This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/FqKH_1dEbYHfG_HCWhQNRfoAnxY.roa File: FqKH_1dEbYHfG_HCWhQNRfoAnxY.roa (raw, json) Hash identifier: ypbscnVK5daBEVMCMSev1UT9NaME9JSvvJDk8LMy6XM= Subject key identifier: 16:A2:87:FF:57:44:6D:81:DF:1B:F1:C2:5A:14:0D:45:FA:00:9F:16 Certificate issuer: /CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b Certificate serial: 019B7A5B97F566CC6A23CBE7FCE06F4B7EAF Authority key identifier: EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/FqKH_1dEbYHfG_HCWhQNRfoAnxY.roa Signing time: Thu 01 Jan 2026 16:19:41 +0000 ROA not before: Thu 01 Jan 2026 16:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61031 IP address blocks: 185.69.132.0/23 maxlen: 23 185.69.132.0/24 maxlen: 24 185.69.134.0/23 maxlen: 23 185.69.135.0/24 maxlen: 24 185.245.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:97:f5:66:cc:6a:23:cb:e7:fc:e0:6f:4b:7e:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b Validity Not Before: Jan 1 16:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16a287ff57446d81df1bf1c25a140d45fa009f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:73:ba:d9:49:7b:a7:1e:3b:b3:12:0e:02:5f: f8:f6:19:d5:cf:7b:24:22:e5:6e:5c:d6:7b:e4:30: cf:ea:31:bc:6e:d3:d2:84:73:c8:7a:4d:a8:0f:ee: e8:94:6c:05:8f:38:12:68:27:cd:69:77:72:af:2b: 75:17:e9:64:1c:cf:98:93:cb:5a:37:4f:b1:92:97: 08:6d:b2:82:03:5c:64:f9:7f:09:62:af:2d:f9:a5: 54:23:18:dc:a8:08:8c:8b:d7:a3:d3:12:8a:f4:90: 0d:8c:5b:1c:89:48:ac:2e:63:c3:5a:4f:70:a6:31: f9:f7:67:80:25:9b:c7:f5:6f:90:18:c2:0c:e3:04: 5b:02:55:37:ed:e9:e4:bb:98:9b:d2:fd:9a:cc:7e: b4:91:0d:bc:93:5b:8b:99:a8:fb:4d:03:5e:c5:84: c0:ae:0f:83:d0:78:50:91:1a:86:50:9b:d8:6b:f2: 75:6a:d9:4d:4b:bd:ac:21:34:fb:8e:36:99:67:a6: 5a:37:24:f8:37:fe:9f:98:8e:23:98:c0:64:fe:06: b5:50:13:32:d9:c4:81:59:b7:6d:f7:3f:63:6d:ba: 8a:ea:6d:ea:f7:37:64:df:41:ed:3c:d8:c5:ea:11: e8:03:c9:6d:bc:b4:7c:f1:03:9f:f2:68:d8:28:0d: f2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A2:87:FF:57:44:6D:81:DF:1B:F1:C2:5A:14:0D:45:FA:00:9F:16 X509v3 Authority Key Identifier: keyid:EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/FqKH_1dEbYHfG_HCWhQNRfoAnxY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.69.132.0/22 185.245.23.0/24 Signature Algorithm: sha256WithRSAEncryption 60:98:e5:c9:f5:2d:da:b6:c4:21:4f:87:ed:c9:ea:69:ea:96: 3a:04:f9:d6:e9:33:a6:d2:df:0c:24:1a:09:63:17:c9:65:17: 75:4f:2c:f9:21:bf:d3:cb:74:7b:24:b9:7c:fa:48:8c:7d:c0: 0e:cd:0a:48:8f:71:f2:37:97:76:f5:64:e5:89:0a:bc:83:ee: bf:84:4a:4b:a7:9e:05:35:1b:35:75:6e:e3:37:b4:49:54:e9: 8b:a9:82:72:ec:1e:1d:34:39:1e:1b:3d:f4:db:9d:42:a9:10: ab:24:19:0f:81:2d:dc:46:d4:ea:a2:4b:4e:0b:41:53:f9:2d: 56:e8:66:f6:de:c8:45:49:20:89:52:cb:71:c4:af:3f:f4:9d: 45:52:c8:23:93:30:f3:84:8e:ac:13:37:22:e5:fa:23:4c:8a: a1:29:47:53:2e:f3:db:1b:56:6c:d3:fe:17:3b:1e:95:c6:10: 1d:f5:a2:0d:65:53:58:e3:d2:fb:37:db:e1:cf:ae:9f:b4:3e: fd:0f:3e:d7:87:75:49:f4:7e:61:f1:53:19:ae:49:1f:61:1b: 62:09:1b:7f:67:f7:44:14:98:3f:6e:ad:a3:be:9b:c9:23:59: 3d:2b:a3:e6:3e:dd:ac:b9:fd:a3:02:51:df:22:ba:e0:92:15: 27:1d:f3:6a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6W5f1ZsxqI8vn/OBvS36vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViOTMzYTFhYjFjNzE1ZTBiM2IyYzdmZmEwZTEwMzg0NTYx NGQzN2IwHhcNMjYwMTAxMTYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmEyODdmZjU3NDQ2ZDgxZGYxYmYxYzI1YTE0MGQ0NWZhMDA5ZjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3O62Ul7px47sxIOAl/49hnVz3sk IuVuXNZ75DDP6jG8btPShHPIek2oD+7olGwFjzgSaCfNaXdyryt1F+lkHM+Yk8ta N0+xkpcIbbKCA1xk+X8JYq8t+aVUIxjcqAiMi9ej0xKK9JANjFsciUisLmPDWk9w pjH592eAJZvH9W+QGMIM4wRbAlU37enku5ib0v2azH60kQ28k1uLmaj7TQNexYTA rg+D0HhQkRqGUJvYa/J1atlNS72sITT7jjaZZ6ZaNyT4N/6fmI4jmMBk/ga1UBMy 2cSBWbdt9z9jbbqK6m3q9zdk30HtPNjF6hHoA8ltvLR88QOf8mjYKA3ytQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBaih/9XRG2B3xvxwloUDUX6AJ8WMB8GA1UdIwQY MBaAFOuTOhqxxxXgs7LH/6DhA4RWFNN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjVNNkdySEhGZUN6c3NmX29PRURoRllVMDNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80Y2UzZDgtOWRlYi00MmJmLTg5NGQt MmRkNmUxMTEzZjM0LzEvRnFLSF8xZEViWUhmR19IQ1doUU5SZm9BbnhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS80Y2UzZDgtOWRlYi00MmJmLTg5NGQtMmRkNmUxMTEzZjM0 LzEvNjVNNkdySEhGZUN6c3NmX29PRURoRllVMDNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuUWEAwQA ufUXMA0GCSqGSIb3DQEBCwUAA4IBAQBgmOXJ9S3atsQhT4ftyepp6pY6BPnW6TOm 0t8MJBoJYxfJZRd1Tyz5Ib/Ty3R7JLl8+kiMfcAOzQpIj3HyN5d29WTliQq8g+6/ hEpLp54FNRs1dW7jN7RJVOmLqYJy7B4dNDkeGz30251CqRCrJBkPgS3cRtTqoktO C0FT+S1W6Gb23shFSSCJUstxxK8/9J1FUsgjkzDzhI6sEzci5fojTIqhKUdTLvPb G1Zs0/4XOx6VxhAd9aINZVNY49L7N9vhz66ftD79Dz7Xh3VJ9H5h8VMZrkkfYRti CRt/Z/dEFJg/bq2jvpvJI1k9K6PmPt2suf2jAlHfIrrgkhUnHfNq -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:26 2026 by rpki-client