This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/fMLivNYCuxdhHtX3Ga7hVSkjoJM.roa File: fMLivNYCuxdhHtX3Ga7hVSkjoJM.roa (raw, json) Hash identifier: 9AwEnRwEhqte/EFdOWwlxFhd4JAdP6+asha44+p++gg= Subject key identifier: 7C:C2:E2:BC:D6:02:BB:17:61:1E:D5:F7:19:AE:E1:55:29:23:A0:93 Certificate issuer: /CN=23b1943087ce69623e76b2145b3479ac204ba1c9 Certificate serial: 019B7F13CF2DB6024995E612D8DE880112E6 Authority key identifier: 23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/fMLivNYCuxdhHtX3Ga7hVSkjoJM.roa Signing time: Fri 02 Jan 2026 14:19:23 +0000 ROA not before: Fri 02 Jan 2026 14:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 87.236.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 20:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:cf:2d:b6:02:49:95:e6:12:d8:de:88:01:12:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23b1943087ce69623e76b2145b3479ac204ba1c9 Validity Not Before: Jan 2 14:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cc2e2bcd602bb17611ed5f719aee1552923a093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:77:f4:7b:9f:52:c4:a8:23:d6:9a:50:66:47: 28:ca:7b:70:67:d6:71:f9:6b:8c:20:74:bc:cd:e1: 15:a3:72:70:bb:ff:b2:a0:d0:19:3b:9c:54:67:6e: 72:91:74:60:c6:fd:83:82:63:9f:10:0c:0c:3c:48: 36:26:07:70:6d:cb:cc:b8:de:02:67:8e:1b:42:93: 1e:d4:8b:e1:63:89:29:1c:a8:f6:85:21:47:cd:99: ca:1a:1e:02:54:4c:09:4e:89:eb:28:4e:c1:c3:27: 4e:4f:0c:5d:3d:8a:ae:0b:a1:28:3a:34:27:f9:9b: 8e:a9:02:7f:62:a1:e3:5d:74:1c:8d:8a:39:66:47: 1b:53:bc:e7:de:3e:cc:5f:8d:26:f8:0d:ff:b8:07: 1d:83:6b:07:e9:d0:de:44:71:c5:9a:5d:ff:a7:03: f2:c3:14:1c:89:6c:19:fa:6f:36:f5:f1:13:67:07: 2b:74:52:fe:c2:19:5e:78:c1:c0:ee:bb:cd:7f:3f: 46:88:43:b8:76:39:30:7d:47:bc:94:77:e9:e9:df: 90:9c:00:c5:9f:f0:67:a9:da:40:fe:b8:db:49:8e: 8a:b3:33:5e:f6:30:cb:eb:b8:e7:ec:7c:5c:e5:02: 09:d7:65:51:10:f3:b0:ca:89:89:16:88:e9:fc:dd: e1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C2:E2:BC:D6:02:BB:17:61:1E:D5:F7:19:AE:E1:55:29:23:A0:93 X509v3 Authority Key Identifier: keyid:23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/fMLivNYCuxdhHtX3Ga7hVSkjoJM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.67.0/24 Signature Algorithm: sha256WithRSAEncryption 60:9b:37:15:36:99:c0:a1:e5:18:81:23:9e:29:20:27:17:6d: 5f:3b:d4:21:7a:e0:fa:22:35:7a:ac:a8:4d:77:ff:db:ee:37: cc:cb:8f:c5:ea:c9:99:87:85:a2:54:09:8c:33:dd:cb:91:9f: fa:02:b7:4f:b9:e7:7d:79:7e:7f:13:03:d8:67:61:bc:34:d2: dc:7a:0d:6e:1d:27:4f:17:20:ed:5a:cc:6f:1c:4c:b7:7b:6f: d0:4f:61:60:26:1a:0a:27:b0:1c:b8:1b:41:e6:f2:fb:f8:46: 61:4b:82:0a:75:cc:72:aa:01:2e:6a:43:6e:48:48:7b:e0:53: 23:99:14:c6:1c:a1:b8:93:50:6e:d1:3f:d2:59:e1:5f:01:4e: 49:c9:92:e4:b1:7e:3e:48:bf:fc:c1:bd:3d:7b:a4:74:eb:e4: ae:1d:fc:5f:15:ed:a5:2b:6b:3a:c5:52:eb:dc:8b:eb:d9:dc: 33:8b:9e:4f:d0:dc:11:56:b6:bd:0c:a5:4c:fb:6b:4f:d3:a4: b2:cd:ac:8d:99:fc:a4:60:43:43:8d:5f:6f:b5:4e:32:7a:44: 60:da:ea:ba:b5:57:48:a0:4e:84:71:0b:f0:aa:0e:e2:e0:68: c2:b5:0f:aa:44:95:fc:ee:85:72:8d:2b:4d:d7:b1:fd:75:2b: 06:86:e7:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E88ttgJJleYS2N6IARLmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzYjE5NDMwODdjZTY5NjIzZTc2YjIxNDViMzQ3OWFjMjA0 YmExYzkwHhcNMjYwMTAyMTQxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2MyZTJiY2Q2MDJiYjE3NjExZWQ1ZjcxOWFlZTE1NTI5MjNhMDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnf0e59SxKgj1ppQZkcoyntwZ9Zx +WuMIHS8zeEVo3Jwu/+yoNAZO5xUZ25ykXRgxv2DgmOfEAwMPEg2JgdwbcvMuN4C Z44bQpMe1IvhY4kpHKj2hSFHzZnKGh4CVEwJTonrKE7BwydOTwxdPYquC6EoOjQn +ZuOqQJ/YqHjXXQcjYo5ZkcbU7zn3j7MX40m+A3/uAcdg2sH6dDeRHHFml3/pwPy wxQciWwZ+m829fETZwcrdFL+whleeMHA7rvNfz9GiEO4djkwfUe8lHfp6d+QnADF n/BnqdpA/rjbSY6KszNe9jDL67jn7Hxc5QIJ12VREPOwyomJFojp/N3hQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHzC4rzWArsXYR7V9xmu4VUpI6CTMB8GA1UdIwQY MBaAFCOxlDCHzmliPnayFFs0eawgS6HJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTdHVU1JZk9hV0ktZHJJVVd6UjVyQ0JMb2NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83M2YxYzktODJiMC00ZWRlLWI4OTkt Zjc0MmYzOTVhYWY5LzEvZk1MaXZOWUN1eGRoSHRYM0dhN2hWU2tqb0pNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83M2YxYzktODJiMC00ZWRlLWI4OTktZjc0MmYzOTVhYWY5 LzEvSTdHVU1JZk9hV0ktZHJJVVd6UjVyQ0JMb2NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+xDMA0G CSqGSIb3DQEBCwUAA4IBAQBgmzcVNpnAoeUYgSOeKSAnF21fO9QheuD6IjV6rKhN d//b7jfMy4/F6smZh4WiVAmMM93LkZ/6ArdPued9eX5/EwPYZ2G8NNLceg1uHSdP FyDtWsxvHEy3e2/QT2FgJhoKJ7AcuBtB5vL7+EZhS4IKdcxyqgEuakNuSEh74FMj mRTGHKG4k1Bu0T/SWeFfAU5JyZLksX4+SL/8wb09e6R06+SuHfxfFe2lK2s6xVLr 3Ivr2dwzi55P0NwRVra9DKVM+2tP06SyzayNmfykYENDjV9vtU4yekRg2uq6tVdI oE6EcQvwqg7i4GjCtQ+qRJX87oVyjStN17H9dSsGhude -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:19 2026 by rpki-client