This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/FAMoCoMIc81K4Ur-9E89jJSqUXQ.roa File: FAMoCoMIc81K4Ur-9E89jJSqUXQ.roa (raw, json) Hash identifier: gtvdq6PTxu+vNbg03H6KftsP5zR0pcYNrtGlz8wFcyA= Subject key identifier: 14:03:28:0A:83:08:73:CD:4A:E1:4A:FE:F4:4F:3D:8C:94:AA:51:74 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14C7DC0D15DF9288577AA28D2072BA Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/FAMoCoMIc81K4Ur-9E89jJSqUXQ.roa Signing time: Fri 02 Jan 2026 14:20:26 +0000 ROA not before: Fri 02 Jan 2026 14:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399468 IP address blocks: 195.162.224.0/21 maxlen: 24 195.162.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:c7:dc:0d:15:df:92:88:57:7a:a2:8d:20:72:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1403280a830873cd4ae14afef44f3d8c94aa5174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b9:f5:8d:37:8b:a0:f5:6a:41:10:40:0c:53: 8b:42:6b:85:66:fc:a7:14:e9:4b:32:16:f7:78:b8: 7c:6d:2e:c9:d8:ab:3f:9f:3a:7e:04:f6:27:e6:64: 43:3e:5b:03:ca:74:4f:cc:11:2d:b9:73:d4:12:a3: c7:a9:90:59:d7:37:c2:4c:9e:bb:98:0c:48:19:8e: cb:00:d4:07:91:cb:c9:2a:a5:0b:24:ac:06:03:c3: 89:84:7b:9f:01:8c:1e:89:b7:56:03:48:fb:d4:9e: 3b:53:bc:05:59:f7:63:88:92:7b:2b:89:4c:29:73: fd:99:6c:6b:39:ad:08:f6:a6:96:f7:91:de:ae:f3: 31:ad:6f:50:66:96:d1:0c:e8:a4:e6:33:de:88:3b: 4d:1d:25:c3:e4:6e:9a:06:c1:57:43:35:d9:be:bb: e2:82:d9:e1:be:fa:e2:59:fd:3d:ae:04:f9:13:7c: 09:29:df:b6:cf:98:79:13:d7:35:d6:b7:49:d8:0c: ae:4f:e4:3f:73:0a:9a:ab:c4:a3:a6:d9:96:41:13: cf:73:91:4a:c5:e6:ba:b9:c5:d6:6c:83:39:b4:08: f5:dd:80:4c:80:c6:30:a1:7c:c5:1c:98:a0:31:7b: bb:17:97:db:76:1e:a6:e1:7c:1d:e1:e0:92:e1:15: c4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:03:28:0A:83:08:73:CD:4A:E1:4A:FE:F4:4F:3D:8C:94:AA:51:74 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/FAMoCoMIc81K4Ur-9E89jJSqUXQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.162.224.0/20 Signature Algorithm: sha256WithRSAEncryption c7:6f:5f:50:2d:82:1d:80:3b:bb:0f:93:0e:ce:08:61:7f:dc: c7:05:b1:1b:2b:e5:4d:b7:2e:f4:bd:00:a3:16:6c:6d:21:f6: ea:13:8d:84:ed:7a:e9:d7:57:42:55:a2:86:24:20:53:2c:92: 52:e1:d0:da:60:73:13:39:43:4c:6b:e0:ac:73:e4:9a:d1:0f: ff:5a:dc:6d:24:e1:7e:e3:87:ae:4f:b2:a4:7e:cb:10:f3:65: d6:47:53:cc:91:0a:5a:fb:85:8a:72:e9:69:fd:45:51:29:d8: 4b:82:f1:57:19:6c:53:ba:99:98:60:84:b9:6e:30:ee:4f:8d: 23:2c:66:ca:cf:75:0c:53:5b:52:49:c6:b9:68:2c:ed:b4:8b: e8:91:65:8a:a7:ae:6c:e7:74:c4:b9:f7:a5:d9:9c:c9:0b:6e: 26:2e:24:83:e7:fa:23:fb:ac:8f:61:e5:83:a4:19:a5:cb:d1: e5:8b:94:37:eb:ae:04:e8:09:58:2c:76:84:8f:e8:b1:36:02: f6:bf:1b:ac:e3:f5:ea:a2:ac:4d:7c:71:39:bc:85:e3:d4:27: f9:7b:20:29:15:d6:bf:78:4b:12:c6:5b:01:6a:5b:91:05:b3: 47:ed:45:f7:61:70:85:d3:e9:19:a2:17:dc:f7:11:e2:93:37: a7:e6:29:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FMfcDRXfkohXeqKNIHK6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDAzMjgwYTgzMDg3M2NkNGFlMTRhZmVmNDRmM2Q4Yzk0YWE1MTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLn1jTeLoPVqQRBADFOLQmuFZvyn FOlLMhb3eLh8bS7J2Ks/nzp+BPYn5mRDPlsDynRPzBEtuXPUEqPHqZBZ1zfCTJ67 mAxIGY7LANQHkcvJKqULJKwGA8OJhHufAYweibdWA0j71J47U7wFWfdjiJJ7K4lM KXP9mWxrOa0I9qaW95HervMxrW9QZpbRDOik5jPeiDtNHSXD5G6aBsFXQzXZvrvi gtnhvvriWf09rgT5E3wJKd+2z5h5E9c11rdJ2AyuT+Q/cwqaq8SjptmWQRPPc5FK xea6ucXWbIM5tAj13YBMgMYwoXzFHJigMXu7F5fbdh6m4Xwd4eCS4RXExQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBQDKAqDCHPNSuFK/vRPPYyUqlF0MB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvRkFNb0NvTUljODFLNFVyLTlFODlqSlNxVVhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEw6LgMA0G CSqGSIb3DQEBCwUAA4IBAQDHb19QLYIdgDu7D5MOzghhf9zHBbEbK+VNty70vQCj FmxtIfbqE42E7Xrp11dCVaKGJCBTLJJS4dDaYHMTOUNMa+Csc+Sa0Q//WtxtJOF+ 44euT7KkfssQ82XWR1PMkQpa+4WKculp/UVRKdhLgvFXGWxTupmYYIS5bjDuT40j LGbKz3UMU1tSSca5aCzttIvokWWKp65s53TEufel2ZzJC24mLiSD5/oj+6yPYeWD pBmly9Hli5Q3664E6AlYLHaEj+ixNgL2vxus4/XqoqxNfHE5vIXj1Cf5eyApFda/ eEsSxlsBaluRBbNH7UX3YXCF0+kZohfc9xHikzen5ilZ -----END CERTIFICATE-----Generated at Mon Jan 19 11:22:29 2026 by rpki-client