This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/FjlUOZvW96ADTmmnM6L72d8iARo.roa File: FjlUOZvW96ADTmmnM6L72d8iARo.roa (raw, json) Hash identifier: kIe35Th4NAZk6eCGw7Pep7yHHgIezVmLRC6I4uCSvTI= Subject key identifier: 16:39:54:39:9B:D6:F7:A0:03:4E:69:A7:33:A2:FB:D9:DF:22:01:1A Certificate issuer: /CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b Certificate serial: 019B7AC8FFA40E2EE8BA9A7BBD4B45609C22 Authority key identifier: 1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/FjlUOZvW96ADTmmnM6L72d8iARo.roa Signing time: Thu 01 Jan 2026 18:19:11 +0000 ROA not before: Thu 01 Jan 2026 18:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50019 IP address blocks: 45.131.196.0/24 maxlen: 24 45.131.197.0/24 maxlen: 24 45.131.198.0/24 maxlen: 24 45.131.199.0/24 maxlen: 24 185.128.112.0/24 maxlen: 24 185.128.113.0/24 maxlen: 24 185.128.114.0/24 maxlen: 24 185.128.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:ff:a4:0e:2e:e8:ba:9a:7b:bd:4b:45:60:9c:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b Validity Not Before: Jan 1 18:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=163954399bd6f7a0034e69a733a2fbd9df22011a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:a8:50:95:94:36:63:e2:dc:2c:5f:b5:64:f2: 11:99:cc:c1:44:95:94:a2:a5:55:cd:33:ca:fd:a1: bd:8d:ca:fd:a2:b0:56:58:e8:ee:fb:97:63:e6:42: 4e:8f:0f:34:39:b2:c8:06:83:7b:04:24:b4:e0:e0: 39:74:ca:17:de:59:2f:bc:31:a2:67:0d:f4:fc:fc: 3c:d3:07:dd:5c:79:ae:ef:d8:d1:9c:9c:df:df:42: e1:f4:a1:ac:45:c0:6b:d8:a9:84:64:33:5c:5f:cf: ec:1a:d3:12:6d:89:98:86:80:bd:fe:65:5d:73:42: f2:0d:d1:3c:1a:f1:93:1b:92:49:48:db:38:5e:bb: 51:b4:98:99:af:12:32:f3:3a:8d:ac:60:cc:0c:1f: 87:7b:83:6d:4d:dd:3f:c6:0a:c7:26:42:b0:c8:65: e1:9b:a7:55:0c:68:64:52:ef:f4:82:74:57:82:c5: 74:b3:f2:dc:e8:f4:da:b9:b6:cb:1e:1c:bd:2d:1a: a6:d6:7d:4b:b1:c4:d6:8b:2b:2f:2c:e4:fb:89:fa: 29:6d:ab:68:d1:73:a3:47:14:03:c4:0f:85:18:88: a2:e8:16:c4:e9:07:05:6f:a4:13:1d:a1:82:4e:2f: 82:1c:33:d9:f8:1d:36:61:1e:9e:29:4a:e6:93:0e: af:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:39:54:39:9B:D6:F7:A0:03:4E:69:A7:33:A2:FB:D9:DF:22:01:1A X509v3 Authority Key Identifier: keyid:1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/FjlUOZvW96ADTmmnM6L72d8iARo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.196.0/22 185.128.112.0/22 Signature Algorithm: sha256WithRSAEncryption 27:b9:c4:99:b2:ac:d8:26:27:60:35:98:98:a6:72:2d:fe:3e: 6c:d7:91:af:0b:55:6c:50:38:74:b6:60:94:51:5d:1f:eb:9f: a1:d2:ac:b9:55:34:be:9e:4a:5e:ef:ac:43:f1:fa:af:d1:da: d0:96:dd:d3:aa:d9:9b:dd:e5:6f:05:94:53:12:c2:c5:c9:e0: e5:1d:09:f7:f9:0f:84:5e:96:32:66:c0:d4:88:07:fc:04:5c: 9f:ac:ad:2e:fc:d1:5c:65:2f:4e:ff:37:20:b4:45:bf:86:f0: 6e:06:3b:77:ce:87:46:2e:fe:3e:fe:be:c0:4c:41:73:f2:af: ef:ff:5c:11:54:fa:fb:71:7e:2a:82:65:82:34:60:fb:f4:4b: cb:3d:c1:17:cc:4c:91:1f:bf:dd:fe:ae:ab:8e:35:5c:a2:df: 5f:6c:85:1c:00:47:0f:b5:1a:f5:5f:27:b7:16:9d:ae:dd:a0: e1:02:93:1d:b1:fe:b9:0b:df:e6:f5:4f:e1:ee:f2:81:7b:37: 06:e6:40:7a:8d:79:23:05:30:38:e9:ac:b4:68:91:a4:34:5a: 94:11:2f:ce:64:5a:68:22:a3:9d:e7:94:31:97:40:2d:c7:bc: bf:de:49:23:e3:72:ef:d7:ed:02:c8:fe:5c:d8:39:d6:c4:be: 57:09:89:d9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yP+kDi7oupp7vUtFYJwiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYjVjMjJiZjUzYjcwNWM3YTJiYjI3M2JhNzNlM2YwYzA1 OTViN2IwHhcNMjYwMTAxMTgxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjM5NTQzOTliZDZmN2EwMDM0ZTY5YTczM2EyZmJkOWRmMjIwMTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9qhQlZQ2Y+LcLF+1ZPIRmczBRJWU oqVVzTPK/aG9jcr9orBWWOju+5dj5kJOjw80ObLIBoN7BCS04OA5dMoX3lkvvDGi Zw30/Pw80wfdXHmu79jRnJzf30Lh9KGsRcBr2KmEZDNcX8/sGtMSbYmYhoC9/mVd c0LyDdE8GvGTG5JJSNs4XrtRtJiZrxIy8zqNrGDMDB+He4NtTd0/xgrHJkKwyGXh m6dVDGhkUu/0gnRXgsV0s/Lc6PTaubbLHhy9LRqm1n1LscTWiysvLOT7ifopbato 0XOjRxQDxA+FGIii6BbE6QcFb6QTHaGCTi+CHDPZ+B02YR6eKUrmkw6vnwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBY5VDmb1vegA05ppzOi+9nfIgEaMB8GA1UdIwQY MBaAFBq1wiv1O3Bceiuyc7pz4/DAWVt7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3JYQ0tfVTdjRng2SzdKenVuUGo4TUJaVzNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi83YzhiZjQtNmFiNi00MTk5LWIzYTct YjRiMWY2Zjk4YTkwLzEvRmpsVU9adlc5NkFEVG1tbk02TDcyZDhpQVJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi83YzhiZjQtNmFiNi00MTk5LWIzYTctYjRiMWY2Zjk4YTkw LzEvR3JYQ0tfVTdjRng2SzdKenVuUGo4TUJaVzNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLYPEAwQC uYBwMA0GCSqGSIb3DQEBCwUAA4IBAQAnucSZsqzYJidgNZiYpnIt/j5s15GvC1Vs UDh0tmCUUV0f65+h0qy5VTS+nkpe76xD8fqv0drQlt3Tqtmb3eVvBZRTEsLFyeDl HQn3+Q+EXpYyZsDUiAf8BFyfrK0u/NFcZS9O/zcgtEW/hvBuBjt3zodGLv4+/r7A TEFz8q/v/1wRVPr7cX4qgmWCNGD79EvLPcEXzEyRH7/d/q6rjjVcot9fbIUcAEcP tRr1Xye3Fp2u3aDhApMdsf65C9/m9U/h7vKBezcG5kB6jXkjBTA46ay0aJGkNFqU ES/OZFpoIqOd55Qxl0Atx7y/3kkj43Lv1+0CyP5c2DnWxL5XCYnZ -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:17 2026 by rpki-client