This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/FB9pI36C9CT-l5v7vUhGo89XM4o.roa File: FB9pI36C9CT-l5v7vUhGo89XM4o.roa (raw, json) Hash identifier: +RGT6KsFiEZ5yq0UfVKdDFHht2o2PvbT0xH3XmmxfO8= Subject key identifier: 14:1F:69:23:7E:82:F4:24:FE:97:9B:FB:BD:48:46:A3:CF:57:33:8A Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7DAB2CBCB0DC7E84AF943EF626592 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/FB9pI36C9CT-l5v7vUhGo89XM4o.roa Signing time: Thu 01 Jan 2026 18:17:56 +0000 ROA not before: Thu 01 Jan 2026 18:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202221 IP address blocks: 85.254.31.0/24 maxlen: 24 85.254.146.0/24 maxlen: 24 159.148.104.0/23 maxlen: 23 159.148.173.0/24 maxlen: 24 159.148.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:da:b2:cb:cb:0d:c7:e8:4a:f9:43:ef:62:65:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=141f69237e82f424fe979bfbbd4846a3cf57338a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:97:36:9d:26:bd:55:f6:79:fb:ea:ae:0c:7f: 5a:ee:02:bb:e5:38:9b:ce:9a:df:ba:46:a8:d5:02: ab:47:6d:d3:80:ec:2e:ea:1b:4b:fc:58:da:d1:7b: 79:4a:b5:be:37:34:bf:39:29:5e:a3:66:ef:3f:0e: a0:b0:3d:d5:55:30:a6:24:2e:ce:e0:1d:d1:40:5b: c9:f8:2f:16:c0:a6:9d:2f:a6:f4:8f:7b:2e:cc:c7: ea:7c:57:64:9d:e2:0d:d2:8f:46:b2:dc:45:0b:0a: be:7d:97:c9:36:91:28:95:2a:05:3c:1e:28:a2:2e: 08:5c:c7:ff:48:e2:0e:76:15:51:44:ac:d9:81:39: 41:ea:8d:43:be:2b:3b:8f:01:43:ee:21:8a:f7:d8: 81:26:42:24:f1:8d:2a:5c:b5:79:fe:48:77:b1:d2: 75:96:ab:c3:f0:a3:52:28:ef:88:9d:aa:76:ee:0b: fb:6d:04:f3:36:c2:6a:f2:1a:ea:71:73:95:21:f0: 77:3e:ed:9d:31:46:35:a2:d6:5f:d6:a2:58:ac:35: eb:79:7c:99:19:6b:72:65:e0:00:a1:2f:c9:db:f3: 12:12:3c:56:1f:0d:73:e7:a3:48:83:25:d7:f8:c1: 6e:bb:33:ad:23:2f:50:c7:39:0e:7c:0d:00:e3:18: 9b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:1F:69:23:7E:82:F4:24:FE:97:9B:FB:BD:48:46:A3:CF:57:33:8A X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/FB9pI36C9CT-l5v7vUhGo89XM4o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.254.31.0/24 85.254.146.0/24 159.148.104.0/23 159.148.173.0-159.148.174.255 Signature Algorithm: sha256WithRSAEncryption 40:26:96:ea:35:fd:3a:ff:7a:00:8c:48:a3:18:0f:3c:cc:5e: 94:cd:7e:86:8f:25:ad:d8:9b:b5:6a:0e:97:99:f4:74:c6:c7: 61:4f:b9:da:f1:94:1b:c6:1b:77:31:3a:74:ca:8b:8d:0b:f7: ad:66:75:e6:12:52:6d:a1:f1:9d:a7:65:fb:ec:33:d8:00:69: 9f:22:c4:f0:c4:e4:f5:f2:a6:e7:b3:37:63:e8:1e:d7:7d:d2: de:03:e2:7a:4c:cb:e0:12:c1:53:11:57:dc:22:be:11:60:f1: 75:dc:4d:8c:c1:56:c2:1f:48:fe:41:96:19:a9:f0:21:ef:aa: d2:53:0c:16:e0:6e:2c:88:5a:3f:51:7e:43:8e:96:8e:9b:e4: ce:54:eb:71:8c:70:08:e6:3e:62:d9:a2:e8:10:d5:66:fd:ec: e2:d1:60:12:e6:38:9e:40:da:85:9c:02:f5:1d:35:43:5b:e8: 35:4e:79:f4:b6:73:4f:f2:1f:df:08:27:ce:bd:78:bb:89:9c: 3d:8b:65:8d:d1:6c:74:48:6d:1f:5c:26:93:5c:7f:23:ae:37: 99:ea:78:90:03:c2:93:a0:72:43:10:14:08:7a:9a:a4:24:54: 8f:a3:30:17:01:21:cd:d2:6b:75:5f:a1:5c:22:d8:6b:ea:a1: 96:c1:1f:24 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt6x9qyy8sNx+hK+UPvYmWSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDFmNjkyMzdlODJmNDI0ZmU5NzliZmJiZDQ4NDZhM2NmNTczMzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppc2nSa9VfZ5++quDH9a7gK75Tib zprfukao1QKrR23TgOwu6htL/Fja0Xt5SrW+NzS/OSleo2bvPw6gsD3VVTCmJC7O 4B3RQFvJ+C8WwKadL6b0j3suzMfqfFdkneIN0o9GstxFCwq+fZfJNpEolSoFPB4o oi4IXMf/SOIOdhVRRKzZgTlB6o1Dvis7jwFD7iGK99iBJkIk8Y0qXLV5/kh3sdJ1 lqvD8KNSKO+Inap27gv7bQTzNsJq8hrqcXOVIfB3Pu2dMUY1otZf1qJYrDXreXyZ GWtyZeAAoS/J2/MSEjxWHw1z56NIgyXX+MFuuzOtIy9QxzkOfA0A4xibGwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFBQfaSN+gvQk/peb+71IRqPPVzOKMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvRkI5cEkzNkM5Q1QtbDV2N3ZVaEdvODlYTTRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAVf4fAwQA Vf6SAwQBn5RoMAwDBACflK0DBACflK4wDQYJKoZIhvcNAQELBQADggEBAEAmluo1 /Tr/egCMSKMYDzzMXpTNfoaPJa3Ym7VqDpeZ9HTGx2FPudrxlBvGG3cxOnTKi40L 961mdeYSUm2h8Z2nZfvsM9gAaZ8ixPDE5PXypuezN2PoHtd90t4D4npMy+ASwVMR V9wivhFg8XXcTYzBVsIfSP5Blhmp8CHvqtJTDBbgbiyIWj9RfkOOlo6b5M5U63GM cAjmPmLZougQ1Wb97OLRYBLmOJ5A2oWcAvUdNUNb6DVOefS2c0/yH98IJ869eLuJ nD2LZY3RbHRIbR9cJpNcfyOuN5nqeJADwpOgckMQFAh6mqQkVI+jMBcBIc3Sa3Vf oVwi2GvqoZbBHyQ= -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:16 2026 by rpki-client