This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/Fm258hcKsjpIMI7amylXAkeBtU4.roa File: Fm258hcKsjpIMI7amylXAkeBtU4.roa (raw, json) Hash identifier: CxYZdpQYo2Xh/OoIWujdvOfnnOrO6eV3QzrjFCJmgpY= Subject key identifier: 16:6D:B9:F2:17:0A:B2:3A:48:30:8E:DA:9B:29:57:02:47:81:B5:4E Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Certificate serial: 019B7C80901CD2A4DD1E0E7136E25E0A1A8F Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/Fm258hcKsjpIMI7amylXAkeBtU4.roa Signing time: Fri 02 Jan 2026 02:19:18 +0000 ROA not before: Fri 02 Jan 2026 02:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20860 IP address blocks: 89.43.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:90:1c:d2:a4:dd:1e:0e:71:36:e2:5e:0a:1a:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Validity Not Before: Jan 2 02:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=166db9f2170ab23a48308eda9b2957024781b54e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:74:c0:d8:f3:35:84:76:23:60:1c:4a:33:07: 30:94:87:be:fa:c7:53:f1:52:16:20:2f:84:59:4a: 46:9b:66:a5:5c:f2:2f:43:83:f5:8b:fc:ee:bc:64: 38:f7:be:70:e9:3e:03:bd:b6:eb:cf:71:8a:7b:cf: 62:cb:8a:13:a7:76:2e:ee:a7:52:d4:9c:d6:66:5b: 96:e9:bf:25:e5:f1:91:1a:ff:3e:15:38:c9:88:71: ca:fc:a1:5b:b8:9b:9d:db:fe:ab:d8:1b:bb:4f:d8: 57:08:fa:36:2b:1f:66:7e:07:4d:54:aa:aa:ca:ef: cd:ab:7e:c2:2c:54:38:9b:3f:72:da:e9:e1:54:42: 3e:13:e3:16:66:50:6a:48:8a:28:e6:1d:80:d7:b2: f2:25:b0:ea:17:42:0a:48:ad:00:6c:f8:01:ef:99: 8f:5d:d8:e1:7f:85:3b:00:5d:ac:a7:c9:43:99:48: da:f4:02:c2:99:19:bd:a4:e8:34:83:42:a1:44:cc: 4c:82:6e:5c:14:4c:fa:31:ff:33:ca:e8:dd:ce:51: 3b:91:63:ed:d4:18:54:67:0e:c8:ce:79:87:20:74: 10:a6:38:35:8c:53:f9:c1:f7:c1:b4:fd:e7:49:3f: d3:87:98:ed:1d:8e:cb:c1:65:d9:20:2f:75:8b:9a: 27:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:6D:B9:F2:17:0A:B2:3A:48:30:8E:DA:9B:29:57:02:47:81:B5:4E X509v3 Authority Key Identifier: keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/Fm258hcKsjpIMI7amylXAkeBtU4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.43.47.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:f1:62:ad:d9:a6:52:4f:ab:3c:72:57:19:72:95:57:67:56: 19:36:13:30:5f:70:02:2f:09:0d:38:d0:a3:e8:2a:42:a4:d8: b7:ba:5a:bd:33:01:1e:cc:92:5f:58:9b:d8:16:ad:c8:3a:93: e7:43:5a:73:3a:60:89:ee:3e:02:f5:4b:1d:cf:35:89:dd:b1: 4f:af:ab:a6:4b:ae:97:2c:23:02:2e:1d:dd:fb:1a:8d:7a:64: 45:bf:a6:d5:f7:f3:4a:86:e1:59:81:68:d7:9d:8d:dc:63:5d: d1:9d:57:2b:01:fb:a2:44:4e:05:56:f3:83:5a:75:47:21:cc: 54:7c:c5:3d:71:34:f7:2b:fd:bc:9b:6a:24:ac:43:c1:25:13: 6b:97:1d:f0:ce:b3:50:64:ab:39:e8:bc:63:bf:bb:9b:55:0d: 0b:04:8e:ba:ec:02:a5:54:ba:eb:3d:1d:61:ff:30:ef:c0:41: 17:71:af:58:3c:a3:7e:b5:a3:cc:5b:7c:d3:30:5c:9d:c7:0f: a8:19:6b:93:9b:5c:51:17:98:ca:ce:88:9e:3d:b0:6b:46:17: 2b:ff:ca:7c:a0:27:2d:7d:0a:83:0c:83:16:48:45:c1:31:c9: 0d:99:fb:f7:fa:09:58:fa:52:96:36:3f:88:cc:69:69:2f:fd: bb:4f:ec:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gJAc0qTdHg5xNuJeChqPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5 M2FlYjkwHhcNMjYwMTAyMDIxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjZkYjlmMjE3MGFiMjNhNDgzMDhlZGE5YjI5NTcwMjQ3ODFiNTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHTA2PM1hHYjYBxKMwcwlIe++sdT 8VIWIC+EWUpGm2alXPIvQ4P1i/zuvGQ4975w6T4Dvbbrz3GKe89iy4oTp3Yu7qdS 1JzWZluW6b8l5fGRGv8+FTjJiHHK/KFbuJud2/6r2Bu7T9hXCPo2Kx9mfgdNVKqq yu/Nq37CLFQ4mz9y2unhVEI+E+MWZlBqSIoo5h2A17LyJbDqF0IKSK0AbPgB75mP Xdjhf4U7AF2sp8lDmUja9ALCmRm9pOg0g0KhRMxMgm5cFEz6Mf8zyujdzlE7kWPt 1BhUZw7IznmHIHQQpjg1jFP5wffBtP3nST/Th5jtHY7LwWXZIC91i5onnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBZtufIXCrI6SDCO2pspVwJHgbVOMB8GA1UdIwQY MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt NWQ0OGI2NWNlNTczLzEvRm0yNThoY0tzanBJTUk3YW15bFhBa2VCdFU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSsvMA0G CSqGSIb3DQEBCwUAA4IBAQAu8WKt2aZST6s8clcZcpVXZ1YZNhMwX3ACLwkNONCj 6CpCpNi3ulq9MwEezJJfWJvYFq3IOpPnQ1pzOmCJ7j4C9UsdzzWJ3bFPr6umS66X LCMCLh3d+xqNemRFv6bV9/NKhuFZgWjXnY3cY13RnVcrAfuiRE4FVvODWnVHIcxU fMU9cTT3K/28m2okrEPBJRNrlx3wzrNQZKs56Lxjv7ubVQ0LBI667AKlVLrrPR1h /zDvwEEXca9YPKN+taPMW3zTMFydxw+oGWuTm1xRF5jKzoiePbBrRhcr/8p8oCct fQqDDIMWSEXBMckNmfv3+glY+lKWNj+IzGlpL/27T+xh -----END CERTIFICATE-----Generated at Mon Jan 19 17:31:24 2026 by rpki-client