This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/FhZVHpSt67-FLIrXGu8bZFtfGzc.roa File: FhZVHpSt67-FLIrXGu8bZFtfGzc.roa (raw, json) Hash identifier: ie4XcpU14vWhCdQjs2+5o5FtFd7NDeWyGVgSncbFMgQ= Subject key identifier: 16:16:55:1E:94:AD:EB:BF:85:2C:8A:D7:1A:EF:1B:64:5B:5F:1B:37 Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce Certificate serial: 019B7910709AE48ED26703D5E787C06005E8 Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/FhZVHpSt67-FLIrXGu8bZFtfGzc.roa Signing time: Thu 01 Jan 2026 10:17:58 +0000 ROA not before: Thu 01 Jan 2026 10:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210353 IP address blocks: 195.123.120.0/23 maxlen: 23 195.123.120.0/24 maxlen: 24 195.123.121.0/24 maxlen: 24 195.123.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:70:9a:e4:8e:d2:67:03:d5:e7:87:c0:60:05:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce Validity Not Before: Jan 1 10:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1616551e94adebbf852c8ad71aef1b645b5f1b37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b9:02:b2:3a:6d:bc:9c:05:83:d6:5e:4f:c7: f5:03:07:3c:59:17:59:44:4c:de:43:5c:1a:9b:1f: c5:43:db:12:22:92:98:6e:a8:aa:05:58:7c:0e:96: a8:80:71:49:c5:b4:da:fd:09:70:10:5c:51:93:6b: 31:90:df:66:53:62:c7:fc:93:af:48:cf:56:77:34: 25:cc:0a:25:5d:d5:9a:03:15:b6:3e:9a:5e:b6:e0: 8b:eb:2c:cc:2b:7b:ac:23:ea:08:70:e1:53:15:f1: 7b:29:a1:1f:15:2d:c7:b8:ce:3e:06:d4:d6:2e:8c: 68:1c:7c:19:73:a3:85:d6:ed:da:98:48:05:06:f0: be:54:be:d7:fc:9f:ee:6b:e1:5b:cd:f1:89:64:e3: af:e8:07:52:1e:ca:81:56:a7:7e:2b:34:7e:1e:d1: 2b:02:e3:72:c0:3a:ba:e7:ae:49:53:be:c8:ba:db: dd:6b:52:01:62:4f:f2:f2:f9:c4:6d:c6:b9:f3:ae: 4e:42:cf:fe:87:1e:c4:cb:82:16:73:d5:11:1d:0a: e5:94:07:8b:8c:cc:85:31:7a:ce:cd:0e:88:e5:6e: 54:1a:6c:10:c9:64:8d:1d:fc:f4:82:60:ac:ac:ed: d6:6a:8b:8e:7e:f3:ce:a0:c8:ff:05:59:dc:18:c0: ec:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:16:55:1E:94:AD:EB:BF:85:2C:8A:D7:1A:EF:1B:64:5B:5F:1B:37 X509v3 Authority Key Identifier: keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/FhZVHpSt67-FLIrXGu8bZFtfGzc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.123.120.0-195.123.122.255 Signature Algorithm: sha256WithRSAEncryption 35:e2:d7:78:cc:22:8a:ba:12:49:04:d7:49:33:e9:ed:79:eb: 87:8e:76:20:64:7a:90:2a:37:22:36:36:c1:e5:06:02:d0:b8: 73:05:15:94:82:86:bd:51:b3:9a:e1:87:e9:49:be:56:2a:a9: d2:fe:8a:ea:cb:0e:39:05:ef:16:78:65:80:3b:a4:6a:6c:f9: 0a:d9:07:24:5f:96:8c:27:2f:76:49:eb:a3:33:8e:0b:d8:b2: be:a7:30:65:18:85:04:12:e5:09:b6:ed:3e:ca:e3:f1:fb:6d: 5d:b7:90:18:35:bb:62:4e:f1:68:6c:62:57:97:87:6d:36:1a: 7d:55:89:fe:5f:e1:19:e9:26:8d:73:fc:eb:9d:da:c2:90:27: c5:fa:86:2c:c0:af:d7:70:f7:21:39:38:f3:1b:1c:f1:3d:3b: 84:17:db:85:09:30:eb:cb:b6:97:7f:84:f1:47:50:f4:af:86: 71:f0:d1:95:ba:c3:03:c5:d5:93:fc:84:3b:11:b9:8b:fa:05: 81:f7:0a:d1:97:fb:99:07:9c:10:ab:bc:47:df:7d:24:0c:c2: cf:eb:3c:91:5c:d8:c0:25:20:4b:68:d7:17:42:69:6d:aa:77: bc:cf:cc:a1:c3:f5:4e:5c:51:a0:49:e9:6e:47:bc:1f:a2:7c: ea:da:bb:c9 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5EHCa5I7SZwPV54fAYAXoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMDVhZGM1YzQyNjJkZmY2YjNmM2U2MDY4MzBjN2Y5NzFk NzY2Y2UwHhcNMjYwMTAxMTAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjE2NTUxZTk0YWRlYmJmODUyYzhhZDcxYWVmMWI2NDViNWYxYjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLkCsjptvJwFg9ZeT8f1Awc8WRdZ REzeQ1wamx/FQ9sSIpKYbqiqBVh8DpaogHFJxbTa/QlwEFxRk2sxkN9mU2LH/JOv SM9WdzQlzAolXdWaAxW2PppetuCL6yzMK3usI+oIcOFTFfF7KaEfFS3HuM4+BtTW LoxoHHwZc6OF1u3amEgFBvC+VL7X/J/ua+FbzfGJZOOv6AdSHsqBVqd+KzR+HtEr AuNywDq6565JU77Iutvda1IBYk/y8vnEbca5865OQs/+hx7Ey4IWc9URHQrllAeL jMyFMXrOzQ6I5W5UGmwQyWSNHfz0gmCsrO3WaouOfvPOoMj/BVncGMDs6wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFBYWVR6Ureu/hSyK1xrvG2RbXxs3MB8GA1UdIwQY MBaAFMEFrcXEJi3/az8+YGgwx/lx12bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FXdHhjUW1MZjlyUHo1Z2FEREgtWEhYWnM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNDkxNzItZjhkYS00MTI4LTg2ODkt NTE1ODQ1ZTZjMzE3LzEvRmhaVkhwU3Q2Ny1GTElyWEd1OGJaRnRmR3pjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNDkxNzItZjhkYS00MTI4LTg2ODktNTE1ODQ1ZTZjMzE3 LzEvd1FXdHhjUW1MZjlyUHo1Z2FEREgtWEhYWnM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAPDe3gD BADDe3owDQYJKoZIhvcNAQELBQADggEBADXi13jMIoq6EkkE10kz6e1564eOdiBk epAqNyI2NsHlBgLQuHMFFZSChr1Rs5rhh+lJvlYqqdL+iurLDjkF7xZ4ZYA7pGps +QrZByRflownL3ZJ66MzjgvYsr6nMGUYhQQS5Qm27T7K4/H7bV23kBg1u2JO8Whs YleXh202Gn1Vif5f4RnpJo1z/Oud2sKQJ8X6hizAr9dw9yE5OPMbHPE9O4QX24UJ MOvLtpd/hPFHUPSvhnHw0ZW6wwPF1ZP8hDsRuYv6BYH3CtGX+5kHnBCrvEfffSQM ws/rPJFc2MAlIEto1xdCaW2qd7zPzKHD9U5cUaBJ6W5HvB+ifOrau8k= -----END CERTIFICATE-----Generated at Mon Jan 26 00:38:42 2026 by rpki-client