This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/FMjlHYkIjFHRLNFKCNFNPzsElKU.roa File: FMjlHYkIjFHRLNFKCNFNPzsElKU.roa (raw, json) Hash identifier: aoXdpN36nn+6Gbwv5P7Em07UOyXg62W5lVX3fhL8ams= Subject key identifier: 14:C8:E5:1D:89:08:8C:51:D1:2C:D1:4A:08:D1:4D:3F:3B:04:94:A5 Certificate issuer: /CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144 Certificate serial: 019B7A5ACCB76FA11DDDD1263D634E682850 Authority key identifier: 37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/FMjlHYkIjFHRLNFKCNFNPzsElKU.roa Signing time: Thu 01 Jan 2026 16:18:49 +0000 ROA not before: Thu 01 Jan 2026 16:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57455 IP address blocks: 193.222.52.0/22 maxlen: 22 193.222.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:cc:b7:6f:a1:1d:dd:d1:26:3d:63:4e:68:28:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144 Validity Not Before: Jan 1 16:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14c8e51d89088c51d12cd14a08d14d3f3b0494a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9b:3a:cc:d4:d2:be:59:55:ff:60:75:de:d0: 70:ab:f9:74:14:de:81:cc:19:3b:db:5b:bd:e1:ab: 0f:6a:27:d2:b9:b8:84:d3:a4:e8:80:77:92:31:4b: 54:4c:c4:ae:2f:42:08:21:ab:24:16:56:90:6e:d6: 08:42:cb:d1:29:5f:93:7a:1a:b0:26:bb:e0:11:8c: f8:3d:cc:96:27:9d:c3:d6:84:48:dd:f2:9a:06:03: 9c:6a:f9:54:fb:8b:ab:37:73:d8:17:cd:65:a3:bd: 45:87:ef:14:f1:c2:69:cb:7c:5b:22:00:d6:31:ec: 6b:05:ab:e8:00:9f:7b:e4:3b:e9:42:1e:e4:90:6e: c8:02:5c:ea:b5:74:24:82:8e:62:e4:8d:ea:1e:43: 6b:18:0e:e3:fc:b3:19:bb:d9:33:9c:d5:b3:33:3a: 98:b5:ee:77:e5:bc:7a:93:d7:56:57:bd:b9:fd:7f: 19:c2:50:9d:05:6b:31:0b:00:73:dd:9e:f3:50:d1: 4e:66:16:02:0e:4c:27:53:e7:c7:1f:49:da:cb:df: 0a:0e:8d:88:cf:02:2c:06:cc:37:04:c5:10:a5:20: 5d:33:0f:c6:4d:36:cf:aa:fc:7f:de:e8:91:d3:49: 54:01:63:8d:4a:2b:06:6f:5b:9e:c2:1c:e1:4d:7c: b5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C8:E5:1D:89:08:8C:51:D1:2C:D1:4A:08:D1:4D:3F:3B:04:94:A5 X509v3 Authority Key Identifier: keyid:37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/FMjlHYkIjFHRLNFKCNFNPzsElKU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.222.52.0/22 Signature Algorithm: sha256WithRSAEncryption 81:07:bc:28:de:b4:e3:63:e7:7b:bc:2c:c3:40:2c:7a:57:51: a2:8b:37:f7:51:ff:f3:ee:36:ff:57:48:75:e1:34:5b:96:86: b9:54:e8:f1:b3:ac:30:58:52:92:dc:24:89:eb:c6:63:df:7b: 1a:65:18:95:33:9d:9a:6b:db:e7:57:df:32:9c:4b:ff:aa:de: a6:41:cf:3b:43:2f:db:27:b5:61:47:e6:65:e1:c1:f4:b3:83: d2:73:a7:bc:58:55:24:03:f1:01:ec:31:25:f1:17:a0:d7:63: aa:57:31:bc:f6:da:cf:c8:b5:5f:4c:8b:9b:6a:d4:02:b0:b6: 00:d6:d8:d1:5b:11:52:76:17:ee:85:1a:e4:e1:79:99:db:6c: 0b:3a:57:72:d3:97:04:4a:a9:50:a0:c5:54:ce:43:96:50:8e: 93:1a:35:3a:44:0d:d0:ac:5c:37:e2:de:00:05:7d:2e:54:33: 6a:08:78:9d:6c:f8:ec:4a:6d:df:f6:24:1a:a2:30:c3:ae:52: ec:61:d7:cc:d7:e4:b5:ac:97:c5:ee:64:df:35:01:a5:a0:26: 62:f2:69:62:84:f7:c2:32:e6:f5:3b:b6:64:4f:f6:c1:d4:b9: a7:6e:bc:22:a9:36:03:0f:80:93:f0:f4:58:2e:47:8c:85:b1: 5e:92:9a:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wsy3b6Ed3dEmPWNOaChQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MTlmMTliMGFkZDhkMGMyODc3YzhiYTdmZTBhNTg5MzA5 YmIxNDQwHhcNMjYwMTAxMTYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGM4ZTUxZDg5MDg4YzUxZDEyY2QxNGEwOGQxNGQzZjNiMDQ5NGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZs6zNTSvllV/2B13tBwq/l0FN6B zBk721u94asPaifSubiE06TogHeSMUtUTMSuL0IIIaskFlaQbtYIQsvRKV+Tehqw JrvgEYz4PcyWJ53D1oRI3fKaBgOcavlU+4urN3PYF81lo71Fh+8U8cJpy3xbIgDW MexrBavoAJ975DvpQh7kkG7IAlzqtXQkgo5i5I3qHkNrGA7j/LMZu9kznNWzMzqY te535bx6k9dWV725/X8ZwlCdBWsxCwBz3Z7zUNFOZhYCDkwnU+fHH0nay98KDo2I zwIsBsw3BMUQpSBdMw/GTTbPqvx/3uiR00lUAWONSisGb1uewhzhTXy1jQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBTI5R2JCIxR0SzRSgjRTT87BJSlMB8GA1UdIwQY MBaAFDcZ8ZsK3Y0MKHfIun/gpYkwm7FEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnhueG13cmRqUXdvZDhpNmYtQ2xpVENic1VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mNTRmM2EtNmI4YS00OGMzLWIyZGUt NzdhOWM1Mjk3NzdjLzEvRk1qbEhZa0lqRkhSTE5GS0NORk5QenNFbEtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9mNTRmM2EtNmI4YS00OGMzLWIyZGUtNzdhOWM1Mjk3Nzdj LzEvTnhueG13cmRqUXdvZDhpNmYtQ2xpVENic1VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwd40MA0G CSqGSIb3DQEBCwUAA4IBAQCBB7wo3rTjY+d7vCzDQCx6V1Giizf3Uf/z7jb/V0h1 4TRbloa5VOjxs6wwWFKS3CSJ68Zj33saZRiVM52aa9vnV98ynEv/qt6mQc87Qy/b J7VhR+Zl4cH0s4PSc6e8WFUkA/EB7DEl8Reg12OqVzG89trPyLVfTIubatQCsLYA 1tjRWxFSdhfuhRrk4XmZ22wLOldy05cESqlQoMVUzkOWUI6TGjU6RA3QrFw34t4A BX0uVDNqCHidbPjsSm3f9iQaojDDrlLsYdfM1+S1rJfF7mTfNQGloCZi8mlihPfC Mub1O7ZkT/bB1LmnbrwiqTYDD4CT8PRYLkeMhbFekprk -----END CERTIFICATE-----Generated at Tue Feb 10 01:28:59 2026 by rpki-client