This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/FvBVsD-JI1fx_aJoqIlivb1aPfo.roa File: FvBVsD-JI1fx_aJoqIlivb1aPfo.roa (raw, json) Hash identifier: fUKfMlC9o6d72fhPXb316L/yDfu1iUqB0W1b0HREIFQ= Subject key identifier: 16:F0:55:B0:3F:89:23:57:F1:FD:A2:68:A8:89:62:BD:BD:5A:3D:FA Certificate issuer: /CN=eb50d3084bf8aa9ea777d245b60d511be189eab2 Certificate serial: 019B7C113C276856636F90B0D53DE77DE9AC Authority key identifier: EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/FvBVsD-JI1fx_aJoqIlivb1aPfo.roa Signing time: Fri 02 Jan 2026 00:17:42 +0000 ROA not before: Fri 02 Jan 2026 00:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 164.138.248.0/21 maxlen: 24 2a0a:7d40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:3c:27:68:56:63:6f:90:b0:d5:3d:e7:7d:e9:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb50d3084bf8aa9ea777d245b60d511be189eab2 Validity Not Before: Jan 2 00:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16f055b03f892357f1fda268a88962bdbd5a3dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f6:d8:f7:85:b1:f8:a2:9b:b6:10:9d:2e:e9: bd:0c:12:08:75:fe:3d:76:7c:4e:74:cf:97:7d:bc: dd:2a:b3:2d:4b:6c:cb:50:4d:7b:6e:fd:12:5c:5a: 6a:9b:1b:0e:ee:4c:c4:8b:ae:35:88:f8:fe:f3:36: 95:71:57:6d:46:c3:7f:06:34:eb:a4:6b:8b:27:29: 96:ff:8a:e4:aa:c4:b6:3d:bb:a9:1a:03:f4:6e:d9: 16:3d:70:94:78:e5:1a:74:3f:3b:bf:97:52:52:36: 47:76:97:54:5d:a3:a9:93:aa:25:b9:f1:70:49:f6: 81:24:49:36:0f:b1:92:73:d2:14:66:13:96:8f:03: ed:2b:99:a6:40:d7:26:c3:f2:6a:18:aa:61:08:bd: 29:81:2e:c4:9e:14:27:d4:8b:bd:bc:39:a5:94:35: 1f:d8:20:9f:15:f0:a1:e2:cd:04:60:84:d3:a4:12: 9b:fb:d5:52:00:29:4f:ae:3a:a0:c1:98:e3:1f:64: e3:73:31:3b:f7:00:d9:b6:df:50:13:09:64:0b:d8: 17:c4:44:2b:1b:03:dd:5f:30:7d:83:cd:d2:f7:89: c1:59:fc:60:e6:de:d7:82:9f:2e:71:f9:1d:32:22: 76:02:49:c8:b8:a6:e8:b3:fc:e3:c4:f5:0a:1b:fd: f5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F0:55:B0:3F:89:23:57:F1:FD:A2:68:A8:89:62:BD:BD:5A:3D:FA X509v3 Authority Key Identifier: keyid:EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/FvBVsD-JI1fx_aJoqIlivb1aPfo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.138.248.0/21 IPv6: 2a0a:7d40::/32 Signature Algorithm: sha256WithRSAEncryption 8d:da:60:f0:be:cf:6a:01:83:ec:37:cd:1a:9c:72:4f:c4:3e: 1e:9f:a8:f7:54:e4:8f:99:82:38:4e:11:19:f2:01:c6:f0:26: f1:48:ce:16:f5:d0:3b:9d:3c:67:24:1f:2a:fc:3e:46:f7:61: 5f:bb:11:25:a8:02:59:18:e0:a6:fc:cf:d2:51:49:55:12:48: 23:f3:2f:35:34:cc:10:1a:fc:af:cf:16:52:57:f9:3e:83:d5: 86:22:88:90:ce:db:c2:67:f9:2e:58:36:6d:a1:54:45:5e:f3: e8:cf:bf:cc:af:87:a9:b8:f7:2a:81:61:1a:f4:8a:05:6f:a0: 31:5a:f8:4f:68:7f:5c:5c:55:ae:06:4a:63:c6:57:54:43:3a: e0:d3:85:53:e6:91:a5:5d:5d:06:a5:d4:25:07:61:77:89:84: dc:1d:e1:df:1a:b0:14:aa:5d:38:30:04:5e:e8:ae:bb:e6:b6: ad:17:44:ec:0d:3c:fa:99:26:0c:1c:c1:7e:06:e0:6d:5e:87: d3:3a:ce:fd:8f:d5:d1:3f:28:de:c3:e6:c1:ad:7d:d2:54:42: 80:a1:61:2f:e1:eb:1a:2e:bf:34:88:24:a5:91:6b:75:d2:1a: 1a:9a:00:6e:6c:09:a0:05:0a:b0:92:5b:9e:32:2f:18:85:ad: 5f:92:ee:99 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8ETwnaFZjb5Cw1T3nfemsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViNTBkMzA4NGJmOGFhOWVhNzc3ZDI0NWI2MGQ1MTFiZTE4 OWVhYjIwHhcNMjYwMTAyMDAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmYwNTViMDNmODkyMzU3ZjFmZGEyNjhhODg5NjJiZGJkNWEzZGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vbY94Wx+KKbthCdLum9DBIIdf49 dnxOdM+XfbzdKrMtS2zLUE17bv0SXFpqmxsO7kzEi641iPj+8zaVcVdtRsN/BjTr pGuLJymW/4rkqsS2PbupGgP0btkWPXCUeOUadD87v5dSUjZHdpdUXaOpk6olufFw SfaBJEk2D7GSc9IUZhOWjwPtK5mmQNcmw/JqGKphCL0pgS7EnhQn1Iu9vDmllDUf 2CCfFfCh4s0EYITTpBKb+9VSAClPrjqgwZjjH2TjczE79wDZtt9QEwlkC9gXxEQr GwPdXzB9g83S94nBWfxg5t7Xgp8ucfkdMiJ2AknIuKbos/zjxPUKG/31iQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBbwVbA/iSNX8f2iaKiJYr29Wj36MB8GA1UdIwQY MBaAFOtQ0whL+Kqep3fSRbYNURvhieqyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjFEVENFdjRxcDZuZDlKRnRnMVJHLUdKNnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xMmU3MmMtNzQ5MS00N2UyLWFjNTMt YWMwYzYwMTAwNDc4LzEvRnZCVnNELUpJMWZ4X2FKb3FJbGl2YjFhUGZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8xMmU3MmMtNzQ5MS00N2UyLWFjNTMtYWMwYzYwMTAwNDc4 LzEvNjFEVENFdjRxcDZuZDlKRnRnMVJHLUdKNnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDpIr4MA0E AgACMAcDBQAqCn1AMA0GCSqGSIb3DQEBCwUAA4IBAQCN2mDwvs9qAYPsN80anHJP xD4en6j3VOSPmYI4ThEZ8gHG8CbxSM4W9dA7nTxnJB8q/D5G92FfuxElqAJZGOCm /M/SUUlVEkgj8y81NMwQGvyvzxZSV/k+g9WGIoiQztvCZ/kuWDZtoVRFXvPoz7/M r4epuPcqgWEa9IoFb6AxWvhPaH9cXFWuBkpjxldUQzrg04VT5pGlXV0GpdQlB2F3 iYTcHeHfGrAUql04MARe6K675ratF0TsDTz6mSYMHMF+BuBtXofTOs79j9XRPyje w+bBrX3SVEKAoWEv4esaLr80iCSlkWt10hoamgBubAmgBQqwklueMi8Yha1fku6Z -----END CERTIFICATE-----Generated at Wed Jan 21 07:24:39 2026 by rpki-client