This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/Fmacp4NY6nEGonmiT-U_xfP1PNA.roa File: Fmacp4NY6nEGonmiT-U_xfP1PNA.roa (raw, json) Hash identifier: nMGKz5J/UdppiFPUA3K/6569wtZvBmanoCiwnJ4msoE= Subject key identifier: 16:66:9C:A7:83:58:EA:71:06:A2:79:A2:4F:E5:3F:C5:F3:F5:3C:D0 Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4 Certificate serial: 019B77C69AF4CC0FB2DD79385A4C66A43B29 Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/Fmacp4NY6nEGonmiT-U_xfP1PNA.roa Signing time: Thu 01 Jan 2026 04:17:43 +0000 ROA not before: Thu 01 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210644 IP address blocks: 5.182.86.0/24 maxlen: 24 5.182.87.0/24 maxlen: 24 77.232.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9a:f4:cc:0f:b2:dd:79:38:5a:4c:66:a4:3b:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4 Validity Not Before: Jan 1 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16669ca78358ea7106a279a24fe53fc5f3f53cd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4c:6f:0d:7f:8d:c5:b5:08:cc:cf:c8:a6:43: de:e1:40:fd:f7:42:93:a1:b3:9e:39:f6:29:3d:84: 50:07:87:6a:50:07:db:73:e4:13:91:e3:6f:f5:2e: 11:6c:66:94:07:10:16:4b:98:ef:21:7c:a8:9b:3e: 8d:35:b2:70:1a:d8:39:cc:5e:1b:14:32:38:4e:fa: 49:3d:0e:07:45:64:78:fd:08:ef:ca:13:ec:0e:06: 2e:69:61:20:a0:7c:10:30:76:a6:6d:b3:a1:3b:a8: 10:76:c5:cc:91:51:19:4b:dd:a3:63:79:5a:06:5b: 38:bf:6c:f8:79:9b:87:69:89:ff:c8:e7:f8:e1:87: 5a:25:7a:60:95:d7:c1:74:81:3a:48:db:19:05:1c: cd:42:59:66:23:25:21:72:f0:0d:d6:4e:95:9d:90: 15:30:d9:e0:9f:56:e8:27:82:22:89:e7:32:3f:23: 9a:4c:36:03:66:55:34:0d:53:3f:8b:06:aa:f8:b9: ad:33:f9:45:fe:2d:ab:57:00:17:28:94:03:d4:8a: 8c:5d:56:c6:e3:53:81:f3:ec:4b:98:b2:c2:9a:37: 23:8f:81:57:32:d8:20:5b:a4:f1:db:47:f2:38:59: 76:19:41:06:28:50:f9:c9:3d:f5:b8:b2:72:dd:5a: 53:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:66:9C:A7:83:58:EA:71:06:A2:79:A2:4F:E5:3F:C5:F3:F5:3C:D0 X509v3 Authority Key Identifier: keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/Fmacp4NY6nEGonmiT-U_xfP1PNA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.86.0/23 77.232.142.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:21:49:14:cd:0a:f9:2f:b0:7d:51:3e:8c:7b:bd:88:35:bc: 9e:ee:d5:24:05:2f:dd:28:a0:c0:3b:af:25:55:17:d8:06:2d: 6b:28:32:8b:50:44:80:8e:6a:e3:16:a2:42:20:cf:19:a4:5c: a3:d1:28:9b:67:cd:87:f4:10:13:ac:42:db:70:cf:95:6b:97: d0:1e:60:44:74:5f:cb:a7:ad:a6:0f:1c:c1:32:21:ec:18:66: 12:78:e2:34:1f:67:15:f9:d5:00:82:eb:6c:f2:5a:dd:d4:9d: e7:4d:91:3a:2a:70:65:db:95:1d:87:b9:3c:4f:36:d1:df:90: cf:ad:c9:97:0f:a8:76:8e:1b:33:26:4e:85:31:80:67:98:69: 08:2b:2f:cd:4a:29:40:35:bf:35:c4:c8:0b:e8:2f:a2:ea:10: 06:77:01:b3:cc:82:ae:37:f1:36:86:ee:08:21:0e:81:09:aa: 3a:7a:b4:19:ea:c2:bf:89:38:67:4d:f9:cb:0d:c2:59:bf:04: c5:4b:e1:93:50:7e:ab:0f:93:0f:f9:01:a6:07:a7:dc:e0:8a: 48:9a:35:a3:7d:1c:2f:85:e5:a0:06:57:d5:1e:80:89:40:49: 41:ff:3c:ef:c0:cf:5c:96:fa:50:53:66:5f:e1:56:27:78:ce: fb:10:c9:85 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xpr0zA+y3Xk4WkxmpDspMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MDRlNjQxZTU1YTQ4YWVlMDE0MWUyYzBkMjYyMjcxMDJj YWE2ZDQwHhcNMjYwMTAxMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjY2OWNhNzgzNThlYTcxMDZhMjc5YTI0ZmU1M2ZjNWYzZjUzY2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30xvDX+NxbUIzM/IpkPe4UD990KT obOeOfYpPYRQB4dqUAfbc+QTkeNv9S4RbGaUBxAWS5jvIXyomz6NNbJwGtg5zF4b FDI4TvpJPQ4HRWR4/QjvyhPsDgYuaWEgoHwQMHambbOhO6gQdsXMkVEZS92jY3la Bls4v2z4eZuHaYn/yOf44YdaJXpgldfBdIE6SNsZBRzNQllmIyUhcvAN1k6VnZAV MNngn1boJ4IiiecyPyOaTDYDZlU0DVM/iwaq+LmtM/lF/i2rVwAXKJQD1IqMXVbG 41OB8+xLmLLCmjcjj4FXMtggW6Tx20fyOFl2GUEGKFD5yT31uLJy3VpTFwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBZmnKeDWOpxBqJ5ok/lP8Xz9TzQMB8GA1UdIwQY MBaAFNUE5kHlWkiu4BQeLA0mInECyqbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVFUbVFlVmFTSzdnRkI0c0RTWWljUUxLcHRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mMDFmMzUtMmNjYS00ZTVhLTgyOGEt NmJmZmNiN2MwZjBhLzEvRm1hY3A0Tlk2bkVHb25taVQtVV94ZlAxUE5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mMDFmMzUtMmNjYS00ZTVhLTgyOGEtNmJmZmNiN2MwZjBh LzEvMVFUbVFlVmFTSzdnRkI0c0RTWWljUUxLcHRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBBbZWAwQB TeiOMA0GCSqGSIb3DQEBCwUAA4IBAQCOIUkUzQr5L7B9UT6Me72INbye7tUkBS/d KKDAO68lVRfYBi1rKDKLUESAjmrjFqJCIM8ZpFyj0SibZ82H9BATrELbcM+Va5fQ HmBEdF/Lp62mDxzBMiHsGGYSeOI0H2cV+dUAguts8lrd1J3nTZE6KnBl25Udh7k8 TzbR35DPrcmXD6h2jhszJk6FMYBnmGkIKy/NSilANb81xMgL6C+i6hAGdwGzzIKu N/E2hu4IIQ6BCao6erQZ6sK/iThnTfnLDcJZvwTFS+GTUH6rD5MP+QGmB6fc4IpI mjWjfRwvheWgBlfVHoCJQElB/zzvwM9clvpQU2Zf4VYneM77EMmF -----END CERTIFICATE-----Generated at Tue Jan 20 06:02:36 2026 by rpki-client