This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/FoL3qyEY48cw05gLQhNBtfACHmc.roa File: FoL3qyEY48cw05gLQhNBtfACHmc.roa (raw, json) Hash identifier: yngu0V2+UyneI185UKcvs0YYxoSzgQOcyO77l7Bzxy4= Subject key identifier: 16:82:F7:AB:21:18:E3:C7:30:D3:98:0B:42:13:41:B5:F0:02:1E:67 Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2 Certificate serial: 019BF9AD1CB00E8165EF3F17DA3CFCE69C9A Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/FoL3qyEY48cw05gLQhNBtfACHmc.roa Signing time: Mon 26 Jan 2026 09:40:30 +0000 ROA not before: Mon 26 Jan 2026 09:40:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203156 IP address blocks: 188.137.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:ad:1c:b0:0e:81:65:ef:3f:17:da:3c:fc:e6:9c:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2 Validity Not Before: Jan 26 09:40:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1682f7ab2118e3c730d3980b421341b5f0021e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b6:6a:e0:38:5d:67:ba:03:fb:86:71:be:ee: d4:86:01:d8:56:d6:5e:fd:12:9c:3f:ec:db:17:66: 4b:c8:04:81:2c:0d:ed:3e:c4:ef:f8:6d:06:cf:93: d5:18:ed:5d:03:50:3e:b4:2a:9d:cf:a1:c0:ca:05: 1f:f5:b4:ef:bb:55:c8:98:9f:b2:82:18:2a:8d:27: 5f:6b:b7:de:17:7a:10:03:d4:ab:73:21:86:59:9e: 13:4a:38:38:68:80:77:77:8b:98:bc:b5:54:3d:c3: 53:bc:91:3e:b1:e4:98:a2:01:3f:6f:19:06:e8:dc: 85:a5:e7:61:8a:6e:8a:23:40:8a:76:f2:ca:c3:95: a1:1b:84:bc:b3:9c:8f:ed:be:29:09:ec:55:2c:4e: 8c:a5:33:22:2f:1e:cf:16:a0:dc:8b:25:77:79:5d: f9:6d:52:b4:9e:51:fc:c8:d4:cb:da:a9:02:6a:a5: 0a:21:94:ca:42:23:7d:4f:80:67:2f:03:17:a1:14: ad:c7:ef:44:40:7a:88:6d:a3:fe:86:27:69:08:cb: 56:93:4e:8f:e2:b5:9f:ea:be:65:82:9c:98:ee:eb: 62:80:f8:ff:8c:0b:e4:c2:32:4f:b6:6a:a0:fd:9a: 10:2d:ef:ed:3d:f9:f5:56:07:51:3f:79:10:62:fd: 61:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:82:F7:AB:21:18:E3:C7:30:D3:98:0B:42:13:41:B5:F0:02:1E:67 X509v3 Authority Key Identifier: keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/FoL3qyEY48cw05gLQhNBtfACHmc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.137.159.0/24 Signature Algorithm: sha256WithRSAEncryption 75:68:41:7d:23:b4:c8:d2:ad:eb:04:55:90:8f:3a:ab:97:bf: ef:95:a9:bf:1e:1f:09:f4:ed:7e:60:a5:94:af:a6:0d:f0:4f: 0f:61:7c:4f:05:e3:30:44:e6:5c:a7:e0:c8:b4:53:b2:ac:f4: 54:b0:71:8c:8e:2a:e3:ea:39:48:ac:8e:de:d6:2e:94:54:41: 05:2d:7d:14:7d:30:cd:53:19:77:8a:99:71:cc:c2:89:fe:b8: d0:99:85:4c:86:4c:39:da:95:22:13:00:a0:9e:02:fb:aa:47: 63:8e:c4:22:a3:54:5f:cb:75:ca:f9:7f:ec:86:69:23:1c:ad: 27:a8:63:bb:8c:9a:db:4d:36:1d:08:4d:9b:23:31:65:d7:6c: 8e:48:cc:b3:9b:6d:3e:91:9a:4e:d6:83:1f:6e:2d:fe:8e:00: c6:b8:a4:35:dc:e6:45:54:7c:b5:b6:cb:90:e0:3e:8a:14:60: fc:e8:4d:90:e4:91:f1:0b:67:ef:5c:92:d3:67:2b:1f:1c:2e: 0d:86:fc:aa:fc:81:f2:22:1b:45:9e:4e:ec:b6:16:a2:f1:37: 68:f9:44:97:72:d8:40:4f:ef:a7:9e:2c:aa:72:77:a8:af:03: ca:9a:99:e0:e7:cc:58:0d:50:2b:17:38:77:01:17:ef:04:eb: 80:07:68:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv5rRywDoFl7z8X2jz85pyaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYTViNjIzNDdhMWI2NGNlYTQ5YTJhYjNhYjQ5ODNjMzQ4 NjFmYjIwHhcNMjYwMTI2MDk0MDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjgyZjdhYjIxMThlM2M3MzBkMzk4MGI0MjEzNDFiNWYwMDIxZTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bZq4DhdZ7oD+4Zxvu7UhgHYVtZe /RKcP+zbF2ZLyASBLA3tPsTv+G0Gz5PVGO1dA1A+tCqdz6HAygUf9bTvu1XImJ+y ghgqjSdfa7feF3oQA9SrcyGGWZ4TSjg4aIB3d4uYvLVUPcNTvJE+seSYogE/bxkG 6NyFpedhim6KI0CKdvLKw5WhG4S8s5yP7b4pCexVLE6MpTMiLx7PFqDciyV3eV35 bVK0nlH8yNTL2qkCaqUKIZTKQiN9T4BnLwMXoRStx+9EQHqIbaP+hidpCMtWk06P 4rWf6r5lgpyY7utigPj/jAvkwjJPtmqg/ZoQLe/tPfn1VgdRP3kQYv1hswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBaC96shGOPHMNOYC0ITQbXwAh5nMB8GA1UdIwQY MBaAFO+ltiNHobZM6kmiqzq0mDw0hh+yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQt MDEzZDJhMTFjMGE1LzEvRm9MM3F5RVk0OGN3MDVnTFFoTkJ0ZkFDSG1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQtMDEzZDJhMTFjMGE1 LzEvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvImfMA0G CSqGSIb3DQEBCwUAA4IBAQB1aEF9I7TI0q3rBFWQjzqrl7/vlam/Hh8J9O1+YKWU r6YN8E8PYXxPBeMwROZcp+DItFOyrPRUsHGMjirj6jlIrI7e1i6UVEEFLX0UfTDN Uxl3iplxzMKJ/rjQmYVMhkw52pUiEwCgngL7qkdjjsQio1Rfy3XK+X/shmkjHK0n qGO7jJrbTTYdCE2bIzFl12yOSMyzm20+kZpO1oMfbi3+jgDGuKQ13OZFVHy1tsuQ 4D6KFGD86E2Q5JHxC2fvXJLTZysfHC4Nhvyq/IHyIhtFnk7sthai8Tdo+USXcthA T++nniyqcneorwPKmpng58xYDVArFzh3ARfvBOuAB2gq -----END CERTIFICATE-----Generated at Thu Feb 5 09:31:22 2026 by rpki-client