This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/FsryNOkpTRhYXYiVpfSErxkdF5I.roa File: FsryNOkpTRhYXYiVpfSErxkdF5I.roa (raw, json) Hash identifier: 7TnmsucFlZLELXfMUZN9SGlpQMX8+cF0eWaXdVfCFOM= Subject key identifier: 16:CA:F2:34:E9:29:4D:18:58:5D:88:95:A5:F4:84:AF:19:1D:17:92 Certificate issuer: /CN=741736f657221fc134316323b0740585a9c1b20c Certificate serial: 019BD5840A4034F0FD093F59E67F9101DFF8 Authority key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/FsryNOkpTRhYXYiVpfSErxkdF5I.roa Signing time: Mon 19 Jan 2026 09:09:18 +0000 ROA not before: Mon 19 Jan 2026 09:09:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61079 IP address blocks: 185.19.164.0/23 maxlen: 23 185.19.164.0/24 maxlen: 24 185.19.165.0/24 maxlen: 24 185.19.166.0/23 maxlen: 23 185.19.166.0/24 maxlen: 24 185.19.167.0/24 maxlen: 24 2a04:1240::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:84:0a:40:34:f0:fd:09:3f:59:e6:7f:91:01:df:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=741736f657221fc134316323b0740585a9c1b20c Validity Not Before: Jan 19 09:09:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16caf234e9294d18585d8895a5f484af191d1792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:38:d6:c0:bc:16:95:c9:ea:32:40:08:87:b4: fb:98:b5:4e:39:6c:b8:9d:d1:d6:f2:95:5b:9f:1b: 1b:e6:da:98:cc:b5:76:23:36:14:f9:65:e5:e0:57: 3b:02:87:a5:92:fe:9f:cf:00:71:8f:33:6e:8e:d2: 0f:13:33:65:96:b1:08:d3:52:03:6e:b1:c1:49:49: 28:31:91:68:73:cc:42:5a:40:80:ca:82:28:e1:a3: 77:bf:5b:2c:99:27:9c:29:9e:70:6f:dc:99:79:cf: f4:0a:90:7b:66:b5:05:b6:9b:ac:e6:fd:eb:b1:d2: 25:d4:42:b1:62:86:47:35:80:06:f9:89:7b:5b:52: f9:53:04:29:57:41:18:25:ba:79:af:e6:c3:78:af: 3b:e8:07:48:c9:8c:af:76:f7:9e:51:88:e3:1f:fe: 2b:35:78:99:77:e9:e0:49:60:75:d4:e8:4b:50:72: 39:13:97:a4:9b:ce:86:bf:0c:b0:59:45:2f:d6:e1: f1:db:d8:ec:d3:b3:ad:3e:64:00:21:c4:13:6e:fe: 06:36:ae:cd:42:e5:33:44:8b:81:97:b0:ba:0a:b8: e2:ce:92:76:e1:e8:db:57:80:51:b2:88:bd:5e:af: e5:3d:fd:54:42:c2:5d:bd:3c:f5:cd:3a:53:db:db: 0a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CA:F2:34:E9:29:4D:18:58:5D:88:95:A5:F4:84:AF:19:1D:17:92 X509v3 Authority Key Identifier: keyid:74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/FsryNOkpTRhYXYiVpfSErxkdF5I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.19.164.0/22 IPv6: 2a04:1240::/29 Signature Algorithm: sha256WithRSAEncryption 15:43:eb:e0:62:4b:fd:39:76:59:dc:83:c2:9d:83:ed:ec:7b: 32:49:b6:2a:6c:63:c9:e8:ed:31:b5:f8:03:f4:19:68:29:d2: 6e:a4:3c:d7:e1:6d:c2:4c:09:d7:4c:b5:7a:7c:e1:0a:ba:1c: 23:4f:c2:77:33:50:e4:e7:10:df:87:86:61:1c:8d:a2:73:82: c3:1d:76:8f:b2:30:59:fd:61:38:ea:35:a3:dd:03:e6:1e:5e: bf:7d:ed:13:de:d2:ea:83:e1:6b:34:4b:db:77:9c:0a:37:59: e5:c2:49:bf:76:0a:1f:f1:7a:a3:2a:37:61:62:9f:29:bb:5a: 19:92:de:f4:07:ee:89:85:4f:66:60:55:67:56:b7:6d:a3:af: 33:fd:58:04:3f:1a:6e:02:94:d0:fe:ad:93:02:a2:7d:f5:c5: 68:30:49:cf:6d:00:2e:5a:3d:99:70:48:d8:c3:b5:26:90:4c: 4d:f9:d5:d2:c7:79:b6:25:3b:b3:8e:50:a0:d4:9a:41:6f:87: 72:17:1c:34:41:d4:9d:9c:26:89:17:c0:3c:36:9a:db:5e:07: 45:67:00:90:3a:3e:39:07:f1:8c:81:33:02:3a:db:be:f5:9e: 5d:01:55:b6:47:61:cd:bb:24:9a:c1:ea:c4:0d:9d:8e:f2:0e: 63:78:27:d4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZvVhApANPD9CT9Z5n+RAd/4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MTczNmY2NTcyMjFmYzEzNDMxNjMyM2IwNzQwNTg1YTlj MWIyMGMwHhcNMjYwMTE5MDkwOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmNhZjIzNGU5Mjk0ZDE4NTg1ZDg4OTVhNWY0ODRhZjE5MWQxNzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTjWwLwWlcnqMkAIh7T7mLVOOWy4 ndHW8pVbnxsb5tqYzLV2IzYU+WXl4Fc7Aoelkv6fzwBxjzNujtIPEzNllrEI01ID brHBSUkoMZFoc8xCWkCAyoIo4aN3v1ssmSecKZ5wb9yZec/0CpB7ZrUFtpus5v3r sdIl1EKxYoZHNYAG+Yl7W1L5UwQpV0EYJbp5r+bDeK876AdIyYyvdveeUYjjH/4r NXiZd+ngSWB11OhLUHI5E5ekm86GvwywWUUv1uHx29js07OtPmQAIcQTbv4GNq7N QuUzRIuBl7C6CrjizpJ24ejbV4BRsoi9Xq/lPf1UQsJdvTz1zTpT29sK6wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBbK8jTpKU0YWF2IlaX0hK8ZHReSMB8GA1UdIwQY MBaAFHQXNvZXIh/BNDFjI7B0BYWpwbIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEJjMjlsY2lIOEUwTVdNanNIUUZoYW5Cc2d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iMzE0Y2ItNjJiNS00ZmE2LWI0NDUt Y2JmYmE0NTlkOGY3LzEvRnNyeU5Pa3BUUmhZWFlpVnBmU0VyeGtkRjVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9iMzE0Y2ItNjJiNS00ZmE2LWI0NDUtY2JmYmE0NTlkOGY3 LzEvZEJjMjlsY2lIOEUwTVdNanNIUUZoYW5Cc2d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuROkMA0E AgACMAcDBQMqBBJAMA0GCSqGSIb3DQEBCwUAA4IBAQAVQ+vgYkv9OXZZ3IPCnYPt 7HsySbYqbGPJ6O0xtfgD9BloKdJupDzX4W3CTAnXTLV6fOEKuhwjT8J3M1Dk5xDf h4ZhHI2ic4LDHXaPsjBZ/WE46jWj3QPmHl6/fe0T3tLqg+FrNEvbd5wKN1nlwkm/ dgof8XqjKjdhYp8pu1oZkt70B+6JhU9mYFVnVrdto68z/VgEPxpuApTQ/q2TAqJ9 9cVoMEnPbQAuWj2ZcEjYw7UmkExN+dXSx3m2JTuzjlCg1JpBb4dyFxw0QdSdnCaJ F8A8NprbXgdFZwCQOj45B/GMgTMCOtu+9Z5dAVW2R2HNuySawerEDZ2O8g5jeCfU -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:23 2026 by rpki-client