This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FJXG5yc21N1qS9ehoONHxHhBfuw.roa File: FJXG5yc21N1qS9ehoONHxHhBfuw.roa (raw, json) Hash identifier: LIANeHK0fppYADJwFhfiwyz6212quHMqQnl6LhxzjLQ= Subject key identifier: 14:95:C6:E7:27:36:D4:DD:6A:4B:D7:A1:A0:E3:47:C4:78:41:7E:EC Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F8574BBF81B4874ECCB101AF664168F Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FJXG5yc21N1qS9ehoONHxHhBfuw.roa Signing time: Fri 02 Jan 2026 16:23:31 +0000 ROA not before: Fri 02 Jan 2026 16:23:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215540 IP address blocks: 194.87.31.0/24 maxlen: 24 194.87.45.0/24 maxlen: 24 194.87.71.0/24 maxlen: 24 194.87.216.0/24 maxlen: 24 195.133.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:74:bb:f8:1b:48:74:ec:cb:10:1a:f6:64:16:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1495c6e72736d4dd6a4bd7a1a0e347c478417eec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:15:e6:4a:1b:d4:7e:4a:41:d3:14:7f:2b:1b: 41:27:7c:47:b8:79:87:58:e5:59:45:bd:b2:7c:97: 5e:90:f9:65:6f:bb:f8:2e:dc:80:e9:8c:9d:30:92: 33:01:6c:2d:28:2f:99:d0:96:f2:28:9b:a8:17:ab: 10:f5:45:64:51:03:e9:18:74:07:8a:9a:a1:45:77: 3b:14:1f:62:ce:9e:78:4e:07:f0:b6:3c:f9:1c:ac: 09:07:99:06:9f:62:90:2b:bf:4e:a1:fc:55:0e:ce: b1:62:8c:05:c8:b8:8c:d7:b2:a8:1c:a8:45:21:ab: c1:40:f8:ee:84:da:ed:40:d2:bd:05:1b:c4:41:dd: 1f:ae:64:bd:37:c0:b1:c9:6d:d6:3d:82:25:97:6a: 9f:64:b2:f4:21:89:dd:31:78:02:d8:14:55:c9:74: b7:19:67:e9:a5:8f:f3:03:da:25:f5:6d:dc:fe:f1: ba:84:6a:37:0b:d7:b9:98:95:77:a6:88:12:88:22: 9a:6a:f2:bd:35:3d:5f:97:50:52:13:21:ba:99:1e: cd:b0:9e:cc:15:57:d8:44:b2:e5:4c:37:53:d5:51: b1:26:95:a1:4e:cd:ab:c2:fb:90:d9:bb:09:1c:0a: 77:5b:99:40:55:78:35:08:33:4b:3d:f1:7c:93:ff: 25:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:95:C6:E7:27:36:D4:DD:6A:4B:D7:A1:A0:E3:47:C4:78:41:7E:EC X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FJXG5yc21N1qS9ehoONHxHhBfuw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.87.31.0/24 194.87.45.0/24 194.87.71.0/24 194.87.216.0/24 195.133.88.0/24 Signature Algorithm: sha256WithRSAEncryption 42:c2:00:7b:23:aa:be:50:bd:81:19:d8:34:37:79:08:dc:08: e5:26:64:5d:72:37:34:0f:bb:df:fd:a8:29:5b:36:07:06:cd: 08:63:8a:5f:e9:50:4d:f8:0a:9b:0f:1e:dc:4d:2e:11:f5:ed: 82:d8:a7:97:b0:28:03:b4:25:1c:79:a3:ac:d8:04:93:b5:84: 9c:83:0f:67:8a:4c:d7:34:25:49:93:f7:e3:4e:92:65:9d:8b: 44:b6:0c:aa:d3:46:65:fb:00:05:cc:03:72:23:b0:53:8d:e4: ae:a9:fc:a1:a6:ce:84:fd:85:b0:00:61:bf:4b:c8:21:b5:fb: 4a:fb:ae:07:7a:c2:59:df:a0:35:4d:e0:6c:b3:fb:25:64:e2: e1:48:2a:84:7c:af:6d:03:43:55:93:a9:dd:4d:20:62:5f:a7: 3d:82:bc:0b:5c:45:e0:52:71:42:9c:0a:7d:03:8e:09:f8:d5: a4:68:4d:c6:33:a2:40:f3:f0:a6:55:10:b2:f8:20:91:e5:23: be:f5:1d:33:39:6c:e8:46:47:9c:26:85:f4:4b:19:de:84:11: 56:ed:db:56:b5:4f:8b:6d:33:21:b4:59:b6:78:17:0c:e3:1b: cd:9c:35:18:d0:a2:6e:79:bd:7b:21:47:e0:d2:1e:27:bb:fd: 58:2c:e6:7b -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt/hXS7+BtIdOzLEBr2ZBaPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDk1YzZlNzI3MzZkNGRkNmE0YmQ3YTFhMGUzNDdjNDc4NDE3ZWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxXmShvUfkpB0xR/KxtBJ3xHuHmH WOVZRb2yfJdekPllb7v4LtyA6YydMJIzAWwtKC+Z0JbyKJuoF6sQ9UVkUQPpGHQH ipqhRXc7FB9izp54Tgfwtjz5HKwJB5kGn2KQK79OofxVDs6xYowFyLiM17KoHKhF IavBQPjuhNrtQNK9BRvEQd0frmS9N8CxyW3WPYIll2qfZLL0IYndMXgC2BRVyXS3 GWfppY/zA9ol9W3c/vG6hGo3C9e5mJV3pogSiCKaavK9NT1fl1BSEyG6mR7NsJ7M FVfYRLLlTDdT1VGxJpWhTs2rwvuQ2bsJHAp3W5lAVXg1CDNLPfF8k/8lawIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFBSVxucnNtTdakvXoaDjR8R4QX7sMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvRkpYRzV5YzIxTjFxUzllaG9PTkh4SGhCZnV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAwlcfAwQA wlctAwQAwldHAwQAwlfYAwQAw4VYMA0GCSqGSIb3DQEBCwUAA4IBAQBCwgB7I6q+ UL2BGdg0N3kI3AjlJmRdcjc0D7vf/agpWzYHBs0IY4pf6VBN+AqbDx7cTS4R9e2C 2KeXsCgDtCUceaOs2ASTtYScgw9nikzXNCVJk/fjTpJlnYtEtgyq00Zl+wAFzANy I7BTjeSuqfyhps6E/YWwAGG/S8ghtftK+64HesJZ36A1TeBss/slZOLhSCqEfK9t A0NVk6ndTSBiX6c9grwLXEXgUnFCnAp9A44J+NWkaE3GM6JA8/CmVRCy+CCR5SO+ 9R0zOWzoRkecJoX0SxnehBFW7dtWtU+LbTMhtFm2eBcM4xvNnDUY0KJueb17IUfg 0h4nu/1YLOZ7 -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:02 2026 by rpki-client