This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/FY64f2n5IZxak83WH5Xr7DjmI48.roa File: FY64f2n5IZxak83WH5Xr7DjmI48.roa (raw, json) Hash identifier: jtG7O8Fc8btXdN9Jv20DVMBroccgppZEs1H1G7+kiM8= Subject key identifier: 15:8E:B8:7F:69:F9:21:9C:5A:93:CD:D6:1F:95:EB:EC:38:E6:23:8F Certificate issuer: /CN=29e46e75865e8d4a081e4b5dda46d3c94003679b Certificate serial: 019B7C7F8BD30235EFD3DF11E0D7874C467A Authority key identifier: 29:E4:6E:75:86:5E:8D:4A:08:1E:4B:5D:DA:46:D3:C9:40:03:67:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/FY64f2n5IZxak83WH5Xr7DjmI48.roa Signing time: Fri 02 Jan 2026 02:18:12 +0000 ROA not before: Fri 02 Jan 2026 02:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43783 IP address blocks: 185.167.56.0/22 maxlen: 22 185.167.56.0/24 maxlen: 24 185.167.57.0/24 maxlen: 24 185.167.58.0/24 maxlen: 24 185.167.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:8b:d3:02:35:ef:d3:df:11:e0:d7:87:4c:46:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29e46e75865e8d4a081e4b5dda46d3c94003679b Validity Not Before: Jan 2 02:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=158eb87f69f9219c5a93cdd61f95ebec38e6238f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:5d:ac:22:9e:ea:d3:1e:5b:2d:ad:19:15:e6: ed:95:3c:59:75:1d:ad:b8:86:70:4b:31:2b:f0:c3: cc:7a:b4:84:da:3e:9e:e2:70:71:f0:f6:73:5c:8e: e3:2c:08:aa:7a:3c:2f:67:4f:0b:6d:ff:c9:20:92: 78:a2:24:29:1b:2c:59:65:f8:24:aa:62:bf:74:22: 66:bd:42:f5:a6:06:9b:09:fa:f2:50:39:e2:08:7a: ae:90:79:60:8d:d4:64:16:5e:d9:76:2e:97:46:e9: 65:3e:84:db:8b:04:21:6a:23:54:6e:21:d0:15:8e: 7e:52:74:07:fd:8f:69:c5:9a:59:d9:30:55:d6:ea: f8:fc:63:70:27:a2:ad:e5:c2:1d:a6:03:ef:77:6f: eb:89:eb:bc:27:f5:0e:a7:03:34:81:4c:94:e6:a4: 71:9c:4a:cd:24:9e:e5:9b:ce:85:eb:2b:07:d9:f8: 05:35:d8:c4:d2:ee:5b:b3:6d:7e:a3:9c:6e:db:22: f0:4d:09:f4:66:72:bf:3e:30:45:fa:ee:2b:dd:c2: d6:b6:4b:5c:54:c7:73:49:6e:47:c3:57:1e:39:33: 5d:31:c7:09:65:51:1b:de:3a:69:eb:16:01:2d:18: 8d:8c:0c:2f:39:7b:95:e0:5e:62:cb:66:24:35:8b: 03:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:8E:B8:7F:69:F9:21:9C:5A:93:CD:D6:1F:95:EB:EC:38:E6:23:8F X509v3 Authority Key Identifier: keyid:29:E4:6E:75:86:5E:8D:4A:08:1E:4B:5D:DA:46:D3:C9:40:03:67:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/FY64f2n5IZxak83WH5Xr7DjmI48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.167.56.0/22 Signature Algorithm: sha256WithRSAEncryption 39:da:95:53:cb:3a:df:4a:d2:c3:fb:ea:f2:ee:1b:2e:f9:2a: c4:3c:e3:58:22:a7:f1:26:da:53:76:7e:75:df:a1:a9:48:a5: d9:c2:d2:cd:37:3d:0f:c1:54:5d:d2:35:ee:f7:b8:32:85:46: 40:e0:bd:a9:3e:c1:1d:0e:fd:6d:be:85:4e:7f:fd:f1:ee:40: 99:6d:45:45:00:13:4f:62:c0:84:37:7e:9c:b3:ed:c7:5c:22: ed:17:91:b5:d8:6f:ee:a9:bd:70:ee:9d:0a:7b:0b:62:49:45: 7b:1b:e1:b1:59:a0:d0:b7:e2:00:59:43:3a:00:e4:00:57:5d: 58:40:c4:d4:d9:2c:78:25:b6:31:0a:c2:2f:0b:f6:ec:b0:1d: c7:73:86:7e:bc:a6:eb:c9:9e:28:30:76:dc:d1:94:ff:b0:79: bc:dc:6b:48:24:bf:bb:c0:20:98:59:4c:53:19:61:ca:c6:df: 7a:ae:f4:1c:ae:13:b2:02:79:0d:87:3b:4b:bb:d3:6c:50:f0: 61:71:6f:2e:e5:21:a1:fe:5a:25:04:07:53:bb:ff:d2:61:63: a6:bd:8a:05:69:f3:ca:3f:9c:24:54:84:d9:50:00:3c:08:77: 23:4f:31:37:97:89:a0:30:9b:0a:82:77:38:ca:2a:b0:b9:c0: 5d:06:cf:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f4vTAjXv098R4NeHTEZ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZTQ2ZTc1ODY1ZThkNGEwODFlNGI1ZGRhNDZkM2M5NDAw MzY3OWIwHhcNMjYwMTAyMDIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNThlYjg3ZjY5ZjkyMTljNWE5M2NkZDYxZjk1ZWJlYzM4ZTYyMzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6l2sIp7q0x5bLa0ZFebtlTxZdR2t uIZwSzEr8MPMerSE2j6e4nBx8PZzXI7jLAiqejwvZ08Lbf/JIJJ4oiQpGyxZZfgk qmK/dCJmvUL1pgabCfryUDniCHqukHlgjdRkFl7Zdi6XRullPoTbiwQhaiNUbiHQ FY5+UnQH/Y9pxZpZ2TBV1ur4/GNwJ6Kt5cIdpgPvd2/rieu8J/UOpwM0gUyU5qRx nErNJJ7lm86F6ysH2fgFNdjE0u5bs21+o5xu2yLwTQn0ZnK/PjBF+u4r3cLWtktc VMdzSW5Hw1ceOTNdMccJZVEb3jpp6xYBLRiNjAwvOXuV4F5iy2YkNYsD4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBWOuH9p+SGcWpPN1h+V6+w45iOPMB8GA1UdIwQY MBaAFCnkbnWGXo1KCB5LXdpG08lAA2ebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2VSdWRZWmVqVW9JSGt0ZDJrYlR5VUFEWjVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9kMjM1NGEtZjNjMi00MWQ1LWIyOTIt YTlkMjY3YWNmNjY0LzEvRlk2NGYybjVJWnhhazgzV0g1WHI3RGptSTQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9kMjM1NGEtZjNjMi00MWQ1LWIyOTItYTlkMjY3YWNmNjY0 LzEvS2VSdWRZWmVqVW9JSGt0ZDJrYlR5VUFEWjVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuac4MA0G CSqGSIb3DQEBCwUAA4IBAQA52pVTyzrfStLD++ry7hsu+SrEPONYIqfxJtpTdn51 36GpSKXZwtLNNz0PwVRd0jXu97gyhUZA4L2pPsEdDv1tvoVOf/3x7kCZbUVFABNP YsCEN36cs+3HXCLtF5G12G/uqb1w7p0KewtiSUV7G+GxWaDQt+IAWUM6AOQAV11Y QMTU2Sx4JbYxCsIvC/bssB3Hc4Z+vKbryZ4oMHbc0ZT/sHm83GtIJL+7wCCYWUxT GWHKxt96rvQcrhOyAnkNhztLu9NsUPBhcW8u5SGh/lolBAdTu//SYWOmvYoFafPK P5wkVITZUAA8CHcjTzE3l4mgMJsKgnc4yiqwucBdBs+Y -----END CERTIFICATE-----Generated at Tue Feb 10 00:08:30 2026 by rpki-client