This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/FS2smUh78VcAx1pJo864e-lr3gI.roa File: FS2smUh78VcAx1pJo864e-lr3gI.roa (raw, json) Hash identifier: mixZibFB0hFz56z+JYqSccSF9Jdi9meBEB5gjBMrGmw= Subject key identifier: 15:2D:AC:99:48:7B:F1:57:00:C7:5A:49:A3:CE:B8:7B:E9:6B:DE:02 Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019B7F8389376FDBA87DA6341C131FFD5157 Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/FS2smUh78VcAx1pJo864e-lr3gI.roa Signing time: Fri 02 Jan 2026 16:21:25 +0000 ROA not before: Fri 02 Jan 2026 16:21:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205634 IP address blocks: 188.209.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:89:37:6f:db:a8:7d:a6:34:1c:13:1f:fd:51:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Jan 2 16:21:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=152dac99487bf15700c75a49a3ceb87be96bde02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:46:2e:68:1c:60:99:16:d7:6e:bb:96:21:22: ec:33:58:16:40:49:32:e2:ba:08:72:50:b8:21:3d: a9:eb:f5:95:6b:00:69:a1:d2:fc:a6:31:d1:8a:89: 58:86:a3:74:a5:ef:2a:cb:0d:87:a1:1d:b5:bc:42: 94:1a:03:c4:ea:18:97:0c:71:a2:3a:f9:8c:f8:66: e3:85:e6:7a:88:9c:1f:f0:da:67:c1:49:c8:d8:f0: a9:a0:aa:ee:be:2f:54:45:30:63:d0:d6:da:ca:25: 34:51:d3:19:5b:bc:06:29:42:d5:b0:00:c2:5d:82: 09:2e:12:82:01:34:09:7e:ad:aa:68:0b:f7:b2:f2: 58:14:7b:79:08:cb:72:25:7d:c0:7e:92:e5:07:e8: 73:9e:9b:f0:bb:5a:af:1f:c3:d4:11:60:51:98:c6: 19:99:fc:26:41:5d:db:24:92:31:f6:ef:b9:e5:11: ed:75:83:0a:b6:13:9d:90:6f:32:c0:88:94:11:fe: 22:60:04:df:52:6e:12:98:5a:c2:1b:a1:58:f8:42: ce:dc:12:9c:f3:26:56:08:68:ed:97:e0:af:f8:eb: ad:8c:e9:93:39:a1:32:48:a2:fc:42:f3:ea:7a:d7: 06:4d:1e:f0:cf:9f:5f:9e:b8:7b:ac:8b:95:0d:90: f7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:2D:AC:99:48:7B:F1:57:00:C7:5A:49:A3:CE:B8:7B:E9:6B:DE:02 X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/FS2smUh78VcAx1pJo864e-lr3gI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.209.131.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:04:46:80:ba:c4:2f:b3:e2:26:7a:3f:24:44:0f:e8:eb:89: 47:1e:60:a7:bb:55:24:c3:ef:7c:2c:4d:2e:9c:4f:50:e3:8f: c0:48:7c:2e:e0:04:08:6b:8b:c6:a7:06:9d:80:e0:6f:26:c3: 03:a9:20:c9:6d:da:27:da:ac:bb:45:fe:dc:9d:8e:05:2d:6e: 04:71:5a:72:3d:4e:b6:8a:fa:31:9f:47:fc:33:bb:7b:e1:c3: c0:e6:14:ad:db:c4:71:fb:e6:d1:56:da:04:9d:1c:07:2c:ea: 7d:22:bf:34:0e:73:42:4b:92:70:0c:f9:64:5d:9f:c9:9a:09: f9:43:a0:59:4c:ac:fe:c1:71:a5:8d:bc:97:f8:d6:98:9c:5d: 39:82:02:17:2a:51:ed:51:43:48:b3:10:b0:52:61:84:49:8b: e4:3f:91:2d:a9:c2:6e:9c:e8:90:15:29:2c:d8:ab:83:6f:44: 98:4e:ef:ad:78:40:1d:47:8a:53:2a:aa:d2:4e:e8:7a:bc:67: e5:97:1d:c6:c0:d8:c2:c5:c3:43:b0:05:e5:c4:cf:04:c6:03: e3:eb:2b:58:1d:92:43:2d:85:53:55:ef:28:e5:bf:89:85:5e: 77:ee:0a:1c:42:d2:17:8d:59:60:b3:47:b4:c2:1b:48:e7:65: a0:50:9c:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g4k3b9uofaY0HBMf/VFXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjYwMTAyMTYyMTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTJkYWM5OTQ4N2JmMTU3MDBjNzVhNDlhM2NlYjg3YmU5NmJkZTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkYuaBxgmRbXbruWISLsM1gWQEky 4roIclC4IT2p6/WVawBpodL8pjHRiolYhqN0pe8qyw2HoR21vEKUGgPE6hiXDHGi OvmM+GbjheZ6iJwf8NpnwUnI2PCpoKruvi9URTBj0NbayiU0UdMZW7wGKULVsADC XYIJLhKCATQJfq2qaAv3svJYFHt5CMtyJX3AfpLlB+hznpvwu1qvH8PUEWBRmMYZ mfwmQV3bJJIx9u+55RHtdYMKthOdkG8ywIiUEf4iYATfUm4SmFrCG6FY+ELO3BKc 8yZWCGjtl+Cv+OutjOmTOaEySKL8QvPqetcGTR7wz59fnrh7rIuVDZD3jQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBUtrJlIe/FXAMdaSaPOuHvpa94CMB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvRlMyc21VaDc4VmNBeDFwSm84NjRlLWxyM2dJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0 LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNGDMA0G CSqGSIb3DQEBCwUAA4IBAQB+BEaAusQvs+Imej8kRA/o64lHHmCnu1Ukw+98LE0u nE9Q44/ASHwu4AQIa4vGpwadgOBvJsMDqSDJbdon2qy7Rf7cnY4FLW4EcVpyPU62 ivoxn0f8M7t74cPA5hSt28Rx++bRVtoEnRwHLOp9Ir80DnNCS5JwDPlkXZ/Jmgn5 Q6BZTKz+wXGljbyX+NaYnF05ggIXKlHtUUNIsxCwUmGESYvkP5EtqcJunOiQFSks 2KuDb0SYTu+teEAdR4pTKqrSTuh6vGfllx3GwNjCxcNDsAXlxM8ExgPj6ytYHZJD LYVTVe8o5b+JhV537gocQtIXjVlgs0e0whtI52WgUJxZ -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:01 2026 by rpki-client