71:d3:57:5c:63:20:e4:27: 22:8b:c8:4f:82:77:1e:34:46:42:52:ac:c6:de:7e: c0:3a:74:85:2c:2b:3a:ed:ad:16:18:02:29:b0:96: a8:70:67:2a:72:7d:91:29:3a:de:df:d9:c3:91:f2: 24:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:51:CC:6C:DB:3C:D0:5D:08:B9:3E:00:BF:4C:E4:E2:79:DD:E7:CC X509v3 Authority Key Identifier: keyid:60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/FlHMbNs80F0IuT4Av0zk4nnd58w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.130.136.0/22 Signature Algorithm: sha256WithRSAEncryption c5:9d:5f:47:c3:d3:d2:5f:4c:27:21:82:45:b0:2a:5b:dc:e8: ce:e8:79:1d:cb:e4:1c:00:d5:da:c7:0e:a1:53:1f:17:fa:f3: 1e:3a:65:e6:13:e3:8a:0e:9c:b4:28:fd:e4:32:88:f2:ac:40: 80:a3:9d:c1:f5:c0:3f:58:fb:db:dd:a9:03:c0:31:5f:2b:aa: 31:eb:5b:48:e1:e3:80:ea:e6:56:51:d8:18:3f:70:e7:47:f9: 3b:74:fd:21:ce:81:81:04:aa:17:5d:de:60:8b:1d:d2:8d:f2: 30:4e:24:90:b7:27:e8:71:b4:6a:23:cf:0e:6e:cc:18:d3:97: 6e:dc:ef:6d:16:7e:cd:68:fc:74:97:f7:bd:52:d6:6a:11:68: 7a:36:b5:a9:3d:7c:62:5b:7d:a1:6a:84:21:4c:c1:a6:a4:a9: 9f:f0:7f:30:27:7e:7a:6e:f4:ea:1c:77:4e:ce:2f:94:7c:7e: ea:8c:0f:49:bc:2d:79:a3:97:ec:b0:7b:cf:21:2d:54:b2:66: d3:cd:09:b7:9a:c9:74:dd:b6:58:09:cc:c4:4d:6f:27:98:92: 47:d7:9e:aa:2f:ce:d2:96:98:6b:68:43:5b:f1:4f:08:95:8d: 67:ce:fb:ac:32:24:65:f6:6e:35:c1:d5:e0:13:3e:25:cb:82: 37:e5:f5:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yZO+Qff41Hq/mZsXBRmFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYzhkNTc3NDdmNzI5NzAwZWYyZjU2MTRmNmRmZGVjOGQx MTlmMmQwHhcNMjYwMTAyMDgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjUxY2M2Y2RiM2NkMDVkMDhiOTNlMDBiZjRjZTRlMjc5ZGRlN2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eziHXrftN0GFKaKRnAouF5gB1cg SV92yqZcRUtGH8Ak3G/AHzU4Hsw/nSDVaq2rGYKDBPgbl3UyjxJceoA03auQZAU1 XeA7o8kX/yH4IlipyiA57tlwlquPKKaovYRKfz/cYib+pn7GqZ7r8NQ5saVXwh8z 9mSJ29XqTAp0lRCtrgHYzswVhyuISdtTpO4L7/u2htdT/JX27WqF4pNpgFtFmQDs +yD07ksGOx/+iNZe3DcL7v196dueGuEKg/pwPc6/hazKf1AXcdNXXGMg5Ccii8hP gnceNEZCUqzG3n7AOnSFLCs67a0WGAIpsJaocGcqcn2RKTre39nDkfIktwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBZRzGzbPNBdCLk+AL9M5OJ53efMMB8GA1UdIwQY MBaAFGDI1XdH9ylwDvL1YU9t/eyNEZ8tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU1qVmQwZjNLWEFPOHZWaFQyMzk3STBSbnkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8zOWQ3MzQtNmZiMS00ZGMwLWExMjgt ZDc1ZjU5NWZhN2MzLzEvRmxITWJOczgwRjBJdVQ0QXYwems0bm5kNTh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8zOWQ3MzQtNmZiMS00ZGMwLWExMjgtZDc1ZjU5NWZhN2Mz LzEvWU1qVmQwZjNLWEFPOHZWaFQyMzk3STBSbnkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYKIMA0G CSqGSIb3DQEBCwUAA4IBAQDFnV9Hw9PSX0wnIYJFsCpb3OjO6Hkdy+QcANXaxw6h Ux8X+vMeOmXmE+OKDpy0KP3kMojyrECAo53B9cA/WPvb3akDwDFfK6ox61tI4eOA 6uZWUdgYP3DnR/k7dP0hzoGBBKoXXd5gix3SjfIwTiSQtyfocbRqI88ObswY05du 3O9tFn7NaPx0l/e9UtZqEWh6NrWpPXxiW32haoQhTMGmpKmf8H8wJ356bvTqHHdO zi+UfH7qjA9JvC15o5fssHvPIS1UsmbTzQm3msl03bZYCczETW8nmJJH156qL87S lphraENb8U8IlY1nzvusMiRl9m41wdXgEz4ly4I35fVK -----END CERTIFICATE-----Generated at Mon Jan 26 06:17:54 2026 by rpki-client