This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FMqi7ZEKuVK4tBM6ZwYDCmwUb-k.roa File: FMqi7ZEKuVK4tBM6ZwYDCmwUb-k.roa (raw, json) Hash identifier: yCXMboSNyEVcfUTXB3f2r2D3uXERRn7IYhNDwdNQdxw= Subject key identifier: 14:CA:A2:ED:91:0A:B9:52:B8:B4:13:3A:67:06:03:0A:6C:14:6F:E9 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019C18A4ADC057B00E83F72E37DD333FEF5B Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FMqi7ZEKuVK4tBM6ZwYDCmwUb-k.roa Signing time: Sun 01 Feb 2026 09:59:31 +0000 ROA not before: Sun 01 Feb 2026 09:59:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.216.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:18:a4:ad:c0:57:b0:0e:83:f7:2e:37:dd:33:3f:ef:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Feb 1 09:59:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14caa2ed910ab952b8b4133a6706030a6c146fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:61:55:1d:84:2e:4f:21:5b:3d:e1:fe:49:43: 29:3f:a2:1a:05:b5:41:5f:32:52:4b:06:a2:cc:9e: fb:72:fa:37:34:78:53:69:3f:6a:39:b2:d9:f0:be: 3e:4a:cd:a0:4b:83:b2:b0:c3:1b:ef:fc:24:ee:6f: d8:e4:a3:2f:26:13:cb:e6:53:3d:8b:85:57:91:34: a0:58:bf:f8:67:ce:3f:1f:be:04:08:4d:55:04:87: 69:0d:e4:04:79:c0:ca:4a:16:a0:51:b2:67:d7:95: ab:a4:3e:d6:70:6a:71:34:a1:30:ec:cf:65:76:f4: d0:cc:5f:40:a3:5f:cb:0e:4b:c0:ca:b1:11:2b:44: 9e:f0:72:25:f9:38:5e:94:7e:b4:ac:0b:7d:7a:c0: 07:3a:3c:74:8e:bb:69:95:28:33:5c:82:97:bf:3e: f9:0b:4f:3a:28:e2:8f:f6:ab:01:de:37:ee:6e:04: 42:70:66:e8:d4:e7:06:2b:ba:68:2c:c4:88:c8:cc: 03:a4:fa:e4:76:e3:0b:cf:9c:cf:2f:3b:52:53:a0: 0e:b0:a8:b0:f9:44:fd:73:7b:90:e8:ee:55:da:d6: 1f:29:58:2d:22:7f:92:aa:f7:4d:02:3f:6a:60:a2: b7:57:d8:29:95:66:99:c6:45:64:d8:ca:da:a1:44: 08:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:CA:A2:ED:91:0A:B9:52:B8:B4:13:3A:67:06:03:0A:6C:14:6F:E9 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FMqi7ZEKuVK4tBM6ZwYDCmwUb-k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.216.70.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:28:11:f7:8b:8f:2c:ea:2d:eb:b0:93:ec:94:2a:5a:ad:91: e1:2f:c6:4b:c1:1e:c5:28:2d:37:46:e2:f2:f0:cb:4d:12:30: 46:93:1b:50:d9:c6:4d:c5:34:79:47:a0:72:e4:e2:0b:d3:f0: aa:57:4e:84:5f:b3:db:b0:9b:df:cb:82:ef:14:6e:b3:d7:77: 64:e8:f9:dd:f4:70:f8:fc:cd:ee:38:21:ca:61:27:fb:6f:a0: 5a:e2:5c:0d:e9:3f:ec:63:de:95:2f:fb:39:75:b0:12:d8:16: bc:f2:92:e2:8c:ee:9e:6b:91:4c:2a:8a:bf:1a:e0:c2:09:b5: 19:4b:26:f5:1d:7c:38:4e:1c:7b:2f:bb:ce:2d:fe:ea:88:89: 08:2e:a9:94:22:54:fe:e4:9b:58:ff:19:a7:5e:28:3d:08:ed: 1e:f9:5a:d5:e2:e0:f7:e8:52:f4:f6:b1:9c:84:cf:82:c2:60: 1a:45:e7:01:e8:ee:6d:b9:f7:38:06:61:15:e0:25:a9:77:81: 44:5a:04:11:a7:49:11:43:11:65:8f:b6:d9:fd:c9:66:49:f3: 0e:d7:b0:09:4a:30:ef:9a:b2:03:d8:8a:30:ff:92:fd:b6:e1: eb:cc:76:38:03:07:d5:ab:94:68:af:5e:cb:03:fd:e3:0b:6f: da:dc:95:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwYpK3AV7AOg/cuN90zP+9bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMjAxMDk1OTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGNhYTJlZDkxMGFiOTUyYjhiNDEzM2E2NzA2MDMwYTZjMTQ2ZmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmFVHYQuTyFbPeH+SUMpP6IaBbVB XzJSSwaizJ77cvo3NHhTaT9qObLZ8L4+Ss2gS4OysMMb7/wk7m/Y5KMvJhPL5lM9 i4VXkTSgWL/4Z84/H74ECE1VBIdpDeQEecDKShagUbJn15WrpD7WcGpxNKEw7M9l dvTQzF9Ao1/LDkvAyrERK0Se8HIl+ThelH60rAt9esAHOjx0jrtplSgzXIKXvz75 C086KOKP9qsB3jfubgRCcGbo1OcGK7poLMSIyMwDpPrkduMLz5zPLztSU6AOsKiw +UT9c3uQ6O5V2tYfKVgtIn+SqvdNAj9qYKK3V9gplWaZxkVk2MraoUQIjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBTKou2RCrlSuLQTOmcGAwpsFG/pMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvRk1xaTdaRUt1Vks0dEJNNlp3WURDbXdVYi1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudhGMA0G CSqGSIb3DQEBCwUAA4IBAQBeKBH3i48s6i3rsJPslCparZHhL8ZLwR7FKC03RuLy 8MtNEjBGkxtQ2cZNxTR5R6By5OIL0/CqV06EX7PbsJvfy4LvFG6z13dk6Pnd9HD4 /M3uOCHKYSf7b6Ba4lwN6T/sY96VL/s5dbAS2Ba88pLijO6ea5FMKoq/GuDCCbUZ Syb1HXw4Thx7L7vOLf7qiIkILqmUIlT+5JtY/xmnXig9CO0e+VrV4uD36FL09rGc hM+CwmAaRecB6O5tufc4BmEV4CWpd4FEWgQRp0kRQxFlj7bZ/clmSfMO17AJSjDv mrID2Iow/5L9tuHrzHY4AwfVq5Ror17LA/3jC2/a3JWN -----END CERTIFICATE-----Generated at Thu Feb 5 15:32:53 2026 by rpki-client