This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/FSFyylYZoJ__LJ0VFZP-2aItmuE.roa File: FSFyylYZoJ__LJ0VFZP-2aItmuE.roa (raw, json) Hash identifier: 4TUbcjRKjpEozpWO2rDakc6T9yJDVcy+nvZz/pOEz9A= Subject key identifier: 15:21:72:CA:56:19:A0:9F:FF:2C:9D:15:15:93:FE:D9:A2:2D:9A:E1 Certificate issuer: /CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5 Certificate serial: 019B7F15F13E7A458FF3A6586522A0A9524C Authority key identifier: 4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/FSFyylYZoJ__LJ0VFZP-2aItmuE.roa Signing time: Fri 02 Jan 2026 14:21:43 +0000 ROA not before: Fri 02 Jan 2026 14:21:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205052 IP address blocks: 185.231.196.0/23 maxlen: 23 185.231.198.0/23 maxlen: 23 2a0c:7900::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f1:3e:7a:45:8f:f3:a6:58:65:22:a0:a9:52:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5 Validity Not Before: Jan 2 14:21:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=152172ca5619a09fff2c9d151593fed9a22d9ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:93:06:d4:82:ce:59:37:ac:68:d6:d5:ed:57: 91:ea:93:c6:fe:5f:d5:9b:e8:34:a6:08:ee:cc:80: c2:a5:6c:da:46:6c:1a:8a:30:a8:cf:e2:85:fc:8e: 1c:20:1c:7f:21:f0:c7:8d:2a:3d:bf:48:84:5a:6a: a5:19:7d:68:3a:3c:00:ed:e4:a9:3a:5f:38:a4:af: 96:ae:4b:96:61:c6:1b:c4:da:13:83:ce:0e:64:54: da:2c:c4:58:b8:be:7a:5c:c5:67:6d:5e:ae:fa:5f: 6f:d4:91:bc:fc:9a:7c:ee:29:a2:ce:ae:28:9c:0d: 25:cc:a2:23:66:24:b1:80:0a:f5:fa:71:d5:99:3c: 6c:9b:42:b8:38:f2:2d:e5:70:4a:11:96:b9:3a:c8: 17:a3:7f:74:6f:f5:fd:a0:cc:f3:65:21:75:89:9d: 56:3d:ea:c2:c1:65:33:21:d6:2f:54:2d:51:b3:73: ba:9f:78:21:14:fd:49:cd:7a:a7:89:88:45:3e:5a: 18:cf:f1:14:df:7f:04:0b:f4:8a:1c:fe:b4:e4:02: 49:fd:af:67:f8:03:ff:db:58:e2:08:b1:a6:88:fc: da:86:12:a2:63:ce:0a:32:e2:6f:19:a3:53:c8:77: e0:02:62:ea:fe:b9:39:0f:a5:0b:ed:5e:1d:f6:97: 9c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:21:72:CA:56:19:A0:9F:FF:2C:9D:15:15:93:FE:D9:A2:2D:9A:E1 X509v3 Authority Key Identifier: keyid:4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/FSFyylYZoJ__LJ0VFZP-2aItmuE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.231.196.0/22 IPv6: 2a0c:7900::/29 Signature Algorithm: sha256WithRSAEncryption 56:68:4d:50:70:72:c4:69:33:b4:e6:f4:31:da:ba:08:c0:fb: 23:9c:54:13:be:c9:1e:b8:5c:08:e8:75:00:97:4c:06:77:b6: fa:86:3b:1f:15:cc:b9:58:96:d3:53:cb:c9:47:5f:98:8b:99: 22:2a:d1:7a:dc:b2:68:5b:33:ea:c9:ee:76:19:42:cc:4f:3d: a5:91:17:f8:fc:eb:7f:93:43:cb:50:b9:18:07:a4:27:0f:a4: 69:7c:fc:6a:65:c2:d8:2e:f6:37:9a:4c:1c:6f:d9:8b:25:16: fa:73:4b:d3:7e:f8:36:91:1d:bd:aa:be:57:d1:17:69:da:44: 57:5e:ca:8b:eb:d1:c1:eb:00:ca:61:d2:4e:4b:f4:a7:71:41: e4:16:d1:e7:02:8e:2e:cf:c4:d7:53:11:4d:b8:c4:eb:81:a6: d6:b3:3d:8a:38:ce:7b:d3:6e:33:71:99:b7:d1:56:07:3d:0e: 67:59:77:89:96:f3:af:7e:4a:9a:9c:7f:ea:bd:7c:c7:38:89: d2:68:81:b1:ed:25:05:f8:4c:5b:20:4a:71:25:79:35:c2:29: ef:9f:0d:93:cc:8e:b4:4e:54:f3:a8:06:87:ff:35:00:a3:fc: 10:3c:67:30:c0:80:9d:22:ec:2a:d3:b5:9c:1b:8f:46:08:a5: 35:4c:4e:ef -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FfE+ekWP86ZYZSKgqVJMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZTg5NmE0MTk1Mzg1ZDRiOTRiNzI5NTk4OGNjZmJmYThh Yzk5YzUwHhcNMjYwMTAyMTQyMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTIxNzJjYTU2MTlhMDlmZmYyYzlkMTUxNTkzZmVkOWEyMmQ5YWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5MG1ILOWTesaNbV7VeR6pPG/l/V m+g0pgjuzIDCpWzaRmwaijCoz+KF/I4cIBx/IfDHjSo9v0iEWmqlGX1oOjwA7eSp Ol84pK+WrkuWYcYbxNoTg84OZFTaLMRYuL56XMVnbV6u+l9v1JG8/Jp87imizq4o nA0lzKIjZiSxgAr1+nHVmTxsm0K4OPIt5XBKEZa5OsgXo390b/X9oMzzZSF1iZ1W PerCwWUzIdYvVC1Rs3O6n3ghFP1JzXqniYhFPloYz/EU338EC/SKHP605AJJ/a9n +AP/21jiCLGmiPzahhKiY84KMuJvGaNTyHfgAmLq/rk5D6UL7V4d9pecZQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBUhcspWGaCf/yydFRWT/tmiLZrhMB8GA1UdIwQY MBaAFEvolqQZU4XUuUtylZiMz7+orJnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUy1pV3BCbFRoZFM1UzNLVm1JelB2NmlzbWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83YTEzZWUtYjczMS00ZmY5LWJlZjAt NGIxNTgxZjA5ZDNiLzEvRlNGeXlsWVpvSl9fTEowVkZaUC0yYUl0bXVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS83YTEzZWUtYjczMS00ZmY5LWJlZjAtNGIxNTgxZjA5ZDNi LzEvUy1pV3BCbFRoZFM1UzNLVm1JelB2NmlzbWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuefEMA0E AgACMAcDBQMqDHkAMA0GCSqGSIb3DQEBCwUAA4IBAQBWaE1QcHLEaTO05vQx2roI wPsjnFQTvskeuFwI6HUAl0wGd7b6hjsfFcy5WJbTU8vJR1+Yi5kiKtF63LJoWzPq ye52GULMTz2lkRf4/Ot/k0PLULkYB6QnD6RpfPxqZcLYLvY3mkwcb9mLJRb6c0vT fvg2kR29qr5X0Rdp2kRXXsqL69HB6wDKYdJOS/SncUHkFtHnAo4uz8TXUxFNuMTr gabWsz2KOM57024zcZm30VYHPQ5nWXeJlvOvfkqanH/qvXzHOInSaIGx7SUF+Exb IEpxJXk1winvnw2TzI60TlTzqAaH/zUAo/wQPGcwwICdIuwq07WcG49GCKU1TE7v -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:29 2026 by rpki-client