This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/FsEYUQUVL6IgAyC_3hTmIC05sYA.roa File: FsEYUQUVL6IgAyC_3hTmIC05sYA.roa (raw, json) Hash identifier: erfQp237zxf8AD8EH/ivbDYnw0vQY88Vf8ov2LTkk+Q= Subject key identifier: 16:C1:18:51:05:15:2F:A2:20:03:20:BF:DE:14:E6:20:2D:39:B1:80 Certificate issuer: /CN=86cb742a03bc9c85507217a25204dfff82fccdf9 Certificate serial: 019B7EA4CB7DCA70F0B1A7EBF8E220770134 Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/FsEYUQUVL6IgAyC_3hTmIC05sYA.roa Signing time: Fri 02 Jan 2026 12:18:07 +0000 ROA not before: Fri 02 Jan 2026 12:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44493 IP address blocks: 31.192.232.0/24 maxlen: 24 31.192.234.0/24 maxlen: 24 31.192.235.0/24 maxlen: 24 31.192.236.0/24 maxlen: 24 31.192.237.0/24 maxlen: 24 31.192.238.0/24 maxlen: 24 31.192.239.0/24 maxlen: 24 80.85.152.0/23 maxlen: 23 80.85.154.0/24 maxlen: 24 80.85.156.0/22 maxlen: 22 185.144.28.0/24 maxlen: 24 185.144.29.0/24 maxlen: 24 185.144.30.0/23 maxlen: 23 2a03:a0e0::/32 maxlen: 32 2a0a:eec0::/48 maxlen: 48 2a0a:eec0:2::/48 maxlen: 48 2a0a:eec0:3::/48 maxlen: 48 2a0a:eec0:4::/48 maxlen: 48 2a0a:eec0:5::/48 maxlen: 48 2a0a:eec0:6::/48 maxlen: 48 2a0a:eec0:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:cb:7d:ca:70:f0:b1:a7:eb:f8:e2:20:77:01:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9 Validity Not Before: Jan 2 12:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16c1185105152fa2200320bfde14e6202d39b180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d4:e4:7b:37:ce:c7:c6:11:19:e8:f7:df:39: 34:9d:f8:99:de:a9:1d:31:b0:9b:cd:64:ae:ee:12: f1:51:fb:ca:34:6e:29:a3:ef:95:db:9e:b1:e2:15: 68:51:ad:56:59:d9:6e:38:28:08:b9:62:b8:68:22: db:58:71:08:90:f4:62:96:3c:7b:e5:ba:02:38:b5: 72:c1:7e:b1:05:c4:5e:a8:16:68:05:c5:27:fc:b4: 67:e0:d1:13:bd:48:85:8e:1d:57:e6:79:07:b1:e2: e4:80:05:ce:ca:c6:af:70:f5:c7:21:3c:dc:d5:0a: f7:1a:18:88:81:c8:29:20:06:e2:53:cd:3a:c3:f8: 12:21:7d:a2:b8:af:04:28:d5:10:b2:25:b4:7a:b8: 64:a7:5c:aa:a5:a2:f4:23:59:17:ca:0d:c3:c9:25: 85:80:80:89:12:56:73:29:19:33:95:5d:78:de:a2: 12:49:a3:db:49:32:e8:f9:03:5a:19:49:78:83:e1: e5:59:e7:1a:df:63:2d:81:27:cd:80:46:d3:bb:d6: ef:84:c7:c0:a4:a8:0d:35:52:7a:0f:e3:e5:70:13: 00:84:01:20:47:68:d2:28:2b:92:1e:0e:c5:0b:5c: 95:f2:ef:46:6d:77:96:aa:69:2a:fb:6d:81:4f:f6: 52:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C1:18:51:05:15:2F:A2:20:03:20:BF:DE:14:E6:20:2D:39:B1:80 X509v3 Authority Key Identifier: keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/FsEYUQUVL6IgAyC_3hTmIC05sYA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.192.232.0/24 31.192.234.0-31.192.239.255 80.85.152.0-80.85.154.255 80.85.156.0/22 185.144.28.0/22 IPv6: 2a03:a0e0::/32 2a0a:eec0::/48 2a0a:eec0:2::-2a0a:eec0:7:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 99:e6:e9:7a:b5:ee:7d:bb:2d:25:57:d1:6a:af:86:1d:71:d8: df:39:33:25:b2:68:8c:51:e2:4f:14:82:d6:52:b1:1c:d8:6d: c6:ff:2c:e6:0d:aa:d8:52:94:c4:82:d9:fd:8f:a7:fb:83:07: 51:93:38:4f:de:6f:b9:11:1d:4f:7c:f1:a1:63:4e:0f:10:34: eb:ba:c5:83:d3:ab:9d:8c:16:04:e4:56:c4:5c:53:aa:71:bf: 39:1c:8b:a4:55:70:d9:34:5a:ed:92:99:52:3a:8e:be:ad:08: 18:bf:b4:5a:ce:f0:fc:c0:d0:ae:36:c9:51:55:e5:66:28:b2: 02:9f:6d:39:8c:73:bf:19:99:09:a3:70:de:31:1f:c7:ed:67: 31:f9:5f:ce:04:06:b9:2b:4c:6a:bc:d1:47:e0:5a:3b:a5:0a: 0f:d4:5e:48:20:57:2b:00:d0:6a:bc:77:97:06:4b:da:1b:fb: 5f:3c:2a:c4:0b:34:1b:b5:f8:81:71:a1:24:fe:2b:b4:e3:2d: a8:8b:c5:09:6f:46:b7:62:64:2c:ea:c5:0c:fc:ce:ac:30:e9: 04:b7:34:9d:2b:a5:b1:a5:aa:68:ac:70:5b:03:1b:89:e7:90: f5:40:3c:31:a2:03:02:b8:19:2d:63:05:c4:a7:d7:87:c0:75: 25:b2:e5:23 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZt+pMt9ynDwsafr+OIgdwE0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2I3NDJhMDNiYzljODU1MDcyMTdhMjUyMDRkZmZmODJm Y2NkZjkwHhcNMjYwMTAyMTIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmMxMTg1MTA1MTUyZmEyMjAwMzIwYmZkZTE0ZTYyMDJkMzliMTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNTkezfOx8YRGej33zk0nfiZ3qkd MbCbzWSu7hLxUfvKNG4po++V256x4hVoUa1WWdluOCgIuWK4aCLbWHEIkPRiljx7 5boCOLVywX6xBcReqBZoBcUn/LRn4NETvUiFjh1X5nkHseLkgAXOysavcPXHITzc 1Qr3GhiIgcgpIAbiU806w/gSIX2iuK8EKNUQsiW0erhkp1yqpaL0I1kXyg3DySWF gICJElZzKRkzlV143qISSaPbSTLo+QNaGUl4g+HlWeca32MtgSfNgEbTu9bvhMfA pKgNNVJ6D+PlcBMAhAEgR2jSKCuSHg7FC1yV8u9GbXeWqmkq+22BT/ZS+wIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFBbBGFEFFS+iIAMgv94U5iAtObGAMB8GA1UdIwQY MBaAFIbLdCoDvJyFUHIXolIE3/+C/M35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS83NjdhZTUtYjlhMi00OTkzLTgxYTgt MDVmMThmYzIxMmE3LzEvRnNFWVVRVVZMNklnQXlDXzNoVG1JQzA1c1lBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS83NjdhZTUtYjlhMi00OTkzLTgxYTgtMDVmMThmYzIxMmE3 LzEvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjA0BAIAATAuAwQAH8DoMAwD BAEfwOoDBAQfwOAwDAMEA1BVmAMEAFBVmgMEAlBVnAMEArmQHDAqBAIAAjAkAwUA KgOg4AMHACoK7sAAADASAwcBKgruwAACAwcDKgruwAAAMA0GCSqGSIb3DQEBCwUA A4IBAQCZ5ul6te59uy0lV9Fqr4YdcdjfOTMlsmiMUeJPFILWUrEc2G3G/yzmDarY UpTEgtn9j6f7gwdRkzhP3m+5ER1PfPGhY04PEDTrusWD06udjBYE5FbEXFOqcb85 HIukVXDZNFrtkplSOo6+rQgYv7RazvD8wNCuNslRVeVmKLICn205jHO/GZkJo3De MR/H7Wcx+V/OBAa5K0xqvNFH4Fo7pQoP1F5IIFcrANBqvHeXBkvaG/tfPCrECzQb tfiBcaEk/iu04y2oi8UJb0a3YmQs6sUM/M6sMOkEtzSdK6WxpaporHBbAxuJ55D1 QDwxogMCuBktYwXEp9eHwHUlsuUj -----END CERTIFICATE-----Generated at Mon Jan 26 01:02:08 2026 by rpki-client