This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/FZKmtD-UKaibZ9zRkcn0AXz38jQ.roa File: FZKmtD-UKaibZ9zRkcn0AXz38jQ.roa (raw, json) Hash identifier: lcged29v8IqNvfygirrGZPjQSlChjxHF9bRH0GjQsG4= Subject key identifier: 15:92:A6:B4:3F:94:29:A8:9B:67:DC:D1:91:C9:F4:01:7C:F7:F2:34 Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Certificate serial: 019B7E379B2A5998CCA3C2AB774BED774B62 Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/FZKmtD-UKaibZ9zRkcn0AXz38jQ.roa Signing time: Fri 02 Jan 2026 10:18:51 +0000 ROA not before: Fri 02 Jan 2026 10:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32181 IP address blocks: 93.120.100.0/22 maxlen: 24 93.120.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:9b:2a:59:98:cc:a3:c2:ab:77:4b:ed:77:4b:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Validity Not Before: Jan 2 10:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1592a6b43f9429a89b67dcd191c9f4017cf7f234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a8:99:d7:8a:13:f2:b2:11:d4:7b:f3:30:98: 6c:bd:ff:35:a3:c5:f1:4a:aa:52:8c:87:84:21:56: f0:5d:6f:d5:38:ea:f1:eb:4b:c2:cb:1d:2f:52:21: f8:88:1b:c7:f8:9b:1d:9b:80:31:45:46:54:ce:09: 39:9f:b8:2f:04:68:8d:9b:e0:bb:2f:65:cf:5a:37: ca:3e:2c:19:73:0c:fa:2f:a9:03:af:9f:7c:7f:0c: f0:05:f8:a3:50:ff:2d:26:e4:ad:09:5d:67:0e:48: c1:8e:83:b1:11:53:55:c4:43:86:14:4b:92:1f:69: 15:28:97:d7:77:d2:5b:c2:06:23:7c:63:37:c0:db: b9:f4:07:8e:8c:93:8a:c5:6a:9f:19:47:2d:cc:ae: dc:95:12:bc:7f:4a:b0:e2:8f:e7:2d:d4:74:cb:23: bf:4d:f7:06:7d:0f:0b:16:22:d8:7b:7a:d8:e2:6e: 91:84:41:32:2e:35:3d:30:c2:83:03:15:c7:f7:1b: 46:d3:6d:2b:61:aa:eb:7d:95:ff:63:65:0e:d9:c9: 54:80:1e:df:f9:eb:7d:a6:89:99:6f:71:12:f0:f0: 80:b7:c6:07:86:f5:71:fc:5d:ef:67:60:59:aa:ee: e0:32:6d:a7:0b:72:a9:2c:b0:33:99:01:3e:9e:3d: 6e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:92:A6:B4:3F:94:29:A8:9B:67:DC:D1:91:C9:F4:01:7C:F7:F2:34 X509v3 Authority Key Identifier: keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/FZKmtD-UKaibZ9zRkcn0AXz38jQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.120.100.0-93.120.111.255 Signature Algorithm: sha256WithRSAEncryption 02:6a:b9:10:22:d2:01:69:a4:fa:4a:01:f2:b0:5d:a8:88:59: 3e:73:93:a6:85:00:11:82:41:cb:30:10:f4:87:f1:a6:d9:22: 9a:f6:d7:fc:65:bd:89:26:65:d6:01:20:ff:5b:6a:43:41:4d: fd:c1:50:6b:26:79:d1:dd:7c:76:76:a8:19:c2:0a:70:aa:8a: 26:b5:24:a8:9c:53:a0:8d:34:a7:46:0e:ec:22:97:69:33:29: 14:f9:6e:2c:4b:f7:28:75:bf:46:ef:f0:1e:08:f7:18:60:a4: 90:05:28:ed:9a:76:ac:aa:32:c8:85:e0:66:b8:05:f4:b0:ca: 2d:30:10:13:a5:15:7a:86:9f:a4:b1:e4:d9:45:25:75:0d:49: dd:1e:5e:63:e8:bb:82:7b:46:3c:7a:db:7a:ca:bf:78:30:91: 13:30:3c:c3:94:61:b9:ff:91:aa:d3:38:c4:06:69:0b:35:a6: 1e:ce:d1:68:fe:d5:18:93:78:e1:50:8b:13:6f:26:45:74:17: 70:1f:25:04:6e:3e:79:67:b2:cf:a2:e0:ab:10:19:1b:f9:df: a5:f9:b9:be:b5:bc:e9:44:18:7f:d9:57:e8:72:df:7f:43:7a: ff:1e:ef:24:ee:19:5e:ca:39:89:0d:75:cd:2f:d6:ad:0f:26: bc:4a:26:08 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+N5sqWZjMo8Krd0vtd0tiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy MjRkYWEwHhcNMjYwMTAyMTAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTkyYTZiNDNmOTQyOWE4OWI2N2RjZDE5MWM5ZjQwMTdjZjdmMjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaiZ14oT8rIR1HvzMJhsvf81o8Xx SqpSjIeEIVbwXW/VOOrx60vCyx0vUiH4iBvH+Jsdm4AxRUZUzgk5n7gvBGiNm+C7 L2XPWjfKPiwZcwz6L6kDr598fwzwBfijUP8tJuStCV1nDkjBjoOxEVNVxEOGFEuS H2kVKJfXd9JbwgYjfGM3wNu59AeOjJOKxWqfGUctzK7clRK8f0qw4o/nLdR0yyO/ TfcGfQ8LFiLYe3rY4m6RhEEyLjU9MMKDAxXH9xtG020rYarrfZX/Y2UO2clUgB7f +et9pomZb3ES8PCAt8YHhvVx/F3vZ2BZqu7gMm2nC3KpLLAzmQE+nj1uhwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFBWSprQ/lCmom2fc0ZHJ9AF89/I0MB8GA1UdIwQY MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt ZGMwNmRkODA1OTYwLzEvRlpLbXRELVVLYWliWjl6UmtjbjBBWHozOGpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJdeGQD BARdeGAwDQYJKoZIhvcNAQELBQADggEBAAJquRAi0gFppPpKAfKwXaiIWT5zk6aF ABGCQcswEPSH8abZIpr21/xlvYkmZdYBIP9bakNBTf3BUGsmedHdfHZ2qBnCCnCq iia1JKicU6CNNKdGDuwil2kzKRT5bixL9yh1v0bv8B4I9xhgpJAFKO2adqyqMsiF 4Ga4BfSwyi0wEBOlFXqGn6Sx5NlFJXUNSd0eXmPou4J7Rjx623rKv3gwkRMwPMOU Ybn/karTOMQGaQs1ph7O0Wj+1RiTeOFQixNvJkV0F3AfJQRuPnlnss+i4KsQGRv5 36X5ub61vOlEGH/ZV+hy339Dev8e7yTuGV7KOYkNdc0v1q0PJrxKJgg= -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:12 2026 by rpki-client